diff --git a/.config/fleet/pnpm-workspace.fleet.yaml b/.config/fleet/pnpm-workspace.fleet.yaml
index 0b35817ae..7c3507622 100644
--- a/.config/fleet/pnpm-workspace.fleet.yaml
+++ b/.config/fleet/pnpm-workspace.fleet.yaml
@@ -28,7 +28,7 @@ catalog:
   '@socketsecurity/registry-stable': 'npm:@socketsecurity/registry@2.0.5'
   '@socketsecurity/sdk-stable': 'npm:@socketsecurity/sdk@4.1.3'
   '@types/mdast': 4.0.4
-  '@types/node': 26.1.1
+  '@types/node': 26.1.2
   '@types/semver': 7.7.1
   '@types/shell-quote': 1.7.5
   # Rust wasm parser artifact (dot-naming: acorn.rs.wasm = acorn, Rust impl,
@@ -53,7 +53,7 @@ catalog:
   # .claude/skills/fleet/property-and-fuzz-testing.
   'fast-check': 4.9.0
   'magic-string': 1.1.0
-  'markdownlint-cli2': 0.23.1
+  'markdownlint-cli2': 0.23.2
   'mdast-util-from-markdown': 2.0.3
   'micromark': 4.0.2
   'neosanitize': 0.3.0
diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml
index 87c1ce527..413771b0a 100644
--- a/pnpm-lock.yaml
+++ b/pnpm-lock.yaml
@@ -206,8 +206,8 @@ settings:
 catalogs:
   default:
     '@anthropic-ai/claude-code':
-      specifier: 2.1.216
-      version: 2.1.216
+      specifier: 2.1.220
+      version: 2.1.220
     '@redwoodjs/agent-ci':
       specifier: 0.17.1
       version: 0.17.1
@@ -218,20 +218,20 @@ catalogs:
       specifier: 0.34.52
       version: 0.34.52
     '@socketregistry/packageurl-js-stable':
-      specifier: npm:@socketregistry/packageurl-js@1.4.8
-      version: 1.4.8
+      specifier: npm:@socketregistry/packageurl-js@1.5.0
+      version: 1.5.0
     '@socketsecurity/lib-stable':
       specifier: npm:@socketsecurity/lib@6.5.2
       version: 6.5.2
     '@socketsecurity/sdk-stable':
-      specifier: npm:@socketsecurity/sdk@4.1.2
-      version: 4.1.2
+      specifier: npm:@socketsecurity/sdk@4.1.3
+      version: 4.1.3
     '@types/mdast':
       specifier: 4.0.4
       version: 4.0.4
     '@types/node':
-      specifier: 26.1.1
-      version: 26.1.1
+      specifier: 26.1.2
+      version: 26.1.2
     '@types/semver':
       specifier: 7.7.1
       version: 7.7.1
@@ -266,8 +266,8 @@ catalogs:
       specifier: 4.9.0
       version: 4.9.0
     markdownlint-cli2:
-      specifier: 0.23.1
-      version: 0.23.1
+      specifier: 0.23.2
+      version: 0.23.2
     mdast-util-from-markdown:
       specifier: 2.0.3
       version: 2.0.3
@@ -364,9 +364,9 @@ overrides:
   yaml@2: 2.9.0
   ast-v8-to-istanbul: 1.0.5
   got: 11.8.6
-  postcss: 8.5.20
+  postcss: 8.5.23
   rolldown: 1.1.4
-  tar: 7.5.20
+  tar: 7.5.22
   vite: 8.1.5
   which@>=4: 7.0.0
 
