{"messages":[{"content":"You are a constitutional council ranking individual git commits for ownership allocation.\n\nCompare these two commits. Decide which contributed more lasting value to the project.\n\nJudge substance, not spectacle:\n- Prefer correct, lasting design and real bugfixes over churn, formatting, renames, or generated noise.\n- Prefer clarity and necessity over sheer line count. A small precise change can beat a large diffuse one.\n- Do not favor a side merely because its patch is longer or noisier.\n- Weight what the change does for the project, not the contributor's name.\n\nReturn ONLY a JSON object: {\"winner\": \"A\" or \"B\", \"ratio\": \"N:M\", \"explanation\": \"...\"}\nThe explanation must cite concrete differences in the patches (1-3 sentences).\n\nSide A — contributor: tommy-mor\nSide A — commit message:\n[1efb7222] multi-repository git discovery\n\nMake contribution discovery deterministic across repository and branch DAGs, with replayable attribution and adversarial coverage.\n\nCo-authored-by: Cursor <cursoragent@cursor.com>\n\nSide A — unified diff (full patch):\ndiff --git a/constitution.py b/constitution.py\nindex b535faad658c553b3b9046e2401333618e212150..4bee9f83663ab7fb36db95129b92b64b4ef57258 100644\n--- a/constitution.py\n+++ b/constitution.py\n@@ -6,7 +6,7 @@\n #   \"uvicorn\",\n #   \"httpx\",\n #   \"tenacity\",\n-#   \"evaleval>=0.2.6\",\n+#   \"evaleval==0.2.7\",\n #   \"authlib\",\n #   \"itsdangerous\",\n #   \"starlette\",\n@@ -29,7 +29,7 @@ from datetime import datetime, timezone\n from fastapi import FastAPI, Request, Response\n from fastapi.responses import PlainTextResponse, HTMLResponse\n from starlette.middleware.sessions import SessionMiddleware\n-import json, time, os, asyncio, httpx, pathlib\n+import json, time, os, asyncio, httpx, pathlib, subprocess, hashlib, re, fcntl\n import sympy as sp  # type: ignore[reportMissingImports]\n from tenacity import retry, retry_if_exception, stop_after_attempt, wait_exponential\n from evaleval import (\n@@ -118,11 +118,35 @@ JSONL_PATH = pathlib.Path(os.environ.get(\"JSONL_PATH\", \"/data/ledger.jsonl\"))\n \n GITHUB_CLIENT_ID = os.environ.get(\"GITHUB_CLIENT_ID\", \"\")\n GITHUB_CLIENT_SECRET = os.environ.get(\"GITHUB_CLIENT_SECRET\", \"\")\n-REPO = os.environ.get(\"REPO\", \"tommy-mor/slug\")\n \n OPENROUTER_API_KEY = os.environ.get(\"OPENROUTER_API_KEY\", \"\")\n OPENROUTER_BASE_URL = os.environ.get(\"OPENROUTER_BASE_URL\", \"https://openrouter.ai\").rstrip(\"/\")\n-GITHUB_API_BASE_URL = os.environ.get(\"GITHUB_API_BASE_URL\", \"https://api.github.com\").rstrip(\"/\")\n+\n+# Repositories, branches, and contributor identities are constitutional inputs.\n+# A ref pattern matches a complete Git ref: * stays within one path component,\n+# while ** crosses slashes, so refs/heads/** includes branches on branches.\n+# Environment overrides exist for deterministic integration tests and deployments\n+# using the exact same source; their normalized values are committed to every\n+# discovery event.\n+DEFAULT_REPOSITORIES = [\n+    {\n+        \"id\": \"slug\",\n+        \"url\": \"https://github.com/tommy-mor/slug.git\",\n+        \"refs\": [\"refs/heads/**\"],\n+    },\n+]\n+DEFAULT_CONTRIBUTORS = {\n+    \"tommy-mor\": [\"thmorriss@gmail.com\"],\n+}\n+\n+REPOSITORIES = json.loads(\n+    os.environ.get(\"REPOSITORIES_JSON\", json.dumps(DEFAULT_REPOSITORIES))\n+)\n+CONTRIBUTORS = json.loads(\n+    os.environ.get(\"CONTRIBUTORS_JSON\", json.dumps(DEFAULT_CONTRIBUTORS))\n+)\n+GIT_MIRROR_DIR = pathlib.Path(os.environ.get(\"GIT_MIRROR_DIR\", \"/data/git\"))\n+GIT_TIMEOUT_SECONDS = int(os.environ.get(\"GIT_TIMEOUT_SECONDS\", \"120\"))\n \n # Council model IDs: slug.social garden rank under this parent (bodies = OpenRouter URLs), then top-up from OpenRouter list.\n SLUG_SOCIAL_BASE_URL = os.environ.get(\"SLUG_SOCIAL_BASE_URL\", \"https://slug.social\").rstrip(\"/\")\n@@ -146,6 +170,7 @@ class Emission:\n     distributions: dict   # author -> amount str\n     ranking: dict         # author -> score str\n     models_used: list\n+    discovery_snapshot_id: str = \"\"  # empty only for pre-discovery ledger history\n \n \n @event\n@@ -163,6 +188,20 @@ class Redemption:\n     amount: str\n \n \n+@event\n+class GitDiscovery:\n+    schema_version: int\n+    epoch: int\n+    snapshot_id: str\n+    timestamp_ms: int\n+    config_digest: str\n+    initial_snapshot: bool\n+    configuration: dict\n+    repositories: list\n+    observations: list\n+    commits: list\n+\n+\n store = JsonlStore(JSONL_PATH)\n \n \n@@ -532,44 +571,426 @@ Side B — unified diffs (full patches):\n         return json.loads(content)\n \n \n-def _github_headers():\n-    h = {\"Accept\": \"application/vnd.github+json\"}\n-    tok = os.environ.get(\"GITHUB_TOKEN\", \"\")\n-    if tok:\n-        h[\"Authorization\"] = f\"Bearer {tok}\"\n-    return h\n+# ===========================================================================\n+# §4b. GIT DISCOVERY — immutable reachability snapshots across repositories\n+# ===========================================================================\n+#\n+# Git timestamps cannot prove when a branch first reached a commit. The first\n+# snapshot therefore bootstraps history by committer time at GENESIS_MS. Every\n+# later snapshot uses the stronger rule: a commit enters exactly once, when it\n+# first becomes reachable from the union of configured refs.\n+#\n+# OIDs are deduplicated globally, then equivalent cherry-picks are deduplicated\n+# by Git's stable patch identity. Merges and empty commits are graph structure,\n+# not separately priced contributions. Discovery is all-or-nothing: if any\n+# repository cannot be mirrored and verified, no snapshot is appended.\n+\n+GIT_DISCOVERY_SCHEMA_VERSION = 1\n+PATCH_IDENTITY_VERSION = \"git-patch-id-stable-v1\"\n+_DISCOVERY_LOCK = asyncio.Lock()\n+\n+\n+def _normalized_discovery_config() -> dict:\n+    repositories = []\n+    seen_ids = set()\n+    for raw in REPOSITORIES:\n+        repo_id = str(raw.get(\"id\", \"\"))\n+        url = str(raw.get(\"url\", \"\"))\n+        refs = sorted(set(str(x) for x in raw.get(\"refs\", [])))\n+        if not re.fullmatch(r\"[A-Za-z0-9._-]+\", repo_id):\n+            raise ValueError(f\"invalid repository id: {repo_id!r}\")\n+        if repo_id in seen_ids:\n+            raise ValueError(f\"duplicate repository id: {repo_id}\")\n+        if not url or not refs or any(not r.startswith(\"refs/\") for r in refs):\n+            raise ValueError(f\"repository {repo_id} requires a URL and full ref patterns\")\n+        seen_ids.add(repo_id)\n+        repositories.append({\"id\": repo_id, \"url\": url, \"refs\": refs})\n+\n+    email_to_contributor = {}\n+    contributors = {}\n+    for contributor, emails in sorted(CONTRIBUTORS.items()):\n+        contributor = str(contributor)\n+        normalized = sorted(set(str(e).strip().lower() for e in emails))\n+        if not contributor or not normalized:\n+            raise ValueError(\"contributors require an id and at least one email\")\n+        for email in normalized:\n+            if email in email_to_contributor:\n+                raise ValueError(f\"email belongs to multiple contributors: {email}\")\n+            email_to_contributor[email] = contributor\n+        contributors[contributor] = normalized\n+\n+    repositories.sort(key=lambda r: r[\"id\"])\n+    return {\"repositories\": repositories, \"contributors\": contributors}\n+\n+\n+def _config_digest(config: dict) -> str:\n+    encoded = json.dumps(config, sort_keys=True, separators=(\",\", \":\")).encode()\n+    return hashlib.sha256(encoded).hexdigest()\n+\n+\n+def _ref_pattern_regex(pattern: str) -> re.Pattern:\n+    out = \"\"\n+    i = 0\n+    while i < len(pattern):\n+        if pattern[i:i + 2] == \"**\":\n+            out += \".*\"\n+            i += 2\n+        elif pattern[i] == \"*\":\n+            out += \"[^/]*\"\n+            i += 1\n+        elif pattern[i] == \"?\":\n+            out += \"[^/]\"\n+            i += 1\n+        else:\n+            out += re.escape(pattern[i])\n+            i += 1\n+    return re.compile(f\"^{out}$\")\n+\n+\n+def _git(repo: pathlib.Path | None, *args: str, input_bytes: bytes | None = None) -> bytes:\n+    command = [\n+        \"git\",\n+        \"--no-replace-objects\",\n+        \"-c\", \"core.quotepath=true\",\n+        \"-c\", \"core.attributesFile=/dev/null\",\n+        \"-c\", \"diff.external=\",\n+        \"-c\", \"diff.renames=false\",\n+        \"-c\", \"diff.algorithm=myers\",\n+        \"-c\", \"diff.context=3\",\n+    ]\n+    if repo is not None:\n+        command += [\"-C\", str(repo)]\n+    command += list(args)\n+    try:\n+        result = subprocess.run(\n+            command,\n+            input=input_bytes,\n+            stdout=subprocess.PIPE,\n+            stderr=subprocess.PIPE,\n+            env={\n+                **os.environ,\n+                \"GIT_CONFIG_NOSYSTEM\": \"1\",\n+                \"GIT_CONFIG_GLOBAL\": os.devnull,\n+                \"GIT_NO_REPLACE_OBJECTS\": \"1\",\n+                \"LC_ALL\": \"C\",\n+                \"TZ\": \"UTC\",\n+            },\n+            timeout=GIT_TIMEOUT_SECONDS,\n+            check=False,\n+        )\n+    except subprocess.TimeoutExpired as exc:\n+        raise RuntimeError(f\"git command timed out: {args[0]}\") from exc\n+    if result.returncode:\n+        error = result.stderr.decode(\"utf-8\", \"replace\").strip()\n+        raise RuntimeError(f\"git {args[0]} failed: {error}\")\n+    return result.stdout\n+\n+\n+def _ensure_mirror(repo: dict) -> pathlib.Path:\n+    GIT_MIRROR_DIR.mkdir(parents=True, exist_ok=True)\n+    mirror = GIT_MIRROR_DIR / f\"{repo['id']}.git\"\n+    if not mirror.exists():\n+        _git(None, \"clone\", \"--mirror\", \"--\", repo[\"url\"], str(mirror))\n+    else:\n+        actual_url = _git(mirror, \"remote\", \"get-url\", \"origin\").decode().strip()\n+        if actual_url != repo[\"url\"]:\n+            raise RuntimeError(\n+                f\"mirror URL mismatch for {repo['id']}: {actual_url!r}\"\n+            )\n+    _git(mirror, \"fetch\", \"--prune\", \"origin\", \"+refs/*:refs/*\")\n+    _git(mirror, \"fsck\", \"--connectivity-only\", \"--no-dangling\")\n+    return mirror\n+\n+\n+def _matching_refs(mirror: pathlib.Path, patterns: list[str]) -> list[dict]:\n+    regexes = [_ref_pattern_regex(p) for p in patterns]\n+    lines = _git(\n+        mirror, \"for-each-ref\", \"--format=%(refname)%00%(objectname)\"\n+    ).decode(\"utf-8\", \"replace\").splitlines()\n+    selected = []\n+    for line in lines:\n+        if not line:\n+            continue\n+        ref_name, direct_oid = line.split(\"\\x00\", 1)\n+        if not any(r.fullmatch(ref_name) for r in regexes):\n+            continue\n+        commit_oid = _git(\n+            mirror, \"rev-parse\", \"--verify\", f\"{ref_name}^{{commit}}\"\n+        ).decode().strip()\n+        selected.append({\n+            \"name\": ref_name,\n+            \"direct_oid\": direct_oid,\n+            \"commit_oid\": commit_oid,\n+        })\n+    if not selected:\n+        raise RuntimeError(f\"no refs matched patterns {patterns!r}\")\n+    return sorted(selected, key=lambda r: r[\"name\"])\n+\n+\n+def _commit_metadata(mirror: pathlib.Path, oid: str) -> dict:\n+    raw = _git(\n+        mirror,\n+        \"show\",\n+        \"-s\",\n+        \"--format=%H%x00%T%x00%P%x00%an%x00%ae%x00%at%x00%cn%x00%ce%x00%ct%x00%B\",\n+        oid,\n+    ).decode(\"utf-8\", \"replace\")\n+    fields = raw.split(\"\\x00\", 9)\n+    if len(fields) != 10:\n+        raise RuntimeError(f\"could not parse commit metadata for {oid}\")\n+    return {\n+        \"oid\": fields[0],\n+        \"tree_oid\": fields[1],\n+        \"parent_oids\": fields[2].split() if fields[2] else [],\n+        \"author_name\": fields[3],\n+        \"author_email\": fields[4].strip().lower(),\n+        \"author_timestamp_ms\": int(fields[5]) * 1000,\n+        \"committer_name\": fields[6],\n+        \"committer_email\": fields[7].strip().lower(),\n+        \"committer_timestamp_ms\": int(fields[8]) * 1000,\n+        \"message\": fields[9].rstrip(\"\\n\"),\n+    }\n \n \n-def unified_diff_from_commit_payload(payload: dict) -> str:\n-    parts = []\n-    for f in payload.get(\"files\") or []:\n-        name = f.get(\"filename\", \"?\")\n-        patch = f.get(\"patch\")\n-        if patch:\n-            parts.append(f\"--- {name}\\n{patch}\")\n-        else:\n-            parts.append(f\"--- {name}\\n[no textual patch: binary, submodule, or too large]\\n\")\n-    return \"\\n\\n\".join(parts) if parts else \"[no files in API response]\"\n+def _commit_patch(mirror: pathlib.Path, metadata: dict) -> tuple[str, str | None]:\n+    parents = metadata[\"parent_oids\"]\n+    if len(parents) > 1:\n+        return \"\", None\n+    if parents:\n+        args = (\"diff\", \"--patch\", \"--binary\", \"--full-index\", \"--no-renames\",\n+                \"--no-ext-diff\", \"--no-textconv\", \"--src-prefix=a/\",\n+                \"--dst-prefix=b/\", parents[0], metadata[\"oid\"], \"--\")\n+    else:\n+        args = (\"diff-tree\", \"--root\", \"--patch\", \"--binary\", \"--full-index\",\n+                \"--no-renames\", \"--no-ext-diff\", \"--no-textconv\",\n+                \"--src-prefix=a/\", \"--dst-prefix=b/\", \"--no-commit-id\",\n+                metadata[\"oid\"], \"--\")\n+    patch_bytes = _git(mirror, *args)\n+    if not patch_bytes.strip():\n+        return \"\", None\n+    # Run patch-id outside the repository so SHA-1 and SHA-256 repositories use\n+    # the same canonical patch hash algorithm.\n+    patch_id_out = _git(\n+        None, \"patch-id\", \"--stable\", input_bytes=patch_bytes\n+    ).decode().strip()\n+    if patch_id_out:\n+        stable_id = patch_id_out.split()[0]\n+    else:\n+        stable_id = hashlib.sha256(patch_bytes).hexdigest()\n+    return patch_bytes.decode(\"utf-8\", \"replace\"), f\"{PATCH_IDENTITY_VERSION}:{stable_id}\"\n+\n+\n+def _replayed_discovery_state(events: list) -> tuple[set[str], dict[str, str]]:\n+    seen_oids = set()\n+    seen_patches = {}\n+    for event_ in events:\n+        if not isinstance(event_, GitDiscovery):\n+            continue\n+        for observation in event_.observations:\n+            seen_oids.add(observation[\"oid\"])\n+            patch_identity = observation.get(\"patch_identity\")\n+            canonical_oid = observation.get(\"canonical_patch_oid\")\n+            if patch_identity and canonical_oid:\n+                seen_patches.setdefault(patch_identity, canonical_oid)\n+    return seen_oids, seen_patches\n+\n+\n+def _build_discovery(epoch_n: int, boundary_ms: int, events: list) -> GitDiscovery:\n+    config = _normalized_discovery_config()\n+    digest = _config_digest(config)\n+    prior_discoveries = [e for e in events if isinstance(e, GitDiscovery)]\n+    initial = not prior_discoveries\n+    seen_oids, seen_patches = _replayed_discovery_state(events)\n+    email_to_contributor = {\n+        email: contributor\n+        for contributor, emails in config[\"contributors\"].items()\n+        for email in emails\n+    }\n \n+    repository_rows = []\n+    locations: dict[str, list[tuple[str, str, pathlib.Path, str]]] = {}\n+    for repo in config[\"repositories\"]:\n+        mirror = _ensure_mirror(repo)\n+        object_format = _git(\n+            mirror, \"rev-parse\", \"--show-object-format\"\n+        ).decode().strip()\n+        refs = _matching_refs(mirror, repo[\"refs\"])\n+        repo_reachable = set()\n+        for ref in refs:\n+            oids = _git(mirror, \"rev-list\", ref[\"commit_oid\"]).decode().splitlines()\n+            for oid in oids:\n+                qualified = f\"{object_format}:{oid}\"\n+                repo_reachable.add(qualified)\n+                locations.setdefault(qualified, []).append(\n+                    (repo[\"id\"], ref[\"name\"], mirror, oid)\n+                )\n+        repository_rows.append({\n+            \"id\": repo[\"id\"],\n+            \"url\": repo[\"url\"],\n+            \"object_format\": object_format,\n+            \"refs\": refs,\n+            \"reachable_commit_count\": len(repo_reachable),\n+            \"reachable_set_sha256\": hashlib.sha256(\n+                \"\\n\".join(sorted(repo_reachable)).encode()\n+            ).hexdigest(),\n+        })\n \n-async def fetch_commits_since(since_ms):\n-    since_iso = datetime.fromtimestamp(since_ms / 1000, tz=timezone.utc).isoformat()\n-    async with httpx.AsyncClient() as client:\n-        resp = await client.get(\n-            f\"{GITHUB_API_BASE_URL}/repos/{REPO}/commits\",\n-            params={\"since\": since_iso, \"per_page\": 100},\n-            headers=_github_headers(),\n+    new_oids = sorted(set(locations) - seen_oids)\n+    pending = []\n+    for qualified_oid in new_oids:\n+        source_rows = sorted({\n+            (repo_id, ref_name) for repo_id, ref_name, _, _ in locations[qualified_oid]\n+        })\n+        canonical_location = min(\n+            locations[qualified_oid], key=lambda x: (x[0], x[1])\n         )\n-        return resp.json()\n-\n+        object_hashes = {\n+            hashlib.sha256(_git(m, \"cat-file\", \"commit\", raw_oid)).hexdigest()\n+            for _, _, m, raw_oid in locations[qualified_oid]\n+        }\n+        if len(object_hashes) != 1:\n+            raise RuntimeError(f\"conflicting Git objects share OID {qualified_oid}\")\n+        _, _, mirror, oid = canonical_location\n+        metadata = _commit_metadata(mirror, oid)\n+        patch, patch_identity = _commit_patch(mirror, metadata)\n+        pending.append({\n+            **metadata,\n+            \"oid\": qualified_oid,\n+            \"commit_object_sha256\": next(iter(object_hashes)),\n+            \"tree_oid\": f\"{qualified_oid.split(':', 1)[0]}:{metadata['tree_oid']}\",\n+            \"parent_oids\": [\n+                f\"{qualified_oid.split(':', 1)[0]}:{p}\"\n+                for p in metadata[\"parent_oids\"]\n+            ],\n+            \"patch\": patch,\n+            \"patch_sha256\": hashlib.sha256(patch.encode()).hexdigest() if patch else None,\n+            \"patch_identity_version\": PATCH_IDENTITY_VERSION,\n+            \"patch_identity\": patch_identity,\n+            \"first_sources\": [\n+                {\"repository_id\": repo_id, \"ref_name\": ref_name}\n+                for repo_id, ref_name in source_rows\n+            ],\n+            \"contributor\": email_to_contributor.get(metadata[\"author_email\"]),\n+        })\n \n-async def fetch_commit_unified_diff(client: httpx.AsyncClient, sha: str) -> str:\n-    resp = await client.get(\n-        f\"{GITHUB_API_BASE_URL}/repos/{REPO}/commits/{sha}\",\n-        headers=_github_headers(),\n+    # Select patch representatives independently of repository/ref iteration order.\n+    # Every observed patch consumes its identity, even when it predates genesis or\n+    # has no registered contributor: copying already-observed work later must not\n+    # turn it into a newly payable contribution.\n+    pending.sort(key=lambda c: (c[\"committer_timestamp_ms\"], c[\"oid\"]))\n+    observations = []\n+    commits = []\n+    for commit in pending:\n+        reason = None\n+        canonical_patch_oid = None\n+        patch_identity = commit[\"patch_identity\"]\n+        duplicate_patch = False\n+        if patch_identity:\n+            if patch_identity in seen_patches:\n+                canonical_patch_oid = seen_patches[patch_identity]\n+                duplicate_patch = True\n+            else:\n+                canonical_patch_oid = commit[\"oid\"]\n+                seen_patches[patch_identity] = canonical_patch_oid\n+\n+        if initial and commit[\"committer_timestamp_ms\"] < GENESIS_MS:\n+            reason = \"before_genesis\"\n+        elif len(commit[\"parent_oids\"]) > 1:\n+            reason = \"merge_commit\"\n+        elif not patch_identity:\n+            reason = \"empty_commit\"\n+        elif duplicate_patch:\n+            reason = \"duplicate_patch\"\n+        else:\n+            if commit[\"contributor\"] is None:\n+                reason = \"unknown_contributor\"\n+\n+        eligible = reason is None\n+        observation = {\n+            \"oid\": commit[\"oid\"],\n+            \"first_sources\": commit[\"first_sources\"],\n+            \"committer_timestamp_ms\": commit[\"committer_timestamp_ms\"],\n+            \"patch_identity\": patch_identity,\n+            \"canonical_patch_oid\": canonical_patch_oid,\n+            \"eligible\": eligible,\n+            \"exclusion_reason\": reason,\n+        }\n+        observations.append(observation)\n+        if eligible:\n+            commits.append(commit)\n+\n+    snapshot_material = {\n+        \"schema_version\": GIT_DISCOVERY_SCHEMA_VERSION,\n+        \"epoch\": epoch_n,\n+        \"timestamp_ms\": boundary_ms,\n+        \"config_digest\": digest,\n+        \"repositories\": repository_rows,\n+        \"observations\": observations,\n+    }\n+    snapshot_id = hashlib.sha256(\n+        json.dumps(snapshot_material, sort_keys=True, separators=(\",\", \":\")).encode()\n+    ).hexdigest()\n+    return GitDiscovery(\n+        schema_version=GIT_DISCOVERY_SCHEMA_VERSION,\n+        epoch=epoch_n,\n+        snapshot_id=snapshot_id,\n+        timestamp_ms=boundary_ms,\n+        config_digest=digest,\n+        initial_snapshot=initial,\n+        configuration=config,\n+        repositories=repository_rows,\n+        observations=observations,\n+        commits=commits,\n     )\n-    resp.raise_for_status()\n-    return unified_diff_from_commit_payload(resp.json())\n+\n+\n+def _acquire_discovery_file_lock():\n+    GIT_MIRROR_DIR.mkdir(parents=True, exist_ok=True)\n+    lock_file = (GIT_MIRROR_DIR / \".discovery.lock\").open(\"a+b\")\n+    fcntl.flock(lock_file.fileno(), fcntl.LOCK_EX)\n+    return lock_file\n+\n+\n+def _release_discovery_file_lock(lock_file) -> None:\n+    fcntl.flock(lock_file.fileno(), fcntl.LOCK_UN)\n+    lock_file.close()\n+\n+\n+async def discover_repositories(epoch_n: int, boundary_ms: int) -> GitDiscovery:\n+    async with _DISCOVERY_LOCK:\n+        lock_file = await asyncio.to_thread(_acquire_discovery_file_lock)\n+        try:\n+            events = store.read()\n+            existing = next(\n+                (\n+                    e for e in events\n+                    if isinstance(e, GitDiscovery) and e.epoch == epoch_n\n+                ),\n+                None,\n+            )\n+            if existing:\n+                return existing\n+            candidate = await asyncio.to_thread(\n+                _build_discovery, epoch_n, boundary_ms, events\n+            )\n+\n+            def append_if_new(current_events):\n+                if any(\n+                    isinstance(e, GitDiscovery) and e.epoch == epoch_n\n+                    for e in current_events\n+                ):\n+                    return None\n+                return candidate\n+\n+            appended = await store.atomic(append_if_new)\n+            if appended:\n+                return appended\n+            return next(\n+                e for e in store.read()\n+                if isinstance(e, GitDiscovery) and e.epoch == epoch_n\n+            )\n+        finally:\n+            await asyncio.to_thread(_release_discovery_file_lock, lock_file)\n \n \n SSE_CLIENTS = []\n@@ -581,28 +1002,27 @@ async def broadcast_js(js: str):\n         await queue.put(js)\n \n \n-async def rank_commits(since_ms):\n-    commits = await fetch_commits_since(since_ms)\n+async def rank_commits(commits: list[dict]):\n     if not commits:\n-        return {}\n-\n-    async with httpx.AsyncClient() as gh:\n-        commit_diffs = await asyncio.gather(*[fetch_commit_unified_diff(gh, c[\"sha\"]) for c in commits])\n+        return {}, []\n \n     models = await fetch_top_models(n=3)\n+    contributors = sorted(set(c[\"contributor\"] for c in commits))\n+    if len(contributors) > 1 and not models:\n+        raise RuntimeError(\"no council models available for contributor ranking\")\n     await broadcast_js(exec_event(Three[Selector(\"#emission-log\")][PREPEND][\n         [\"div.log-council\", f\"Council: {', '.join(models)} — {len(commits)} commits\"]\n     ]))\n \n-    authors = list(set(c[\"commit\"][\"author\"][\"name\"] for c in commits))\n+    authors = contributors\n     author_idx = {a: i for i, a in enumerate(authors)}\n \n     author_commits = {a: [] for a in authors}\n-    for c, diff_text in zip(commits, commit_diffs, strict=True):\n-        author_commits[c[\"commit\"][\"author\"][\"name\"]].append({\n-            \"message\": c[\"commit\"][\"message\"],\n-            \"sha\": c[\"sha\"][:8],\n-            \"diff\": diff_text,\n+    for c in sorted(commits, key=lambda row: row[\"oid\"]):\n+        author_commits[c[\"contributor\"]].append({\n+            \"message\": c[\"message\"],\n+            \"sha\": c[\"oid\"].split(\":\", 1)[1][:8],\n+            \"diff\": c[\"patch\"],\n         })\n \n     # TODO do we want ot coagulate the commits into a single block? or rank the many commits\n@@ -622,9 +1042,14 @@ async def rank_commits(since_ms):\n         for model in models:\n             try:\n                 result = await llm_pairwise_compare(model, author_side_for_llm(a1), author_side_for_llm(a2))\n+                if result[\"winner\"] not in {\"A\", \"B\"}:\n+                    raise ValueError(\"winner must be A or B\")\n                 w, l = (i, j) if result[\"winner\"] == \"A\" else (j, i)\n                 ratio = result[\"ratio\"].split(\":\")\n-                results.append((w, l, float(ratio[0]), float(ratio[1])))\n+                winner_weight, loser_weight = float(ratio[0]), float(ratio[1])\n+                if winner_weight <= 0 or loser_weight <= 0:\n+                    raise ValueError(\"ratio weights must be positive\")\n+                results.append((w, l, winner_weight, loser_weight))\n                 await broadcast_js(exec_event(Three[Selector(\"#emission-log\")][PREPEND][\n                     [\"div.log-vote\",\n                         [\"span.model\", model], \" — \",\n@@ -637,6 +1062,7 @@ async def rank_commits(since_ms):\n                 await broadcast_js(exec_event(Three[Selector(\"#emission-log\")][PREPEND][\n                     [\"div.log-error\", f\"⚠ {model}: {e}\"]\n                 ]))\n+                raise RuntimeError(f\"council model failed: {model}\") from e\n         return results\n \n     async def progress_fn(ev):\n@@ -651,7 +1077,8 @@ async def rank_commits(since_ms):\n     pairs = await pairwise_rank(len(authors), compare_fn, progress_fn)\n \n     if not pairs:\n-        return {authors[0]: Decimal(\"1\")} if authors else {}\n+        ranking = {authors[0]: Decimal(\"1\")} if authors else {}\n+        return ranking, models\n \n     scores = rank_centrality(pairs)\n     ranking = {authors[i]: Decimal(str(scores[i])) for i in range(len(authors))}\n@@ -662,7 +1089,7 @@ async def rank_commits(since_ms):\n             *[[\"span.rank-entry\", f\"{a} {float(s):.3f}  \"] for a, s in ranking_rows],\n         ]\n     ]))\n-    return ranking\n+    return ranking, models\n \n \n # ===========================================================================\n@@ -681,35 +1108,48 @@ async def run_emission(epoch_n, boundary_ms):\n         [\"div.log-start\", f\"⚡ Epoch {epoch_n} emission started\"]\n     ]))\n \n-    pool = pool_remaining(store.read())\n-    emission = pool * DECAY_RATE\n-    await broadcast_js(exec_event(Three[Selector(\"#emission-log\")][PREPEND][\n-        [\"div.log-amount\",\n-            f\"Pool {pool:.4f} → emit {emission:.4f} → {pool - emission:.4f}\"]\n-    ]))\n-\n-    prev_boundary_ms = epoch_boundary(epoch_n - 1) if epoch_n > 0 else GENESIS_MS\n-    ranking = await rank_commits(prev_boundary_ms)\n+    discovery = await discover_repositories(epoch_n, boundary_ms)\n+    ranking, models = await rank_commits(discovery.commits)\n \n     def make_emission(events):\n         if epoch_n in {e.epoch for e in events if isinstance(e, Emission)}:\n             return None\n         pool_now = pool_remaining(events)\n-        emission_now = pool_now * DECAY_RATE\n+        emission_now = pool_now * DECAY_RATE if ranking else Decimal(\"0\")\n+        normalized_ranking = {}\n+        distributions = {}\n+        if ranking:\n+            score_total = sum(ranking.values())\n+            normalized_ranking = {\n+                contributor: score / score_total\n+                for contributor, score in sorted(ranking.items())\n+            }\n+            contributors = list(normalized_ranking)\n+            allocated = Decimal(\"0\")\n+            for contributor in contributors[:-1]:\n+                amount = emission_now * normalized_ranking[contributor]\n+                distributions[contributor] = amount\n+                allocated += amount\n+            distributions[contributors[-1]] = emission_now - allocated\n         return Emission(\n             epoch=epoch_n,\n             timestamp_ms=boundary_ms,\n+            discovery_snapshot_id=discovery.snapshot_id,\n             pool_before=str(pool_now),\n             total_emitted=str(emission_now),\n             pool_after=str(pool_now - emission_now),\n             decay_rate=str(DECAY_RATE),\n-            distributions={a: str(emission_now * s) for a, s in ranking.items()},\n-            ranking={a: str(s) for a, s in ranking.items()},\n-            models_used=[],\n+            distributions={a: str(amount) for a, amount in distributions.items()},\n+            ranking={a: str(s) for a, s in normalized_ranking.items()},\n+            models_used=models,\n         )\n \n     entry = await store.atomic(make_emission)\n     if entry:\n+        await broadcast_js(exec_event(Three[Selector(\"#emission-log\")][PREPEND][\n+            [\"div.log-amount\",\n+                f\"Pool {entry.pool_before} → emit {entry.total_emitted} → {entry.pool_after}\"]\n+        ]))\n         await broadcast_js(exec_event(Three[Selector(\"#emission-log\")][PREPEND][\n             [\"div.log-complete\",\n                 [\"b\", f\"✓ Epoch {entry.epoch} complete — emitted {entry.total_emitted} SLUG\"]]\n@@ -815,20 +1255,40 @@ async def get_contributor(github_username: str):\n \n @app.get(\"/api/halvening\")\n async def get_halvening():\n-    half_life = sp.Rational(str(HALF_LIFE_YEARS))\n-    boundary = genesis_ms\n-    elapsed = sp.Integer(0)\n-    epoch_years = sp.Rational(1, 12)\n-    for e in range(300):\n-        epoch_dur = tropical_epoch_ms(boundary)\n-        if elapsed + epoch_years >= half_life:\n-            fraction = (half_life - elapsed) / epoch_years\n-            jubilee_ms = round_sympy_ms(boundary + fraction * epoch_dur)\n-            dt = datetime.fromtimestamp(jubilee_ms / 1000, tz=timezone.utc)\n-            return {\"jubilee_ms\": jubilee_ms, \"jubilee_utc\": dt.isoformat(),\n-                    \"epoch\": e + float(fraction), \"half_life_years\": str(HALF_LIFE_YEARS)}\n-        elapsed += epoch_years\n-        boundary += epoch_dur\n+    # Iterating symbolic rationals recursively causes expression-size explosion\n+    # after hundreds of epochs. Fifty-digit Decimal arithmetic is far beyond the\n+    # millisecond precision exposed by this endpoint and remains deterministic.\n+    boundary = Decimal(GENESIS_MS)\n+    j2000 = Decimal(946728000000)\n+    century = Decimal(36525 * 86400 * 1000)\n+    day = Decimal(86400000)\n+\n+    def decimal_epoch_ms(at_ms: Decimal) -> Decimal:\n+        T = (at_ms - j2000) / century\n+        days = (\n+            Decimal(\"365.2421896698\")\n+            + Decimal(\"-6.15359e-6\") * T\n+            + Decimal(\"-7.29e-10\") * T**2\n+            + Decimal(\"2.64e-10\") * T**3\n+        )\n+        return days * day / Decimal(12)\n+\n+    total_epochs = HALF_LIFE_YEARS * Decimal(12)\n+    whole_epochs = int(total_epochs)\n+    fraction = total_epochs - whole_epochs\n+    for _ in range(whole_epochs):\n+        boundary += decimal_epoch_ms(boundary)\n+    jubilee_ms = int(\n+        (boundary + fraction * decimal_epoch_ms(boundary))\n+        .to_integral_value(rounding=\"ROUND_HALF_UP\")\n+    )\n+    dt = datetime.fromtimestamp(jubilee_ms / 1000, tz=timezone.utc)\n+    return {\n+        \"jubilee_ms\": jubilee_ms,\n+        \"jubilee_utc\": dt.isoformat(),\n+        \"epoch\": float(total_epochs),\n+        \"half_life_years\": str(HALF_LIFE_YEARS),\n+    }\n \n \n @app.post(\"/test/emit\")\ndiff --git a/pyproject.toml b/pyproject.toml\nindex 46f0b6fd922995045008a5e935c5178e9519ac7c..65092f570614a9a5473fea04150a9871d5e0490c 100644\n--- a/pyproject.toml\n+++ b/pyproject.toml\n@@ -3,7 +3,7 @@ name = \"slug-constitution\"\n version = \"0.1.0\"\n requires-python = \">=3.11\"\n dependencies = [\n-    \"evaleval>=0.2.6\",\n+    \"evaleval==0.2.7\",\n     \"numpy\",\n     \"httpx\",\n     \"fastapi\",\n@@ -12,6 +12,10 @@ dependencies = [\n     \"starlette\",\n     \"itsdangerous\",\n     \"pytest\",\n+    \"hypothesis\",\n+    \"sympy\",\n+    \"authlib\",\n+    \"python-multipart\",\n ]\n \n [tool.pytest.ini_options]\ndiff --git a/tests/integration.clj b/tests/integration.clj\nindex fdc0931e937bcf5f0e1bea8c5b8c632ec99eab17..0d34e3b237b4037a28f5e99350e8d447455665de 100644\n--- a/tests/integration.clj\n+++ b/tests/integration.clj\n@@ -1,7 +1,7 @@\n #!/usr/bin/env bb\n (ns test.integration\n   \"Integration tests for constitution.py.\n-   Starts the server, mocks OpenRouter + GitHub APIs, seeds a JSONL,\n+   Starts the server, mocks OpenRouter, creates local Git remotes, seeds a JSONL,\n    verifies API endpoints, SSE stream, and replay determinism.\"\n   (:require [babashka.process :as p]\n             [clojure.string :as str]\n@@ -96,6 +96,47 @@\n         (throw (ex-info \"bad HTTP status\" {:code code :body body})))\n       (json/parse-string body true))))\n \n+(defn- command!\n+  [argv opts]\n+  (let [r @(p/process argv (merge {:out :string :err :string} opts))]\n+    (when-not (zero? (:exit r))\n+      (throw (ex-info (str \"command failed: \" (pr-str argv) \"\\n\" (:err r))\n+                      {:argv argv :result r})))\n+    (str/trim (:out r))))\n+\n+(defn- git!\n+  [dir & args]\n+  (let [base-env (into {} (System/getenv))\n+        env      (merge base-env\n+                        {\"GIT_CONFIG_NOSYSTEM\" \"1\"\n+                         \"GIT_AUTHOR_NAME\" \"Integration\"\n+                         \"GIT_AUTHOR_EMAIL\" \"integration@example.test\"\n+                         \"GIT_COMMITTER_NAME\" \"Integration\"\n+                         \"GIT_COMMITTER_EMAIL\" \"integration@example.test\"})]\n+    (command! (into [\"git\" \"-C\" dir] args) {:env env})))\n+\n+(defn- make-git-repository!\n+  [tmp-dir id contributor email filename]\n+  (let [remote (str tmp-dir \"/\" id \".git\")\n+        work   (str tmp-dir \"/\" id \"-work\")]\n+    (command! [\"git\" \"init\" \"--bare\" remote] {})\n+    (command! [\"git\" \"init\" \"-b\" \"main\" work] {})\n+    (git! work \"config\" \"user.name\" contributor)\n+    (git! work \"config\" \"user.email\" email)\n+    (spit (str work \"/\" filename) (str contributor \" contribution\\n\"))\n+    (git! work \"add\" \"--\" filename)\n+    (let [env (merge (into {} (System/getenv))\n+                     {\"GIT_CONFIG_NOSYSTEM\" \"1\"\n+                      \"GIT_AUTHOR_NAME\" contributor\n+                      \"GIT_AUTHOR_EMAIL\" email\n+                      \"GIT_COMMITTER_NAME\" contributor\n+                      \"GIT_COMMITTER_EMAIL\" email})]\n+      (command! [\"git\" \"-C\" work \"commit\" \"-m\" (str \"contribution by \" contributor)]\n+                {:env env}))\n+    (git! work \"remote\" \"add\" \"origin\" remote)\n+    (git! work \"push\" \"origin\" \"main\")\n+    {:id id :url remote :refs [\"refs/heads/**\"]}))\n+\n ;; ---------------------------------------------------------------------------\n ;; mock OpenRouter server\n ;; ---------------------------------------------------------------------------\n@@ -199,6 +240,7 @@\n   (let [entry {:type         \"emission\"\n                :epoch        0\n                :timestamp_ms 1700000000000\n+               :discovery_snapshot_id \"seeded-discovery\"\n                :pool_before  \"175824\"\n                :total_emitted \"572.1423838308\"\n                :pool_after   \"175251.857616169\"\n@@ -239,8 +281,8 @@\n       (str/trim (second m)))))\n \n (defn- test-live-slug-model-council! [root]\n-  (if (= \"1\" (System/getenv \"SKIP_LIVE_SLUG_SOCIAL\"))\n-    (println \"\\n━━━ live slug.social checks skipped (SKIP_LIVE_SLUG_SOCIAL=1) ━━━\\n\")\n+  (if-not (= \"1\" (System/getenv \"RUN_LIVE_SLUG_SOCIAL\"))\n+    (println \"\\n━━━ live slug.social checks skipped (set RUN_LIVE_SLUG_SOCIAL=1) ━━━\\n\")\n     (letlocals\n       (println \"\\n━━━ live slug.social: /api/v0 + fetch_top_models ━━━\\n\")\n       (bind rank-url (str slug-live-base \"/api/v0/rank?parent=\"\n@@ -307,7 +349,7 @@\n               (when (str/starts-with? line \"data:\")\n                 (let [raw (str/trim (subs line 5))]\n                   (when-not (str/blank? raw)\n-                    (swap! events conj (json/parse-string raw true)))))\n+                    (swap! events conj raw))))\n               (recur))\n             nil)))\n       (finally\n@@ -329,7 +371,6 @@\n     (bind jsonl-path   (str tmp-dir \"/ledger.jsonl\"))\n     (bind server-port  (pick-port))\n     (bind or-port      (pick-port))  ; openrouter mock\n-    (bind gh-port      (pick-port))  ; github mock\n     (bind base-url     (str \"http://127.0.0.1:\" server-port))\n \n     ;; genesis ~1 month ago so we're at epoch 1+\n@@ -337,38 +378,47 @@\n \n     (bind root          (project-root))\n     (test-live-slug-model-council! root)\n+    (bind repo-a (make-git-repository! tmp-dir \"repo-a\" \"alice\"\n+                                       \"alice@example.test\" \"alice.txt\"))\n+    (bind repo-b (make-git-repository! tmp-dir \"repo-b\" \"bob\"\n+                                       \"bob@example.test\" \"bob.txt\"))\n+    (bind repositories-json\n+      (json/generate-string\n+        [(update repo-a :refs vec) (update repo-b :refs vec)]))\n+    (bind contributors-json\n+      (json/generate-string\n+        {\"alice\" [\"alice@example.test\"]\n+         \"bob\"   [\"bob@example.test\"]}))\n     (bind server-env\n       {\"SESSION_SECRET\"       \"test-secret\"\n        \"GENESIS_MS\"           genesis-ms\n        \"JSONL_PATH\"           jsonl-path\n+       \"GIT_MIRROR_DIR\"       (str tmp-dir \"/mirrors\")\n+       \"REPOSITORIES_JSON\"    repositories-json\n+       \"CONTRIBUTORS_JSON\"    contributors-json\n        \"OPENROUTER_API_KEY\"   \"mock-key\"\n        \"GITHUB_CLIENT_ID\"     \"mock-gh-id\"\n        \"GITHUB_CLIENT_SECRET\" \"mock-gh-secret\"\n-       \"GITHUB_TOKEN\"         \"mock-gh-token\"\n-       \"REPO\"                 \"tommy-mor/slug\"\n        \"PORT\"                 (str server-port)\n        \"DISABLE_EPOCH_LOOP\"   \"1\"\n        \"ALLOW_TEST_TRIGGERS\"  \"1\"\n        \"OPENROUTER_BASE_URL\"  (str \"http://127.0.0.1:\" or-port)\n-       \"GITHUB_API_BASE_URL\"  (str \"http://127.0.0.1:\" gh-port)\n        \"SLUG_MODEL_RANK_PARENT\" \"\"\n        \"PATH\"                 (get (into {} (System/getenv)) \"PATH\" \"\")})\n \n     (bind !server  (atom nil))\n     (bind !server2 (atom nil))\n     (bind !or-mock (atom nil))\n-    (bind !gh-mock (atom nil))\n \n     (try\n       (letlocals\n-        ;; 1. start mock servers\n-        (println \"starting mock OpenRouter and GitHub API servers…\")\n+        ;; 1. start mock model server; Git discovery uses local bare remotes\n+        (println \"starting mock OpenRouter server and local Git remotes…\")\n         (bind or-mock (start-mock-openrouter or-port))\n         (reset! !or-mock or-mock)\n-        (bind gh-mock (start-mock-github gh-port))\n-        (reset! !gh-mock gh-mock)\n         (assert! (some? (:stop-fn or-mock)) \"mock OpenRouter started\")\n-        (assert! (some? (:stop-fn gh-mock)) \"mock GitHub started\")\n+        (assert! (fs/exists? (:url repo-a)) \"first bare Git remote exists\")\n+        (assert! (fs/exists? (:url repo-b)) \"second bare Git remote exists\")\n \n         ;; 2. seed ledger so pool_remaining has history to read\n         (seed-ledger jsonl-path)\n@@ -422,7 +472,8 @@\n         (println \"\\nchecking /sse initial event…\")\n         (bind sse-events (read-sse-events (str base-url \"/sse\") 1 5000))\n         (assert! (= 1 (count sse-events))             \"received 1 SSE event\")\n-        (assert! (int? (:epoch (first sse-events)))   \"initial SSE event has epoch\")\n+        (assert! (not (str/blank? (first sse-events)))\n+                 \"initial SSE event contains executable audit data\")\n \n         ;; 10. POST /test/emit — full ranking pipeline hits mocks\n         (println \"\\ntriggering /test/emit (epoch 1)…\")\n@@ -430,16 +481,25 @@\n         (assert! (= \"emission\" (:type emit-resp))     \"emit response type is emission\")\n         (assert! (= 1 (:epoch emit-resp))             \"emit is epoch 1 after seeded epoch 0\")\n         (assert! (pos? (count (:distributions emit-resp))) \"emit has distributions\")\n+        (assert! (string? (:discovery_snapshot_id emit-resp))\n+                 \"emission records discovery snapshot\")\n+        (assert! (= 3 (count (:models_used emit-resp)))\n+                 \"emission records all council models\")\n \n         (bind or-state @(:state or-mock))\n-        (bind gh-state @(:state gh-mock))\n         (assert! (pos? (:model-requests or-state))    \"OpenRouter /models was called\")\n         (assert! (>= (:compare-requests or-state) 3) \"at least 3 pairwise LLM calls (2 authors × 3 models)\")\n-        (assert! (pos? (:commit-list-requests gh-state)) \"GitHub commits list was called\")\n-        (assert! (>= (:commit-detail-requests gh-state) 2) \"GitHub per-SHA fetches for each commit\")\n \n         (bind ledger2 (get-json base-url \"/api/ledger\"))\n-        (assert! (= 2 (count ledger2))              \"ledger has 2 entries after emit\")\n+        (assert! (= 3 (count ledger2))\n+                 \"ledger has seed, discovery, and emission entries\")\n+        (bind discovery-entry (second ledger2))\n+        (assert! (= \"gitdiscovery\" (:type discovery-entry))\n+                 \"discovery is persisted before emission\")\n+        (assert! (= 2 (count (:repositories discovery-entry)))\n+                 \"discovery records both repositories\")\n+        (assert! (= 2 (count (:commits discovery-entry)))\n+                 \"discovery admits one contribution from each repository\")\n         (bind rank-after (get-json base-url \"/api/ranking\"))\n         (assert! (= 1 (:epoch rank-after))           \"latest ranking is epoch 1\")\n \n@@ -458,7 +518,8 @@\n                  \"restarted server responds to /api/epoch\")\n \n         (bind replayed-ledger (get-json base-url \"/api/ledger\"))\n-        (assert! (= 2 (count replayed-ledger))        \"ledger still has 2 entries after replay\")\n+        (assert! (= 3 (count replayed-ledger))\n+                 \"ledger still has 3 entries after replay\")\n         (bind replayed-rank   (get-json base-url \"/api/ranking\"))\n         (assert! (= (get-in rank-after [:ranking :alice])\n                     (get-in replayed-rank [:ranking :alice]))\n@@ -473,7 +534,6 @@\n           (.destroyForcibly (:proc s))\n           (deref s))\n         (when-some [m @!or-mock] ((:stop-fn m)))\n-        (when-some [m @!gh-mock] ((:stop-fn m)))\n         (fs/delete-tree tmp-dir)))\n \n     (let [{:keys [pass fail]} @counts]\ndiff --git a/tests/test_git_discovery.py b/tests/test_git_discovery.py\nnew file mode 100644\nindex 0000000000000000000000000000000000000000..0dd31bc42a19bc8c59842dc61f193c595c474659\n--- /dev/null\n+++ b/tests/test_git_discovery.py\n@@ -0,0 +1,467 @@\n+\"\"\"Real-Git tests for the constitutional multi-repository discovery rules.\"\"\"\n+\n+from __future__ import annotations\n+\n+import asyncio\n+import hashlib\n+import os\n+import subprocess\n+from pathlib import Path\n+from types import SimpleNamespace\n+\n+import pytest\n+\n+import constitution as c\n+\n+\n+def git(repo: Path | None, *args: str, env: dict | None = None) -> str:\n+    command = [\"git\"]\n+    if repo is not None:\n+        command += [\"-C\", str(repo)]\n+    command += list(args)\n+    merged_env = os.environ.copy()\n+    merged_env.update({\n+        \"GIT_CONFIG_NOSYSTEM\": \"1\",\n+        \"GIT_AUTHOR_NAME\": \"Test Author\",\n+        \"GIT_AUTHOR_EMAIL\": \"author@example.test\",\n+        \"GIT_COMMITTER_NAME\": \"Test Committer\",\n+        \"GIT_COMMITTER_EMAIL\": \"author@example.test\",\n+    })\n+    if env:\n+        merged_env.update(env)\n+    result = subprocess.run(\n+        command,\n+        env=merged_env,\n+        text=True,\n+        input=\"\",\n+        stdout=subprocess.PIPE,\n+        stderr=subprocess.PIPE,\n+        check=False,\n+    )\n+    assert result.returncode == 0, result.stderr\n+    return result.stdout.strip()\n+\n+\n+def make_remote(tmp_path: Path, name: str) -> tuple[Path, Path]:\n+    remote = tmp_path / f\"{name}.git\"\n+    work = tmp_path / f\"{name}-work\"\n+    git(None, \"init\", \"--bare\", str(remote))\n+    git(None, \"init\", \"-b\", \"main\", str(work))\n+    git(work, \"config\", \"user.name\", \"Test Author\")\n+    git(work, \"config\", \"user.email\", \"author@example.test\")\n+    git(work, \"remote\", \"add\", \"origin\", str(remote))\n+    return remote, work\n+\n+\n+def commit_file(\n+    work: Path,\n+    name: str,\n+    content: str | bytes,\n+    message: str,\n+    timestamp: int,\n+    *,\n+    email: str = \"author@example.test\",\n+) -> str:\n+    path = work / name\n+    path.parent.mkdir(parents=True, exist_ok=True)\n+    if isinstance(content, bytes):\n+        path.write_bytes(content)\n+    else:\n+        path.write_text(content)\n+    git(work, \"add\", \"--\", name)\n+    date = f\"@{timestamp} +0000\"\n+    return git(\n+        work,\n+        \"commit\",\n+        \"-m\",\n+        message,\n+        env={\n+            \"GIT_AUTHOR_EMAIL\": email,\n+            \"GIT_COMMITTER_EMAIL\": email,\n+            \"GIT_AUTHOR_DATE\": date,\n+            \"GIT_COMMITTER_DATE\": date,\n+        },\n+    ) and git(work, \"rev-parse\", \"HEAD\")\n+\n+\n+def push(work: Path, *refs: str) -> None:\n+    git(work, \"push\", \"--force\", \"origin\", *refs)\n+\n+\n+@pytest.fixture\n+def discovery_config(tmp_path, monkeypatch):\n+    monkeypatch.setattr(c, \"GIT_MIRROR_DIR\", tmp_path / \"mirrors\")\n+    monkeypatch.setattr(c, \"GENESIS_MS\", 1_000_000)\n+    monkeypatch.setattr(c, \"CONTRIBUTORS\", {\n+        \"alice\": [\"author@example.test\"],\n+        \"bob\": [\"bob@example.test\"],\n+    })\n+    return tmp_path\n+\n+\n+def configure(monkeypatch, repositories):\n+    monkeypatch.setattr(c, \"REPOSITORIES\", repositories)\n+\n+\n+def test_ref_patterns_distinguish_nested_branches():\n+    shallow = c._ref_pattern_regex(\"refs/heads/*\")\n+    recursive = c._ref_pattern_regex(\"refs/heads/**\")\n+    assert shallow.fullmatch(\"refs/heads/main\")\n+    assert not shallow.fullmatch(\"refs/heads/team/topic\")\n+    assert recursive.fullmatch(\"refs/heads/team/topic\")\n+\n+\n+def test_manifest_order_does_not_change_digest(monkeypatch):\n+    repos = [\n+        {\"id\": \"b\", \"url\": \"/b\", \"refs\": [\"refs/heads/z\", \"refs/heads/a\"]},\n+        {\"id\": \"a\", \"url\": \"/a\", \"refs\": [\"refs/heads/**\"]},\n+    ]\n+    configure(monkeypatch, repos)\n+    monkeypatch.setattr(c, \"CONTRIBUTORS\", {\"alice\": [\"A@EXAMPLE.TEST\"]})\n+    first = c._config_digest(c._normalized_discovery_config())\n+    configure(monkeypatch, list(reversed(repos)))\n+    second = c._config_digest(c._normalized_discovery_config())\n+    assert first == second\n+\n+\n+@pytest.mark.parametrize(\n+    \"repositories\",\n+    [\n+        [{\"id\": \"../escape\", \"url\": \"/x\", \"refs\": [\"refs/heads/main\"]}],\n+        [{\"id\": \"x\", \"url\": \"\", \"refs\": [\"refs/heads/main\"]}],\n+        [{\"id\": \"x\", \"url\": \"/x\", \"refs\": []}],\n+        [\n+            {\"id\": \"x\", \"url\": \"/x\", \"refs\": [\"refs/heads/main\"]},\n+            {\"id\": \"x\", \"url\": \"/y\", \"refs\": [\"refs/heads/main\"]},\n+        ],\n+    ],\n+)\n+def test_invalid_manifests_fail(repositories, monkeypatch):\n+    configure(monkeypatch, repositories)\n+    monkeypatch.setattr(c, \"CONTRIBUTORS\", {\"alice\": [\"a@example.test\"]})\n+    with pytest.raises(ValueError):\n+        c._normalized_discovery_config()\n+\n+\n+def test_bootstrap_genesis_nested_refs_and_exclusions(discovery_config, monkeypatch):\n+    remote, work = make_remote(discovery_config, \"one\")\n+    old_oid = commit_file(work, \"old.txt\", \"old\", \"before genesis\", 999)\n+    new_oid = commit_file(work, \"new.txt\", \"new\", \"after genesis\", 1001)\n+    git(work, \"branch\", \"team/topic\")\n+    push(work, \"main\", \"team/topic\")\n+    configure(monkeypatch, [{\n+        \"id\": \"one\", \"url\": str(remote), \"refs\": [\"refs/heads/**\"],\n+    }])\n+\n+    event = c._build_discovery(0, c.GENESIS_MS, [])\n+    observations = {row[\"oid\"].split(\":\", 1)[1]: row for row in event.observations}\n+    assert observations[old_oid][\"exclusion_reason\"] == \"before_genesis\"\n+    