sync: 20260903T032430Z needs review

[q1]

Deterministic gate did not pass.

{
  "stamp": "20260903T032430Z",
  "noop": false,
  "upstreamRange": "ef6cc0b362019f32152470ed96c1aa1b813fb7f6..9409dd20a9fbce491d49d09c79b289d8fb8bfe3e",
  "forkBefore": "c8b5eaefecef500c972c211a8083b6808e896a88",
  "snapTag": "snap/20260903T032430Z",
  "syncBranch": "sync/20260903T032430Z",
  "syncTip": "b708c8dfb0a29ea70f4f137e1b09ecd4d11ecbc6",
  "gate": "fail",
  "reasons": [
    "upstream touched seam files in this range"
  ],
  "rerereResolved": [],
  "seamsTouchedUpstream": [
    "apps/server/src/environment/ServerEnvironment.ts",
    "apps/web/src/components/settings/SettingsPanels.tsx",
    "apps/web/src/components/settings/settingsSearch.ts",
    "packages/client-runtime/package.json",
    "packages/contracts/src/environment.ts"
  ],
  "rangeDiff": {
    "unchanged": [
      {
        "oldSha": "16e550e39",
        "newSha": "3a7afdbfc",
        "subject": "docs(fork): add fork rules, feature registry, agent skills, and branch triage",
        "reasons": []
      },
      {
        "oldSha": "935cfc38b",
        "newSha": "ee806ffdf",
        "subject": "feat(fork): add @q1code/core with flag registry, brand, and config; rename CLI bin to q1code",
        "reasons": []
      },
      {
        "oldSha": "3f7267bc3",
        "newSha": "6e3771089",
        "subject": "feat(fork): brand as q1code with its own home dir, service unit, and GitHub-release updates",
        "reasons": []
      },
      {
        "oldSha": "a86f07e12",
        "newSha": "6fe59a0a0",
        "subject": "ci(fork): add fork CI, sync watch, and release workflows with maintenance scripts",
        "reasons": []
      },
      {
        "oldSha": "b797377f8",
        "newSha": "167c8b973",
        "subject": "chore(fork): exempt manifests, tests, and docs from the seam marker rule; regenerate SEAMS.md",
        "reasons": []
      },
      {
        "oldSha": "80aa5137c",
        "newSha": "9799940fd",
        "subject": "docs(fork): log sync 20260902T084653Z",
        "reasons": []
      },
      {
        "oldSha": "aa5b91c2b",
        "newSha": "f8db658b6",
        "subject": "fix(fork): pin gh to the fork repo in maintenance scripts",
        "reasons": []
      },
      {
        "oldSha": "499366b71",
        "newSha": "0ce82a4b2",
        "subject": "fix(fork): pack the release tarball from a resolved manifest like upstream publish",
        "reasons": []
      },
      {
        "oldSha": "f7b9f47c6",
        "newSha": "1d49d998d",
        "subject": "fix(fork): publish release assets from the artifact's extraction root",
        "reasons": []
      },
      {
        "oldSha": "550b3fea1",
        "newSha": "f9418293a",
        "subject": "fix(fork): ship release notes inside the release-assets artifact",
        "reasons": []
      },
      {
        "oldSha": "681b9d80f",
        "newSha": "ddc88216f",
        "subject": "chore(fork): upload release assets from a single artifact root",
        "reasons": []
      },
      {
        "oldSha": "3f7521277",
        "newSha": "427fb060d",
        "subject": "chore(fork): list downloaded release assets before publishing",
        "reasons": []
      },
      {
        "oldSha": "df7948633",
        "newSha": "7ec18e156",
        "subject": "fix(fork): installer downloads the q1code asset and runs the t3 package entry",
        "reasons": []
      },
      {
        "oldSha": "0fd81e1e5",
        "newSha": "04914a649",
        "subject": "feat(fork-core): pin CLIProxyAPI and add the cliproxy config section",
        "reasons": []
      },
      {
        "oldSha": "4f147bb6f",
        "newSha": "9f8dc756b",