@@ -379,7 +379,7 @@ importers:
     devDependencies:
       '@anthropic-ai/claude-code':
         specifier: 'catalog:'
-        version: 2.1.216
+        version: 2.1.220
       '@redwoodjs/agent-ci':
         specifier: 'catalog:'
         version: 0.17.1(supports-color@7.2.0)
@@ -394,7 +394,7 @@ importers:
         version: 1.5.0
       '@socketregistry/packageurl-js-stable':
         specifier: 'catalog:'
-        version: '@socketregistry/packageurl-js@1.4.8'
+        version: '@socketregistry/packageurl-js@1.5.0'
       '@socketsecurity/lib':
         specifier: 6.5.2
         version: 6.5.2(typescript@7.0.2)
@@ -406,13 +406,13 @@ importers:
         version: 4.1.3
       '@socketsecurity/sdk-stable':
         specifier: 'catalog:'
-        version: '@socketsecurity/sdk@4.1.2'
+        version: '@socketsecurity/sdk@4.1.3'
       '@types/mdast':
         specifier: 'catalog:'
         version: 4.0.4
       '@types/node':
         specifier: 'catalog:'
-        version: 26.1.1
+        version: 26.1.2
       '@types/semver':
         specifier: 'catalog:'
         version: 7.7.1
@@ -445,7 +445,7 @@ importers:
         version: 1.1.0
       markdownlint-cli2:
         specifier: 'catalog:'
-        version: 0.23.1(supports-color@7.2.0)
+        version: 0.23.2(supports-color@7.2.0)
       mdast-util-from-markdown:
         specifier: 'catalog:'
         version: 2.0.3(supports-color@7.2.0)
@@ -505,7 +505,7 @@ importers:
         version: 1.6.5
       vitest:
         specifier: 'catalog:'
-        version: 4.1.10(@types/node@26.1.1)(@vitest/coverage-v8@4.1.10)(@vitest/ui@4.1.10)(vite@8.1.5(@types/node@26.1.1)(jiti@2.7.0)(yaml@2.9.0))
+        version: 4.1.10(@types/node@26.1.2)(@vitest/coverage-v8@4.1.10)(@vitest/ui@4.1.10)(vite@8.1.5(@types/node@26.1.2)(jiti@2.7.0)(yaml@2.9.0))
       yoctocolors-cjs:
         specifier: 'catalog:'
         version: 2.1.3
@@ -518,13 +518,13 @@ importers:
     devDependencies:
       '@types/node':
         specifier: 'catalog:'
-        version: 26.1.1
+        version: 26.1.2
 
   .claude/hooks/fleet/adversarial-review-nudge:
     devDependencies:
       '@types/node':
         specifier: 'catalog:'
-        version: 26.1.1
+        version: 26.1.2
 
   .claude/hooks/fleet/agents-skills-mirror-nudge:
     dependencies:
@@ -534,7 +534,7 @@ importers:
     devDependencies:
       '@types/node':
         specifier: 'catalog:'
-        version: 26.1.1
+        version: 26.1.2
 
   .claude/hooks/fleet/ai-config-drift-nudge:
     dependencies:
@@ -544,7 +544,7 @@ importers:
     devDependencies:
       '@types/node':
         specifier: 'catalog:'
-        version: 26.1.1
+        version: 26.1.2
 
   .claude/hooks/fleet/ai-config-poisoning-guard:
     dependencies:
@@ -554,7 +554,7 @@ importers:
     devDependencies:
       '@types/node':
         specifier: 'catalog:'
-        version: 26.1.1
+        version: 26.1.2
 
   .claude/hooks/fleet/alpha-sort-nudge:
     dependencies:
@@ -564,19 +564,19 @@ importers:
     devDependencies:
       '@types/node':
         specifier: 'catalog:'
-        version: 26.1.1
+        version: 26.1.2
 
   .claude/hooks/fleet/answer-questions-nudge:
     devDependencies:
       '@types/node':
         specifier: 'catalog:'
-        version: 26.1.1
+        version: 26.1.2
 
   .claude/hooks/fleet/answer-status-requests-nudge:
     devDependencies:
       '@types/node':
         specifier: 'catalog:'
-        version: 26.1.1
+        version: 26.1.2
 
   .claude/hooks/fleet/anti-prose-guard:
     dependencies:
@@ -586,13 +586,13 @@ importers:
     devDependencies:
       '@types/node':
         specifier: 'catalog:'
-        version: 26.1.1
+        version: 26.1.2
 
   .claude/hooks/fleet/ask-suppression-nudge:
     devDependencies:
       '@types/node':
         specifier: 'catalog:'
-        version: 26.1.1
+        version: 26.1.2
 
   .claude/hooks/fleet/auth-rotation-nudge:
     dependencies:
@@ -602,13 +602,13 @@ importers:
     devDependencies:
       '@types/node':
         specifier: 'catalog:'
-        version: 26.1.1
+        version: 26.1.2
 
   .claude/hooks/fleet/brew-supply-chain-guard:
     devDependencies:
       '@types/node':
         specifier: 'catalog:'
-        version: 26.1.1
+        version: 26.1.2
 
   .claude/hooks/fleet/broken-hook-detector:
     dependencies:
@@ -621,7 +621,7 @@ importers:
     devDependencies:
       '@types/node':
         specifier: 'catalog:'
-        version: 26.1.1
+        version: 26.1.2
 