assert observations[new_oid][\"eligible\"]\n+    assert {source[\"ref_name\"] for source in observations[new_oid][\"first_sources\"]} == {\n+        \"refs/heads/main\", \"refs/heads/team/topic\",\n+    }\n+    assert event.commits[0][\"contributor\"] == \"alice\"\n+\n+\n+def test_first_reachable_ignores_old_timestamp_after_bootstrap(\n+    discovery_config, monkeypatch\n+):\n+    remote, work = make_remote(discovery_config, \"one\")\n+    commit_file(work, \"base.txt\", \"base\", \"base\", 1001)\n+    push(work, \"main\")\n+    configure(monkeypatch, [{\n+        \"id\": \"one\", \"url\": str(remote), \"refs\": [\"refs/heads/main\"],\n+    }])\n+    first = c._build_discovery(0, c.GENESIS_MS, [])\n+\n+    git(work, \"checkout\", \"-b\", \"hidden\")\n+    old_dated_oid = commit_file(work, \"late.txt\", \"late\", \"old dated\", 500)\n+    git(work, \"checkout\", \"main\")\n+    git(work, \"merge\", \"--ff-only\", \"hidden\")\n+    push(work, \"main\")\n+\n+    second = c._build_discovery(1, c.GENESIS_MS + 1, [first])\n+    row = next(\n+        row for row in second.observations\n+        if row[\"oid\"].endswith(old_dated_oid)\n+    )\n+    assert row[\"eligible\"]\n+\n+\n+def test_force_push_removal_and_reintroduction_never_reattributes(\n+    discovery_config, monkeypatch\n+):\n+    remote, work = make_remote(discovery_config, \"one\")\n+    base = commit_file(work, \"base.txt\", \"base\", \"base\", 1001)\n+    extra = commit_file(work, \"extra.txt\", \"extra\", \"extra\", 1002)\n+    push(work, \"main\")\n+    configure(monkeypatch, [{\n+        \"id\": \"one\", \"url\": str(remote), \"refs\": [\"refs/heads/main\"],\n+    }])\n+    first = c._build_discovery(0, c.GENESIS_MS, [])\n+\n+    git(work, \"reset\", \"--hard\", base)\n+    push(work, \"main\")\n+    second = c._build_discovery(1, c.GENESIS_MS + 1, [first])\n+    assert second.observations == []\n+\n+    git(work, \"reset\", \"--hard\", extra)\n+    push(work, \"main\")\n+    third = c._build_discovery(2, c.GENESIS_MS + 2, [first, second])\n+    assert third.observations == []\n+\n+\n+def test_global_oid_and_cherry_pick_patch_dedup(discovery_config, monkeypatch):\n+    remote_a, work_a = make_remote(discovery_config, \"a\")\n+    commit_file(work_a, \"base.txt\", \"base\", \"base\", 1001)\n+    shared = commit_file(work_a, \"feature.txt\", \"feature\\n\", \"feature\", 1002)\n+    push(work_a, \"main\")\n+\n+    remote_b = discovery_config / \"b.git\"\n+    git(None, \"clone\", \"--bare\", str(remote_a), str(remote_b))\n+    work_b = discovery_config / \"b-work\"\n+    git(None, \"clone\", str(remote_b), str(work_b))\n+    git(work_b, \"config\", \"user.name\", \"Bob\")\n+    git(work_b, \"config\", \"user.email\", \"bob@example.test\")\n+\n+    configure(monkeypatch, [\n+        {\"id\": \"a\", \"url\": str(remote_a), \"refs\": [\"refs/heads/main\"]},\n+        {\"id\": \"b\", \"url\": str(remote_b), \"refs\": [\"refs/heads/main\"]},\n+    ])\n+    first = c._build_discovery(0, c.GENESIS_MS, [])\n+    shared_rows = [r for r in first.observations if r[\"oid\"].endswith(shared)]\n+    assert len(shared_rows) == 1\n+    assert len(shared_rows[0][\"first_sources\"]) == 2\n+\n+    git(work_b, \"checkout\", \"-b\", \"copy\", f\"{shared}^\")\n+    git(\n+        work_b,\n+        \"cherry-pick\",\n+        shared,\n+        env={\n+            \"GIT_COMMITTER_NAME\": \"Bob\",\n+            \"GIT_COMMITTER_EMAIL\": \"bob@example.test\",\n+            \"GIT_COMMITTER_DATE\": \"@1003 +0000\",\n+        },\n+    )\n+    copied = git(work_b, \"rev-parse\", \"HEAD\")\n+    git(work_b, \"branch\", \"-f\", \"main\", copied)\n+    push(work_b, \"main\")\n+\n+    second = c._build_discovery(1, c.GENESIS_MS + 1, [first])\n+    copied_row = next(r for r in second.observations if r[\"oid\"].endswith(copied))\n+    assert copied_row[\"exclusion_reason\"] == \"duplicate_patch\"\n+    assert copied_row[\"canonical_patch_oid\"].endswith(shared)\n+    assert second.commits == []\n+\n+\n+def test_merge_empty_unknown_and_binary_are_explicit(discovery_config, monkeypatch):\n+    remote, work = make_remote(discovery_config, \"one\")\n+    commit_file(work, \"base.txt\", \"base\", \"base\", 1001)\n+    git(work, \"checkout\", \"-b\", \"feature\")\n+    commit_file(work, \"binary.bin\", b\"\\x00\\x01\\xff\", \"binary\", 1002)\n+    git(work, \"checkout\", \"main\")\n+    commit_file(work, \"main.txt\", \"main\", \"main\", 1003)\n+    git(\n+        work,\n+        \"merge\",\n+        \"--no-ff\",\n+        \"feature\",\n+        \"-m\",\n+        \"merge\",\n+        env={\"GIT_AUTHOR_DATE\": \"@1004 +0000\", \"GIT_COMMITTER_DATE\": \"@1004 +0000\"},\n+    )\n+    git(\n+        work,\n+        \"commit\",\n+        \"--allow-empty\",\n+        \"-m\",\n+        \"empty\",\n+        env={\"GIT_AUTHOR_DATE\": \"@1005 +0000\", \"GIT_COMMITTER_DATE\": \"@1005 +0000\"},\n+    )\n+    commit_file(\n+        work, \"unknown.txt\", \"unknown\", \"unknown\", 1006,\n+        email=\"unknown@example.test\",\n+    )\n+    push(work, \"main\")\n+    configure(monkeypatch, [{\n+        \"id\": \"one\", \"url\": str(remote), \"refs\": [\"refs/heads/main\"],\n+    }])\n+\n+    event = c._build_discovery(0, c.GENESIS_MS, [])\n+    reasons = {row[\"exclusion_reason\"] for row in event.observations}\n+    assert {\"merge_commit\", \"empty_commit\", \"unknown_contributor\"} <= reasons\n+    binary = next(row for row in event.commits if row[\"message\"] == \"binary\")\n+    assert binary[\"patch_identity\"]\n+    assert binary[\"patch_sha256\"] == hashlib.sha256(\n+        binary[\"patch\"].encode()\n+    ).hexdigest()\n+\n+\n+def test_repository_failure_does_not_return_partial_snapshot(\n+    discovery_config, monkeypatch\n+):\n+    remote, work = make_remote(discovery_config, \"good\")\n+    commit_file(work, \"file.txt\", \"ok\", \"ok\", 1001)\n+    push(work, \"main\")\n+    configure(monkeypatch, [\n+        {\"id\": \"good\", \"url\": str(remote), \"refs\": [\"refs/heads/main\"]},\n+        {\n+            \"id\": \"missing\",\n+            \"url\": str(discovery_config / \"missing.git\"),\n+            \"refs\": [\"refs/heads/main\"],\n+        },\n+    ])\n+    with pytest.raises(RuntimeError):\n+        c._build_discovery(0, c.GENESIS_MS, [])\n+\n+\n+def test_git_replace_refs_cannot_falsify_discovered_commit(\n+    discovery_config, monkeypatch\n+):\n+    remote, work = make_remote(discovery_config, \"one\")\n+    original = commit_file(work, \"file.txt\", \"original\", \"original\", 1001)\n+    replacement = commit_file(work, \"file.txt\", \"replacement\", \"replacement\", 1002)\n+    git(work, \"replace\", original, replacement)\n+    git(work, \"reset\", \"--hard\", original)\n+    push(work, \"main\", f\"refs/replace/{original}\")\n+    configure(monkeypatch, [{\n+        \"id\": \"one\", \"url\": str(remote), \"refs\": [\"refs/heads/main\"],\n+    }])\n+\n+    event = c._build_discovery(0, c.GENESIS_MS, [])\n+    discovered = next(row for row in event.commits if row[\"oid\"].endswith(original))\n+    assert discovered[\"message\"] == \"original\"\n+    assert \"original\" in discovered[\"patch\"]\n+    assert \"replacement\" not in discovered[\"patch\"]\n+\n+\n+def test_replay_is_idempotent_and_path_independent(discovery_config, monkeypatch):\n+    remote, work = make_remote(discovery_config, \"one\")\n+    commit_file(work, \"file.txt\", \"ok\", \"ok\", 1001)\n+    push(work, \"main\")\n+    configure(monkeypatch, [{\n+        \"id\": \"one\", \"url\": str(remote), \"refs\": [\"refs/heads/main\"],\n+    }])\n+    first = c._build_discovery(0, c.GENESIS_MS, [])\n+    second = c._build_discovery(1, c.GENESIS_MS + 1, [first])\n+    assert second.observations == []\n+    assert second.commits == []\n+    assert first.repositories[0][\"reachable_set_sha256\"] == (\n+        second.repositories[0][\"reachable_set_sha256\"]\n+    )\n+\n+\n+def test_git_timeout_is_reported_without_partial_result(monkeypatch, tmp_path):\n+    def timeout(*_args, **_kwargs):\n+        raise subprocess.TimeoutExpired([\"git\", \"fetch\"], 1)\n+\n+    monkeypatch.setattr(c.subprocess, \"run\", timeout)\n+    with pytest.raises(RuntimeError, match=\"timed out\"):\n+        c._git(tmp_path, \"fetch\")\n+\n+\n+def test_concurrent_same_epoch_discovery_appends_once(\n+    discovery_config, monkeypatch\n+):\n+    remote, work = make_remote(discovery_config, \"one\")\n+    commit_file(work, \"file.txt\", \"ok\", \"ok\", 1001)\n+    push(work, \"main\")\n+    configure(monkeypatch, [{\n+        \"id\": \"one\", \"url\": str(remote), \"refs\": [\"refs/heads/main\"],\n+    }])\n+    ledger_path = discovery_config / \"ledger.jsonl\"\n+    monkeypatch.setattr(c, \"store\", c.JsonlStore(ledger_path))\n+\n+    async def run_both():\n+        return await asyncio.gather(\n+            c.discover_repositories(0, c.GENESIS_MS),\n+            c.discover_repositories(0, c.GENESIS_MS),\n+        )\n+\n+    left, right = asyncio.run(run_both())\n+    assert left.snapshot_id == right.snapshot_id\n+    discoveries = [\n+        event for event in c.store.read() if isinstance(event, c.GitDiscovery)\n+    ]\n+    assert len(discoveries) == 1\n+\n+\n+def test_empty_epoch_records_zero_emission_without_burning_pool(\n+    discovery_config, monkeypatch\n+):\n+    monkeypatch.setattr(c, \"store\", c.JsonlStore(discovery_config / \"ledger.jsonl\"))\n+\n+    async def discover(_epoch, _boundary):\n+        return SimpleNamespace(commits=[], snapshot_id=\"empty-snapshot\")\n+\n+    async def rank(_commits):\n+        return {}, []\n+\n+    monkeypatch.setattr(c, \"discover_repositories\", discover)\n+    monkeypatch.setattr(c, \"rank_commits\", rank)\n+    entry = asyncio.run(c.run_emission(0, c.GENESIS_MS))\n+    assert c.Decimal(entry.total_emitted) == 0\n+    assert entry.pool_before == entry.pool_after\n+    assert entry.distributions == {}\n+\n+\n+def test_emission_distribution_sums_exactly_to_total(\n+    discovery_config, monkeypatch\n+):\n+    monkeypatch.setattr(c, \"store\", c.JsonlStore(discovery_config / \"ledger.jsonl\"))\n+\n+    async def discover(_epoch, _boundary):\n+        return SimpleNamespace(commits=[{\"x\": 1}], snapshot_id=\"ranked-snapshot\")\n+\n+    async def rank(_commits):\n+        return {\n+            \"alice\": c.Decimal(\"0.33333333333333333333333333333333333333333333333333\"),\n+            \"bob\": c.Decimal(\"0.66666666666666666666666666666666666666666666666667\"),\n+        }, [\"model\"]\n+\n+    monkeypatch.setattr(c, \"discover_repositories\", discover)\n+    monkeypatch.setattr(c, \"rank_commits\", rank)\n+    entry = asyncio.run(c.run_emission(0, c.GENESIS_MS))\n+    distributed = sum(c.Decimal(x) for x in entry.distributions.values())\n+    assert distributed == c.Decimal(entry.total_emitted)\n+    assert entry.discovery_snapshot_id == \"ranked-snapshot\"\n+\n+\n+def test_single_contributor_ranking_is_total_and_uses_no_pairwise_votes(\n+    monkeypatch,\n+):\n+    async def models(n=3):\n+        return []\n+\n+    monkeypatch.setattr(c, \"fetch_top_models\", models)\n+    ranking, used = asyncio.run(c.rank_commits([{\n+        \"contributor\": \"alice\",\n+        \"oid\": \"sha1:\" + \"a\" * 40,\n+        \"message\": \"one contribution\",\n+        \"patch\": \"patch\",\n+    }]))\n+    assert ranking == {\"alice\": c.Decimal(\"1\")}\n+    assert used == []\n+\n+\n+def test_any_council_failure_aborts_ranking(monkeypatch):\n+    async def models(n=3):\n+        return [\"broken\"]\n+\n+    async def compare(*_args):\n+        raise RuntimeError(\"model unavailable\")\n+\n+    monkeypatch.setattr(c, \"fetch_top_models\", models)\n+    monkeypatch.setattr(c, \"llm_pairwise_compare\", compare)\n+    commits = [\n+        {\n+            \"contributor\": contributor,\n+            \"oid\": \"sha1:\" + char * 40,\n+            \"message\": contributor,\n+            \"patch\": \"patch\",\n+        }\n+        for contributor, char in [(\"alice\", \"a\"), (\"bob\", \"b\")]\n+    ]\n+    with pytest.raises(RuntimeError, match=\"council model failed\"):\n+        asyncio.run(c.rank_commits(commits))\ndiff --git a/tests/test_git_discovery_stateful.py b/tests/test_git_discovery_stateful.py\nnew file mode 100644\nindex 0000000000000000000000000000000000000000..e41041fdbc84fff441c85422c23eaa3df53b094b\n--- /dev/null\n+++ b/tests/test_git_discovery_stateful.py\n@@ -0,0 +1,161 @@\n+\"\"\"State-machine checks for discovery under changing real Git refs.\"\"\"\n+\n+from __future__ import annotations\n+\n+import os\n+import shutil\n+import subprocess\n+import tempfile\n+from pathlib import Path\n+\n+from hypothesis import settings\n+from hypothesis.stateful import (\n+    RuleBasedStateMachine,\n+    invariant,\n+    precondition,\n+    rule,\n+)\n+\n+import constitution as c\n+\n+\n+def git(repo: Path | None, *args: str, timestamp: int | None = None) -> str:\n+    command = [\"git\"]\n+    if repo is not None:\n+        command += [\"-C\", str(repo)]\n+    command += list(args)\n+    env = os.environ.copy()\n+    env.update({\n+        \"GIT_CONFIG_NOSYSTEM\": \"1\",\n+        \"GIT_AUTHOR_NAME\": \"State Machine\",\n+        \"GIT_AUTHOR_EMAIL\": \"state@example.test\",\n+        \"GIT_COMMITTER_NAME\": \"State Machine\",\n+        \"GIT_COMMITTER_EMAIL\": \"state@example.test\",\n+    })\n+    if timestamp is not None:\n+        env[\"GIT_AUTHOR_DATE\"] = f\"@{timestamp} +0000\"\n+        env[\"GIT_COMMITTER_DATE\"] = f\"@{timestamp} +0000\"\n+    result = subprocess.run(\n+        command,\n+        text=True,\n+        stdout=subprocess.PIPE,\n+        stderr=subprocess.PIPE,\n+        env=env,\n+        check=False,\n+    )\n+    if result.returncode:\n+        raise AssertionError(result.stderr)\n+    return result.stdout.strip()\n+\n+\n+class GitDiscoveryMachine(RuleBasedStateMachine):\n+    def __init__(self):\n+        super().__init__()\n+        self.root = Path(tempfile.mkdtemp(prefix=\"constitution-stateful-\"))\n+        self.remote = self.root / \"remote.git\"\n+        self.work = self.root / \"work\"\n+        git(None, \"init\", \"--bare\", str(self.remote))\n+        git(None, \"init\", \"-b\", \"main\", str(self.work))\n+        git(self.work, \"config\", \"user.name\", \"State Machine\")\n+        git(self.work, \"config\", \"user.email\", \"state@example.test\")\n+        git(self.work, \"remote\", \"add\", \"origin\", str(self.remote))\n+\n+        self.original = (\n+            c.REPOSITORIES, c.CONTRIBUTORS, c.GIT_MIRROR_DIR, c.GENESIS_MS,\n+        )\n+        c.REPOSITORIES = [{\n+            \"id\": \"state\",\n+            \"url\": str(self.remote),\n+            \"refs\": [\"refs/heads/main\"],\n+        }]\n+        c.CONTRIBUTORS = {\"state\": [\"state@example.test\"]}\n+        c.GIT_MIRROR_DIR = self.root / \"mirrors\"\n+        c.GENESIS_MS = 1_000_000\n+\n+        self.counter = 0\n+        self.events = []\n+        self.removed_tip: str | None = None\n+        self._commit_and_push()\n+\n+    def teardown(self):\n+        (\n+            c.REPOSITORIES, c.CONTRIBUTORS, c.GIT_MIRROR_DIR, c.GENESIS_MS,\n+        ) = self.original\n+        shutil.rmtree(self.root, ignore_errors=True)\n+\n+    def _commit_and_push(self):\n+        self.counter += 1\n+        path = self.work / f\"file-{self.counter}.txt\"\n+        path.write_text(f\"value {self.counter}\\n\")\n+        git(self.work, \"add\", \"--\", path.name)\n+        git(\n+            self.work,\n+            \"commit\",\n+            \"-m\",\n+            f\"commit {self.counter}\",\n+            timestamp=1000 + self.counter,\n+        )\n+        git(self.work, \"push\", \"--force\", \"origin\", \"main\")\n+\n+    @rule()\n+    def advance_branch(self):\n+        if self.removed_tip is None:\n+            self._commit_and_push()\n+\n+    @rule()\n+    def scan(self):\n+        event = c._build_discovery(\n+            len(self.events), c.GENESIS_MS + len(self.events), self.events\n+        )\n+        self.events.append(event)\n+\n+    @precondition(lambda self: self.removed_tip is None)\n+    @rule()\n+    def force_push_back(self):\n+        if self.counter < 2:\n+            return\n+        self.removed_tip = git(self.work, \"rev-parse\", \"HEAD\")\n+        git(self.work, \"reset\", \"--hard\", \"HEAD^\")\n+        git(self.work, \"push\", \"--force\", \"origin\", \"main\")\n+\n+    @precondition(lambda self: self.removed_tip is not None)\n+    @rule()\n+    def restore_force_pushed_tip(self):\n+        git(self.work, \"reset\", \"--hard\", self.removed_tip)\n+        git(self.work, \"push\", \"--force\", \"origin\", \"main\")\n+        self.removed_tip = None\n+\n+    @invariant()\n+    def observations_are_monotonic_and_unique(self):\n+        observed = [\n+            row[\"oid\"]\n+            for event in self.events\n+            for row in event.observations\n+        ]\n+        assert len(observed) == len(set(observed))\n+\n+    @invariant()\n+    def patch_classes_are_ranked_at_most_once(self):\n+        patch_ids = [\n+            commit[\"patch_identity\"]\n+            for event in self.events\n+            for commit in event.commits\n+        ]\n+        assert len(patch_ids) == len(set(patch_ids))\n+\n+    @invariant()\n+    def replay_matches_accumulated_state(self):\n+        seen_oids, seen_patches = c._replayed_discovery_state(self.events)\n+        expected_oids = {\n+            row[\"oid\"] for event in self.events for row in event.observations\n+        }\n+        assert seen_oids == expected_oids\n+        assert all(oid in seen_oids for oid in seen_patches.values())\n+\n+\n+TestGitDiscoveryStateMachine = GitDiscoveryMachine.TestCase\n+TestGitDiscoveryStateMachine.settings = settings(\n+    max_examples=8,\n+    stateful_step_count=12,\n+    deadline=None,\n+)\ndiff --git a/uv.lock b/uv.lock\nindex 9cf3e067adf2f39d9eb160631c3a4b3c237ec26a..bab8e115a73870fd236bd46a1bf773b44fb5d3ee 100644\n--- a/uv.lock\n+++ b/uv.lock\n@@ -33,6 +33,19 @@ wheels = [\n     { url = \"https://files.pythonhosted.org/packages/da/42/e921fccf5015463e32a3cf6ee7f980a6ed0f395ceeaa45060b61d86486c2/anyio-4.13.0-py3-none-any.whl\", hash = \"sha256:08b310f9e24a9594186fd75b4f73f4a4152069e3853f1ed8bfbf58369f4ad708\", size = 114353, upload-time = \"2026-03-24T12:59:08.246Z\" },\n ]\n \n+[[package]]\n+name = \"authlib\"\n+version = \"1.7.2\"\n+source = { registry = \"https://pypi.org/simple\" }\n+dependencies = [\n+    { name = \"cryptography\" },\n+    { name = \"joserfc\" },\n+]\n+sdist = { url = \"https://files.pythonhosted.org/packages/36/98/7d93f30d029643c0275dbc0bd6d5a6f670661ee6c9a94d93af7ab4887600/authlib-1.7.2.tar.gz\", hash = \"sha256:2cea25fefcd4e7173bdf1372c0afc265c8034b23a8cd5dcb6a9164b826c64231\", size = 176511, upload-time = \"2026-05-06T08:10:23.116Z\" }\n+wheels = [\n+    { url = \"https://files.pythonhosted.org/packages/fb/95/adcb68e20c34162e9135f370d6e31737719c2b6f94bc953fe7ed1f10fe21/authlib-1.7.2-py2.py3-none-any.whl\", hash = \"sha256:3e1faedc9d87e7d56a164eca3ccb6ace0d61b94abe83e92242f8dc8bba9b4a9f\", size = 259548, upload-time = \"2026-05-06T08:10:21.436Z\" },\n+]\n+\n [[package]]\n name = \"certifi\"\n version = \"2026.2.25\"\n@@ -42,6 +55,104 @@ wheels = [\n     { url = \"https://files.pythonhosted.org/packages/9a/3c/c17fb3ca2d9c3acff52e30b309f538586f9f5b9c9cf454f3845fc9af4881/certifi-2026.2.25-py3-none-any.whl\", hash = \"sha256:027692e4402ad994f1c42e52a4997a9763c646b73e4096e4d5d6db8af1d6f0fa\", size = 153684, upload-time = \"2026-02-25T02:54:15.766Z\" },\n ]\n \n+[[package]]\n+name = \"cffi\"\n+version = \"2.1.0\"\n+source = { registry = \"https://pypi.org/simple\" }\n+dependencies = [\n+    { name = \"pycparser\", marker = \"implementation_name != 'PyPy'\" },\n+]\n+sdist = { url = \"https://files.pythonhosted.org/packages/57/5f/ff100cae70ebe9d8df1c01a00e510e45d9adb5c1fdda84791b199141de97/cffi-2.1.0.tar.gz\", hash = \"sha256:efc1cdd798b1aaf39b4610bba7aad28c9bea9b910f25c784ccf9ec1fa719d1f9\", size = 531036, upload-time = \"2026-07-06T21:34:30.382Z\" }\n+wheels = [\n+    { url = \"https://files.pythonhosted.org/packages/d3/67/85c89a59ba36a671e79638f44d466749f08179266a57e4f2ffdf92174072/cffi-2.1.0-cp311-cp311-macosx_10_15_x86_64.whl\", hash = \"sha256:02cb7ff33ded4f1532476731f89ede53e2e488a8e6205515a82144246ffa7dcc\", size = 183845, upload-time = \"2026-07-06T21:32:26.32Z\" },\n+    { url = \"https://files.pythonhosted.org/packages/ea/dd/e3b0baa2d3d6a857ac72b7efbf18e32e487c9cdafcc13049ad765495b15e/cffi-2.1.0-cp311-cp311-macosx_11_0_arm64.whl\", hash = \"sha256:f5bce581e6b8c235e566a14768a943b172ada3ed73537bb0c0be1edee312d4e7\", size = 184186, upload-time = \"2026-07-06T21:32:28.025Z\" },\n+    { url = \"https://files.pythonhosted.org/packages/65/68/9f3ef890cf3c6ab97bd531c5677f67613d302165d16f8142b2811782a614/cffi-2.1.0-cp311-cp311-manylinux1_i686.manylinux2014_i686.manylinux_2_17_i686.manylinux_2_5_i686.whl\", hash = \"sha256:30b65779d598c370374fefabf138d456fd6f3216bfa7bedfab1ba82025b0cd93\", size = 211892, upload-time = \"2026-07-06T21:32:29.565Z\" },\n+    { url = \"https://files.pythonhosted.org/packages/22/d7/1a74539db16d8bfd839ff1515948948efbb162e574650fd3d846896eea95/cffi-2.1.0-cp311-cp311-manylinux2014_aarch64.manylinux_2_17_aarch64.whl\", hash = \"sha256:88023dfe18799507b73f1dbb0d14326a17465de1bc9c9c7655c22845e9ddc3a2\", size = 218793, upload-time = \"2026-07-06T21:32:30.951Z\" },\n+    { url = \"https://files.pythonhosted.org/packages/ec/d1/9a5b7169499e8e8d8e636de70b97ac7c9447104d2ff1a2cd94790cea5162/cffi-2.1.0-cp311-cp311-manylinux2014_ppc64le.manylinux_2_17_ppc64le.whl\", hash = \"sha256:0a96b74cda968eebbad56d973efe5098974f0a9fb323865bf99ea1fd24e3e64c\", size = 205737, upload-time = \"2026-07-06T21:32:32.216Z\" },\n+    { url = \"https://files.pythonhosted.org/packages/ba/b0/e131a9c41f10607926278453d9596163594fe1c4ebc46efe3b5e5b34eb84/cffi-2.1.0-cp311-cp311-manylinux2014_s390x.manylinux_2_17_s390x.whl\", hash = \"sha256:a5781494d4d400a3f47f8f1da94b324f6e6b440a53387774002890a2a2f4b50f\", size = 204909, upload-time = \"2026-07-06T21:32:33.655Z\" },\n+    { url = \"https://files.pythonhosted.org/packages/fb/d2/4398416cd699b35167947c6e22aca52c47e69ad5695073c9f1f2c52e04aa/cffi-2.1.0-cp311-cp311-manylinux2014_x86_64.manylinux_2_17_x86_64.whl\", hash = \"sha256:aa7a1b53a2a4452ada2d1b5dade9960b2522f1e61293a811a077439e39029565\", size = 217883, upload-time = \"2026-07-06T21:32:35.173Z\" },\n+    { url = \"https://files.pythonhosted.org/packages/a2/a5/d4fe77b589e5e82d43ebc809bf2e6474afe8e48e32ea050b9357645b6471/cffi-2.1.0-cp311-cp311-musllinux_1_2_aarch64.whl\", hash = \"sha256:9d8272c0e483b024e1b9ad029821470ed8ec65631dbd90217469da0e7cd89f1c\", size = 221251, upload-time = \"2026-07-06T21:32:36.527Z\" },\n+    { url = \"https://files.pythonhosted.org/packages/22/f0/a2fc43084c0433caf7f461bccc013e28f848d04ee1c5ed7fce71423cf4d9/cffi-2.1.0-cp311-cp311-musllinux_1_2_i686.whl\", hash = \"sha256:7762faa47e8ff7eb80bd261d9a7d8eea2d8baa69de5e95b70c1f338bbe712f02\", size = 214250, upload-time = \"2026-07-06T21:32:37.852Z\" },\n+    { url = \"https://files.pythonhosted.org/packages/04/8c/b925975448cf20634a9fbd5efceb807219db452653648d2897c0989cab2d/cffi-2.1.0-cp311-cp311-musllinux_1_2_x86_64.whl\", hash = \"sha256:89095c1968b4ba8285840e131bf2891b09ae137fe2146905acae0354fbce1b5e\", size = 219441, upload-time = \"2026-07-06T21:32:39.146Z\" },\n+    { url = \"https://files.pythonhosted.org/packages/eb/da/5c4918a2d61d86fa927d716cb3d8e4626ef8dc8f605a599d32f33897f59a/cffi-2.1.0-cp311-cp311-win32.whl\", hash = \"sha256:64c753a0f87a256020004f37a1c8c02c480e725f910f0b2a0f3f07debd1b2479\", size = 174496, upload-time = \"2026-07-06T21:32:40.467Z\" },\n+    { url = \"https://files.pythonhosted.org/packages/f9/c8/6c2de1d55cf35ef8b92885d5ef280790f0fb9634d87ea1cc315176aecd61/cffi-2.1.0-cp311-cp311-win_amd64.whl\", hash = \"sha256:4f26194e3d95e06501b942642855aed4f953d55e95d7d01b7c4483db3ecff458\", size = 185113, upload-time = \"2026-07-06T21:32:41.761Z\" },\n+    { url = \"https://files.pythonhosted.org/packages/9e/4e/e8d7cb5783f1841a3c8fb3a7735838d7484d08ec08c9f984b14cac1ac0e9/cffi-2.1.0-cp311-cp311-win_arm64.whl\", hash = \"sha256:35aaea0c7ee0e58a5cd8c2fd1a48fdf7ece0d2699b7ecdda08194e9ce5dd9b3d\", size = 179927, upload-time = \"2026-07-06T21:32:42.961Z\" },\n+    { url = \"https://files.pythonhosted.org/packages/1e/85/990925db5df586ec90beb97529c853497e7f85ba0234830447faf41c3057/cffi-2.1.0-cp312-cp312-macosx_10_15_x86_64.whl\", hash = \"sha256:df2b82571a1b30f58a87bf4e5a9e78d2b1eff6c6ce8fd3aa3757221f93f0863f\", size = 184829, upload-time = \"2026-07-06T21:32:44.324Z\" },\n+    { url = \"https://files.pythonhosted.org/packages/4b/92/e7bb136ad6b5352603732cf907ef862ca103f20f2031c1735a46300c20c9/cffi-2.1.0-cp312-cp312-macosx_11_0_arm64.whl\", hash = \"sha256:78474632761faa0fb96f30b1c928c84ebcf68713cbb80d15bab09dfe61640fde\", size = 184728, upload-time = \"2026-07-06T21:32:45.683Z\" },\n+    { url = \"https://files.pythonhosted.org/packages/c3/c0/d1ec30ffb370f748f2fb54425972bfef9871e0132e82fb589c46b6676049/cffi-2.1.0-cp312-cp312-manylinux1_i686.manylinux2014_i686.manylinux_2_17_i686.manylinux_2_5_i686.whl\", hash = \"sha256:5972433ad71a9e46516584ef60a0fda12d9dc459938d1539c3ddecf9bdc1368d\", size = 214815, upload-time = \"2026-07-06T21:32:48.557Z\" },\n+    { url = \"https://files.pythonhosted.org/packages/1b/dc/5620cf930688be01f2d673804291de757a934c90b946dbdc3d84130c2ea4/cffi-2.1.0-cp312-cp312-manylinux2014_aarch64.manylinux_2_17_aarch64.whl\", hash = \"sha256:b6422532152adf4e59b110cb2808cee7a033800952f5c036b4af047ee43199e7\", size = 222429, upload-time = \"2026-07-06T21:32:49.848Z\" },\n+    { url = \"https://files.pythonhosted.org/packages/4b/a4/77b53abbf7a1e0beb9637edbef2a94d15f9c822f591e85d439ffd91519a6/cffi-2.1.0-cp312-cp312-manylinux2014_ppc64le.manylinux_2_17_ppc64le.whl\", hash = \"sha256:46b1c8db8f6122420f32d02fffb924c2fe9bc772d228c7c711748fff56aabb2b\", size = 210315, upload-time = \"2026-07-06T21:32:51.221Z\" },\n+    { url = \"https://files.pythonhosted.org/packages/58/0c/f528df19cc94b675087324d4760d9e6d5bfae97d6217aa4fac43de4f5fcc/cffi-2.1.0-cp312-cp312-manylinux2014_s390x.manylinux_2_17_s390x.whl\", hash = \"sha256:d9fafc5aa2e2a39aaf7f8cc0c1f044a9b07fca12e558dca53a3cc5c654ad67a7\", size = 208859, upload-time = \"2026-07-06T21:32:52.512Z\" },\n+    { url = \"https://files.pythonhosted.org/packages/62/f2/c9522a81c32132799a1972c39f5c5f8b4c8b9f00488a23feaa6c06f07741/cffi-2.1.0-cp312-cp312-manylinux2014_x86_64.manylinux_2_17_x86_64.whl\", hash = \"sha256:1e9f50d192a3e525b15a75ab5114e442d83d657b7ec29182a991bc9a88fd3a66\", size = 221844, upload-time = \"2026-07-06T21:32:53.704Z\" },\n+    { url = \"https://files.pythonhosted.org/packages/6e/28/bd53988b9833e8f8ad539d26f4c07a6b3f6bcb1e9e02e7ca038250b3428d/cffi-2.1.0-cp312-cp312-musllinux_1_2_aarch64.whl\", hash = \"sha256:98fff996e983a36d3aa2eca83af40c5821202e7e6f32d13ae94e3d2286f10cfe\", size = 225287, upload-time = \"2026-07-06T21:32:54.907Z\" },\n+    { url = \"https://files.pythonhosted.org/packages/79/99/0d0fd37f055224085f42bbb2c022d002e17dde4a97972822327b07d84101/cffi-2.1.0-cp312-cp312-musllinux_1_2_x86_64.whl\", hash = \"sha256:379de10ce1ba048b1448599d1b37b24caee16309d1ac98d3982fc997f768700b\", size = 223681, upload-time = \"2026-07-06T21:32:56.329Z\" },\n+    { url = \"https://files.pythonhosted.org/packages/b0/80/c138990aa2a70b1a269f6e06348729836d733d6f970867943f61d367f8cc/cffi-2.1.0-cp312-cp312-win32.whl\", hash = \"sha256:9b8f0f26ca4e7513c534d351eca551947d053fac438f2a04ac96d882909b0d3a\", size = 175269, upload-time = \"2026-07-06T21:32:57.777Z\" },\n+    { url = \"https://files.pythonhosted.org/packages/a8/eb/f636456ff21a83fc13c032b58cc5dde061691546ac79efa284b2989b7982/cffi-2.1.0-cp312-cp312-win_amd64.whl\", hash = \"sha256:c97f080ea627e2863524c5af3836e2270b5f5dfff1f104392b959f8df0c5d384\", size = 185881, upload-time = \"2026-07-06T21:32:59.253Z\" },\n+    { url = \"https://files.pythonhosted.org/packages/dd/2c/400ea43e721727dca8a65c4521390e9196757caba4a45643acb2b63271b8/cffi-2.1.0-cp312-cp312-win_arm64.whl\", hash = \"sha256:6d194185eabd279f1c05ebe3504265ddfc5ad2b58d0714f7db9f01da592e9eb6\", size = 180088, upload-time = \"2026-07-06T21:33:02.278Z\" },\n+    { url = \"https://files.pythonhosted.org/packages/96/88/a996879e2eeccb815f6e3a5967b12a308257412acec882039d386bd2aa7b/cffi-2.1.0-cp313-cp313-ios_13_0_arm64_iphoneos.whl\", hash = \"sha256:10537b1df4967ca26d21e5072d7d54188354483b91dc75058968d3f0cf13fbda\", size = 194331, upload-time = \"2026-07-06T21:33:03.697Z\" },\n+    { url = \"https://files.pythonhosted.org/packages/58/85/7ae00d5c8dd6266f4e944c3db630f3c5c9a98b61d469c714d848b1d8138a/cffi-2.1.0-cp313-cp313-ios_13_0_arm64_iphonesimulator.whl\", hash = \"sha256:a95b05f9baf29b91171b3a8bd2020b028835243e7b0ff6bb23e2a3c228518b1b\", size = 196966, upload-time = \"2026-07-06T21:33:05.353Z\" },\n+    { url = \"https://files.pythonhosted.org/packages/8c/e9/45c3a76ad8d43ad9261f4c95436da61128d3ca545d72b9612c0ab5be0b1c/cffi-2.1.0-cp313-cp313-macosx_10_15_x86_64.whl\", hash = \"sha256:15faec4adfff450819f3aee0e2e02c812de6edb88203aa58807955db2003472a\", size = 184795, upload-time = \"2026-07-06T21:33:06.699Z\" },\n+    { url = \"https://files.pythonhosted.org/packages/84/4c/82f132cb4418ee6d953d982b19191e87e2a6372c8a4ce36e50b69d6ade4a/cffi-2.1.0-cp313-cp313-macosx_11_0_arm64.whl\", hash = \"sha256:716ff8ec22f20b4d988b12884086bcef0fc99737043e503f7a3935a6be99b1ea\", size = 184746, upload-time = \"2026-07-06T21:33:08.071Z\" },\n+    { url = \"https://files.pythonhosted.org/packages/a0/1c/4ed5a0e5bdca6cbc275556de3328dd1b76fd0c11cc13c88fe66d1d8715f2/cffi-2.1.0-cp313-cp313-manylinux1_i686.manylinux2014_i686.manylinux_2_17_i686.manylinux_2_5_i686.whl\", hash = \"sha256:63960549e4f8dc41e31accb97b975abaecfc44c03e396c093a6436763c2ea7db\", size = 214747, upload-time = \"2026-07-06T21:33:09.671Z\" },\n+    { url = \"https://files.pythonhosted.org/packages/3a/a6/e879bb68cc23a2bc9ba8f4b7d8019f0c2694bad2ab6c4a3701d429439f58/cffi-2.1.0-cp313-cp313-manylinux2014_aarch64.manylinux_2_17_aarch64.whl\", hash = \"sha256:ff067a8d8d880e7809e4ac88eb009bb848870115317b306666502ccad30b147f\", size = 222392, upload-time = \"2026-07-06T21:33:10.896Z\" },\n+    { url = \"https://files.pythonhosted.org/packages/88/f6/01890cfd63c08f8eb96a8319b0443690197d240a8bd6346048cf7bde9190/cffi-2.1.0-cp313-cp313-manylinux2014_ppc64le.manylinux_2_17_ppc64le.whl\", hash = \"sha256:3b926723c13eba9f81d2ef3820d63aeceec3b2d4639906047bf675cb8a7a500d\", size = 210285, upload-time = \"2026-07-06T21:33:12.251Z\" },\n+    { url = \"https://files.pythonhosted.org/packages/a6/cf/2b684132056f438567b61e19d690dd31cd0921ace051e0a458be6074369e/cffi-2.1.0-cp313-cp313-manylinux2014_s390x.manylinux_2_17_s390x.whl\", hash = \"sha256:47ff3a8bfd8cb9da1af7524b965127095055654c177fcfc7578debcb015eecd0\", size = 208801, upload-time = \"2026-07-06T21:33:13.617Z\" },\n+    { url = \"https://files.pythonhosted.org/packages/6f/08/f2e7d62c460faae0926f2d6e423694aa409ced3bc1fe2927a0a6e5f05416/cffi-2.1.0-cp313-cp313-manylinux2014_x86_64.manylinux_2_17_x86_64.whl\", hash = \"sha256:799416bae98336e400981ff6e532d67d5c709cfb30afb79865a1315f94b0e224\", size = 221808, upload-time = \"2026-07-06T21:33:15.466Z\" },\n+    { url = \"https://files.pythonhosted.org/packages/38/37/04f54b8e63a02f3d908332c9effbf8c366167c6f733ed8a3d4f79b7e2a1e/cffi-2.1.0-cp313-cp313-musllinux_1_2_aarch64.whl\", hash = \"sha256:961be50688f7fba2fa65f63712d3b9b341a22311f5253460ce933f52f0de1c8c\", size = 225241, upload-time = \"2026-07-06T21:33:16.869Z\" },\n+    { url = \"https://files.pythonhosted.org/packages/a9/d6/c72eecca433cd3e681c65ed313ab4835d9d4a379704d0f628a6a05f51c2e/cffi-2.1.0-cp313-cp313-musllinux_1_2_x86_64.whl\", hash = \"sha256:bf5c6cf48238b0eb4c086978c492ad1cbc22373fc5b2d7353b3a598ce6db887a\", size = 223588, upload-time = \"2026-07-06T21:33:18.239Z\" },\n+    { url = \"https://files.pythonhosted.org/packages/c6/4b/e706f67279140f92939da3475ad610df18bfd52d50f14953a8e5fede71d5/cffi-2.1.0-cp313-cp313-win32.whl\", hash = \"sha256:db3eb7d46527159a878ec3460e9d40615bc25ba337d477db681aea6e4f05c5d2\", size = 175248, upload-time = \"2026-07-06T21:33:19.799Z\" },\n+    { url = \"https://files.pythonhosted.org/packages/5a/47/59eb7975cb0e4ef0afa764ea945b29a5bb4537a9f771cb7d6c8a5dd74c95/cffi-2.1.0-cp313-cp313-win_amd64.whl\", hash = \"sha256:8e74a6135550c4748af665b1b1118b6aab33b1fc6a16f9aff630af107c3b4512\", size = 185717, upload-time = \"2026-07-06T21:33:21.47Z\" },\n+    { url = \"https://files.pythonhosted.org/packages/5a/af/34fee85c48f8d94efc8597bc09470c9dd274c145f1c12e0fbc6ab6d38d74/cffi-2.1.0-cp313-cp313-win_arm64.whl\", hash = \"sha256:2282cd5e38aa8accd03e99d1256af8411c84cdbee6a89d841b563fdbd1f3e50f\", size = 180114, upload-time = \"2026-07-06T21:33:22.515Z\" },\n+    { url = \"https://files.pythonhosted.org/packages/d8/f0/81478e482afa03f6d18dc8f2afb5edc45b3080853b634b5ed91961be0998/cffi-2.1.0-cp314-cp314-ios_13_0_arm64_iphoneos.whl\", hash = \"sha256:d2117334c3af3bdcb9a88522b844a2bdb5efdc4f71c6c822df55486ae1c3347a\", size = 194142, upload-time = \"2026-07-06T21:33:23.657Z\" },\n+    { url = \"https://files.pythonhosted.org/packages/7d/95/8de304305cd9204974b0ca051b86d307cafca13aa575a0ef1b44d92c0d8c/cffi-2.1.0-cp314-cp314-ios_13_0_arm64_iphonesimulator.whl\", hash = \"sha256:702c436735fbe99d59ada02a1f65cfc0d31c0ee8b7290912f8fbc5cd1e4b16c3\", size = 196819, upload-time = \"2026-07-06T21:33:25.007Z\" },\n+    { url = \"https://files.pythonhosted.org/packages/20/71/7c8372d30e42415602ed9f268f7cfd66f1b855fed881ecd168bcb45dbc0b/cffi-2.1.0-cp314-cp314-macosx_10_15_x86_64.whl\", hash = \"sha256:1ff3456eab0d889592d1936d6125bbfbc7ae4d3354a700f8bd80450a66445d4d\", size = 184965, upload-time = \"2026-07-06T21:33:26.605Z\" },\n+    { url = \"https://files.pythonhosted.org/packages/d6/5c/584e626835f0375c928176c04137c96927165cb8733cdb3150ec04e5ee5e/cffi-2.1.0-cp314-cp314-macosx_11_0_arm64.whl\", hash = \"sha256:c4165821e131d6d4ca444347c2b694e2311bcfa3fe5a861cc72968f28867beac\", size = 184952, upload-time = \"2026-07-06T21:33:27.823Z\" },\n+    { url = \"https://files.pythonhosted.org/packages/2e/d2/065fcae1c73979fac8e054462478d0ff8a29c40cdc2ed7ea5676a061df53/cffi-2.1.0-cp314-cp314-manylinux2014_aarch64.manylinux_2_17_aarch64.whl\", hash = \"sha256:276f20fffd7b396e12516ba8edf9509210ac248cbbc5acbc39cd512f9f59ebe6\", size = 222353, upload-time = \"2026-07-06T21:33:29.178Z\" },\n+    { url = \"https://files.pythonhosted.org/packages/ed/a5/e8bbb1ce5b3ac2f53ad6a10bde44318a5a8d99d4f4a000d44a6e39aeb3e4/cffi-2.1.0-cp314-cp314-manylinux2014_ppc64le.manylinux_2_17_ppc64le.whl\", hash = \"sha256:7d5980a3433d4b71a5e120f9dd551403d7824e31e2e67124fe2769c404c06913\", size = 210051, upload-time = \"2026-07-06T21:33:30.534Z\" },\n+    { url = \"https://files.pythonhosted.org/packages/28/ed/c127d3ac36e899c965e3361357c3befacd6578c03f40125183e41c3b219e/cffi-2.1.0-cp314-cp314-manylinux2014_s390x.manylinux_2_17_s390x.whl\", hash = \"sha256:6ca4919c6e4f89aa99c42510b42cf54596892c00b3f9077f6bdd1505e24b9c8d\", size = 208630, upload-time = \"2026-07-06T21:33:31.753Z\" },\n+    { url = \"https://files.pythonhosted.org/packages/cc/d7/97d3136f81db489ec8d1d67748c110d6c994268fd7528014aa9f2b085e4e/cffi-2.1.0-cp314-cp314-manylinux2014_x86_64.manylinux_2_17_x86_64.whl\", hash = \"sha256:d53d10f7da99ae46f7373b9150393e9c5eab9b224909982b43832668de4779f5\", size = 221593, upload-time = \"2026-07-06T21:33:33.044Z\" },\n+    { url = \"https://files.pythonhosted.org/packages/d3/27/93195977168ee63aed233a1a0993a2178798654d1f4bddcdd321d6fd3b21/cffi-2.1.0-cp314-cp314-musllinux_1_2_aarch64.whl\", hash = \"sha256:c351efb95e832a853a29361675f33a7ce53de1a109cd73fd47af0712213aa4ce\", size = 225146, upload-time = \"2026-07-06T21:33:34.224Z\" },\n+    { url = \"https://files.pythonhosted.org/packages/b3/c1/6dbd291ee2ae5a50a034aa057207081f545923bbf15dad4511e985aafff5/cffi-2.1.0-cp314-cp314-musllinux_1_2_x86_64.whl\", hash = \"sha256:dbf7c7a88e2bac086f06d14577332760bdeecc42bdec8ac4077f6260557d9326\", size = 223240, upload-time = \"2026-07-06T21:33:35.57Z\" },\n+    { url = \"https://files.pythonhosted.org/packages/0f/6f/ade5ce9863a57992a6ea3d0d10d7e29b8749fc127204b3d493d667b2815f/cffi-2.1.0-cp314-cp314-win32.whl\", hash = \"sha256:1854b724d00f6654c742097d5387569021be12d3a0f770eae1df8f8acfcc6acd\", size = 177723, upload-time = \"2026-07-06T21:33:51.626Z\" },\n+    { url = \"https://files.pythonhosted.org/packages/41/de/92b9eeed4ae4a21d6fd9b2a2c8505cbed573299902ea73981cc13f7ff62c/cffi-2.1.0-cp314-cp314-win_amd64.whl\", hash = \"sha256:1b96bfe2c4bd825681b7d311ad6d9b7280a091f43e8f63da5729638083cd3bfb\", size = 187937, upload-time = \"2026-07-06T21:33:53.403Z\" },\n+    { url = \"https://files.pythonhosted.org/packages/2e/1a/cc6ae6c2913a03aab8898eee57963cf1035b8df5872ed8b9115fcc7e2be8/cffi-2.1.0-cp314-cp314-win_arm64.whl\", hash = \"sha256:7d28dff1db6764108bc30788d85d61c876beff416d9a49cb9dd7c5a9f34f5804\", size = 183001, upload-time = \"2026-07-06T21:33:54.74Z\" },\n+    { url = \"https://files.pythonhosted.org/packages/14/f0/134c00ce0779ec86dea2aa1aac69339c2741a8045072676763512363a2ea/cffi-2.1.0-cp314-cp314t-macosx_10_15_x86_64.whl\", hash = \"sha256:7ea6b3e2c4250ff1de21c630fe72d0f63eb95c2c32ffbf64a358cf4a8836d714\", size = 188538, upload-time = \"2026-07-06T21:33:36.792Z\" },\n+    { url = \"https://files.pythonhosted.org/packages/50/d8/3b86aba791cb610d24e8a3e1b2cd529e71fa15096b04e4d4e360049d4a4c/cffi-2.1.0-cp314-cp314t-macosx_11_0_arm64.whl\", hash = \"sha256:6af371f3767faeffc6ac1ef57cdfd25844403e9d3f476c5537caee499de96376\", size = 188230, upload-time = \"2026-07-06T21:33:38.011Z\" },\n+    { url = \"https://files.pythonhosted.org/packages/14/d0/117dcd9209255ad8571fbc8c92ef32593a1d294dcec91ddc4e4db50606f2/cffi-2.1.0-cp314-cp314t-manylinux2014_aarch64.manylinux_2_17_aarch64.whl\", hash = \"sha256:eb4e8997a49aa2c08a3e43c9045d224448b8941d88e7ac163c7d383e560cbf98\", size = 223899, upload-time = \"2026-07-06T21:33:39.514Z\" },\n+    { url = \"https://files.pythonhosted.org/packages/b6/3d/f20f8b886b254e3ad10e15cd4186d3aed49f3e6a35ab37aab9f8f25f7c03/cffi-2.1.0-cp314-cp314t-manylinux2014_ppc64le.manylinux_2_17_ppc64le.whl\", hash = \"sha256:bf01d8c84cbea96b944c73b22182e6c7c432b3475632b8111dbfdc95ddad6e13\", size = 211652, upload-time = \"2026-07-06T21:33:40.851Z\" },\n+    { url = \"https://files.pythonhosted.org/packages/28/3b/fad54de07260b93ddeef4b96d0131d57ea900675df1d410ae1deee52d7a6/cffi-2.1.0-cp314-cp314t-manylinux2014_s390x.manylinux_2_17_s390x.whl\", hash = \"sha256:33eb1ad83ebe8f313e0df035c406227d55a79456704a863fad9842136af5ad7d\", size = 210755, upload-time = \"2026-07-06T21:33:42.183Z\" },\n+    { url = \"https://files.pythonhosted.org/packages/cc/82/3d5c705acb7abbba9bbd7d79b8e62e0f25b6120eb7ae6ac49f1b721722fe/cffi-2.1.0-cp314-cp314t-manylinux2014_x86_64.manylinux_2_17_x86_64.whl\", hash = \"sha256:ac0f1a2d0cfa7eea3f2aaf006ab6e70e8feeb16b75d65b7e5939982ca2f11056\", size = 223933, upload-time = \"2026-07-06T21:33:43.603Z\" },\n+    { url = \"https://files.pythonhosted.org/packages/6c/d0/47e338384ab6b1004241002fa616301020cea4fc95f283506565d252f276/cffi-2.1.0-cp314-cp314t-musllinux_1_2_aarch64.whl\", hash = \"sha256:c16914df9fb7f500e440e6875fa23ff5e0b31db01fa9c06af98d59a91f0dc2e4\", size = 226749, upload-time = \"2026-07-06T21:33:45.046Z\" },\n+    { url = \"https://files.pythonhosted.org/packages/70/25/65bd5b58ea4bfdfc15cde02cb5365f89ef8ab8b2adfb8fe5c4bd4233382f/cffi-2.1.0-cp314-cp314t-musllinux_1_2_x86_64.whl\", hash = \"sha256:5ecbd0499275d57506d397eebe1981cee87b47fcd9ef5c22cab7ed7644a39a94\", size = 225703, upload-time = \"2026-07-06T21:33:46.374Z\" },\n+    { url = \"https://files.pythonhosted.org/packages/dc/78/aa01ac599a8a4322533d45a1f9bc93b338276d2d59dabbe7c6d92a775c81/cffi-2.1.0-cp314-cp314t-win32.whl\", hash = \"sha256:7d034dcffa09e9a46c93fa3a3be402096cb5354ac6e41ab8e5cc9cd8b642ad76\", size = 182857, upload-time = \"2026-07-06T21:33:47.696Z\" },\n+    { url = \"https://files.pythonhosted.org/packages/b9/26/d00496b22de4d4228f32dde94ad996f350c8aad676d63bcca0743c8dea4d/cffi-2.1.0-cp314-cp314t-win_amd64.whl\", hash = \"sha256:0582a58f3051372229ca8e7f5f589f9e5632678208d8636fea3676711fdf7fe5\", size = 194065, upload-time = \"2026-07-06T21:33:48.953Z\" },\n+    { url = \"https://files.pythonhosted.org/packages/d5/dd/0c7dbf815a579ff005008a2d815a55d6bb047c349eef536d9dc53d3f0a8d/cffi-2.1.0-cp314-cp314t-win_arm64.whl\", hash = \"sha256:510aeeeac94811b138077451da1fb18b308a5feab47dd2b603af55804155e1c8\", size = 186404, upload-time = \"2026-07-06T21:33:50.309Z\" },\n+    { url = \"https://files.pythonhosted.org/packages/55/c7/8c8c50cb11c6750051daf12164098a9a6f027ac4356967fd4d800a07f242/cffi-2.1.0-cp315-cp315-ios_13_0_arm64_iphoneos.whl\", hash = \"sha256:2e9dabb9abcb7ad15938c7196ad5c1718a4e6d33cc79b4c0209bdb64c4a54a5c\", size = 194121, upload-time = \"2026-07-06T21:33:56.109Z\" },\n+    { url = \"https://files.pythonhosted.org/packages/99/e2/67680bf19a6b60d2bb7ff83baefa2a4c3d2d7dc0f3277034b802e1fc504c/cffi-2.1.0-cp315-cp315-ios_13_0_arm64_iphonesimulator.whl\", hash = \"sha256:37f525a7e7e50c017fdebe58b787be310ad59357ae43a053943a6e1a6c526001\", size = 196820, upload-time = \"2026-07-06T21:33:57.288Z\" },\n+    { url = \"https://files.pythonhosted.org/packages/ed/da/4bbe583a3b3a5c8c60892124fe17f3fa3656523faf0d3484eae90f091853/cffi-2.1.0-cp315-cp315-macosx_10_15_x86_64.whl\", hash = \"sha256:95f2954c2c9473d892eca6e0409f3568b37ab62a8eedb122461f73cc273476e3\", size = 184936, upload-time = \"2026-07-06T21:33:58.765Z\" },\n+    { url = \"https://files.pythonhosted.org/packages/e5/4b/1f4c36ab273980d7aa75bb126ea4f8971f24a96108acad3a0a084028c57b/cffi-2.1.0-cp315-cp315-macosx_11_0_arm64.whl\", hash = \"sha256:cdf2448aab5f661c9315308ec8b93f4e8a1a67a3c733f8631067a2b67d5913dc\", size = 185045, upload-time = \"2026-07-06T21:34:00.085Z\" },\n+    { url = \"https://files.pythonhosted.org/packages/ef/c3/ad299dc38f3583f8d916b299f028af418a9ec98bc695fcbebeae7420691c/cffi-2.1.0-cp315-cp315-manylinux2014_aarch64.manylinux_2_17_aarch64.whl\", hash = \"sha256:90bec57cf82089383bd06a605b3eb8daebf7e5a668520beaf6e327a83a947699\", size = 222342, upload-time = \"2026-07-06T21:34:01.814Z\" },\n+    { url = \"https://files.pythonhosted.org/packages/eb/d8/df4543cc087245044ed02ef3ad8e0a26619d0075ac7a77a12dc81177851b/cffi-2.1.0-cp315-cp315-manylinux2014_ppc64le.manylinux_2_17_ppc64le.whl\", hash = \"sha256:6274dcb2d15cef48daa73ed1be5a40d501d74dccd0cd6db364776d12cb6ba022\", size = 210073, upload-time = \"2026-07-06T21:34:03.255Z\" },\n+    { url = \"https://files.pythonhosted.org/packages/2c/0e/fac738d73728c6cea2a88a2883dca54892496cbba88a1dc1f2909cb8a6f5/cffi-2.1.0-cp315-cp315-manylinux2014_s390x.manylinux_2_17_s390x.whl\", hash = \"sha256:2b71d409cccee78310ab5dec549aed052aaea483346e282c7b02362596e01bb0\", size = 208551, upload-time = \"2026-07-06T21:34:04.433Z\" },\n+    { url = \"https://files.pythonhosted.org/packages/e6/3f/0b04a700dd64f465c93020253a793a82c9b4dff9961f48facd0df945d9b8/cffi-2.1.0-cp315-cp315-manylinux2014_x86_64.manylinux_2_17_x86_64.whl\", hash = \"sha256:7d3538f9c0e50670f4deb93dbb696576e60590369cae2faf7de681e597a8a1f1\", size = 221649, upload-time = \"2026-07-06T21:34:06.157Z\" },\n+    { url = \"https://files.pythonhosted.org/packages/5d/7c/b7379a5704c79eda57ce075869ba70a0368d1c850f803b3c0d078d39dcaf/cffi-2.1.0-cp315-cp315-musllinux_1_2_aarch64.whl\", hash = \"sha256:8f9ec95b8a043d3dfbc74d9abc6f7baf524dd27a8dc160b0a32ff9cdab650c28\", size = 225203, upload-time = \"2026-07-06T21:34:07.489Z\" },\n+    { url = \"https://files.pythonhosted.org/packages/5a/02/d5e6c43ea85c41bda2a184a3418f195fe7cf602967a8d2b94e085b83deef/cffi-2.1.0-cp315-cp315-musllinux_1_2_x86_64.whl\", hash = \"sha256:af5e2915d41fe6c961694d7bfdc8562942638200f3ce2765dfb8b745cf997629\", size = 223263, upload-time = \"2026-07-06T21:34:08.712Z\" },\n+    { url = \"https://files.pythonhosted.org/packages/2c/d8/772b8259bf75749adffb1c546828978381fb516f60cf701f6c83daf60c85/cffi-2.1.0-cp315-cp315-win32.whl\", hash = \"sha256:0a42c688d19fca6e095a53c6a6e2295a5b050a8b289f109adab02a9e61a25de6\", size = 177696, upload-time = \"2026-07-06T21:34:26.355Z\" },\n+    { url = \"https://files.pythonhosted.org/packages/2f/dd/afa2191fc6d57fedd26e5844a2fe2fcc0bbfa00961bbaa5a41e4921e7cca/cffi-2.1.0-cp315-cp315-win_amd64.whl\", hash = \"sha256:bccbbb5ee76a61f9d99b5bf3846a51d7fca4b6a732fe46f89295610edaf41853\", size = 187914, upload-time = \"2026-07-06T21:34:27.58Z\" },\n+    { url = \"https://files.pythonhosted.org/packages/05/ef/6cd4f8c671517162379dc79cfae5aea9106bc38abb89628d5c16adf6a838/cffi-2.1.0-cp315-cp315-win_arm64.whl\", hash = \"sha256:8d35c139744adb3e727cd51b1a18324bbe44b8bd41bf8322bca4d41289f48eda\", size = 183004, upload-time = \"2026-07-06T21:34:28.905Z\" },\n+    { url = \"https://files.pythonhosted.org/packages/11/b6/12fc55092817a5faa26fb8c40c7f9d662e11a46ee248c137aafc42517d92/cffi-2.1.0-cp315-cp315t-macosx_10_15_x86_64.whl\", hash = \"sha256:f9912624a0c0b834b7520d7769b3644453aabc0a7e1c839da7359f050750e9bc\", size = 188378, upload-time = \"2026-07-06T21:34:09.926Z\" },\n+    { url = \"https://files.pythonhosted.org/packages/8d/2e/cdac88979f295fde5daa69622c7d2111e56e7ceb94f211357fbe452339e4/cffi-2.1.0-cp315-cp315t-macosx_11_0_arm64.whl\", hash = \"sha256:df92f2aba50eb4d96718b68ef76f2e57a57b54f2fa62333496d16c6d585a85ca\", size = 188319, upload-time = \"2026-07-06T21:34:11.101Z\" },\n+    { url = \"https://files.pythonhosted.org/packages/e0/27/1d0b408497e41a74795af122d7b603c418c5fed0171450f899afd04e594f/cffi-2.1.0-cp315-cp315t-manylinux2014_aarch64.manylinux_2_17_aarch64.whl\", hash = \"sha256:0520e1f4c35f44e209cbbb421b67eec42e6a157f59444dfb6058874ff3610e5d\", size = 223904, upload-time = \"2026-07-06T21:34:12.606Z\" },\n+    { url = \"https://files.pythonhosted.org/packages/8b/31/e115c985105dd7ffb32444505f18ceb874bb42d992af05d5dced7ecf1980/cffi-2.1.0-cp315-cp315t-manylinux2014_ppc64le.manylinux_2_17_ppc64le.whl\", hash = \"sha256:3681e031db29958a7502f5c0c9d6bbc4c36cb20f7b104086fa642d1799631ff8\", size = 211554, upload-time = \"2026-07-06T21:34:13.987Z\" },\n+    { url = \"https://files.pythonhosted.org/packages/5a/67/9e6e09409336d9e515c58367e7cfcf4f89df06ad25252675595a58eb59d5/cffi-2.1.0-cp315-cp315t-manylinux2014_s390x.manylinux_2_17_s390x.whl\", hash = \"sha256:762f99479dcb369f60ab9017ad4ab97a36a1dd7c1ee5a3b15db0f4b8659120cd\", size = 210795, upload-time = \"2026-07-06T21:34:15.972Z\" },\n+    { url = \"https://files.pythonhosted.org/packages/19/e5/d3cc82a4a0be7902af279c04181ad038449c096734464a5ae1de3e1401bd/cffi-2.1.0-cp315-cp315t-manylinux2014_x86_64.manylinux_2_17_x86_64.whl\", hash = \"sha256:0611e7ebf90573a535ebdc33ae9da222d037853983e13359f580fab781ca017f\", size = 223843, upload-time = \"2026-07-06T21:34:17.509Z\" },\n+    { url = \"https://files.pythonhosted.org/packages/b9/65/b434abc97ce7cecc2c640fde160507c0ecc7e21544b483ba3325d2e2ea17/cffi-2.1.0-cp315-cp315t-musllinux_1_2_aarch64.whl\", hash = \"sha256:86cf8755a791f72c85dc287128cc62d4f24d392e3f1e15837245623f4a33cccc\", size = 226773, upload-time = \"2026-07-06T21:34:19.05Z\" },\n+    { url = \"https://files.pythonhosted.org/packages/b5/9f/d4dc66ca651eb1145a133314cda721abf13cfac3d28c4a0402263ae6ad75/cffi-2.1.0-cp315-cp315t-musllinux_1_2_x86_64.whl\", hash = \"sha256:ba00f661f8ba35d075c937174e27c2c421cec3942fd2e0ea3e66996757c0fdd9\", size = 225719, upload-time = \"2026-07-06T21:34:20.576Z\" },\n+    { url = \"https://files.pythonhosted.org/packages/68/5a/e536c528bc8057496c360c0978559a2dc45653f89dd6151078aa7d8fca1a/cffi-2.1.0-cp315-cp315t-win32.whl\", hash = \"sha256:cb96698e3c7413d906ce83f8ffd245ec1bd94707541f299d0ce4d6b0193e982b\", size = 182760, upload-time = \"2026-07-06T21:34:22.059Z\" },\n+    { url = \"https://files.pythonhosted.org/packages/d3/0b/0ffe8b82d3875bced5fa1e7986a7a46b748262a40ab7f60b475eb9fb1bb3/cffi-2.1.0-cp315-cp315t-win_amd64.whl\", hash = \"sha256:f146d154428a2523f9cc7936c02353c2459b8f6cf07d3cd1ee1c0a611109c5d5\", size = 193769, upload-time = \"2026-07-06T21:34:23.589Z\" },\n+    { url = \"https://files.pythonhosted.org/packages/a0/17/1073b53b68c9b5ca6914adf5f8bf55aacc2d3be102418c90700160ea8605/cffi-2.1.0-cp315-cp315t-win_arm64.whl\", hash = \"sha256:cbb7640ce37159548d2147b5b8c241f962143d4c71231431820783f4dc78f210\", size = 186405, upload-time = \"2026-07-06T21:34:24.857Z\" },\n+]\n+\n [[package]]\n name = \"click\"\n version = \"8.3.1\"\n@@ -63,6 +174,62 @@ wheels = [\n     { url = \"https://files.pythonhosted.org/packages/d1/d6/3965ed04c63042e047cb6a3e6ed1a63a35087b6a609aa3a15ed8ac56c221/colorama-0.4.6-py2.py3-none-any.whl\", hash = \"sha256:4f1d9991f5acc0ca119f9d443620b77f9d6b33703e51011c16baf57afb285fc6\", size = 25335, upload-time = \"2022-10-25T02:36:20.889Z\" },\n ]\n \n+[[package]]\n+name = \"cryptography\"\n+version = \"49.0.0\"\n+source = { registry = \"https://pypi.org/simple\" }\n+dependencies = [\n+    { name = \"cffi\", marker = \"platform_python_implementation != 'PyPy'\" },\n+]\n+sdist = { url = \"https://files.pythonhosted.org/packages/1f/99/d1c90d6041656cc6ee229dc99cd67fd0cd5aec3c5f7d72fffc27cc750054/cryptography-49.0.0.tar.gz\", hash = \"sha256:f89660a348f4f78a92366240a61404e337586ef7f5909a2fef59ca88ef505493\", size = 854345, upload-time = \"2026-06-12T20:02:30.512Z\" }\n+wheels = [\n+    { url = \"https://files.pythonhosted.org/packages/9b/22/adf66990e63584a68dfb50c24f48a125c07b1699899381c8151e63ed458c/cryptography-49.0.0-cp311-abi3-macosx_11_0_arm64.whl\", hash = \"sha256:966fe0e9c67490071f14c0d2b1cb2dfb3023c5ce39457343931415f08382f2db\", size = 4032100, upload-time = \"2026-06-12T20:02:32.143Z\" },\n+    { url = \"https://files.pythonhosted.org/packages/09/41/3797cfaf69cae04a13ee78ebd83f0678d9c02b4779d21ce24445326f1a69/cryptography-49.0.0-cp311-abi3-manylinux2014_aarch64.manylinux_2_17_aarch64.whl\", hash = \"sha256:36d1709f992593689b45bda411498d62c6e365f2ca00b84657d4dadd24de16db\", size = 4692978, upload-time = \"2026-06-12T20:01:21.305Z\" },\n+    { url = \"https://files.pythonhosted.org/packages/e6/8b/43011f7ebe515a8aa20d61f290a326cd890c2e738e16e59eaff8d9c3a412/cryptography-49.0.0-cp311-abi3-manylinux2014_x86_64.manylinux_2_17_x86_64.whl\", hash = \"sha256:0e959b578856a3924bc0cbb710fc12c387b9412a951389f3ca61704a9e25f325\", size = 4716422, upload-time = \"2026-06-12T20:01:48.566Z\" },\n+    { url = \"https://files.pythonhosted.org/packages/4a/91/01ce7303a4579e6d3a6abef01bd322848e9ea7a219adcabc5048b9033571/cryptography-49.0.0-cp311-abi3-manylinux_2_28_aarch64.whl\", hash = \"sha256:53ecee2e23f7169b6117e99fc8a944e5e50f79e69758a83b52a00cb98ab2b2d2\", size = 4700503, upload-time = \"2026-06-12T20:02:47.091Z\" },\n+    { url = \"https://files.pythonhosted.org/packages/62/99/a2c95cf8293f07491e9e27c20cc4dcd18176d944e674679adeb1d0173fd6/cryptography-49.0.0-cp311-abi3-manylinux_2_28_ppc64le.whl\", hash = \"sha256:2eda353d8a27bcbcaa4cbed18994a74ab4d19a2ca897db188ea269ab9b71419b\", size = 5309779, upload-time = \"2026-06-12T20:02:08.987Z\" },\n+    { url = \"https://files.pythonhosted.org/packages/20/2c/0622f20ff02b2ef32558733443805dc82fd4c275be01b2d19d14676f3a1b/cryptography-49.0.0-cp311-abi3-manylinux_2_28_x86_64.whl\", hash = \"sha256:2afe9051da7ae7bd5905da5a949280c7d2bb75682e188f650a9d0f2756b834c6\", size = 4749683, upload-time = \"2026-06-12T20:02:03.335Z\" },\n+    { url = \"https://files.pythonhosted.org/packages/a3/5b/c5246635d5fd3b64e0d45ae10e99fd32fe9676a79915ccfe5a61ba9af1a5/cryptography-49.0.0-cp311-abi3-manylinux_2_31_armv7l.whl\", hash = \"sha256:0b82e28ee398a386f0807bba7884d30f25218855690f45115831bcce5d90822c\", size = 4337874, upload-time = \"2026-06-12T20:02:54.323Z\" },\n+    { url = \"https://files.pythonhosted.org/packages/6d/88/05563c7fe2e914e87d1a536d06fe83e66b4e1d95cb593e05aea375531da8/cryptography-49.0.0-cp311-abi3-manylinux_2_34_aarch64.whl\", hash = \"sha256:ccac2bfebc306b862133e3bb71f3f6ee8bb525240089b2d952e4144b3a6d5da7\", size = 4700283, upload-time = \"2026-06-12T20:01:34.822Z\" },\n+    { url = \"https://files.pythonhosted.org/packages/c4/b6/d7696e4e890d6ae1469935164c9e5215c557671cb78d6e3f458ccceaa632/cryptography-49.0.0-cp311-abi3-manylinux_2_34_ppc64le.whl\", hash = \"sha256:d0527ce944105f257f605a827d6ebead966c752038b6e8656abb9c5edee6fc68\", size = 5265844, upload-time = \"2026-06-12T20:01:24.09Z\" },\n+    { url = \"https://files.pythonhosted.org/packages/a9/3c/f3ad17eecc1a57b0ba236dc01f90e783c51f4a2f35f64777cc4f47a184b2/cryptography-49.0.0-cp311-abi3-manylinux_2_34_x86_64.whl\", hash = \"sha256:cbc77da8c523d5abd028635ba850a6966fcee2c82e2bf65a41d1d8afe0f98be9\", size = 4749290, upload-time = \"2026-06-12T20:01:30.848Z\" },\n+    { url = \"https://files.pythonhosted.org/packages/4f/01/339573cf1023163a400b0b5d16f6d507de413b9f60be6fd1b77feeaf6737/cryptography-49.0.0-cp311-abi3-musllinux_1_2_aarch64.whl\", hash = \"sha256:b87e65d263b3e5d3bb92a57e2a6638e2f31110fa7aa890c7b2dbba42248d0a3f\", size = 4834612, upload-time = \"2026-06-12T20:01:29.246Z\" },\n+    { url = \"https://files.pythonhosted.org/packages/71/fd/577302e213a1be9468f92d1afef66fcf1ef83d516819d9992ca547f592bd/cryptography-49.0.0-cp311-abi3-musllinux_1_2_x86_64.whl\", hash = \"sha256:66ec79c3904820572d7e987abdf304281f141d37ad9a489b8e97066e7b9b6459\", size = 4980804, upload-time = \"2026-06-12T20:01:42.853Z\" },\n+    { url = \"https://files.pythonhosted.org/packages/1f/09/f42b1d190c5ba75f72062a387f8030d1d75f6ab035788f1d9c4b01de6525/cryptography-49.0.0-cp311-abi3-win_amd64.whl\", hash = \"sha256:e5dfc1e64de5677cec922ffa8da89c546d0415bf6efdf081842e5d44c84e1f0e\", size = 3810026, upload-time = \"2026-06-12T20:02:39.262Z\" },\n+    { url = \"https://files.pythonhosted.org/packages/ec/9e/db72b3ae7fc9cfad53e630e56c6ae83b9b6ff0bf3718ffb8012d20b3aabf/cryptography-49.0.0-cp314-cp314t-macosx_11_0_arm64.whl\", hash = \"sha256:73a205dce83953d131a4aa1e0fd917a2fd1c5b1eef251e9d7152efefcbf5caf7\", size = 4013892, upload-time = \"2026-06-12T20:02:10.735Z\" },\n+    { url = \"https://files.pythonhosted.org/packages/86/12/c48a424f38db03027be9f7ed5c7dc5de9933dbee992865f98b13727a009d/cryptography-49.0.0-cp314-cp314t-manylinux2014_aarch64.manylinux_2_17_aarch64.whl\", hash = \"sha256:196ecd6a36e4e9aa10270393bb98d8df88fccee0bf1e5128b91ae4eb4375896d\", size = 4678835, upload-time = \"2026-06-12T20:02:48.743Z\" },\n+    { url = \"https://files.pythonhosted.org/packages/68/28/8a3ad4653662c93fc44dc4e5d8fd374c25c42e07b34bbfbadf49cf57a5a8/cryptography-49.0.0-cp314-cp314t-manylinux2014_x86_64.manylinux_2_17_x86_64.whl\", hash = \"sha256:7abcee80084cda3f7691f3eb1ce480d8df49cec637b429aa35986c1de71738aa\", size = 4697239, upload-time = \"2026-06-12T20:02:56.03Z\" },\n+    { url = \"https://files.pythonhosted.org/packages/a8/b2/2193fc74f81aee4f9b62733133b73b5176718932ed8f2e4b03fa040480a6/cryptography-49.0.0-cp314-cp314t-manylinux_2_28_aarch64.whl\", hash = \"sha256:4ae387c9cb68ea569ca17e490d66d8142b81c3cc814bf179974b7d146e490bbb\", size = 4685593, upload-time = \"2026-06-12T20:02:50.666Z\" },\n+    { url = \"https://files.pythonhosted.org/packages/47/f1/1d3eaa243bfc5de4a187b22aa8c048b3e4980bfbe830ac46e6bac2e66947/cryptography-49.0.0-cp314-cp314t-manylinux_2_28_ppc64le.whl\", hash = \"sha256:f37d847238971164fdbc68ade6f6574aecc9c0af714190e2083429ff68f4ce9d\", size = 5289961, upload-time = \"2026-06-12T20:01:46.468Z\" },\n+    { url = \"https://files.pythonhosted.org/packages/58/39/2d51306721330c486495853eda1c567880ff036de15a14c4b74f399934af/cryptography-49.0.0-cp314-cp314t-manylinux_2_28_x86_64.whl\", hash = \"sha256:c2bc30226390d60ea19d9f82b19db005fe0452154a23c1c410c12ea801e43561\", size = 4731145, upload-time = \"2026-06-12T20:02:16.832Z\" },\n+    { url = \"https://files.pythonhosted.org/packages/17/50/983e838c7fd0d87fd8c969bcdd328edaf5f756e38df5281637424c155873/cryptography-49.0.0-cp314-cp314t-manylinux_2_31_armv7l.whl\", hash = \"sha256:07cab27cc7b7e0fd28e5e26bb9eeedde5c135c868b46de4a27845abe94af6122\", size = 4321719, upload-time = \"2026-06-12T20:02:52.611Z\" },\n+    { url = \"https://files.pythonhosted.org/packages/a7/f5/8f571d7e27c55bce9f76f026143bcb1e040a4233149ecca0bea5fa5dd5f7/cryptography-49.0.0-cp314-cp314t-manylinux_2_34_aarch64.whl\", hash = \"sha256:b20133d204d2bb56ba047642199603876c872026ca53e79c35b83772ab2cc505\", size = 4685209, upload-time = \"2026-06-12T20:02:07.282Z\" },\n+    { url = \"https://files.pythonhosted.org/packages/e7/84/0e27016a6fc5a0886f797018b26aa42f40c09a82332bff77822a451deaaa/cryptography-49.0.0-cp314-cp314t-manylinux_2_34_ppc64le.whl\", hash = \"sha256:b970c6da94d5bb18629db453d14f2a1300f6bf59b61e9b82377931ef95504866\", size = 5246285, upload-time = \"2026-06-12T20:01:32.439Z\" },\n+    { url = \"https://files.pythonhosted.org/packages/11/2d/5e1fb307cb5931881516b464c98774b3f2c36b5d4bb9a2830253cf553cad/cryptography-49.0.0-cp314-cp314t-manylinux_2_34_x86_64.whl\", hash = \"sha256:d8ecde755e2e91bf773fc94e8c9d730cd7f2007004cb492263a794ec3899a1c8\", size = 4730441, upload-time = \"2026-06-12T20:02:01.469Z\" },\n+    { url = \"https://files.pythonhosted.org/packages/e4/c0/bff5a02ee731d207d6a1ed51732549d8c53d2bc8da1d10ec6f2844201d68/cryptography-49.0.0-cp314-cp314t-musllinux_1_2_aarch64.whl\", hash = \"sha256:e3fb64c420688e5319ae25113a354015abbd8dffbfbc41781a1ea66fc7622ac3\", size = 4815869, upload-time = \"2026-06-12T20:01:36.574Z\" },\n+    { url = \"https://files.pythonhosted.org/packages/b9/26/814681d14248d95d73d5c3eea0c39a94eb8302df966f670a2c60de90974b/cryptography-49.0.0-cp314-cp314t-musllinux_1_2_x86_64.whl\", hash = \"sha256:32703d93296f5c1f4b53349ad3a250c2cae0fdecd3a3dd5d47e616d8d616af27\", size = 4960948, upload-time = \"2026-06-12T20:02:18.688Z\" },\n+    { url = \"https://files.pythonhosted.org/packages/4c/fe/93ecac273d3738939d023612ad12cca9a3740a5345d69fda04134c43fd96/cryptography-49.0.0-cp314-cp314t-win_amd64.whl\", hash = \"sha256:33cd0565932807baddb67b96dbee92f2c374b5c89dee09fd74079aeb8c8dba61\", size = 3799153, upload-time = \"2026-06-12T20:01:39.059Z\" },\n+    { url = \"https://files.pythonhosted.org/packages/19/2a/5bb823f5bedcf80718cea7fbc95ec5515cca3769633c4b01a32be7f30e7c/cryptography-49.0.0-cp39-abi3-macosx_11_0_arm64.whl\", hash = \"sha256:ec5e529fb80935c94fe7b729f9972b50e351a0e6b50aa294fd5cabb109fcc29a\", size = 4025947, upload-time = \"2026-06-12T20:01:25.745Z\" },\n+    { url = \"https://files.pythonhosted.org/packages/3d/df/40577043ca124e17012f408ddddaeb213b856336ac82ddb3bc915f39e29f/cryptography-49.0.0-cp39-abi3-manylinux2014_aarch64.manylinux_2_17_aarch64.whl\", hash = \"sha256:f78ff2c9ed8dc2d036b0f4d640e22522213d047c1b14e61205a7e55c80a494d4\", size = 4692429, upload-time = \"2026-06-12T20:01:53.628Z\" },\n+    { url = \"https://files.pythonhosted.org/packages/2c/99/2d13299eb3dd27b02dcfaafcc91d6b5cb3329f7cbd6d8f51921acd566c1a/cryptography-49.0.0-cp39-abi3-manylinux2014_x86_64.manylinux_2_17_x86_64.whl\", hash = \"sha256:35b151772baff2c74cba7fa290ceaff4c3b11c0c881eb93eb5dbc05a7cfbba18\", size = 4700968, upload-time = \"2026-06-12T20:02:45.383Z\" },\n+    { url = \"https://files.pythonhosted.org/packages/a5/4d/9c0cd02f95e2602dd5e563da149ee0830abef3537be8b34dc56281ebe27a/cryptography-49.0.0-cp39-abi3-manylinux_2_28_aarch64.whl\", hash = \"sha256:0f21641cf4b30fca7aee061ced0ec7ad7b073518088b7c9969a297c0ae796c69\", size = 4697758, upload-time = \"2026-06-12T20:01:41.13Z\" },\n+    { url = \"https://files.pythonhosted.org/packages/24/01/186c825898477d77e2324d5360fefe622ff1d8d1963ec0554e2cada8ec77/cryptography-49.0.0-cp39-abi3-manylinux_2_28_ppc64le.whl\", hash = \"sha256:9e82dcc8e56052715fb18b2429e3bca4823b1629136a2084fc45a9a5cecb9b64\", size = 5298863, upload-time = \"2026-06-12T20:02:24.579Z\" },\n+    { url = \"https://files.pythonhosted.org/packages/b8/7b/62cbbab75d0659865bf0273790031544a0b16c8072d258f9428dcd8190dc/cryptography-49.0.0-cp39-abi3-manylinux_2_28_x86_64.whl\", hash = \"sha256:6f2debedf9ca60cf1d5bd466475638af5130f89965605cd818484d19987d3a21\", size = 4735983, upload-time = \"2026-06-12T20:01:50.14Z\" },\n+    { url = \"https://files.pythonhosted.org/packages/6c/72/3e798c064bc39e471008075d0f9bc9daf77a80879c092e4a8e170c585ed4/cryptography-49.0.0-cp39-abi3-manylinux_2_31_armv7l.whl\", hash = \"sha256:8c25ceb16df5b9435f3f6a9829204985b0e0cbee3b48aacd432c7d2c850b44d9\", size = 4334173, upload-time = \"2026-06-12T20:01:44.743Z\" },\n+    { url = \"https://files.pythonhosted.org/packages/f0/ee/6fca21d1ac73e06f8bef71940abfd4d2f6472b4bca284d770f32bd4086f6/cryptography-49.0.0-cp39-abi3-manylinux_2_34_aarch64.whl\", hash = \"sha256:28d8b15e6275f12c8a207dc309dfa957903c927d08d0cc937ee3f63f200693cc\", size = 4697298, upload-time = \"2026-06-12T20:02:20.918Z\" },\n+    { url = \"https://files.pythonhosted.org/packages/67/d0/a5fcd3515f0bae49a7b6d0413cc1bdccdcc1fc0047037a0d480642cdc5d6/cryptography-49.0.0-cp39-abi3-manylinux_2_34_ppc64le.whl\", hash = \"sha256:6fc361c34fb6aac015ce19435876635e5c6d21db31998b0920f675f131e043b8\", size = 5254338, upload-time = \"2026-06-12T20:02:22.737Z\" },\n+    { url = \"https://files.pythonhosted.org/packages/a0/84/84fe36f19caf857d61cb7fc9c63035a47ffabd84ea12d1d393148efa3615/cryptography-49.0.0-cp39-abi3-manylinux_2_34_x86_64.whl\", hash = \"sha256:2400ef9c9e2299a25614eb1dea3db54a69b1349efd043bfac9c67630d136df36\", size = 4735650, upload-time = \"2026-06-12T20:02:41.389Z\" },\n+    { url = \"https://files.pythonhosted.org/packages/6c/a0/db537264e234f7273a73ec020873d6d6b39dfd8a53db78b550ca8320440e/cryptography-49.0.0-cp39-abi3-musllinux_1_2_aarch64.whl\", hash = \"sha256:67e1d20ad9ef3a563c59ef22e7a8a0b8210bd26604369ea4a30a7c66aefe504e\", size = 4834820, upload-time = \"2026-06-12T20:01:51.847Z\" },\n+    { url = \"https://files.pythonhosted.org/packages/93/77/8df9eb486495979bccecd1062e2eaf435250e84437040295b57d09048b0b/cryptography-49.0.0-cp39-abi3-musllinux_1_2_x86_64.whl\", hash = \"sha256:42b0684e0e40cf26122427802486f6d93aea593612603a94fbf260c7eb1e9c1b\", size = 4967968, upload-time = \"2026-06-12T20:02:12.524Z\" },\n+    { url = \"https://files.pythonhosted.org/packages/c2/e6/f60198ea8d9dfa15fff9ed4ca02ce362f6eadd9ba757dcc50634c4257b63/cryptography-49.0.0-cp39-abi3-win_amd64.whl\", hash = \"sha256:026ac7423e6fa66872d3bf889be5974507da3944f866f704fa200eadacd00001\", size = 3785547, upload-time = \"2026-06-12T20:02:26.847Z\" },\n+    { url = \"https://files.pythonhosted.org/packages/63/d3/4a83af35d65e3fad632c926fad684c193ea4398569ccb0bbbc7fe8f5dc9a/cryptography-49.0.0-pp311-pypy311_pp73-macosx_11_0_arm64.whl\", hash = \"sha256:fc1e275c2f1d97b1a6450b8b0ea3ebfa6e087a611c2b26cb2404d48588abab7b\", size = 3993685, upload-time = \"2026-06-12T20:02:14.883Z\" },\n+    { url = \"https://files.pythonhosted.org/packages/d6/a7/f9dac0ab7f80368c56993a7bf638ef9935f825c91902798481fac0898138/cryptography-49.0.0-pp311-pypy311_pp73-manylinux_2_28_aarch64.whl\", hash = \"sha256:c83782480a4a9da4d0feb51950131ba32e12e70813848b3343f6e18c28a66838\", size = 4676239, upload-time = \"2026-06-12T20:02:28.793Z\" },\n+    { url = \"https://files.pythonhosted.org/packages/d7/70/2ba3769dd0ae167e2f33dfa9592d45db6ff9a61d62ca1a5b3d1bdd09068f/cryptography-49.0.0-pp311-pypy311_pp73-manylinux_2_28_x86_64.whl\", hash = \"sha256:b39efa323140595abd3ecca8529d321ae50f55f3aa3ba9cc81ea56a6011953d5\", size = 4715584, upload-time = \"2026-06-12T20:01:27.495Z\" },\n+    { url = \"https://files.pythonhosted.org/packages/94/64/2923570ac1c0bd3a737aa366ac3abbbbde273042308b8cde95e2364a6e6a/cryptography-49.0.0-pp311-pypy311_pp73-manylinux_2_34_aarch64.whl\", hash = \"sha256:b47db11c2c3525083296069b98ac5221907455e989ae0c2e3008bde851921615\", size = 4675885, upload-time = \"2026-06-12T20:01:55.49Z\" },\n+    { url = \"https://files.pythonhosted.org/packages/ab/f8/614dc7e051418cfe53d55173c1e24c6b0085e89996fe90508c2fdf769aef/cryptography-49.0.0-pp311-pypy311_pp73-manylinux_2_34_x86_64.whl\", hash = \"sha256:084ef1af862eb07ec46d25f68689f2102a9fc0e05ce7b80f14f5fe51e4eef0f6\", size = 4715449, upload-time = \"2026-06-12T20:02:05.469Z\" },\n+    { url = \"https://files.pythonhosted.org/packages/aa/50/a9caea39ad19c431c1a3f8a31114df65b260cdfe67786b6c7e7c040c4c44/cryptography-49.0.0-pp311-pypy311_pp73-win_amd64.whl\", hash = \"sha256:be9fcb48a55f023493482827d4f459bd263cc20efde64f204b97c123201850c6\", size = 3783731, upload-time = \"2026-06-12T20:02:43.319Z\" },\n+]\n+\n [[package]]\n name = \"evaleval\"\n version = \"0.2.7\"\n@@ -125,6 +292,67 @@ wheels = [\n     { url = \"https://files.pythonhosted.org/packages/2a/39/e50c7c3a983047577ee07d2a9e53faf5a69493943ec3f6a384bdc792deb2/httpx-0.28.1-py3-none-any.whl\", hash = \"sha256:d909fcccc110f8c7faf814ca82a9a4d816bc5a6dbfea25d6591d6985b8ba59ad\", size = 73517, upload-time = \"2024-12-06T15:37:21.509Z\" },\n ]\n \n+[[package]]\n+name = \"hypothesis\"\n+version = \"6.156.7\"\n+source = { registry = \"https://pypi.org/simple\" }\n+dependencies = [\n+    { name = \"sortedcontainers\" },\n+]\n+sdist = { url = \"https://files.pythonhosted.org/packages/39/a8/654d7533861cfdc291e55d5c335fdff2958dfd4833f7ff17c17de063b036/hypothesis-6.156.7.tar.gz\", hash = \"sha256:a646061075d13ebeb763eeafe3a68604483678b2c0eed90dde2ab8ff21abb62a\", size = 476259, upload-time = \"2026-07-18T12:16:31.862Z\" }\n+wheels = [\n+    { url = \"https://files.pythonhosted.org/packages/e6/d5/d52b00c6b7a059695beb1a68cfb76f9e9b50cbc3655278a671243d447961/hypothesis-6.156.7-cp310-abi3-macosx_10_12_x86_64.whl\", hash = \"sha256:cb227db6ab96667b44ace873cb5d6e9b1819c362d5ad30267ec3f279be6059dd\", size = 748085, upload-time = \"2026-07-18T12:15:39.252Z\" },\n+    { url = \"https://files.pythonhosted.org/packages/c2/0e/7d9408e51862774b8ea09da12d3159efd0d4e33d27416e3139de40f26383/hypothesis-6.156.7-cp310-abi3-macosx_11_0_arm64.whl\", hash = \"sha256:8706f34f3c6d84db5d5a857920da27412e598a134a935070f2466f1cd32cf598\", size = 742726, upload-time = \"2026-07-18T12:15:28.506Z\" },\n+    { url = \"https://files.pythonhosted.org/packages/72/9f/12584e813b8e1d807344b02976a98808cc9a41fe2c64aedf1d86b0ed8dd2/hypothesis-6.156.7-cp310-abi3-manylinux_2_17_aarch64.manylinux2014_aarch64.whl\", hash = \"sha256:ac49a158abcad440513b463b7a1e8471a0ff2c3c31f8f01a61aae1e9dac19756\", size = 1070224, upload-time = \"2026-07-18T12:16:04.786Z\" },\n+    { url = \"https://files.pythonhosted.org/packages/74/7d/036e0ba919c592d375ca82fc452c9f1a7bd0a32092fabf4e0849c18fc206/hypothesis-6.156.7-cp310-abi3-manylinux_2_17_x86_64.manylinux2014_x86_64.whl\", hash = \"sha256:aec915de6c6ee5adaa05a22602d1ed521e1b187e6b23d416741a0aa9dea75923\", size = 1121701, upload-time = \"2026-07-18T12:15:24.003Z\" },\n+    { url = \"https://files.pythonhosted.org/packages/de/5c/bec7b48fc78c3683ee01e9111262a6871a9a8c571d9a2698d5646cba63a4/hypothesis-6.156.7-cp310-abi3-manylinux_2_5_i686.manylinux1_i686.whl\", hash = \"sha256:317b828b52fb42184541c56c501b14f19cdf478e5cc27f0ff327b08ceb8048bc\", size = 1111143, upload-time = \"2026-07-18T12:15:15.496Z\" },\n+    { url = \"https://files.pythonhosted.org/packages/76/b1/23803fd70851bf10eeb1b1ad747b813a94ff1ff479721870658a2fef366d/hypothesis-6.156.7-cp310-abi3-musllinux_1_2_aarch64.whl\", hash = \"sha256:8f1d9b2b80a961745e8603983e43c79721bd1e08c7b11e59782fbe5d999f2e9e\", size = 1244920, upload-time = \"2026-07-18T12:16:12.689Z\" },\n+    { url = \"https://files.pythonhosted.org/packages/09/01/6c2826eb077cb2815e4b6b53261650af959f94a0fd7019ea5681bcf0bc07/hypothesis-6.156.7-cp310-abi3-musllinux_1_2_x86_64.whl\", hash = \"sha256:90709a411250637a4a3e7e025f5c5934ce26000566b0a9c257311972185f1574\", size = 1288673, upload-time = \"2026-07-18T12:15:14.093Z\" },\n+    { url = \"https://files.pythonhosted.org/packages/d4/e2/1acf3718536ed6ed96bdb8d034dcb28c8370be2382c954e7dd143cf2b298/hypothesis-6.156.7-cp310-abi3-win32.whl\", hash = \"sha256:6a5ddbb137b56829b743420865788947a333289b2809cbb5cc3396f22f497ae0\", size = 635183, upload-time = \"2026-07-18T12:15:41.851Z\" },\n+    { url = \"https://files.pythonhosted.org/packages/13/dc/8fb902c649444357b5732a316dbb7f7b6cee65440e469db45578d60d7ae7/hypothesis-6.156.7-cp310-abi3-win_amd64.whl\", hash = \"sha256:84d876ca599d8b5131b218050708750c848e5c0513210423e49f3518035eda3f\", size = 640977, upload-time = \"2026-07-18T12:15:25.168Z\" },\n+    { url = \"https://files.pythonhosted.org/packages/a7/6b/b97e666503ff04af8d8a4bebac26c685f05b70394f0466d71a648ab3719b/hypothesis-6.156.7-cp311-cp311-macosx_10_12_x86_64.whl\", hash = \"sha256:b486272b3fbef0adea2f2b9f929642f7aaa454447a39bb988bb404372537cbff\", size = 748550, upload-time = \"2026-07-18T12:15:57.109Z\" },\n+    { url = \"https://files.pythonhosted.org/packages/db/3a/574b8476607e6dbdbde56e1732c3b73fa63486babbd9676f677d6d2e7fea/hypothesis-6.156.7-cp311-cp311-macosx_11_0_arm64.whl\", hash = \"sha256:cf115f228cfefe7651a66fd25d601783b11366aaa336d826a6820f5d4a111967\", size = 743341, upload-time = \"2026-07-18T12:16:09.45Z\" },\n+    { url = \"https://files.pythonhosted.org/packages/21/c2/55d18d5fd99254307b776f340390930ba5548c9e41999aa6c5a4f7a76a28/hypothesis-6.156.7-cp311-cp311-manylinux_2_17_aarch64.manylinux2014_aarch64.whl\", hash = \"sha256:e373bfbeccd0b4ea181e1076ca31b6252f70d95fd735e867959074d5d9638eaa\", size = 1070864, upload-time = \"2026-07-18T12:15:33.683Z\" },\n+    { url = \"https://files.pythonhosted.org/packages/cd/07/4170c3000ba06b6d3fd0e4434d49ce69044dcc161038ee36010018fb9d9e/hypothesis-6.156.7-cp311-cp311-manylinux_2_17_x86_64.manylinux2014_x86_64.whl\", hash = \"sha256:f5efbc419e7b2774a5c66e7349851a58a69bc56138ee70d543ec1d4833aa8883\", size = 1122080, upload-time = \"2026-07-18T12:16:25.889Z\" },\n+    { url = \"https://files.pythonhosted.org/packages/f3/d5/fff0db43896163f9a8a115e942c60f2d07fe75fb8d339ed42aec83dfcffb/hypothesis-6.156.7-cp311-cp311-musllinux_1_2_aarch64.whl\", hash = \"sha256:080439d4930600742e4f7878929e71a3c4f0e31f4ac99812d675ed95086a221b\", size = 1245772, upload-time = \"2026-07-18T12:16:07.801Z\" },\n+    { url = \"https://files.pythonhosted.org/packages/8d/96/d449714acd4a4cad5590d74f4644f2a1c163b8055eebbe6a6278400fdaab/hypothesis-6.156.7-cp311-cp311-musllinux_1_2_x86_64.whl\", hash = \"sha256:43e2aef269045af0531f4facd0b93f1c7c6d50147ce69a9b0a8b0285b0f13638\", size = 1289045, upload-time = \"2026-07-18T12:16:30.36Z\" },\n+    { url = \"https://files.pythonhosted.org/packages/69/80/3872f8fbe9b2035b7a44c0911cc52b40bed75388e99b5c298077b75c00b1/hypothesis-6.156.7-cp311-cp311-win_amd64.whl\", hash = \"sha256:f9b1679aa75ab8452767cd8af1a91de0b8615b2057134079f78628faf9f49bfb\", size = 640786, upload-time = \"2026-07-18T12:15:17.963Z\" },\n+    { url = \"https://files.pythonhosted.org/packages/10/46/65e5ec7694b88af0e4b79cd0972ef4bc9b6b1ef4e5a7de98c45cc63a19f0/hypothesis-6.156.7-cp312-cp312-macosx_10_12_x86_64.whl\", hash = \"sha256:a8ec2634571c1048d6c69a620aacae0a43533ea2fe36aff52a0d27720f2f8017\", size = 748950, upload-time = \"2026-07-18T12:15:44.372Z\" },\n+    { url = \"https://files.pythonhosted.org/packages/21/59/f00a5e5a7504d6c999042d0ea98b4fb4c7fa45523379b5c1233f667b1425/hypothesis-6.156.7-cp312-cp312-macosx_11_0_arm64.whl\", hash = \"sha256:3f122fc5db966d4f66b61c37c8e69ed38290891dc11aee4ca0ac1ac07d31cc6b\", size = 741468, upload-time = \"2026-07-18T12:15:08.797Z\" },\n+    { url = \"https://files.pythonhosted.org/packages/42/d7/649c22c1ac2d273293b91977a10adb40ad59663bf23496a4c224eb5d150b/hypothesis-6.156.7-cp312-cp312-manylinux_2_17_aarch64.manylinux2014_aarch64.whl\", hash = \"sha256:aa2e4958fd25622303824b023721f4199110473cf34e29d331db255568ee9931\", size = 1069808, upload-time = \"2026-07-18T12:15:40.644Z\" },\n+    { url = \"https://files.pythonhosted.org/packages/f5/bf/d8053ff8f0d9506098ba5373543be4f84eba14543f506281bbc2d5da481f/hypothesis-6.156.7-cp312-cp312-manylinux_2_17_x86_64.manylinux2014_x86_64.whl\", hash = \"sha256:9841c485148830f2f4755923b4ef3648c42792bf9d8896b3a530d6d7b7999eef\", size = 1121058, upload-time = \"2026-07-18T12:16:28.879Z\" },\n+    { url = \"https://files.pythonhosted.org/packages/a6/62/fa89af5dd25a181cdc9bf5c6dd706ced8b2bf886f6537151c06a25b65a0e/hypothesis-6.156.7-cp312-cp312-musllinux_1_2_aarch64.whl\", hash = \"sha256:b3fdcba3697df6981c4d9916b1cb03229cb92235db27e410447db5fe564b9598\", size = 1244097, upload-time = \"2026-07-18T12:15:30.95Z\" },\n+    { url = \"https://files.pythonhosted.org/packages/e1/63/c95a954fbd6c2059141be356afbefda6a7a7955f104d0d3cdc6a2b5415ac/hypothesis-6.156.7-cp312-cp312-musllinux_1_2_x86_64.whl\", hash = \"sha256:7fd38f6879808194d1e196b26d0f335fb9fd717ce3fe3ab2ab79562d7d22cd17\", size = 1287646, upload-time = \"2026-07-18T12:16:15.853Z\" },\n+    { url = \"https://files.pythonhosted.org/packages/39/ff/db93ab090e7a05fda97900f4290a3cab67e777bce47ca5d3cf59a68f02bc/hypothesis-6.156.7-cp312-cp312-win_amd64.whl\", hash = \"sha256:6bd58e06628863212ecb46c80546ba6bb6ab8d018b6d3f5cf3ad0ed639c5a3cd\", size = 638291, upload-time = \"2026-07-18T12:15:58.44Z\" },\n+    { url = \"https://files.pythonhosted.org/packages/57/c7/80313bf239c6431f05b5e98cf6d4241cd6d1f570e4f0953a09ba0e034a5c/hypothesis-6.156.7-cp313-cp313-macosx_10_12_x86_64.whl\", hash = \"sha256:bc0688c17802bad5dc77c5d56f2d2f57bdcde52350f1858bd44f156608d29311\", size = 749321, upload-time = \"2026-07-18T12:15:46.929Z\" },\n+    { url = \"https://files.pythonhosted.org/packages/97/60/54693423e0b0df8005532fa0f70daa31ef023e2d974acb465e87e520cf0e/hypothesis-6.156.7-cp313-cp313-macosx_11_0_arm64.whl\", hash = \"sha256:dd3aa1bc6994ffd9b7c484dc6ecdd07455dabaa171cc1665b3541309c2203721\", size = 741778, upload-time = \"2026-07-18T12:15:48.359Z\" },\n+    { url = \"https://files.pythonhosted.org/packages/10/5b/6090f8f47d2a5d95ee7863bccc71f448a58001ad4b556fa47f8ec588018f/hypothesis-6.156.7-cp313-cp313-manylinux_2_17_aarch64.manylinux2014_aarch64.whl\", hash = \"sha256:160c74f54576e566922055730c578c61b421069f5aeec21fbe3759284071aed6\", size = 1070014, upload-time = \"2026-07-18T12:15:53.958Z\" },\n+    { url = \"https://files.pythonhosted.org/packages/78/0f/7d46320495f9ddb42ea0e99652a49c118a4c289a46ce2e72ea729e056a8c/hypothesis-6.156.7-cp313-cp313-manylinux_2_17_x86_64.manylinux2014_x86_64.whl\", hash = \"sha256:e8b52ac55d0a8e09254840f81787a3a727f771cb7af46dd854139b438ab4d7e1\", size = 1121225, upload-time = \"2026-07-18T12:16:20.907Z\" },\n+    { url = \"https://files.pythonhosted.org/packages/1f/99/7dfbed6ee39b8899197c8dd68adbc364a0d6594d07a3bf14880cbf25ba31/hypothesis-6.156.7-cp313-cp313-musllinux_1_2_aarch64.whl\", hash = \"sha256:ad5f3250ed768b2b98088d3fd3c902fadb4edf2282ed1751e18e712b55fbd060\", size = 1244459, upload-time = \"2026-07-18T12:16:22.613Z\" },\n+    { url = \"https://files.pythonhosted.org/packages/f6/63/3d2ce8803616bc4528e253a744477ca8ba61e6c5ae9ce0bfb751a16d3892/hypothesis-6.156.7-cp313-cp313-musllinux_1_2_x86_64.whl\", hash = \"sha256:79c90a535ca3910af614b568a487545b4ce20ee3ddcdd3c25a27628e355e9470\", size = 1287988, upload-time = \"2026-07-18T12:16:14.248Z\" },\n+    { url = \"https://files.pythonhosted.org/packages/3c/92/d8454244f55ad18b0392cc44e982111b8595348ff7c704db07f65a8df28e/hypothesis-6.156.7-cp313-cp313-win_amd64.whl\", hash = \"sha256:5f7b92b8aa2803881e9aed3511cb2fb88e1aa9dc615dd1e4ce68d51a5035e86b\", size = 638511, upload-time = \"2026-07-18T12:15:45.728Z\" },\n+    { url = \"https://files.pythonhosted.org/packages/ca/09/cf6e1eef6d56abd2b87551bcbe926e1ddf2f099b98bd8f0aa31e4cecd8a3/hypothesis-6.156.7-cp314-cp314-macosx_10_12_x86_64.whl\", hash = \"sha256:9c3ef9b0370e393617266d645a574fbebcbd25ead0c9058a17e2278790f7bdf7\", size = 749397, upload-time = \"2026-07-18T12:15:51.213Z\" },\n+    { url = \"https://files.pythonhosted.org/packages/5e/f4/a451d9220635f4f6c9de7d28247ec2ca8cc8162abf4cbcc8785831e0b058/hypothesis-6.156.7-cp314-cp314-macosx_11_0_arm64.whl\", hash = \"sha256:ecec3ab386f1f4f4d8607dcecc9e3ff6924a9c8cf2d8f5f5dcde37d99fae08d2\", size = 741909, upload-time = \"2026-07-18T12:16:27.361Z\" },\n+    { url = \"https://files.pythonhosted.org/packages/87/cd/40e3c78289619fc65412b2fb2bb43efd61c87cd97d29b4b397f365b20fbb/hypothesis-6.156.7-cp314-cp314-manylinux_2_17_aarch64.manylinux2014_aarch64.whl\", hash = \"sha256:24e09a82fb80166a9e92a8579537fae2858946dcf364de21bbb6fa529d5b4848\", size = 1070292, upload-time = \"2026-07-18T12:16:01.482Z\" },\n+    { url = \"https://files.pythonhosted.org/packages/6b/1b/ad83da2595b71d078f252d034aa49c396fcdd94a15a4535407fe106f0629/hypothesis-6.156.7-cp314-cp314-manylinux_2_17_x86_64.manylinux2014_x86_64.whl\", hash = \"sha256:c9e3d6120bb4069e63b555b1b3e6eac6ef662acfb3146cd2579bc226c9c92aee\", size = 1121520, upload-time = \"2026-07-18T12:15:16.638Z\" },\n+    { url = \"https://files.pythonhosted.org/packages/d0/d6/318524efa95ac9868a7589dce676c5241b56d2c6ad39b0b6e2a6d0669eff/hypothesis-6.156.7-cp314-cp314-musllinux_1_2_aarch64.whl\", hash = \"sha256:992b3c8424e9d8daf27107bbb14fb194f9155edcea28f0c6efd66b007fe7cfa3\", size = 1244807, upload-time = \"2026-07-18T12:15:35.541Z\" },\n+    { url = \"https://files.pythonhosted.org/packages/10/da/8225a4e51c2ba06152cf5e89566cb5d1eef7c16132cfe134774355677d22/hypothesis-6.156.7-cp314-cp314-musllinux_1_2_x86_64.whl\", hash = \"sha256:783033b5d398272b332705306612fd6280b23ba7fa818221cf68c08604a3a532\", size = 1288261, upload-time = \"2026-07-18T12:15:49.82Z\" },\n+    { url = \"https://files.pythonhosted.org/packages/51/6d/1722c49b2eaf728c08591e3b1a7c77a06664e8227acda5a23e323fa47969/hypothesis-6.156.7-cp314-cp314-pyemscripten_2026_0_wasm32.whl\", hash = \"sha256:d780b494c9caa06cb17b69fa87af688fc9944203d7fa050d41fba2db370bf03a\", size = 586675, upload-time = \"2026-07-18T12:16:24.252Z\" },\n+    { url = \"https://files.pythonhosted.org/packages/d3/d5/ec1da06da07ee1fe7fc2ca31fdc9f94653f02b684485fb0972e330e80a5f/hypothesis-6.156.7-cp314-cp314-win_amd64.whl\", hash = \"sha256:a612ed61dc2341d42f282caca98787e85534613381ba0d9cc2829858d293985d\", size = 638331, upload-time = \"2026-07-18T12:16:19.062Z\" },\n+    { url = \"https://files.pythonhosted.org/packages/f0/f7/d0c4fdc42d1c70c76ebeaf51295fedb1401457bd4bfef033d76a22594c8d/hypothesis-6.156.7-cp314-cp314t-macosx_10_12_x86_64.whl\", hash = \"sha256:847a07059a1029ae64c5fd1480737d3615326424cfe91c89e47e4ea3a0b543e7\", size = 747280, upload-time = \"2026-07-18T12:16:03.41Z\" },\n+    { url = \"https://files.pythonhosted.org/packages/61/c1/15fd29960f31ec95cc7300f21e74f0a54a68e0c118ca5822e817929ef70b/hypothesis-6.156.7-cp314-cp314t-macosx_11_0_arm64.whl\", hash = \"sha256:b933f54a8176d5f0e7fdf73ff933154ec5551ec0996081ae01bec75ecea1ef26\", size = 740552, upload-time = \"2026-07-18T12:15:43.098Z\" },\n+    { url = \"https://files.pythonhosted.org/packages/14/0e/22564a3e479850c86fcf835eaea8551da1f79e5f687fe1f84b7c24c40bfa/hypothesis-6.156.7-cp314-cp314t-manylinux_2_17_aarch64.manylinux2014_aarch64.whl\", hash = \"sha256:540933cdb53d0d08ee3fd47af3d78ed6b785db434afe12f08dc9f4b56400c5c9\", size = 1069465, upload-time = \"2026-07-18T12:15:32.314Z\" },\n+    { url = \"https://files.pythonhosted.org/packages/7b/e0/add146dfd54d4b8616053823da30385f4c959a80903f9b6825fc39a8a687/hypothesis-6.156.7-cp314-cp314t-manylinux_2_17_x86_64.manylinux2014_x86_64.whl\", hash = \"sha256:53f53c665a82e75da49a78e33a353dd654afa96176d7c396ea59c3574c0ed3f6\", size = 1120529, upload-time = \"2026-07-18T12:15:22.766Z\" },\n+    { url = \"https://files.pythonhosted.org/packages/12/33/4d9d4c57933b98df397a6a0d5f3700c2389358580d780661cfccbd43c836/hypothesis-6.156.7-cp314-cp314t-musllinux_1_2_aarch64.whl\", hash = \"sha256:a33a1e82149916c4662811e48870aa0dab45ecca0dd5a76e6bae39067e6f4cff\", size = 1243233, upload-time = \"2026-07-18T12:15:29.65Z\" },\n+    { url = \"https://files.pythonhosted.org/packages/47/b6/c476ba0ba65e8640e38ce3971d0a63d492d612ab3fcc724a5662395f89b6/hypothesis-6.156.7-cp314-cp314t-musllinux_1_2_x86_64.whl\", hash = \"sha256:96553167deab92c5d02d3854d865ae8e66850491eedda45f8306e88fe906e03f\", size = 1287045, upload-time = \"2026-07-18T12:16:11.136Z\" },\n+    { url = \"https://files.pythonhosted.org/packages/de/75/43e4dec9ccd56ed665f9dd3e78398453e16b41dac33ed56ea2efa92e3024/hypothesis-6.156.7-cp314-cp314t-win_amd64.whl\", hash = \"sha256:7884cea7ebe616690f976eae26cd7562dbda6030602ba32e0666681f3134d37a\", size = 638419, upload-time = \"2026-07-18T12:15:36.804Z\" },\n+    { url = \"https://files.pythonhosted.org/packages/4e/91/8932195b775d9c558dc0841b6ee25f774484ffed8f61bdb0552187cd1e81/hypothesis-6.156.7-pp311-pypy311_pp73-macosx_10_12_x86_64.whl\", hash = \"sha256:bfd514af542ca7b7a6c6f1ecaf825f074996a712e14a29382b83b9233981ba34\", size = 749266, upload-time = \"2026-07-18T12:15:52.523Z\" },\n+    { url = \"https://files.pythonhosted.org/packages/6d/d5/a69882dc126c01f04c68bb1d2b7c24e972959f2b363de4c4db32d6b1bc7b/hypothesis-6.156.7-pp311-pypy311_pp73-macosx_11_0_arm64.whl\", hash = \"sha256:f8542dccbad2592c7e6eabfa8957987bc65b6b51862df63bbc6ef75e36734287\", size = 743982, upload-time = \"2026-07-18T12:15:38.052Z\" },\n+    { url = \"https://files.pythonhosted.org/packages/00/5d/2937c75a015564e75ca2ea8ab287f82bdf5f954ff523cd1c35c27315d0e9/hypothesis-6.156.7-pp311-pypy311_pp73-manylinux_2_17_aarch64.manylinux2014_aarch64.whl\", hash = \"sha256:72e964b04ec22b2273e0646b47686682f0df5a81c122c48da8acac2e0d17b8da\", size = 1071135, upload-time = \"2026-07-18T12:15:11.819Z\" },\n+    { url = \"https://files.pythonhosted.org/packages/7c/a9/f49de6cd6d154683c3d5e5daf89eae8a1ebee394021fe7a20515bc1293bf/hypothesis-6.156.7-pp311-pypy311_pp73-manylinux_2_17_x86_64.manylinux2014_x86_64.whl\", hash = \"sha256:4d97075ab6d97dd62e940cb75f26bc6a23a3e3376324dd754df506bcfbafcab6\", size = 1122685, upload-time = \"2026-07-18T12:16:17.345Z\" },\n+    { url = \"https://files.pythonhosted.org/packages/21/6f/cfc4a6ca25c086f3622d21ef5d334de3633d5b8692a3165e16b12686ebb3/hypothesis-6.156.7-pp311-pypy311_pp73-win_amd64.whl\", hash = \"sha256:cfd381e3d32a5e85fda2038a06fcfafea953e53217ca2d4b090ca576eab70c38\", size = 641377, upload-time = \"2026-07-18T12:15:19.719Z\" },\n+]\n+\n [[package]]\n name = \"idna\"\n version = \"3.11\"\n@@ -152,6 +380,27 @@ wheels = [\n     { url = \"https://files.pythonhosted.org/packages/04/96/92447566d16df59b2a776c0fb82dbc4d9e07cd95062562af01e408583fc4/itsdangerous-2.2.0-py3-none-any.whl\", hash = \"sha256:c6242fc49e35958c8b15141343aa660db5fc54d4f13a1db01a3f5891b98700ef\", size = 16234, upload-time = \"2024-04-16T21:28:14.499Z\" },\n ]\n \n+[[package]]\n+name = \"joserfc\"\n+version = \"1.7.3\"\n+source = { registry = \"https://pypi.org/simple\" }\n+dependencies = [\n+    { name = \"cryptography\" },\n+]\n+sdist = { url = \"https://files.pythonhosted.org/packages/d4/c6/b1cac0280f8efc57626ea8804866b37099f23cae11b1485a42b213245e31/joserfc-1.7.3.tar.gz\", hash = \"sha256:116955c2587139dba20621fd0bd7fc9255fa960c9fe7f43c43ebef2e801dcfcf\", size = 233821, upload-time = \"2026-07-08T12:41:42.66Z\" }\n+wheels = [\n+    { url = \"https://files.pythonhosted.org/packages/7d/f5/650b59d1b74f5befb7a7a7e7d7c92a26b94256df3541e2b4914152cd177a/joserfc-1.7.3-py3-none-any.whl\", hash = \"sha256:7c39f3f2c943dbc03122747fa8ebbd8e156e54904cf25651b452f4d2634a6075\", size = 70982, upload-time = \"2026-07-08T12:41:41.521Z\" },\n+]\n+\n+[[package]]\n+name = \"mpmath\"\n+version = \"1.3.0\"\n+source = { registry = \"https://pypi.org/simple\" }\n+sdist = { url = \"https://files.pythonhosted.org/packages/e0/47/dd32fa426cc72114383ac549964eecb20ecfd886d1e5ccf5340b55b02f57/mpmath-1.3.0.tar.gz\", hash = \"sha256:7a28eb2a9774d00c7bc92411c19a89209d5da7c4c9a9e227be8330a23a25b91f\", size = 508106, upload-time = \"2023-03-07T16:47:11.061Z\" }\n+wheels = [\n+    { url = \"https://files.pythonhosted.org/packages/43/e3/7d92a15f894aa0c9c4b49b8ee9ac9850d6e63b03c9c32c0367a13ae62209/mpmath-1.3.0-py3-none-any.whl\", hash = \"sha256:a0b2b9fe80bbcd81a6647ff13108738cfb482d481d826cc0e02f5b35e5c88d2c\", size = 536198, upload-time = \"2023-03-07T16:47:09.197Z\" },\n+]\n+\n [[package]]\n name = \"numpy\"\n version = \"2.4.3\"\n@@ -249,6 +498,15 @@ wheels = [\n     { url = \"https://files.pythonhosted.org/packages/54/20/4d324d65cc6d9205fabedc306948156824eb9f0ee1633355a8f7ec5c66bf/pluggy-1.6.0-py3-none-any.whl\", hash = \"sha256:e920276dd6813095e9377c0bc5566d94c932c33b27a3e3945d8389c374dd4746\", size = 20538, upload-time = \"2025-05-15T12:30:06.134Z\" },\n ]\n \n+[[package]]\n+name = \"pycparser\"\n+version = \"3.0\"\n+source = { registry = \"https://pypi.org/simple\" }\n+sdist = { url = \"https://files.pythonhosted.org/packages/1b/7d/92392ff7815c21062bea51aa7b87d45576f649f16458d78b7cf94b9ab2e6/pycparser-3.0.tar.gz\", hash = \"sha256:600f49d217304a5902ac3c37e1281c9fe94e4d0489de643a9504c5cdfdfc6b29\", size = 103492, upload-time = \"2026-01-21T14:26:51.89Z\" }\n+wheels = [\n+    { url = \"https://files.pythonhosted.org/packages/0c/c3/44f3fbbfa403ea2a7c779186dc20772604442dde72947e7d01069cbe98e3/pycparser-3.0-py3-none-any.whl\", hash = \"sha256:b727414169a36b7d524c1c3e31839a521725078d7b2ff038656844266160a992\", size = 48172, upload-time = \"2026-01-21T14:26:50.693Z\" },\n+]\n+\n [[package]]\n name = \"pydantic\"\n version = \"2.12.5\"\n@@ -386,35 +644,61 @@ wheels = [\n     { url = \"https://files.pythonhosted.org/packages/3b/ab/b3226f0bd7cdcf710fbede2b3548584366da3b19b5021e74f5bde2a8fa3f/pytest-9.0.2-py3-none-any.whl\", hash = \"sha256:711ffd45bf766d5264d487b917733b453d917afd2b0ad65223959f59089f875b\", size = 374801, upload-time = \"2025-12-06T21:30:49.154Z\" },\n ]\n \n+[[package]]\n+name = \"python-multipart\"\n+version = \"0.0.32\"\n+source = { registry = \"https://pypi.org/simple\" }\n+sdist = { url = \"https://files.pythonhosted.org/packages/5b/42/55c32bb9b12693c092ad250a0e82edb5b31ddeda6eb772de5f308b3804ad/python_multipart-0.0.32.tar.gz\", hash = \"sha256:be54b7f3fa167bb83e4fcd936b887b708f4e57fe75911c02aebf53efaf8d938e\", size = 46881, upload-time = \"2026-06-04T16:18:58.647Z\" }\n+wheels = [\n+    { url = \"https://files.pythonhosted.org/packages/e1/04/e8135ebd1ad02c56ec633277529b2602ff99ff634be76cdba5744cf554fd/python_multipart-0.0.32-py3-none-any.whl\", hash = \"sha256:ff6d3f776f16878c894e52e107296ffc890e913c611b1a4ec6c44e2821fe2e23\", size = 30042, upload-time = \"2026-06-04T16:18:57.319Z\" },\n+]\n+\n [[package]]\n name = \"slug-constitution\"\n version = \"0.1.0\"\n source = { virtual = \".\" }\n dependencies = [\n+    { name = \"authlib\" },\n     { name = \"evaleval\" },\n     { name = \"fastapi\" },\n     { name = \"httpx\" },\n+    { name = \"hypothesis\" },\n     { name = \"itsdangerous\" },\n     { name = \"numpy\" },\n     { name = \"pytest\" },\n+    { name = \"python-multipart\" },\n     { name = \"starlette\" },\n+    { name = \"sympy\" },\n     { name = \"tenacity\" },\n     { name = \"uvicorn\" },\n ]\n \n [package.metadata]\n requires-dist = [\n-    { name = \"evaleval\", specifier = \">=0.2.6\" },\n+    { name = \"authlib\" },\n+    { name = \"evaleval\", specifier = \"==0.2.7\" },\n     { name = \"fastapi\" },\n     { name = \"httpx\" },\n+    { name = \"hypothesis\" },\n     { name = \"itsdangerous\" },\n     { name = \"numpy\" },\n     { name = \"pytest\" },\n+    { name = \"python-multipart\" },\n     { name = \"starlette\" },\n+    { name = \"sympy\" },\n     { name = \"tenacity\" },\n     { name = \"uvicorn\" },\n ]\n \n+[[package]]\n+name = \"sortedcontainers\"\n+version = \"2.4.0\"\n+source = { registry = \"https://pypi.org/simple\" }\n+sdist = { url = \"https://files.pythonhosted.org/packages/e8/c4/ba2f8066cceb6f23394729afe52f3bf7adec04bf9ed2c820b39e19299111/sortedcontainers-2.4.0.tar.gz\", hash = \"sha256:25caa5a06cc30b6b83d11423433f65d1f9d76c4c6a0c90e3379eaa43b9bfdb88\", size = 30594, upload-time = \"2021-05-16T22:03:42.897Z\" }\n+wheels = [\n+    { url = \"https://files.pythonhosted.org/packages/32/46/9cb0e58b2deb7f82b84065f37f3bffeb12413f947f9388e4cac22c4621ce/sortedcontainers-2.4.0-py2.py3-none-any.whl\", hash = \"sha256:a163dcaede0f1c021485e957a39245190e74249897e2ae4b2aa38595db237ee0\", size = 29575, upload-time = \"2021-05-16T22:03:41.177Z\" },\n+]\n+\n [[package]]\n name = \"starlette\"\n version = \"1.0.0\"\n@@ -428,6 +712,18 @@ wheels = [\n     { url = \"https://files.pythonhosted.org/packages/0b/c9/584bc9651441b4ba60cc4d557d8a547b5aff901af35bda3a4ee30c819b82/starlette-1.0.0-py3-none-any.whl\", hash = \"sha256:d3ec55e0bb321692d275455ddfd3df75fff145d009685eb40dc91fc66b03d38b\", size = 72651, upload-time = \"2026-03-22T18:29:45.111Z\" },\n ]\n \n+[[package]]\n+name = \"sympy\"\n+version = \"1.14.0\"\n+source = { registry = \"https://pypi.org/simple\" }\n+dependencies = [\n+    { name = \"mpmath\" },\n+]\n+sdist = { url = \"https://files.pythonhosted.org/packages/83/d3/803453b36afefb7c2bb238361cd4ae6125a569b4db67cd9e79846ba2d68c/sympy-1.14.0.tar.gz\", hash = \"sha256:d3d3fe8df1e5a0b42f0e7bdf50541697dbe7d23746e894990c030e2b05e72517\", size = 7793921, upload-time = \"2025-04-27T18:05:01.611Z\" }\n+wheels = [\n+    { url = \"https://files.pythonhosted.org/packages/a2/09/77d55d46fd61b4a135c444fc97158ef34a095e5681d0a6c10b75bf356191/sympy-1.14.0-py3-none-any.whl\", hash = \"sha256:e091cc3e99d2141a0ba2847328f5479b05d94a6635cb96148ccb3f34671bd8f5\", size = 6299353, upload-time = \"2025-04-27T18:04:59.103Z\" },\n+]\n+\n [[package]]\n name = \"tenacity\"\n version = \"9.1.4\"\n\n\nSide B — contributor: tommy-mor\nSide B — commit message:\n[00be3a29] invite system\n\nSide B — unified diff (full patch):\ndiff --git a/bb.edn b/bb.edn\nindex 50be8232847e672b3f273a2fb25ddd1d12adb7e2..818f850765370d12d58f239e287764fc3649d78b 100644\n--- a/bb.edn\n+++ b/bb.edn\n@@ -47,14 +47,16 @@\n                                            \"RUST_LOG\"      \"info\"})})))}\n \n   test\n-  {:doc \"Full test suite: integration + auth + grants\"\n+  {:doc \"Full test suite: integration + auth + grants + invites\"\n    :requires ([test.integration :as integration]\n               [test.auth :as auth]\n-              [test.grants :as grants])\n+              [test.grants :as grants]\n+              [test.invites :as invites])\n    :task (do\n            (integration/integration)\n            (auth/auth-test)\n-           (grants/grants-test))}\n+           (grants/grants-test)\n+           (invites/invites-test))}\n \n   perf\n   {:doc \"Performance test: concurrent HTTP requests to detect blocking I/O\"\ndiff --git a/cli/src/main.rs b/cli/src/main.rs\nindex e5833b0b93d8e667b94c574ba2b0f8cb758ff3df..8eda9f485bd1f7392f1e34be27176c21e20354eb 100644\n--- a/cli/src/main.rs\n+++ b/cli/src/main.rs\n@@ -105,6 +105,23 @@ enum ScopedCmd {\n         #[arg(long)]\n         json: bool,\n     },\n+\n+    /// Mint a shareable invite link (24h TTL, in-memory until redeemed). Requires Manage on the room.\n+    InviteLink {\n+        /// Comma-separated: view, post, vote, add_item, manage\n+        #[arg(long = \"caps\", value_delimiter = ',')]\n+        caps: Vec<String>,\n+        #[arg(long, default_value_t = 1)]\n+        uses: usize,\n+        #[arg(long)]\n+        json: bool,\n+    },\n+\n+    /// List principals granted access in this room (requires View or Manage)\n+    Audit {\n+        #[arg(long)]\n+        json: bool,\n+    },\n }\n \n #[derive(Subcommand, Debug)]\n@@ -514,17 +531,35 @@ fn print_thread(resp: &ThreadDetailResponse) {\n         .duration_since(std::time::UNIX_EPOCH)\n         .unwrap_or_default()\n         .as_millis() as i64;\n-    if resp.total > resp.posts.len() {\n-        let end = resp.offset + resp.posts.len();\n-        eprintln!(\"# showing {}-{} of {} posts  (--offset N --limit N to paginate)\", resp.offset, end.saturating_sub(1), resp.total);\n+    if resp.total > resp.items.len() {\n+        let end = resp.offset + resp.items.len();\n+        eprintln!(\n+            \"# showing {}-{} of {} rows  (--offset N --limit N to paginate)\",\n+            resp.offset,\n+            end.saturating_sub(1),\n+            resp.total\n+        );\n     }\n-    for (i, post) in resp.posts.iter().enumerate() {\n-        let timeago = slug_types::timeago::timeago_compact(now_ms, post.ts);\n-        let body = &post.body.trim();\n-        println!(\"<post index=\\\"{}\\\" timeago=\\\"{}\\\">\", post.index, timeago);\n-        println!(\"{}\", body);\n-        println!(\"</post>\");\n-        if i + 1 < resp.posts.len() {\n+    for (i, item) in resp.items.iter().enumerate() {\n+        match item {\n+            ThreadItem::Post {\n+                index,\n+                ts,\n+                body,\n+                ..\n+            } => {\n+                let timeago = slug_types::timeago::timeago_compact(now_ms, *ts);\n+                let body = body.trim();\n+                println!(\"<post index=\\\"{}\\\" timeago=\\\"{}\\\">\", index, timeago);\n+                println!(\"{}\", body);\n+                println!(\"</post>\");\n+            }\n+            ThreadItem::System { ts, text } => {\n+                let timeago = slug_types::timeago::timeago_compact(now_ms, *ts);\n+                println!(\"<system timeago=\\\"{}\\\">{}</system>\", timeago, text.trim());\n+            }\n+        }\n+        if i + 1 < resp.items.len() {\n             println!();\n             println!();\n         }\n@@ -1036,6 +1071,95 @@ async fn run_scoped(base: &str, room: &str, sub: ScopedCmd) -> Result<()> {\n                 }\n             }\n         },\n+        ScopedCmd::InviteLink { caps, uses, json } => {\n+            let caps: Vec<String> = caps\n+                .into_iter()\n+                .flat_map(|s| {\n+                    s.split(',')\n+                        .map(|p| p.trim().to_lowercase())\n+                        .filter(|p| !p.is_empty())\n+                        .collect::<Vec<_>>()\n+                })\n+                .collect();\n+            if caps.is_empty() {\n+                return Err(anyhow!(\"--caps is required (e.g. --caps view,post,vote)\"));\n+            }\n+            let bearer = effective_bearer().ok_or_else(|| {\n+                anyhow!(\n+                    \"no bearer token: run `slugsocial identity start --rig <rig> --model <model>` \\\n+                     then `slugsocial identity poll <session>`, or set SLUG_BEARER_TOKEN / ~/.config/slugsocial/token\"\n+                )\n+            })?;\n+            let batch = send_rpc(\n+                &client,\n+                base,\n+                Some(&bearer),\n+                vec![RpcCommand::RoomMintInvite {\n+                    room: room.to_string(),\n+                    capabilities: caps,\n+                    max_uses: uses,\n+                }],\n+            )\n+            .await?;\n+            match rpc_line_ok(&batch.results[0])? {\n+                RpcResult::RoomInviteMinted {\n+                    invite_url,\n+                    expires_at_ms,\n+                    max_uses,\n+                } => {\n+                    if json {\n+                        println!(\n+                            \"{}\",\n+                            serde_json::to_string_pretty(&serde_json::json!({\n+                                \"invite_url\": invite_url,\n+                                \"expires_at_ms\": expires_at_ms,\n+                                \"max_uses\": max_uses,\n+                            }))?\n+                        );\n+                    } else {\n+                        println!(\"{invite_url}\");\n+                        println!(\"(Expires in 24 hours. Max uses: {max_uses})\");\n+                    }\n+                }\n+                _ => return Err(anyhow!(\"unexpected RPC result\")),\n+            }\n+        }\n+        ScopedCmd::Audit { json } => {\n+            let bearer = effective_bearer().ok_or_else(|| {\n+                anyhow!(\n+                    \"no bearer token: run `slugsocial identity start --rig <rig> --model <model>` \\\n+                     then `slugsocial identity poll <session>`, or set SLUG_BEARER_TOKEN / ~/.config/slugsocial/token\"\n+                )\n+            })?;\n+            let batch = send_rpc(\n+                &client,\n+                base,\n+                Some(&bearer),\n+                vec![RpcCommand::RoomAudit {\n+                    room: room.to_string(),\n+                }],\n+            )\n+            .await?;\n+            match rpc_line_ok(&batch.results[0])? {\n+                RpcResult::RoomAudit(resp) => {\n+                    if json {\n+                        println!(\"{}\", serde_json::to_string_pretty(&resp)?);\n+                    } else {\n+                        println!(\"room {}\", resp.room);\n+                        if resp.grants.is_empty() {\n+                            println!(\"(no grants recorded)\");\n+                        } else {\n+                            let w_user = resp.grants.iter().map(|g| g.username.len()).max().unwrap_or(0);\n+                            for g in &resp.grants {\n+                                let caps = g.capabilities.join(\", \");\n+                                println!(\"{:<width$}  {}\", g.username, caps, width = w_user.max(8));\n+                            }\n+                        }\n+                    }\n+                }\n+                _ => return Err(anyhow!(\"unexpected RPC result\")),\n+            }\n+        }\n         ScopedCmd::Check { file, json } => {\n             let mut text = String::new();\n             match file {\ndiff --git a/server/src/api/auth.rs b/server/src/api/auth.rs\nindex 995ce4a61d29b024c399c656134f541ecfd880cf..b45ba39419c84af8bf2333fc9b7d47e98525c45f 100644\n--- a/server/src/api/auth.rs\n+++ b/server/src/api/auth.rs\n@@ -12,12 +12,61 @@ use tokio::sync::RwLock;\n \n use crate::{\n     api::helpers::{api_error, now_ms, sha256_hex},\n-    events::{Event, TokenIssued, UserRegistered},\n+    events::{Event, GrantAdded, TokenIssued, UserRegistered},\n     identity::{parse_agent, parse_username},\n     html::{auth_complete_page, auth_signed_in_fragment, choose_username_error_fragment, choose_username_page},\n     state::{AppState, PendingSession},\n };\n \n+/// Delegate id for browser users who land via `/join/inv_…` (no CLI agent).\n+const INVITE_BROWSER_AGENT: &str = \"00000000-0000-0000-0000-000000000000:invite:web/join\";\n+\n+async fn apply_invite_redemption(state: &AppState, invite_token: &str, grantee_username: &str) -> Result<(), String> {\n+    let now = now_ms();\n+    let ga = {\n+        let mut invites = state.invites.write().await;\n+        let Some(inv) = invites.get_mut(invite_token) else {\n+            return Err(\"invite not found\".into());\n+        };\n+        if now > inv.expires_at_ms {\n+            invites.remove(invite_token);\n+            return Err(\"invite expired\".into());\n+        }\n+        if inv.current_uses >= inv.max_uses {\n+            return Err(\"invite exhausted\".into());\n+        }\n+        inv.current_uses += 1;\n+        Event::GrantAdded(GrantAdded {\n+            ts: now,\n+            room_id: inv.room_id.clone(),\n+            username: grantee_username.to_string(),\n+            capabilities: inv.capabilities.clone(),\n+            granted_by: inv.inviter.clone(),\n+        })\n+    };\n+\n+    match state.event_log.append(&ga).await {\n+        Ok(()) => {\n+            let mut reduced = state.reduced.write().await;\n+            reduced.apply_event(ga);\n+            let mut invites = state.invites.write().await;\n+            if let Some(inv) = invites.get(invite_token) {\n+                if inv.current_uses >= inv.max_uses {\n+                    invites.remove(invite_token);\n+                }\n+            }\n+            Ok(())\n+        }\n+        Err(e) => {\n+            let mut invites = state.invites.write().await;\n+            if let Some(inv) = invites.get_mut(invite_token) {\n+                inv.current_uses = inv.current_uses.saturating_sub(1);\n+            }\n+            Err(format!