chore(wheelhouse): cascade template@8eb54c0e9

Auto-applied by socket-wheelhouse sync-scaffolding into node-smol.
6 file(s) touched:
  - .claude/settings.json
  - .config/repo/socket-wheelhouse.json
  - .gitattributes
  - .gitignore
  - pnpm-workspace.yaml
  - scripts/repo/bootstrap/fleet.mjs

Author: jdalton

.claude/settings.json

@@ -67,7 +67,6 @@
       "SendMessage"
     ],
     "deny": [
-      "Bash(gh release delete:*)",
       "Bash(npm publish:*)",
       "Bash(pnpm publish:*)",
       "Bash(yarn publish:*)"

.config/repo/socket-wheelhouse.json

@@ -6,8 +6,8 @@
   "schemaVersion": 1,
   "repoName": "node-smol",
   "bundle": {
-    "ref": "fleet-pack-ee545604850058ef3a7b1387fad086dc994e63b1",
-    "cascadeSha": "ee545604850058ef3a7b1387fad086dc994e63b1"
+    "ref": "fleet-pack-dcafeb6111c7f91f192d8d1843e222c8c04cc3d4",
+    "cascadeSha": "dcafeb6111c7f91f192d8d1843e222c8c04cc3d4"
   },
   "repo": {
     "type": "mono"

.gitattributes

@@ -75,6 +75,7 @@
 .github/workflows/prune-workflow-runs.yml linguist-generated=true
 .github/workflows/release-reconcile.yml linguist-generated=true
 .github/workflows/weekly-update.yml linguist-generated=true
+.github/zizmor.yml linguist-generated=true
 .mcp.json linguist-generated=true
 .npmrc linguist-generated=true
 assets/badge-follow-bluesky.svg linguist-generated=true

.gitignore

@@ -179,6 +179,7 @@ pnpm-debug.log
 /.git-hooks/post-commit
 /.git-hooks/pre-commit
 /.git-hooks/pre-push
+/.github/zizmor.yml
 /.mcp.json
 /docs/agents.md/fleet/
 /docs/references/fleet/sfw-local-install.md

pnpm-workspace.yaml

@@ -14,6 +14,7 @@ catalog:
   # the soak window, so it carries a minimumReleaseAgeExclude entry below.
   '@shadscan/cli': 0.8.0
   '@sinclair/typebox': 0.34.52
+  'ecc-agentshield': 1.4.0
   # typebox 1.x — the unscoped rewrite of @sinclair/typebox. Both names are
   # pinned while the fleet migrates; the 0.x entry is deleted once no member
   # imports the scoped name. 1.3.10 is inside the 7-day soak, so it carries a

scripts/repo/bootstrap/fleet.mjs

@@ -1008,31 +1008,13 @@ function rewriteDispatchCommands(settings, make) {
 //#region scripts/repo/gen/bootstrap/src/settings.mts
 const FLEET_SETTINGS_BEGIN = '// <fleet>'
 const FLEET_SETTINGS_END = '// </fleet>'
-const LEGACY_FLEET_SETTINGS_BEGIN = '// <fleet-canonical>'
-const LEGACY_FLEET_SETTINGS_END = '// </fleet-canonical>'
-const LEGACY_FLEET_SETTINGS_MARKERS = /* @__PURE__ */ new Set([
-  LEGACY_FLEET_SETTINGS_BEGIN,
-  LEGACY_FLEET_SETTINGS_END,
-])
 function cloneJson(value) {
   return JSON.parse(JSON.stringify(value))
 }
-function findMarkerIndex(keys, short, long) {
-  const i = keys.indexOf(short)
-  return i === -1 ? keys.indexOf(long) : i
-}
 function fleetSettingsKeys(settings) {
   const keys = Object.keys(settings)
-  const start = findMarkerIndex(
-    keys,
-    FLEET_SETTINGS_BEGIN,
-    LEGACY_FLEET_SETTINGS_BEGIN,
-  )
-  const end = findMarkerIndex(
-    keys,
-    FLEET_SETTINGS_END,
-    LEGACY_FLEET_SETTINGS_END,
-  )
+  const start = keys.indexOf(FLEET_SETTINGS_BEGIN)
+  const end = keys.indexOf(FLEET_SETTINGS_END)
   if (start === -1 || end === -1 || end <= start)
     throw new Error(
       'Invalid Claude settings fleet section: settings.json has missing or misordered <fleet> markers; expected one opening marker before one closing marker; fix the marker keys in the canonical template.',
@@ -1079,7 +1061,6 @@ function mergeClaudeSettings(config) {
         fleetKeySet.has(key) ||
         key === '// <fleet>' ||
         key === '// </fleet>' ||
-        LEGACY_FLEET_SETTINGS_MARKERS.has(key) ||
         (key === 'env' && isLegacyFleetCommentEnv(value))
       )
         continue