   .claude/hooks/fleet/bump-defers-to-release-guard:
     dependencies:
@@ -634,7 +634,7 @@ importers:
     devDependencies:
       '@types/node':
         specifier: 'catalog:'
-        version: 26.1.1
+        version: 26.1.2
 
   .claude/hooks/fleet/bundle-flags-guard:
     dependencies:
@@ -644,7 +644,7 @@ importers:
     devDependencies:
       '@types/node':
         specifier: 'catalog:'
-        version: 26.1.1
+        version: 26.1.2
 
   .claude/hooks/fleet/bundle-stale-reminder:
     dependencies:
@@ -654,19 +654,19 @@ importers:
     devDependencies:
       '@types/node':
         specifier: 'catalog:'
-        version: 26.1.1
+        version: 26.1.2
 
   .claude/hooks/fleet/c8-ignore-reason-guard:
     devDependencies:
       '@types/node':
         specifier: 'catalog:'
-        version: 26.1.1
+        version: 26.1.2
 
   .claude/hooks/fleet/cascade-first-triage-nudge:
     devDependencies:
       '@types/node':
         specifier: 'catalog:'
-        version: 26.1.1
+        version: 26.1.2
 
   .claude/hooks/fleet/cascade-graph-defers-to-script-guard:
     dependencies:
@@ -676,7 +676,7 @@ importers:
     devDependencies:
       '@types/node':
         specifier: 'catalog:'
-        version: 26.1.1
+        version: 26.1.2
 
   .claude/hooks/fleet/catch-message-guard:
     dependencies:
@@ -686,7 +686,7 @@ importers:
     devDependencies:
       '@types/node':
         specifier: 'catalog:'
-        version: 26.1.1
+        version: 26.1.2
 
   .claude/hooks/fleet/cdn-allowlist-guard:
     devDependencies:
@@ -695,7 +695,7 @@ importers:
         version: '@socketsecurity/lib@6.5.2(typescript@7.0.2)'
       '@types/node':
         specifier: 'catalog:'
-        version: 26.1.1
+        version: 26.1.2
 
   .claude/hooks/fleet/changelog-entry-shape-nudge:
     dependencies:
@@ -705,29 +705,29 @@ importers:
     devDependencies:
       '@types/node':
         specifier: 'catalog:'
-        version: 26.1.1
+        version: 26.1.2
 
   .claude/hooks/fleet/changelog-no-empty-guard:
     devDependencies:
       '@types/node':
         specifier: 'catalog:'
-        version: 26.1.1
+        version: 26.1.2
 
   .claude/hooks/fleet/check-new-deps:
     dependencies:
       '@socketregistry/packageurl-js-stable':
         specifier: 'catalog:'
-        version: '@socketregistry/packageurl-js@1.4.8'
+        version: '@socketregistry/packageurl-js@1.5.0'
       '@socketsecurity/lib-stable':
         specifier: 'catalog:'
         version: '@socketsecurity/lib@6.5.2(typescript@7.0.2)'
       '@socketsecurity/sdk-stable':
         specifier: 'catalog:'
-        version: '@socketsecurity/sdk@4.1.2'
+        version: '@socketsecurity/sdk@4.1.3'
     devDependencies:
       '@types/node':
         specifier: 'catalog:'
-        version: 26.1.1
+        version: 26.1.2
 
   .claude/hooks/fleet/claude-code-action-lockdown-guard:
     dependencies:
@@ -737,7 +737,7 @@ importers:
     devDependencies:
       '@types/node':
         specifier: 'catalog:'
-        version: 26.1.1
+        version: 26.1.2
 
   .claude/hooks/fleet/claude-lockdown-guard:
     dependencies:
@@ -747,19 +747,19 @@ importers:
     devDependencies:
       '@types/node':
         specifier: 'catalog:'
-        version: 26.1.1
+        version: 26.1.2
 
   .claude/hooks/fleet/claude-md-defer-detail-nudge:
     devDependencies:
       '@types/node':
         specifier: 'catalog:'
-        version: 26.1.1
+        version: 26.1.2
 
   .claude/hooks/fleet/claude-md-rule-add-guard:
     devDependencies:
       '@types/node':
         specifier: 'catalog:'
-        version: 26.1.1
+        version: 26.1.2
 
   .claude/hooks/fleet/claude-md-section-size-guard:
     dependencies:
@@ -769,7 +769,7 @@ importers:
     devDependencies:
       '@types/node':
         specifier: 'catalog:'
-        version: 26.1.1
+        version: 26.1.2
 
   .claude/hooks/fleet/claude-md-size-guard:
     dependencies:
@@ -779,7 +779,7 @@ importers:
     devDependencies:
       '@types/node':
         specifier: 'catalog:'
-        version: 26.1.1
+        version: 26.1.2
 