(\"{e}\"))\n+        }\n+    }\n+}\n+\n fn pending_sessions(state: &AppState) -> Arc<RwLock<HashMap<String, PendingSession>>> {\n     state.pending_sessions.clone()\n }\n@@ -115,6 +164,42 @@ pub struct AuthLoginQuery {\n     pub session: String,\n }\n \n+pub async fn get_join_invite(Path(token): Path<String>, State(state): State<AppState>) -> impl IntoResponse {\n+    let token = token.trim().to_string();\n+    if token.is_empty() {\n+        return api_error(StatusCode::NOT_FOUND, \"invite invalid or expired\", None).into_response();\n+    }\n+    let now = now_ms();\n+    let valid = {\n+        let invites = state.invites.read().await;\n+        match invites.get(&token) {\n+            None => false,\n+            Some(inv) => now <= inv.expires_at_ms && inv.current_uses < inv.max_uses,\n+        }\n+    };\n+    if !valid {\n+        return api_error(StatusCode::NOT_FOUND, \"invite invalid or expired\", None).into_response();\n+    }\n+\n+    let session = format!(\"p_{}\", uuid::Uuid::new_v4().simple());\n+    let s = PendingSession {\n+        agent: INVITE_BROWSER_AGENT.to_string(),\n+        created_ts: now_ms(),\n+        provider: None,\n+        provider_id: None,\n+        redeem_invite: Some(token),\n+        complete: None,\n+    };\n+    state.pending_sessions.write().await.insert(session.clone(), s);\n+\n+    let public_url = std::env::var(\"SLUG_PUBLIC_URL\").unwrap_or_else(|_| \"http://127.0.0.1:8080\".to_string());\n+    Redirect::temporary(&format!(\n+        \"{public_url}/auth/login?session={}\",\n+        urlencoding::encode(&session)\n+    ))\n+    .into_response()\n+}\n+\n pub async fn get_auth_login(Query(q): Query<AuthLoginQuery>, State(state): State<AppState>) -> impl IntoResponse {\n     // Redirect to Google auth endpoint.\n     let sessions = pending_sessions(&state);\n@@ -205,6 +290,7 @@ pub async fn get_auth_callback(Query(q): Query<AuthCallbackQuery>, State(state):\n         s.provider = Some(\"google\".to_string());\n         s.provider_id = Some(sub.clone());\n         if let Some(username) = existing {\n+            let invite_tok = s.redeem_invite.clone();\n             let (bearer, token_event) = issue_token_for_user(&username);\n             // append token event\n             let ev = Event::TokenIssued(token_event);\n@@ -215,6 +301,11 @@ pub async fn get_auth_callback(Query(q): Query<AuthCallbackQuery>, State(state):\n                 let mut reduced = reduced_arc.write().await;\n                 reduced.apply_event(ev);\n             }\n+            if let Some(tok) = invite_tok {\n+                if let Err(e) = apply_invite_redemption(&state, &tok, &username).await {\n+                    tracing::warn!(error = %e, \"invite redemption skipped after oauth\");\n+                }\n+            }\n             s.complete = Some((username, bearer));\n             return Redirect::temporary(&format!(\"{public_url}/auth/complete\")).into_response();\n         }\n@@ -310,6 +401,16 @@ pub async fn post_choose_username(\n         reduced.apply_event(ti_ev.clone());\n     }\n \n+    // Redeem invite (if any) before marking the session complete.\n+    if let Some(tok) = {\n+        let sessions_read = sessions.read().await;\n+        sessions_read.get(&form.session).and_then(|s| s.redeem_invite.clone())\n+    } {\n+        if let Err(e) = apply_invite_redemption(&state, &tok, &canon_user).await {\n+            tracing::warn!(error = %e, \"invite redemption skipped after registration\");\n+        }\n+    }\n+\n     // Mark complete for polling.\n     {\n         let mut sessions_write = sessions.write().await;\n@@ -339,6 +440,7 @@ pub async fn post_pending_session(\n         created_ts: now_ms(),\n         provider: None,\n         provider_id: None,\n+        redeem_invite: None,\n         complete: None,\n     };\n     let sessions = pending_sessions(&state);\ndiff --git a/server/src/api/mod.rs b/server/src/api/mod.rs\nindex a1ea432932cdca0e42dc7377f0a25075fd5644c0..cb031aecebad1107dfa2898a98fb6084b28ba6e9 100644\n--- a/server/src/api/mod.rs\n+++ b/server/src/api/mod.rs\n@@ -4,6 +4,7 @@ mod rpc;\n mod validate;\n \n pub use auth::{\n+    get_join_invite,\n     get_pending_session,\n     get_whoami,\n     post_pending_session,\ndiff --git a/server/src/api/rpc.rs b/server/src/api/rpc.rs\nindex 11a76ed7a02aae588edadb7a87a43660f5669d9e..f6bbc3df71909a2da7403cd46fe4ea6ca130c692 100644\n--- a/server/src/api/rpc.rs\n+++ b/server/src/api/rpc.rs\n@@ -13,12 +13,14 @@ use slug_types::*;\n use crate::{\n     canonical_path::{canonicalize_item, canonicalize_tag},\n     dsl,\n-    events::{AgentBound, Event, GrantAdded, Ingest, RoomCreated, ThreadCapability, ThreadVisibility},\n+    events::{\n+        AgentBound, Event, GrantAdded, Ingest, RoomCreated, ThreadCapability, ThreadVisibility,\n+    },\n     identity::{parse_agent, parse_username},\n     path_types::CanonicalItemUrl,\n     ranking::{connected_components_from_voted_pairs, ranked_items_subset},\n     reducer::{scope_from_room_wire, ReducerState, ScopeId},\n-    state::AppState,\n+    state::{AppState, InviteState},\n };\n \n use super::auth::verify_bearer_principal;\n@@ -142,6 +144,27 @@ fn gen_short_id() -> String {\n     (0..7).map(|_| ALPHABET[rng.gen_range(0..ALPHABET.len())] as char).collect()\n }\n \n+fn gen_invite_token() -> String {\n+    use rand::Rng;\n+    const ALPHABET: &[u8] = b\"0123456789abcdefghijklmnopqrstuvwxyz\";\n+    let mut rng = rand::thread_rng();\n+    let tail: String = (0..16).map(|_| ALPHABET[rng.gen_range(0..ALPHABET.len())] as char).collect();\n+    format!(\"inv_{tail}\")\n+}\n+\n+const INVITE_TTL_MS: i64 = 86_400_000;\n+\n+fn capability_wire(c: ThreadCapability) -> String {\n+    match c {\n+        ThreadCapability::View => \"view\",\n+        ThreadCapability::Post => \"post\",\n+        ThreadCapability::Vote => \"vote\",\n+        ThreadCapability::AddItem => \"add_item\",\n+        ThreadCapability::Manage => \"manage\",\n+    }\n+    .to_string()\n+}\n+\n fn build_rank_response_for_content(\n     content: &crate::reducer::ContentState,\n     parent: Option<&str>,\n@@ -512,7 +535,7 @@ fn rpc_forum_thread_detail(\n             None => Err((\"post not found\".into(), None)),\n             Some((idx, ing)) => Ok(ThreadDetailResponse {\n                 thread: format!(\"#{}\", tag),\n-                posts: vec![PostRow {\n+                items: vec![ThreadItem::Post {\n                     id: ing.id.clone(),\n                     index: idx,\n                     ts: ing.ts,\n@@ -543,7 +566,7 @@ fn rpc_forum_thread_detail(\n \n     let total = filtered.len();\n     const MAX_BODY: usize = 2000;\n-    let posts: Vec<PostRow> = filtered\n+    let items: Vec<ThreadItem> = filtered\n         .into_iter()\n         .skip(offset)\n         .take(limit)\n@@ -553,7 +576,7 @@ fn rpc_forum_thread_detail(\n             } else {\n                 (ing.raw.clone(), false)\n             };\n-            PostRow {\n+            ThreadItem::Post {\n                 id: ing.id.clone(),\n                 index: idx,\n                 ts: ing.ts,\n@@ -566,7 +589,7 @@ fn rpc_forum_thread_detail(\n \n     Ok(ThreadDetailResponse {\n         thread: format!(\"#{}\", tag),\n-        posts,\n+        items,\n         total,\n         offset,\n     })\n@@ -1007,7 +1030,7 @@ pub async fn handle_rpc_batch(\n             RpcCommand::RoomGrant {\n                 room,\n                 username,\n-                capability,\n+                capabilities,\n             } => {\n                 let principal = {\n                     let reduced = state.reduced.read().await;\n@@ -1022,6 +1045,8 @@ pub async fn handle_rpc_batch(\n                         };\n                         if !can_manage {\n                             line_err(\"requires Manage capability\", None)\n+                        } else if capabilities.is_empty() {\n+                            line_err(\"capabilities must not be empty\", None)\n                         } else {\n                             match parse_username(&username) {\n                                 Err(msg) => line_err(\"invalid username\", Some(msg)),\n@@ -1033,14 +1058,18 @@ pub async fn handle_rpc_batch(\n                                     if !user_exists {\n                                         line_err(format!(\"user @{target} not found\"), None)\n                                     } else {\n-                                        match parse_capability(&capability) {\n+                                        let caps: Result<Vec<ThreadCapability>, String> = capabilities\n+                                            .iter()\n+                                            .map(|c| parse_capability(c.trim()))\n+                                            .collect();\n+                                        match caps {\n                                             Err(msg) => line_err(msg, None),\n-                                            Ok(cap) => {\n+                                            Ok(caps) => {\n                                                 let ga_ev = Event::GrantAdded(GrantAdded {\n                                                     ts: now_ms(),\n                                                     room_id: room,\n                                                     username: target,\n-                                                    capabilities: vec![cap],\n+                                                    capabilities: caps,\n                                                     granted_by: principal,\n                                                 });\n                                                 if let Err(e) = state.event_log.append(&ga_ev).await {\n@@ -1059,6 +1088,114 @@ pub async fn handle_rpc_batch(\n                     }\n                 }\n             }\n+            RpcCommand::RoomMintInvite {\n+                room,\n+                capabilities,\n+                max_uses,\n+            } => {\n+                let principal = {\n+                    let reduced = state.reduced.read().await;\n+                    verify_bearer_principal(&headers, &*reduced)\n+                };\n+                match principal {\n+                    Err((_, m)) => line_err(m, None),\n+                    Ok(principal) => {\n+                        let can_manage = {\n+                            let reduced = state.reduced.read().await;\n+                            reduced.user_has_cap(&room, &principal, ThreadCapability::Manage)\n+                        };\n+                        if !can_manage {\n+                            line_err(\"requires Manage capability\", None)\n+                        } else if capabilities.is_empty() {\n+                            line_err(\"capabilities must not be empty\", None)\n+                        } else {\n+                            match capabilities\n+                                .iter()\n+                                .map(|c| parse_capability(c.trim()))\n+                                .collect::<Result<Vec<ThreadCapability>, String>>()\n+                            {\n+                                Err(msg) => line_err(msg, None),\n+                                Ok(caps) => {\n+                                    let max_uses = max_uses.max(1).min(100_000);\n+                                    let now = now_ms();\n+                                    let expires_at_ms = now + INVITE_TTL_MS;\n+                                    let token = loop {\n+                                        let t = gen_invite_token();\n+                                        let taken = {\n+                                            let invites = state.invites.read().await;\n+                                            invites.contains_key(&t)\n+                                        };\n+                                        if !taken {\n+                                            break t;\n+                                        }\n+                                    };\n+                                    let inv = InviteState {\n+                                        room_id: room.clone(),\n+                                        capabilities: caps,\n+                                        expires_at_ms,\n+                                        max_uses,\n+                                        current_uses: 0,\n+                                        inviter: principal,\n+                                    };\n+                                    state.invites.write().await.insert(token.clone(), inv);\n+                                    let public_url = std::env::var(\"SLUG_PUBLIC_URL\")\n+                                        .unwrap_or_else(|_| \"http://127.0.0.1:8080\".to_string());\n+                                    let invite_url = format!(\"{public_url}/join/{token}\");\n+                                    line_ok(RpcResult::RoomInviteMinted {\n+                                        invite_url,\n+                                        expires_at_ms: Some(expires_at_ms),\n+                                        max_uses,\n+                                    })\n+                                }\n+                            }\n+                        }\n+                    }\n+                }\n+            }\n+            RpcCommand::RoomAudit { room } => {\n+                let principal = {\n+                    let reduced = state.reduced.read().await;\n+                    verify_bearer_principal(&headers, &*reduced)\n+                };\n+                match principal {\n+                    Err((_, m)) => line_err(m, None),\n+                    Ok(principal) => {\n+                        let reduced = state.reduced.read().await;\n+                        if !reduced.rooms.contains_key(&room) {\n+                            line_err(\"unknown room\", None)\n+                        } else {\n+                            let can_audit = reduced.user_has_cap(&room, &principal, ThreadCapability::View)\n+                                || reduced.user_has_cap(&room, &principal, ThreadCapability::Manage);\n+                            if !can_audit {\n+                                line_err(\"requires View or Manage capability\", None)\n+                            } else {\n+                                let grants: Vec<RoomAuditEntry> = reduced\n+                                    .grants\n+                                    .get(&room)\n+                                    .map(|m| {\n+                                        let mut v: Vec<RoomAuditEntry> = m\n+                                            .iter()\n+                                            .map(|(username, caps)| {\n+                                                let mut c: Vec<String> =\n+                                                    caps.iter().copied().map(capability_wire).collect();\n+                                                c.sort();\n+                                                RoomAuditEntry {\n+                                                    username: username.clone(),\n+                                                    capabilities: c,\n+                                                }\n+                                            })\n+                                            .collect();\n+                                        v.sort_by(|a, b| a.username.cmp(&b.username));\n+                                        v\n+                                    })\n+                                    .unwrap_or_default();\n+                                line_ok(RpcResult::RoomAudit(RoomAuditResponse { room, grants }))\n+                            }\n+                        }\n+                    }\n+                }\n+            }\n+            RpcCommand::RoomRevoke { .. } => line_err(\"RoomRevoke is not implemented yet\", None),\n             RpcCommand::GetGlobalRank {\n                 room,\n                 limit,\ndiff --git a/server/src/events.rs b/server/src/events.rs\nindex 125005d89ade7b22c9b6d997f0ed81781df5e7ec..9e60f2c218f5c871a93e855e415dd984e3a017c5 100644\n--- a/server/src/events.rs\n+++ b/server/src/events.rs\n@@ -26,6 +26,8 @@ pub enum Event {\n     RoomCreated(RoomCreated),\n     GrantAdded(GrantAdded),\n     GrantRevoked(GrantRevoked),\n+    InviteMinted(InviteMinted),\n+    InviteRedeemed(InviteRedeemed),\n     /// Ingest of a DSL+prose body. Identity and routing live in event metadata.\n     Ingest(Ingest),\n }\n@@ -82,6 +84,25 @@ pub struct GrantRevoked {\n     pub revoked_by: String,\n }\n \n+#[derive(Debug, Clone, Serialize, Deserialize, PartialEq, Eq)]\n+pub struct InviteMinted {\n+    pub ts: i64,\n+    pub token: String,\n+    pub room_id: String,\n+    pub capabilities: Vec<ThreadCapability>,\n+    pub inviter: String,\n+    pub max_uses: u32,\n+    #[serde(default, skip_serializing_if = \"Option::is_none\")]\n+    pub expires_ts_ms: Option<i64>,\n+}\n+\n+#[derive(Debug, Clone, Serialize, Deserialize, PartialEq, Eq)]\n+pub struct InviteRedeemed {\n+    pub ts: i64,\n+    pub token: String,\n+    pub username: String,\n+}\n+\n #[derive(Debug, Clone, Serialize, Deserialize, PartialEq, Eq)]\n pub struct Ingest {\n     /// Unix timestamp in milliseconds.\ndiff --git a/server/src/lib.rs b/server/src/lib.rs\nindex d00b56d909e1fabd1d122d054dd02785e13e0bd8..bf2f73d4d0f26a357961e88c52c3b4f72626af81 100644\n--- a/server/src/lib.rs\n+++ b/server/src/lib.rs\n@@ -27,6 +27,7 @@ pub fn create_app(state: AppState) -> Router {\n     Router::new()\n         .route(\"/healthz\", axum::routing::get(|| async { \"ok\" }))\n         .route(\"/static/:filename\", axum::routing::get(crate::html::serve_theme_css))\n+        .route(\"/join/:token\", axum::routing::get(api::get_join_invite))\n         .route(\"/auth/login\", axum::routing::get(api::get_auth_login))\n         .route(\"/auth/callback\", axum::routing::get(api::get_auth_callback))\n         .route(\"/auth/complete\", axum::routing::get(api::get_auth_complete))\ndiff --git a/server/src/reducer.rs b/server/src/reducer.rs\nindex 118cb19f4df4a083df2878ca7a1424f3d63de851..5190d0a7ee3d545a786a68fef483322aafdce7f9 100644\n--- a/server/src/reducer.rs\n+++ b/server/src/reducer.rs\n@@ -3,7 +3,7 @@ use std::collections::{HashMap, HashSet, VecDeque};\n use serde::{Deserialize, Serialize};\n \n use crate::canonical_path::canonicalize_tag;\n-use crate::events::{Event, Ingest, ThreadCapability};\n+use crate::events::{Event, Ingest, ThreadCapability, ThreadVisibility};\n use crate::path_types::CanonicalItemUrl;\n \n #[derive(Debug, Clone, Hash, PartialEq, Eq, PartialOrd, Ord)]\n@@ -156,6 +156,41 @@ pub struct RoomState {\n     pub visibility: crate::events::ThreadVisibility,\n }\n \n+/// Durable invite link state (from [`crate::events::InviteMinted`] / [`crate::events::InviteRedeemed`]).\n+#[derive(Debug, Clone)]\n+pub struct ActiveInviteState {\n+    pub room_id: String,\n+    pub capabilities: HashSet<ThreadCapability>,\n+    pub inviter: String,\n+    pub uses_remaining: u32,\n+    pub expires_ts_ms: Option<i64>,\n+}\n+\n+#[derive(Clone, Debug)]\n+pub enum RoomTimelineKind {\n+    RoomCreated {\n+        owner: String,\n+        slug: String,\n+        visibility: ThreadVisibility,\n+    },\n+    GrantAdded {\n+        username: String,\n+        granted_by: String,\n+        capabilities: Vec<ThreadCapability>,\n+    },\n+    GrantRevoked {\n+        username: String,\n+        revoked_by: String,\n+        capabilities: Vec<ThreadCapability>,\n+    },\n+}\n+\n+#[derive(Clone, Debug)]\n+pub struct RoomTimelineEntry {\n+    pub ts: i64,\n+    pub kind: RoomTimelineKind,\n+}\n+\n #[derive(Debug, Clone)]\n pub struct ForumThreadState {\n     pub last_activity_ts: i64,\n@@ -210,6 +245,10 @@ pub struct ReducerState {\n     pub ingests_ordered: Vec<String>,\n     /// room_id → username → capabilities\n     pub grants: HashMap<String, HashMap<String, HashSet<ThreadCapability>>>,\n+    /// room_id → chronological room admin lines (for thread UI).\n+    pub room_timeline: HashMap<String, Vec<RoomTimelineEntry>>,\n+    /// Invite token → active invite (absent when fully consumed or never minted).\n+    pub invites: HashMap<String, ActiveInviteState>,\n }\n \n impl ReducerState {\n@@ -225,6 +264,20 @@ impl ReducerState {\n             .unwrap_or(false)\n     }\n \n+    /// Invite link is present, not expired, and has uses left.\n+    pub fn invite_token_active(&self, token: &str, now_ms: i64) -> Option<&ActiveInviteState> {\n+        let inv = self.invites.get(token)?;\n+        if inv.uses_remaining == 0 {\n+            return None;\n+        }\n+        if let Some(exp) = inv.expires_ts_ms {\n+            if now_ms > exp {\n+                return None;\n+            }\n+        }\n+        Some(inv)\n+    }\n+\n     pub fn content_for_scope_mut(&mut self, scope: ScopeId) -> &mut ContentState {\n         self.content.entry(scope).or_default()\n     }\n@@ -356,6 +409,17 @@ impl ReducerState {\n                         visibility: rc.visibility,\n                     },\n                 );\n+                self.room_timeline\n+                    .entry(rc.room_id.clone())\n+                    .or_default()\n+                    .push(RoomTimelineEntry {\n+                        ts: rc.ts,\n+                        kind: RoomTimelineKind::RoomCreated {\n+                            owner: rc.owner.clone(),\n+                            slug: rc.slug.clone(),\n+                            visibility: rc.visibility,\n+                        },\n+                    });\n             }\n             Event::Ingest(mut ing) => {\n                 ing.thread_tag = canonicalize_tag(&ing.thread_tag);\n@@ -525,18 +589,31 @@ impl ReducerState {\n                 nav!(self.actor_last_post_ts, keypath(ing.principal.clone()), setval(ing.ts));\n             }\n             Event::GrantAdded(ga) => {\n+                let room_id = ga.room_id.clone();\n                 let caps = self.grants\n                     .entry(ga.room_id)\n                     .or_default()\n-                    .entry(ga.username)\n+                    .entry(ga.username.clone())\n                     .or_default();\n-                for cap in ga.capabilities {\n+                for cap in ga.capabilities.iter().copied() {\n                     caps.insert(cap);\n                 }\n+                self.room_timeline\n+                    .entry(room_id)\n+                    .or_default()\n+                    .push(RoomTimelineEntry {\n+                        ts: ga.ts,\n+                        kind: RoomTimelineKind::GrantAdded {\n+                            username: ga.username.clone(),\n+                            granted_by: ga.granted_by.clone(),\n+                            capabilities: ga.capabilities.clone(),\n+                        },\n+                    });\n             }\n             Event::GrantRevoked(gr) => {\n+                let room_id = gr.room_id.clone();\n                 if let Some(room_grants) = self.grants.get_mut(&gr.room_id) {\n-                    let username = gr.username;\n+                    let username = gr.username.clone();\n                     if let Some(caps) = room_grants.get_mut(&username) {\n                         for cap in &gr.capabilities {\n                             caps.remove(cap);\n@@ -549,6 +626,37 @@ impl ReducerState {\n                         self.grants.remove(&gr.room_id);\n                     }\n                 }\n+                self.room_timeline\n+                    .entry(room_id)\n+                    .or_default()\n+                    .push(RoomTimelineEntry {\n+                        ts: gr.ts,\n+                        kind: RoomTimelineKind::GrantRevoked {\n+                            username: gr.username.clone(),\n+                            revoked_by: gr.revoked_by.clone(),\n+                            capabilities: gr.capabilities.clone(),\n+                        },\n+                    });\n+            }\n+            Event::InviteMinted(im) => {\n+                self.invites.insert(\n+                    im.token.clone(),\n+                    ActiveInviteState {\n+                        room_id: im.room_id.clone(),\n+                        capabilities: im.capabilities.iter().copied().collect(),\n+                        inviter: im.inviter.clone(),\n+                        uses_remaining: im.max_uses,\n+                        expires_ts_ms: im.expires_ts_ms,\n+                    },\n+                );\n+            }\n+            Event::InviteRedeemed(ir) => {\n+                if let Some(inv) = self.invites.get_mut(&ir.token) {\n+                    inv.uses_remaining = inv.uses_remaining.saturating_sub(1);\n+                    if inv.uses_remaining == 0 {\n+                        self.invites.remove(&ir.token);\n+                    }\n+                }\n             }\n         }\n     }\n@@ -570,6 +678,8 @@ impl Default for ReducerState {\n             actor_last_post_ts: HashMap::new(),\n             ingests_ordered: Vec::new(),\n             grants: HashMap::new(),\n+            room_timeline: HashMap::new(),\n+            invites: HashMap::new(),\n         }\n     }\n }\ndiff --git a/server/src/state.rs b/server/src/state.rs\nindex b1ff2330903780cbe0cdf35964cb166eb2423d7d..628fd5921b34ba53ac0ca6b6fd33957ca09129b9 100644\n--- a/server/src/state.rs\n+++ b/server/src/state.rs\n@@ -1,8 +1,20 @@\n+use std::collections::HashMap;\n use std::sync::Arc;\n \n use tokio::sync::{broadcast, RwLock};\n \n-use crate::{event_log::EventLog, reducer::ReducerState};\n+use crate::{event_log::EventLog, events::ThreadCapability, reducer::ReducerState};\n+\n+/// Ephemeral invite link (24h TTL, in-memory only; not written to the event log).