        "subject": "ci(fork): bundle the pinned CLIProxyAPI sidecar into releases",
        "reasons": []
      },
      {
        "oldSha": "29d47d153",
        "newSha": "ca3cba393",
        "subject": "docs(fork): mark cliproxy phase 1 active and regenerate SEAMS.md",
        "reasons": []
      },
      {
        "oldSha": "e892a71ec",
        "newSha": "c77f236fb",
        "subject": "docs(fork): log sync 20260902T231054Z and regenerate SEAMS.md",
        "reasons": []
      },
      {
        "oldSha": "f9cf1c4bd",
        "newSha": "fcf8c9da1",
        "subject": "fix(fork): restore the executable bit on the bundled CLIProxyAPI binary",
        "reasons": []
      },
      {
        "oldSha": "745cd401d",
        "newSha": "7093147d5",
        "subject": "fix(fork): installer restores executable bits on bundled binaries",
        "reasons": []
      },
      {
        "oldSha": "193f0bb26",
        "newSha": "b60023a69",
        "subject": "fix(fork): leak-check runs git in the current checkout, not the script's clone",
        "reasons": []
      },
      {
        "oldSha": "56ba7e008",
        "newSha": "574554aa1",
        "subject": "feat(fork-core): cliproxy accounts API contract and sync config",
        "reasons": []
      },
      {
        "oldSha": "e1732e3db",
        "newSha": "301cbe192",
        "subject": "feat(server): cliproxy auth-file sync between environments",
        "reasons": []
      },
      {
        "oldSha": "d802c3342",
        "newSha": "3db1e0757",
        "subject": "feat(server): cliproxy accounts HTTP API",
        "reasons": []
      },
      {
        "oldSha": "1ab09d8f4",
        "newSha": "ddc9142ce",
        "subject": "feat(client-runtime): cliproxy accounts client",
        "reasons": []
      },
      {
        "oldSha": "b67ce0915",
        "newSha": "70014d584",
        "subject": "docs(fork): cliproxy phase 2 endpoints, sync setup, and config",
        "reasons": []
      },
      {
        "oldSha": "f06a9afc6",
        "newSha": "bbec5ebf5",
        "subject": "docs(fork): log sync 20260903T020032Z",
        "reasons": []
      },
      {
        "oldSha": "6d3c3402c",
        "newSha": "f33c557b3",
        "subject": "feat(web): cliproxy accounts settings section",
        "reasons": []
      },
      {
        "oldSha": "f4ad5dcfc",
        "newSha": "67c84958e",
        "subject": "feat(mobile): read-only cliproxy accounts card",
        "reasons": []
      },
      {
        "oldSha": "c8b5eaefe",
        "newSha": "b708c8dfb",
        "subject": "docs(fork): cliproxy accounts UI phase and seams",
        "reasons": []
      }
    ],
    "contextOnly": [
      {
        "oldSha": "db6d25e0b",
        "newSha": "7ebfeeb48",
        "subject": "feat(fork): publish fork flags through environment capabilities and a read-only settings section",
        "reasons": [
          "hunk offsets or context only"
        ]
      },
      {
        "oldSha": "411fa63db",
        "newSha": "2c996dad1",
        "subject": "feat(server): run CLIProxyAPI as a flag-gated sidecar",
        "reasons": [
          "hunk offsets or context only"
        ]
      }
    ],
    "contentChanged": [],
    "dropped": [],
    "added": []
  }
}

[q1]

Reviewed by the maintainer's agent.

• Rebase was clean; range-diff shows every fork commit unchanged.
• Gate failed only because upstream touched five seam files in ef6cc0b..9409dd2. Checked each: upstream's changes are additive (ServerEnvironment.ts +4, SettingsPanels.tsx +44, settingsSearch.ts +14, contracts/environment.ts +32/-1, client-runtime/package.json +8) and every // fork: seam line is intact on the sync tip.
• Decision: promote once fork-ci is green on b708c8d.