   .claude/hooks/fleet/claude-segmentation-guard:
     devDependencies:
@@ -788,7 +788,7 @@ importers:
         version: '@socketsecurity/lib@6.5.2(typescript@7.0.2)'
       '@types/node':
         specifier: 'catalog:'
-        version: 26.1.1
+        version: 26.1.2
 
   .claude/hooks/fleet/clone-reviewed-repo-nudge:
     devDependencies:
@@ -797,7 +797,7 @@ importers:
         version: '@socketsecurity/lib@6.5.2(typescript@7.0.2)'
       '@types/node':
         specifier: 'catalog:'
-        version: 26.1.1
+        version: 26.1.2
 
   .claude/hooks/fleet/codex-no-write-guard:
     dependencies:
@@ -807,13 +807,13 @@ importers:
     devDependencies:
       '@types/node':
         specifier: 'catalog:'
-        version: 26.1.1
+        version: 26.1.2
 
   .claude/hooks/fleet/codex-session-budget-guard:
     devDependencies:
       '@types/node':
         specifier: 'catalog:'
-        version: 26.1.1
+        version: 26.1.2
 
   .claude/hooks/fleet/commit-author-guard:
     dependencies:
@@ -823,25 +823,25 @@ importers:
     devDependencies:
       '@types/node':
         specifier: 'catalog:'
-        version: 26.1.1
+        version: 26.1.2
 
   .claude/hooks/fleet/commit-cadence-nudge:
     devDependencies:
       '@types/node':
         specifier: 'catalog:'
-        version: 26.1.1
+        version: 26.1.2
 
   .claude/hooks/fleet/commit-message-format-guard:
     devDependencies:
       '@types/node':
         specifier: 'catalog:'
-        version: 26.1.1
+        version: 26.1.2
 
   .claude/hooks/fleet/commit-pr-nudge:
     devDependencies:
       '@types/node':
         specifier: 'catalog:'
-        version: 26.1.1
+        version: 26.1.2
 
   .claude/hooks/fleet/commit-size-nudge:
     dependencies:
@@ -851,19 +851,19 @@ importers:
     devDependencies:
       '@types/node':
         specifier: 'catalog:'
-        version: 26.1.1
+        version: 26.1.2
 
   .claude/hooks/fleet/compound-lessons-nudge:
     devDependencies:
       '@types/node':
         specifier: 'catalog:'
-        version: 26.1.1
+        version: 26.1.2
 
   .claude/hooks/fleet/consumer-grep-nudge:
     devDependencies:
       '@types/node':
         specifier: 'catalog:'
-        version: 26.1.1
+        version: 26.1.2
 
   .claude/hooks/fleet/convo-prose-nudge:
     devDependencies:
@@ -872,7 +872,7 @@ importers:
         version: '@socketsecurity/lib@6.5.2(typescript@7.0.2)'
       '@types/node':
         specifier: 'catalog:'
-        version: 26.1.1
+        version: 26.1.2
 
   .claude/hooks/fleet/cross-repo-guard:
     dependencies:
@@ -882,7 +882,7 @@ importers:
     devDependencies:
       '@types/node':
         specifier: 'catalog:'
-        version: 26.1.1
+        version: 26.1.2
 
   .claude/hooks/fleet/dated-citation-guard:
     dependencies:
@@ -892,13 +892,13 @@ importers:
     devDependencies:
       '@types/node':
         specifier: 'catalog:'
-        version: 26.1.1
+        version: 26.1.2
 
   .claude/hooks/fleet/default-branch-guard:
     devDependencies:
       '@types/node':
         specifier: 'catalog:'
-        version: 26.1.1
+        version: 26.1.2
 
   .claude/hooks/fleet/denied-domain-reference-guard:
     dependencies:
@@ -908,7 +908,7 @@ importers:
     devDependencies:
       '@types/node':
         specifier: 'catalog:'
-        version: 26.1.1
+        version: 26.1.2
 
   .claude/hooks/fleet/dep-derived-source-nudge:
     dependencies:
@@ -918,7 +918,7 @@ importers:
     devDependencies:
       '@types/node':
         specifier: 'catalog:'
-        version: 26.1.1
+        version: 26.1.2
 
   .claude/hooks/fleet/dirty-lockfile-nudge:
     dependencies:
@@ -928,7 +928,7 @@ importers:
     devDependencies:
       '@types/node':
         specifier: 'catalog:'
-        version: 26.1.1
+        version: 26.1.2
 