\n+#[derive(Debug, Clone)]\n+pub struct InviteState {\n+    pub room_id: String,\n+    pub capabilities: Vec<ThreadCapability>,\n+    pub expires_at_ms: i64,\n+    pub max_uses: usize,\n+    pub current_uses: usize,\n+    pub inviter: String,\n+}\n \n #[derive(Debug, Clone)]\n pub struct PendingSession {\n@@ -10,6 +22,8 @@ pub struct PendingSession {\n     pub created_ts: i64,\n     pub provider: Option<String>,\n     pub provider_id: Option<String>,\n+    /// When set, successful OAuth completion redeems this invite token and appends [`crate::events::GrantAdded`].\n+    pub redeem_invite: Option<String>,\n     pub complete: Option<(String /*username*/, String /*bearer*/ )>,\n }\n \n@@ -42,7 +56,9 @@ pub struct AppState {\n     pub cfg: Arc<AppConfig>,\n     pub event_log: Arc<EventLog>,\n     pub reduced: Arc<RwLock<ReducerState>>,\n-    pub pending_sessions: Arc<RwLock<std::collections::HashMap<String, PendingSession>>>,\n+    pub pending_sessions: Arc<RwLock<HashMap<String, PendingSession>>>,\n+    /// Ephemeral invite tokens (`inv_…`) until expiry or exhaustion.\n+    pub invites: Arc<RwLock<HashMap<String, InviteState>>>,\n     /// Broadcast channel for SSE live-streaming. Capacity = 64 events.\n     pub stream_tx: broadcast::Sender<StreamEvent>,\n     /// Broadcast channel for web SSE HTML fragments (poem pattern). Capacity = 64.\n@@ -58,7 +74,8 @@ impl AppState {\n             cfg: Arc::new(cfg),\n             event_log: Arc::new(event_log),\n             reduced: Arc::new(RwLock::new(ReducerState::default())),\n-            pending_sessions: Arc::new(RwLock::new(std::collections::HashMap::new())),\n+            pending_sessions: Arc::new(RwLock::new(HashMap::new())),\n+            invites: Arc::new(RwLock::new(HashMap::new())),\n             stream_tx,\n             html_tx,\n         }\ndiff --git a/server/src/timeline.rs b/server/src/timeline.rs\nnew file mode 100644\nindex 0000000000000000000000000000000000000000..251158943ab36d3015268e35f6bdd01c3f42ab3b\n--- /dev/null\n+++ b/server/src/timeline.rs\n@@ -0,0 +1,153 @@\n+//! Room admin lines merged into forum thread views.\n+\n+use crate::{\n+    canonical_path::canonicalize_tag,\n+    reducer::{ReducerState, RoomTimelineEntry, RoomTimelineKind},\n+};\n+\n+fn cap_label(c: crate::events::ThreadCapability) -> &'static str {\n+    use crate::events::ThreadCapability::*;\n+    match c {\n+        View => \"view\",\n+        Post => \"post\",\n+        Vote => \"vote\",\n+        AddItem => \"add_item\",\n+        Manage => \"manage\",\n+    }\n+}\n+\n+fn caps_list(caps: &[crate::events::ThreadCapability]) -> String {\n+    let mut v: Vec<_> = caps.iter().map(|c| cap_label(*c)).collect();\n+    v.sort();\n+    v.join(\", \")\n+}\n+\n+/// Human-readable system line for the thread feed.\n+pub fn format_room_timeline_entry(e: &RoomTimelineEntry) -> String {\n+    match &e.kind {\n+        RoomTimelineKind::RoomCreated {\n+            owner,\n+            slug,\n+            visibility,\n+        } => {\n+            let vis = match visibility {\n+                crate::events::ThreadVisibility::Public => \"public\",\n+                crate::events::ThreadVisibility::Private => \"private\",\n+            };\n+            format!(\"@{owner} created room #{slug} ({vis})\")\n+        }\n+        RoomTimelineKind::GrantAdded {\n+            username,\n+            granted_by,\n+            capabilities,\n+        } => {\n+            format!(\n+                \"@{granted_by} granted @{} {}\",\n+                username,\n+                caps_list(capabilities)\n+            )\n+        }\n+        RoomTimelineKind::GrantRevoked {\n+            username,\n+            revoked_by,\n+            capabilities,\n+        } => {\n+            format!(\n+                \"@{revoked_by} revoked @{} {}\",\n+                username,\n+                caps_list(capabilities)\n+            )\n+        }\n+    }\n+}\n+\n+#[derive(Clone, Debug)]\n+pub enum MergedThreadRow {\n+    System { ts: i64, text: String },\n+    Post {\n+        index: usize,\n+        id: String,\n+        ts: i64,\n+        principal: String,\n+        raw: String,\n+    },\n+}\n+\n+/// Merge room admin lines with thread ingests for one room + tag. Oldest first.\n+/// `actor_prefix` filters posts only (system lines always included).\n+pub fn merge_thread_rows(\n+    reduced: &ReducerState,\n+    room_wire: &str,\n+    thread_tag: &str,\n+    since: Option<i64>,\n+    before: Option<i64>,\n+    actor_prefix: &str,\n+) -> Vec<MergedThreadRow> {\n+    let scope = crate::reducer::scope_from_room_wire(room_wire);\n+    let tag = canonicalize_tag(thread_tag);\n+    let key = (scope.clone(), tag.clone());\n+\n+    let mut rows: Vec<MergedThreadRow> = Vec::new();\n+\n+    if let Some(entries) = reduced.room_timeline.get(room_wire.trim()) {\n+        for e in entries {\n+            if since.map_or(true, |s| e.ts >= s) && before.map_or(true, |b| e.ts < b) {\n+                rows.push(MergedThreadRow::System {\n+                    ts: e.ts,\n+                    text: format_room_timeline_entry(e),\n+                });\n+            }\n+        }\n+    }\n+\n+    let all_ids: Vec<String> = reduced\n+        .ingests_by_scope_thread\n+        .get(&key)\n+        .map(|q| q.iter().rev().cloned().collect())\n+        .unwrap_or_default();\n+\n+    for (idx, id) in all_ids.into_iter().enumerate() {\n+        let Some(ing) = reduced.ingests_by_id.get(&id) else {\n+            continue;\n+        };\n+        if since.map_or(true, |s| ing.ts >= s) && before.map_or(true, |b| ing.ts < b) {\n+            if !actor_prefix.is_empty()\n+                && !ing\n+                    .principal\n+                    .to_lowercase()\n+                    .starts_with(actor_prefix)\n+            {\n+                continue;\n+            }\n+            rows.push(MergedThreadRow::Post {\n+                index: idx,\n+                id: ing.id.clone(),\n+                ts: ing.ts,\n+                principal: ing.principal.clone(),\n+                raw: ing.raw.clone(),\n+            });\n+        }\n+    }\n+\n+    rows.sort_by(|a, b| {\n+        let ta = match a {\n+            MergedThreadRow::System { ts, .. } | MergedThreadRow::Post { ts, .. } => *ts,\n+        };\n+        let tb = match b {\n+            MergedThreadRow::System { ts, .. } | MergedThreadRow::Post { ts, .. } => *ts,\n+        };\n+        ta.cmp(&tb)\n+    });\n+    rows\n+}\n+\n+/// Public forum thread (`room_wire == \"public\"`): same merge (timeline usually empty).\n+pub fn merge_public_thread_rows(\n+    reduced: &ReducerState,\n+    thread_tag: &str,\n+    since: Option<i64>,\n+    before: Option<i64>,\n+    actor_prefix: &str,\n+) -> Vec<MergedThreadRow> {\n+    merge_thread_rows(reduced, \"public\", thread_tag, since, before, actor_prefix)\n+}\ndiff --git a/test/grants.bb b/test/grants.bb\nindex 10ef0f08ce1c3945e5f1634314e6aebcf6810cd2..4ded5ce92576cdea653cce0ba8a751be4374731a 100644\n--- a/test/grants.bb\n+++ b/test/grants.bb\n@@ -105,7 +105,7 @@\n        ;; Alice grants bob View only.\n        (println \"\\nalice grants bob View only…\")\n        (assert! (rpc-line-ok? (:parsed (rpc-batch! base-url alice-token\n-                                                   [{\"RoomGrant\" {\"room\" room-id \"username\" \"bob\" \"capability\" \"view\"}}])))\n+                                                   [{\"RoomGrant\" {\"room\" room-id \"username\" \"bob\" \"capabilities\" [\"view\"]}}])))\n                 \"grant View RPC ok\")\n \n        (println \"\\nbob (View only) tries to post prose…\")\n@@ -117,7 +117,7 @@\n        ;; Alice grants bob Post.\n        (println \"\\nalice grants bob Post…\")\n        (assert! (rpc-line-ok? (:parsed (rpc-batch! base-url alice-token\n-                                                   [{\"RoomGrant\" {\"room\" room-id \"username\" \"bob\" \"capability\" \"post\"}}])))\n+                                                   [{\"RoomGrant\" {\"room\" room-id \"username\" \"bob\" \"capabilities\" [\"post\"]}}])))\n                 \"grant Post RPC ok\")\n \n        (println \"\\nbob (View + Post) posts prose…\")\n@@ -143,7 +143,7 @@\n        ;; Alice grants bob Vote.\n        (println \"\\nalice grants bob Vote…\")\n        (assert! (rpc-line-ok? (:parsed (rpc-batch! base-url alice-token\n-                                                   [{\"RoomGrant\" {\"room\" room-id \"username\" \"bob\" \"capability\" \"vote\"}}])))\n+                                                   [{\"RoomGrant\" {\"room\" room-id \"username\" \"bob\" \"capabilities\" [\"vote\"]}}])))\n                 \"grant Vote RPC ok\")\n \n        (println \"\\nbob (View + Post + Vote) votes…\")\ndiff --git a/test/invites.bb b/test/invites.bb\nnew file mode 100644\nindex 0000000000000000000000000000000000000000..f72b1e630a6856174cdef11eb977e2f81b16e551\n--- /dev/null\n+++ b/test/invites.bb\n@@ -0,0 +1,150 @@\n+(ns test.invites\n+  \"Ephemeral invite links: mint via RPC, GET /join → pending session + OAuth, redemption → GrantAdded,\n+  RoomAudit, post succeeds, second GET /join returns 404 when max_uses exhausted.\"\n+  (:require [babashka.fs :as fs]\n+            [cheshire.core :as json]\n+            [clojure.string :as str]\n+            [test.common :as common]\n+            [test.oauth :as oauth]))\n+\n+(def ^:private counts (atom {:pass 0 :fail 0}))\n+\n+(defn- assert! [pred msg]\n+  (common/test-assert! counts pred msg))\n+\n+(defn- bearer [token] {\"Authorization\" (str \"Bearer \" token)})\n+\n+(defn- rpc-batch! [base-url token cmds]\n+  (let [resp (oauth/http-post-json (str base-url \"/api/v0/rpc\") cmds :headers (bearer token))]\n+    {:status (:status resp)\n+     :parsed (json/parse-string (:body resp) false)}))\n+\n+(defn- rpc-line-ok? [parsed]\n+  (true? (get-in parsed [\"results\" 0 \"ok\"])))\n+\n+(defn- session-from-login-location [loc]\n+  (when loc\n+    (let [qpart (if (str/includes? loc \"?\")\n+                  (-> loc (str/split #\"\\?\" 2) second)\n+                  \"\")\n+          qpart (if (str/includes? qpart \"#\")\n+                  (-> qpart (str/split #\"#\" 2) first)\n+                  qpart)\n+          m (oauth/parse-query qpart)]\n+      (some-> (get m :session) str))))\n+\n+(defn- invite-token-from-url [invite-url]\n+  (second (re-find #\"/join/(inv_[^/?#]+)\" (str invite-url))))\n+\n+(defn- register-user! [base-url session-agent username]\n+  (oauth/complete-registration! base-url\n+                                :agent session-agent\n+                                :username username\n+                                :assert! (fn [pred msg] (assert! pred msg))))\n+\n+(defn- ingest! [base-url token room thread delegate text]\n+  (rpc-batch! base-url token\n+              [{\"Post\" {\"room\" room\n+                        \"thread_tag\" thread\n+                        \"delegate\" delegate\n+                        \"text\" text\n+                        \"return_rank_diff\" false}}]))\n+\n+(defn invites-test [& _args]\n+  (println \"\\n━━━ ephemeral invite + audit integration check ━━━\\n\")\n+  (reset! counts {:pass 0 :fail 0})\n+\n+  (println \"building server binary…\")\n+  (common/letlocals\n+   (bind build (common/run-cargo-build-release! [\"slugsocial-server\"]))\n+   (assert! (zero? (:exit build)) \"cargo build succeeds\")\n+   (bind server-bin \"target/release/slugsocial-server\")\n+\n+   (bind tmp-dir (str (fs/create-temp-dir {:prefix \"slug-invites-\"})))\n+   (bind slug-port (common/pick-port))\n+   (bind google-port (common/pick-port))\n+   (bind base-url (str \"http://127.0.0.1:\" slug-port))\n+   (bind google-url (str \"http://127.0.0.1:\" google-port))\n+\n+   (bind !server (atom nil))\n+   (bind !google (atom nil))\n+\n+   (bind server-env (common/slug-server-env tmp-dir base-url google-url slug-port))\n+   (try\n+     (println (str \"starting mock google on :\" google-port))\n+     (reset! !google (oauth/start-mock-google google-port\n+                                              :google-users [\"google-user-alice\" \"google-user-bob\"]))\n+\n+     (println (str \"starting server on :\" slug-port))\n+     (reset! !server (common/start-server server-bin server-env))\n+     (assert! (common/wait-for-server base-url 10000) \"server responds to /healthz\")\n+\n+     (println \"\\nregistering alice…\")\n+     (let [alice-token (register-user! base-url\n+                                       \"00000000-0000-0000-0000-000000000001:test:local/dev\"\n+                                       \"alice\")\n+\n+           _ (println \"\\nalice creates private room…\")\n+           create (rpc-batch! base-url alice-token\n+                              [{\"RoomCreate\" {\"slug\" \"invite-demo\" \"visibility\" \"private\"}}])\n+           _ (assert! (= 200 (:status create)) \"room create HTTP 200\")\n+           _ (assert! (rpc-line-ok? (:parsed create)) \"room create RPC ok\")\n+           room-id (get-in (:parsed create) [\"results\" 0 \"result\" \"RoomCreated\" \"room_id\"])\n+           _ (assert! (some? room-id) \"room_id present\")\n+\n+           _ (println \"\\nalice mints invite (view,post,vote uses=1)…\")\n+           mint (rpc-batch! base-url alice-token\n+                            [{\"RoomMintInvite\" {\"room\" room-id\n+                                                \"capabilities\" [\"view\" \"post\" \"vote\"]\n+                                                \"max_uses\" 1}}])\n+           _ (assert! (= 200 (:status mint)) \"mint HTTP 200\")\n+           _ (assert! (rpc-line-ok? (:parsed mint)) \"mint RPC ok\")\n+           invite-url (get-in (:parsed mint) [\"results\" 0 \"result\" \"RoomInviteMinted\" \"invite_url\"])\n+           inv-tok (invite-token-from-url invite-url)\n+           _ (assert! (some? inv-tok) \"invite token parsed from URL\")\n+\n+           _ (println \"\\nGET /join/:token (expect redirect + session)…\")\n+           join-resp (oauth/http-get-no-redirect (str base-url \"/join/\" inv-tok))\n+           _ (assert! (contains? #{302 307} (:status join-resp))\n+                      (str \"join returns redirect (got status \" (:status join-resp) \")\"))\n+           sess (session-from-login-location (:location join-resp))\n+           _ (assert! (and (some? sess) (str/starts-with? sess \"p_\")) \"Location carries session=p_…\")\n+\n+           _ (println \"\\nbob completes OAuth via invite session…\")\n+           bob-token (oauth/complete-pending-session! base-url sess \"bob\"\n+                                                      :assert! (fn [pred msg] (assert! pred msg)))\n+\n+           _ (println \"\\nalice runs RoomAudit…\")\n+           audit (rpc-batch! base-url alice-token [{\"RoomAudit\" {\"room\" room-id}}])\n+           _ (assert! (rpc-line-ok? (:parsed audit)) \"audit RPC ok\")\n+           grants (get-in (:parsed audit) [\"results\" 0 \"result\" \"RoomAudit\" \"grants\"])\n+           bob-entry (first (filter #(= \"bob\" (get % \"username\")) grants))\n+           _ (assert! (some? bob-entry) \"audit lists bob\")\n+           bob-caps (set (get bob-entry \"capabilities\"))\n+           _ (assert! (= bob-caps #{\"view\" \"post\" \"vote\"}) \"bob has view, post, vote\")\n+\n+           _ (println \"\\nbob posts prose to private room…\")\n+           _ (assert! (rpc-line-ok? (:parsed (ingest! base-url bob-token room-id \"main\"\n+                                                      \"00000000-0000-0000-0000-000000000002:test:local/dev\"\n+                                                      \"Hello via invite link.\")))\n+                      \"bob post succeeds\")\n+\n+           _ (println \"\\nsecond GET /join (invite exhausted → 404)…\")\n+           join2 (oauth/http-get-no-redirect (str base-url \"/join/\" inv-tok))\n+           _ (assert! (= 404 (:status join2)) \"exhausted invite returns 404\")]\n+\n+       (println \"\\ninvite lifecycle OK.\"))\n+\n+     (finally\n+       (when-some [s @!server] (common/kill-server s))\n+       (when-some [g @!google] ((:stop-fn g)))\n+       (fs/delete-tree tmp-dir)))\n+\n+   (bind {pass :pass fail :fail} @counts)\n+   (if (zero? fail)\n+     (println (str \"\\n\" common/ansi-green \"━━━ \" pass \" invite checks passed ━━━\" common/ansi-reset \"\\n\"))\n+     (do (println (str \"\\n\" common/ansi-red \"━━━ \" fail \" invite checks FAILED ━━━\" common/ansi-reset \"\\n\"))\n+         (System/exit 1)))))\n+\n+(when (= *file* (System/getProperty \"babashka.file\"))\n+  (invites-test))\ndiff --git a/test/oauth.bb b/test/oauth.bb\nindex b69459acd17c23c023170d8dd93fe45bb49c8d88..efb3f3e66346ffde81bf9622d75c3a6ec89f8db2 100644\n--- a/test/oauth.bb\n+++ b/test/oauth.bb\n@@ -21,6 +21,21 @@\n           resp (.send (http-client) req (java.net.http.HttpResponse$BodyHandlers/ofString))]\n       {:status (.statusCode resp) :body (.body resp) :headers (.map (.headers resp))})))\n \n+(defn http-get-no-redirect\n+  \"GET without following redirects; returns `:location` from the first `Location` header when present.\"\n+  [url & {:keys [headers]}]\n+  (let [client (-> (java.net.http.HttpClient/newBuilder)\n+                   (.followRedirects java.net.http.HttpClient$Redirect/NEVER)\n+                   (.connectTimeout connect-timeout)\n+                   (.build))\n+        b (java.net.http.HttpRequest/newBuilder (java.net.URI/create url))]\n+    (doseq [[k v] (or headers {})]\n+      (.header b k v))\n+    (let [req (-> b (.timeout request-timeout) (.GET) (.build))\n+          resp (.send client req (java.net.http.HttpResponse$BodyHandlers/ofString))\n+          loc (first (get (.map (.headers resp)) \"location\"))]\n+      {:status (.statusCode resp) :body (.body resp) :location loc})))\n+\n (defn http-post-json [url data & {:keys [headers]}]\n   (let [body (json/generate-string data)\n         b (java.net.http.HttpRequest/newBuilder (java.net.URI/create url))]\n@@ -50,6 +65,35 @@\n           resp (.send (http-client) req (java.net.http.HttpResponse$BodyHandlers/ofString))]\n       {:status (.statusCode resp) :body (.body resp) :headers (.map (.headers resp))})))\n \n+(defn complete-pending-session!\n+  \"Finish OAuth for an existing pending session id (e.g. created by `GET /join/inv_…`). Returns bearer token.\"\n+  [base-url session-id username & {:keys [assert!]}]\n+  (let [check! (fn [pred msg resp]\n+                 (if assert!\n+                   (assert! pred msg)\n+                   (when-not pred\n+                     (throw (ex-info msg {:resp resp})))))]\n+    (let [enc (java.net.URLEncoder/encode session-id \"UTF-8\")\n+          login-url (str base-url \"/auth/login?session=\" enc)\n+          login-get (http-get login-url)]\n+      (check! (= 200 (:status login-get))\n+              (str \"oauth redirect chain for session \" session-id)\n+              login-get)\n+      (let [choose (http-post-form (str base-url \"/auth/choose-username\")\n+                                   {:session session-id :username username})]\n+        (check! (= 200 (:status choose))\n+                (str \"choose-username for \" username \" returns 200\")\n+                choose)\n+        (let [poll (http-get (str base-url \"/api/v0/pending-session/\" session-id))]\n+          (check! (= 200 (:status poll))\n+                  (str \"pending-session poll returns 200\")\n+                  poll)\n+          (let [poll-json (json/parse-string (:body poll) true)]\n+            (check! (:complete poll-json)\n+                    (str \"pending session complete for \" username)\n+                    poll)\n+            (:token poll-json)))))))\n+\n (defn parse-query [s]\n   (into {}\n         (for [part (str/split (or s \"\") #\"&\")\ndiff --git a/types/src/lib.rs b/types/src/lib.rs\nindex a715fe5639f4a3a7bfedcc706b5fb312b98c9ac5..98c66a00fd27803ef6f75b5ac478ff2eb762d771 100644\n--- a/types/src/lib.rs\n+++ b/types/src/lib.rs\n@@ -123,13 +123,32 @@ pub struct PathDetailResponse {\n #[derive(Debug, Serialize, Deserialize)]\n pub struct ThreadDetailResponse {\n     pub thread: String,\n-    pub posts: Vec<PostRow>,\n-    /// Total posts in this thread.\n+    /// Chronological page: prose posts and room system lines, oldest first within the window.\n+    pub items: Vec<ThreadItem>,\n+    /// Total rows (posts + system lines) in this thread after filters.\n     pub total: usize,\n-    /// Chronological offset of the first post in this page.\n+    /// Offset into the merged chronological list.\n     pub offset: usize,\n }\n \n+/// One row in a thread timeline: a normal post or a room system line.\n+#[derive(Debug, Serialize, Deserialize)]\n+#[serde(tag = \"kind\", rename_all = \"snake_case\")]\n+pub enum ThreadItem {\n+    Post {\n+        id: String,\n+        index: usize,\n+        ts: i64,\n+        actor: String,\n+        body: String,\n+        truncated: bool,\n+    },\n+    System {\n+        ts: i64,\n+        text: String,\n+    },\n+}\n+\n /// One post in a thread. Full body, no snippet.\n #[derive(Debug, Serialize, Deserialize)]\n pub struct PostRow {\n@@ -224,6 +243,23 @@ pub struct FeedPost {\n // RPC batch API (`POST /api/v0/rpc`)\n // ---------------------------------------------------------------------------\n \n+fn default_invite_max_uses() -> usize {\n+    1\n+}\n+\n+/// One principal's capabilities in a private room (from [`RpcCommand::RoomAudit`]).\n+#[derive(Debug, Serialize, Deserialize)]\n+pub struct RoomAuditEntry {\n+    pub username: String,\n+    pub capabilities: Vec<String>,\n+}\n+\n+#[derive(Debug, Serialize, Deserialize)]\n+pub struct RoomAuditResponse {\n+    pub room: String,\n+    pub grants: Vec<RoomAuditEntry>,\n+}\n+\n #[derive(Debug, Serialize, Deserialize)]\n #[serde(transparent)]\n pub struct RpcBatch(pub Vec<RpcCommand>);\n@@ -287,10 +323,27 @@ pub enum RpcCommand {\n         visibility: Option<String>,\n     },\n     RoomGrant {\n+        room: String,\n+        username: String,\n+        /// Capability names: `view`, `post`, `vote`, `add_item`, `manage`.\n+        capabilities: Vec<String>,\n+    },\n+    RoomRevoke {\n         room: String,\n         username: String,\n         capability: String,\n     },\n+    /// Mint a shareable invite link (24h TTL, stored in memory only until redeemed or expiry).\n+    RoomMintInvite {\n+        room: String,\n+        capabilities: Vec<String>,\n+        #[serde(default = \"default_invite_max_uses\")]\n+        max_uses: usize,\n+    },\n+    /// List principals granted access in a room (requires View or Manage).\n+    RoomAudit {\n+        room: String,\n+    },\n     GetGlobalRank {\n         room: String,\n         #[serde(default)]\n@@ -361,6 +414,13 @@ pub enum RpcResult {\n     RoomCreated {\n         room_id: String,\n     },\n+    RoomInviteMinted {\n+        invite_url: String,\n+        #[serde(default, skip_serializing_if = \"Option::is_none\")]\n+        expires_at_ms: Option<i64>,\n+        max_uses: usize,\n+    },\n+    RoomAudit(RoomAuditResponse),\n     GrantOk {},\n     GlobalRank(GlobalRankResponse),\n     Pair(PairResponse),\n","role":"user"}],"model":"~x-ai/grok-latest"}