fix(agent): refresh durable carry baseline

[ArchonVII]

Summary

• Refresh the repo-template snapshot exactly through reviewed PRs fix(onboarding): prevent check-map-only required-gate setup #210 and Ecosystem registry, maintenance contract & dashboard rollout (tracking epic) #212 to merge SHA e413928c0d029b8d6f0d718b64ea939fe5033fbe.
• Self-apply the receipt-bound carry cleanup and verified directory-mode-preserving promotion to Archon Setup's managed root baseline.
• Strengthen the existing global-update contract and self-apply coverage so consumers receive and verify the complete durable carry behavior.

Verification

• node --test test/agentSelfApply.test.mjs test/writeAgentLifecycle.test.mjs test/refreshSnapshots.test.mjs test/agentLifecycleScripts.test.mjs test/globalUpdates.test.mjs

  command: node --test test/agentSelfApply.test.mjs test/writeAgentLifecycle.test.mjs test/refreshSnapshots.test.mjs test/agentLifecycleScripts.test.mjs test/globalUpdates.test.mjs
  location: local
  result: passed (53 tests, 0 failed)
  timestamp: 2026-07-20T23:17:08-05:00
  

• npm run snapshots:verify

  command: npm run snapshots:verify
  location: local
  result: passed; repoTemplate e413928 (135 files), other provider pins unchanged
  timestamp: 2026-07-20T23:17:08-05:00
  

• npm run agent:self-apply -- --check

  command: npm run agent:self-apply -- --check
  location: local
  result: passed; all eight tasks reported already-done
  timestamp: 2026-07-20T23:17:08-05:00
  

• node --test src/snapshots/repo-template/test/agent/carry.test.mjs on Windows and WSL/Linux

  command: node --test src/snapshots/repo-template/test/agent/carry.test.mjs (Windows and WSL/Linux)
  location: local
  result: Windows passed 31 with 1 intentional POSIX-only skip; WSL/Linux passed 32/32
  timestamp: 2026-07-20T23:17:08-05:00
  

• npm test

  command: npm test
  location: local
  result: passed (771 total, 769 passed, 2 skipped, 0 failed)
  timestamp: 2026-07-20T23:17:08-05:00
  

• node --test test/ecosystemOverview.test.mjs

  command: node --test test/ecosystemOverview.test.mjs
  location: local
  result: passed (8 tests, 0 failed); generated snapshot map matches the manifest
  timestamp: 2026-07-20T23:17:08-05:00
  

• npm run docs:render -- --check

  command: npm run docs:render -- --check
  location: local
  result: passed; all generated documentation blocks are current
  timestamp: 2026-07-20T23:17:08-05:00
  

• node scripts/doc-health/health.mjs --repo . --json

  command: node scripts/doc-health/health.mjs --repo . --json
  location: local
  result: completed with 0 blocking findings and 8 advisory warnings
  timestamp: 2026-07-20T23:17:08-05:00
  

• git diff --check

  command: git diff --check
  location: local
  result: passed
  timestamp: 2026-07-20T23:17:08-05:00
  

Verification Notes

The provider range efeba25..e413928 contains exactly repo-template PRs #210 and #212. The latter is the bounded correction required by GitHub Codex's directory-mode finding on the first Archon candidate; no unrelated provider commits are included. GitHub CI and a fresh exact-head Codex review will validate the complete pushed head before merge.

Docs / Changelog

Updated the existing canonical status, catalog, README, and ecosystem records, regenerated the ecosystem overview, and added .changelog/unreleased/391-durable-carry-provider-refresh.md.

Plan/status artifacts: no standalone plan artifact was created; issue #391 is the canonical bounded plan and this PR will update the existing current-work/status homes.

Linked Issue

Closes #391

Risks

• Risk level: Medium; this distributes startup/carry behavior to generated consumers.
• Rollback: Revert this PR to restore the prior snapshot pin and root baseline.
• Follow-ups: Refresh the existing Hudson Bend repair PR [Task]: Make the documentation feature contract execution-closed #383 from this integrator baseline after this PR merges; keep feature lane Refresh repo-template snapshot to 3528dea (blocking docs gate, sweep liveness, item-7 defer, closeout usage) #370 paused and untouched.

[ArchonVII]

@codex review

[chatgpt-codex-connector]

💡 Codex Review

archon-setup/scripts/agent/carry.mjs

Line 90 in ff62c14

fs.cpSync(sourcePath, destinationPath, { recursive: true, force: true, verbatimSymlinks: true });

Preserve directory modes before verifying carried directories

When a carried directory has a non-default mode (for example chmod 700 secrets/), this recursive copy creates the destination directory with the process umask rather than the source mode, while buildPathManifest now includes directory mode; the immediate receipt check then reports destination worktree changed and agent:start-task --carry secrets aborts without carrying an otherwise valid task input. Please chmod copied directories to the captured modes, or avoid comparing directory modes, before verification.

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

• Open a pull request for review
• Mark a draft as ready
• Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".

[ArchonVII]

@codex review

[chatgpt-codex-connector]

Codex Review: Didn't find any major issues. Can't wait for the next one!

Reviewed commit: 6ee9aee0c1

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

• Open a pull request for review
• Mark a draft as ready
• Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".