   .claude/hooks/fleet/dirty-worktree-stop-guard:
     dependencies:
@@ -938,13 +938,13 @@ importers:
     devDependencies:
       '@types/node':
         specifier: 'catalog:'
-        version: 26.1.1
+        version: 26.1.2
 
   .claude/hooks/fleet/disowned-dirt-guard:
     devDependencies:
       '@types/node':
         specifier: 'catalog:'
-        version: 26.1.1
+        version: 26.1.2
 
   .claude/hooks/fleet/dogfood-cascade-nudge:
     dependencies:
@@ -954,31 +954,31 @@ importers:
     devDependencies:
       '@types/node':
         specifier: 'catalog:'
-        version: 26.1.1
+        version: 26.1.2
 
   .claude/hooks/fleet/dont-blame-nudge:
     devDependencies:
       '@types/node':
         specifier: 'catalog:'
-        version: 26.1.1
+        version: 26.1.2
 
   .claude/hooks/fleet/dont-stop-mid-queue-nudge:
     devDependencies:
       '@types/node':
         specifier: 'catalog:'
-        version: 26.1.1
+        version: 26.1.2
 
   .claude/hooks/fleet/drift-check-nudge:
     devDependencies:
       '@types/node':
         specifier: 'catalog:'
-        version: 26.1.1
+        version: 26.1.2
 
   .claude/hooks/fleet/enqueue-dont-pivot-nudge:
     devDependencies:
       '@types/node':
         specifier: 'catalog:'
-        version: 26.1.1
+        version: 26.1.2
 
   .claude/hooks/fleet/enterprise-push-nudge:
     dependencies:
@@ -991,7 +991,7 @@ importers:
     devDependencies:
       '@types/node':
         specifier: 'catalog:'
-        version: 26.1.1
+        version: 26.1.2
 
   .claude/hooks/fleet/error-message-quality-nudge:
     dependencies:
@@ -1001,13 +1001,13 @@ importers:
     devDependencies:
       '@types/node':
         specifier: 'catalog:'
-        version: 26.1.1
+        version: 26.1.2
 
   .claude/hooks/fleet/excuse-detector:
     devDependencies:
       '@types/node':
         specifier: 'catalog:'
-        version: 26.1.1
+        version: 26.1.2
 
   .claude/hooks/fleet/file-size-nudge:
     dependencies:
@@ -1017,7 +1017,7 @@ importers:
     devDependencies:
       '@types/node':
         specifier: 'catalog:'
-        version: 26.1.1
+        version: 26.1.2
 
   .claude/hooks/fleet/fixes-need-tests-nudge:
     dependencies:
@@ -1027,13 +1027,13 @@ importers:
     devDependencies:
       '@types/node':
         specifier: 'catalog:'
-        version: 26.1.1
+        version: 26.1.2
 
   .claude/hooks/fleet/follow-direct-imperative-nudge:
     devDependencies:
       '@types/node':
         specifier: 'catalog:'
-        version: 26.1.1
+        version: 26.1.2
 
   .claude/hooks/fleet/generic-export-name-nudge:
     dependencies:
@@ -1043,7 +1043,7 @@ importers:
     devDependencies:
       '@types/node':
         specifier: 'catalog:'
-        version: 26.1.1
+        version: 26.1.2
 
   .claude/hooks/fleet/gh-token-hygiene-guard:
     dependencies:
@@ -1056,7 +1056,7 @@ importers:
     devDependencies:
       '@types/node':
         specifier: 'catalog:'
-        version: 26.1.1
+        version: 26.1.2
 
   .claude/hooks/fleet/git-config-write-guard:
     dependencies:
@@ -1066,13 +1066,13 @@ importers:
     devDependencies:
       '@types/node':
         specifier: 'catalog:'
-        version: 26.1.1
+        version: 26.1.2
 
   .claude/hooks/fleet/git-identity-drift-nudge:
     devDependencies:
       '@types/node':
         specifier: 'catalog:'
-        version: 26.1.1
+        version: 26.1.2
 
   .claude/hooks/fleet/gitmodules-comment-guard:
     dependencies:
@@ -1084,13 +1084,13 @@ importers:
     devDependencies:
       '@types/node':
         specifier: 'catalog:'
-        version: 26.1.1
+        version: 26.1.2
 
   .claude/hooks/fleet/handoff-command-nudge:
     devDependencies:
       '@types/node':
         specifier: 'catalog:'
-        version: 26.1.1
+        version: 26.1.2
 
   .claude/hooks/fleet/headroom-proxy-start:
     dependencies:
@@ -1102,7 +1102,7 @@ importers:
     devDependencies:
       '@types/node':
         specifier: 'catalog:'
-        version: 26.1.1
+        version: 26.1.2
 
   .claude/hooks/fleet/immutable-release-guard:
     dependencies:
@@ -1112,13 +1112,13 @@ importers:
     devDependencies:
       '@types/node':
         specifier: 'catalog:'
-        version: 26.1.1
+        version: 26.1.2
 
   .claude/hooks/fleet/inline-script-defer-guard:
     devDependencies:
       '@types/node':
         specifier: 'catalog:'
-        version: 26.1.1
+        version: 26.1.2
 
   .claude/hooks/fleet/judgment-nudge:
     dependencies:
@@ -1128,13 +1128,13 @@ importers:
     devDependencies:
       '@types/node':
         specifier: 'catalog:'
-        version: 26.1.1
+        version: 26.1.2
 
   .claude/hooks/fleet/keep-working-while-waiting-nudge:
     devDependencies:
       '@types/node':
         specifier: 'catalog:'
-        version: 26.1.1
+        version: 26.1.2
 
   .claude/hooks/fleet/land-as-you-go-nudge:
     dependencies:
@@ -1144,7 +1144,7 @@ importers:
     devDependencies:
       '@types/node':
         specifier: 'catalog:'
-        version: 26.1.1
+        version: 26.1.2
 
   .claude/hooks/fleet/land-fast-nudge:
     devDependencies:
@@ -1153,7 +1153,7 @@ importers:
         version: '@socketsecurity/lib@6.5.2(typescript@7.0.2)'
       '@types/node':
         specifier: 'catalog:'
-        version: 26.1.1
+        version: 26.1.2
 
   .claude/hooks/fleet/lock-step-ref-nudge:
     dependencies:
@@ -1163,7 +1163,7 @@ importers:
     devDependencies:
       '@types/node':
         specifier: 'catalog:'
-        version: 26.1.1
+        version: 26.1.2
 
   .claude/hooks/fleet/logger-guard:
     dependencies:
@@ -1173,7 +1173,7 @@ importers:
     devDependencies:
       '@types/node':
         specifier: 'catalog:'
-        version: 26.1.1
+        version: 26.1.2
 
   .claude/hooks/fleet/markdown-filename-guard:
     dependencies:
@@ -1183,7 +1183,7 @@ importers:
     devDependencies:
       '@types/node':
         specifier: 'catalog:'
-        version: 26.1.1
+        version: 26.1.2
 
   .claude/hooks/fleet/mass-delete-guard:
     dependencies:
@@ -1196,19 +1196,19 @@ importers:
     devDependencies:
       '@types/node':
         specifier: 'catalog:'
-        version: 26.1.1
+        version: 26.1.2
 
   .claude/hooks/fleet/memory-codify-nudge:
     devDependencies:
       '@types/node':
         specifier: 'catalog:'
-        version: 26.1.1
+        version: 26.1.2
 
   .claude/hooks/fleet/memory-enforcement-stamp-guard:
     devDependencies:
       '@types/node':
         specifier: 'catalog:'
-        version: 26.1.1
+        version: 26.1.2
 
   .claude/hooks/fleet/minimum-release-age-guard:
     dependencies:
@@ -1218,7 +1218,7 @@ importers:
     devDependencies:
       '@types/node':
         specifier: 'catalog:'
-        version: 26.1.1
+        version: 26.1.2
 
   .claude/hooks/fleet/module-noun-name-guard:
     dependencies:
@@ -1228,7 +1228,7 @@ importers:
     devDependencies:
       '@types/node':
         specifier: 'catalog:'
-        version: 26.1.1
+        version: 26.1.2
 
   .claude/hooks/fleet/new-hook-claude-md-guard:
     dependencies:
@@ -1238,19 +1238,19 @@ importers:
     devDependencies:
       '@types/node':
         specifier: 'catalog:'
-        version: 26.1.1
+        version: 26.1.2
 
   .claude/hooks/fleet/no-blanket-file-exclusion-guard:
     devDependencies:
       '@types/node':
         specifier: 'catalog:'
-        version: 26.1.1
+        version: 26.1.2
 
   .claude/hooks/fleet/no-blind-keychain-read-guard:
     devDependencies:
       '@types/node':
         specifier: 'catalog:'
-        version: 26.1.1
+        version: 26.1.2
 
   .claude/hooks/fleet/no-boolean-trap-guard:
     dependencies:
@@ -1260,7 +1260,7 @@ importers:
     devDependencies:
       '@types/node':
         specifier: 'catalog:'
-        version: 26.1.1
+        version: 26.1.2
 
   .claude/hooks/fleet/no-branch-reuse-nudge:
     dependencies:
@@ -1270,13 +1270,13 @@ importers:
     devDependencies:
       '@types/node':
         specifier: 'catalog:'
-        version: 26.1.1
+        version: 26.1.2
 
   .claude/hooks/fleet/no-chained-pausing-git-guard:
     devDependencies:
       '@types/node':
         specifier: 'catalog:'
-        version: 26.1.1
+        version: 26.1.2
 
   .claude/hooks/fleet/no-copyleft-source-read:
     dependencies:
@@ -1286,13 +1286,13 @@ importers:
     devDependencies:
       '@types/node':
         specifier: 'catalog:'
-        version: 26.1.1
+        version: 26.1.2
 
   .claude/hooks/fleet/no-corepack-guard:
     devDependencies:
       '@types/node':
         specifier: 'catalog:'
-        version: 26.1.1
+        version: 26.1.2
 
   .claude/hooks/fleet/no-description-aside-guard:
     dependencies:
@@ -1302,7 +1302,7 @@ importers:
     devDependencies:
       '@types/node':
         specifier: 'catalog:'
-        version: 26.1.1
+        version: 26.1.2
 
   .claude/hooks/fleet/no-direct-linter-guard:
     devDependencies:
@@ -1311,13 +1311,13 @@ importers:
         version: '@socketsecurity/lib@6.5.2(typescript@7.0.2)'
       '@types/node':
         specifier: 'catalog:'
-        version: 26.1.1
+        version: 26.1.2
 
   .claude/hooks/fleet/no-disable-lint-rule-guard:
     devDependencies:
       '@types/node':
         specifier: 'catalog:'
-        version: 26.1.1
+        version: 26.1.2
 
   .claude/hooks/fleet/no-empty-commit-guard:
     dependencies:
@@ -1327,7 +1327,7 @@ importers:
     devDependencies:
       '@types/node':
         specifier: 'catalog:'
-        version: 26.1.1
+        version: 26.1.2
 
   .claude/hooks/fleet/no-env-kill-switch-guard:
     dependencies:
@@ -1337,7 +1337,7 @@ importers:
     devDependencies:
       '@types/node':
         specifier: 'catalog:'
-        version: 26.1.1
+        version: 26.1.2
 
   .claude/hooks/fleet/no-ext-issue-ref-guard:
     dependencies:
@@ -1347,13 +1347,13 @@ importers:
     devDependencies:
       '@types/node':
         specifier: 'catalog:'
-        version: 26.1.1
+        version: 26.1.2
 
   .claude/hooks/fleet/no-file-oxlint-disable-guard:
     devDependencies:
       '@types/node':
         specifier: 'catalog:'
-        version: 26.1.1
+        version: 26.1.2
 
   .claude/hooks/fleet/no-fleet-fork-guard:
     dependencies:
@@ -1363,19 +1363,19 @@ importers:
     devDependencies:
       '@types/node':
         specifier: 'catalog:'
-        version: 26.1.1
+        version: 26.1.2
 
   .claude/hooks/fleet/no-fleet-scope-in-non-member-guard:
     devDependencies:
       '@types/node':
         specifier: 'catalog:'
-        version: 26.1.1
+        version: 26.1.2
 
   .claude/hooks/fleet/no-force-push-guard:
     devDependencies:
       '@types/node':
         specifier: 'catalog:'
-        version: 26.1.1
+        version: 26.1.2
 
   .claude/hooks/fleet/no-github-ai-attribution-guard:
     dependencies:
@@ -1385,7 +1385,7 @@ importers:
     devDependencies:
       '@types/node':
         specifier: 'catalog:'
-        version: 26.1.1
+        version: 26.1.2
 
   .claude/hooks/fleet/no-hook-cmd-regex-guard:
     dependencies:
@@ -1395,7 +1395,7 @@ importers:
     devDependencies:
       '@types/node':
         specifier: 'catalog:'
-        version: 26.1.1
+        version: 26.1.2
 
   .claude/hooks/fleet/no-meta-comments-guard:
     dependencies:
@@ -1405,7 +1405,7 @@ importers:
     devDependencies:
       '@types/node':
         specifier: 'catalog:'
-        version: 26.1.1
+        version: 26.1.2
 
   .claude/hooks/fleet/no-new-config-guard:
     dependencies:
@@ -1415,7 +1415,7 @@ importers:
     devDependencies:
       '@types/node':
         specifier: 'catalog:'
-        version: 26.1.1
+        version: 26.1.2
 
   .claude/hooks/fleet/no-non-fleet-push-guard:
     dependencies:
@@ -1425,7 +1425,7 @@ importers:
     devDependencies:
       '@types/node':
         specifier: 'catalog:'
-        version: 26.1.1
+        version: 26.1.2
 
   .claude/hooks/fleet/no-npm-otp-flag-guard:
     dependencies:
@@ -1435,7 +1435,7 @@ importers:
     devDependencies:
       '@types/node':
         specifier: 'catalog:'
-        version: 26.1.1
+        version: 26.1.2
 
   .claude/hooks/fleet/no-orphaned-staging:
     dependencies:
@@ -1445,13 +1445,13 @@ importers:
     devDependencies:
       '@types/node':
         specifier: 'catalog:'
-        version: 26.1.1
+        version: 26.1.2
 
   .claude/hooks/fleet/no-other-linters-guard:
     devDependencies:
       '@types/node':
         specifier: 'catalog:'
-        version: 26.1.1
+        version: 26.1.2
 
   .claude/hooks/fleet/no-pkgjson-pnpm-overrides-guard:
     dependencies:
@@ -1461,7 +1461,7 @@ importers:
     devDependencies:
       '@types/node':
         specifier: 'catalog:'
-        version: 26.1.1
+        version: 26.1.2
 
   .claude/hooks/fleet/no-placeholder-commit-subject-guard:
     dependencies:
@@ -1471,7 +1471,7 @@ importers:
     devDependencies:
       '@types/node':
         specifier: 'catalog:'
-        version: 26.1.1
+        version: 26.1.2
 
   .claude/hooks/fleet/no-platform-import-guard:
     dependencies:
@@ -1481,7 +1481,7 @@ importers:
     devDependencies:
       '@types/node':
         specifier: 'catalog:'
-        version: 26.1.1
+        version: 26.1.2
 
   .claude/hooks/fleet/no-pm-exec-guard:
     devDependencies:
@@ -1490,25 +1490,25 @@ importers:
         version: '@socketsecurity/lib@6.5.2(typescript@7.0.2)'
       '@types/node':
         specifier: 'catalog:'
-        version: 26.1.1
+        version: 26.1.2
 
   .claude/hooks/fleet/no-pr-from-default-branch-guard:
     devDependencies:
       '@types/node':
         specifier: 'catalog:'
-        version: 26.1.1
+        version: 26.1.2
 
   .claude/hooks/fleet/no-pr-from-default-checkout-guard:
     devDependencies:
       '@types/node':
         specifier: 'catalog:'
-        version: 26.1.1
+        version: 26.1.2
 
   .claude/hooks/fleet/no-pr-in-squash-repo-guard:
     devDependencies:
       '@types/node':
         specifier: 'catalog:'
-        version: 26.1.1
+        version: 26.1.2
 
   .claude/hooks/fleet/no-pr-review-verdict-guard:
     dependencies:
@@ -1518,7 +1518,7 @@ importers:
     devDependencies:
       '@types/node':
         specifier: 'catalog:'
-        version: 26.1.1
+        version: 26.1.2
 
   .claude/hooks/fleet/no-premature-commit-kill-guard:
     devDependencies:
@@ -1527,13 +1527,13 @@ importers:
         version: '@socketsecurity/lib@6.5.2(typescript@7.0.2)'
       '@types/node':
         specifier: 'catalog:'
-        version: 26.1.1
+        version: 26.1.2
 
   .claude/hooks/fleet/no-primary-branch-switch:
     devDependencies:
       '@types/node':
         specifier: 'catalog:'
-        version: 26.1.1
+        version: 26.1.2
 
   .claude/hooks/fleet/no-private-path-in-source-guard:
     dependencies:
@@ -1543,7 +1543,7 @@ importers:
     devDependencies:
       '@types/node':
         specifier: 'catalog:'
-        version: 26.1.1
+        version: 26.1.2
 
   .claude/hooks/fleet/no-private-ref-in-tests-docs-guard:
     dependencies:
@@ -1553,7 +1553,7 @@ importers:
     devDependencies:
       '@types/node':
         specifier: 'catalog:'
-        version: 26.1.1
+        version: 26.1.2
 
   .claude/hooks/fleet/no-private-repo-leak-guard:
     dependencies:
@@ -1563,7 +1563,7 @@ importers:
     devDependencies:
       '@types/node':
         specifier: 'catalog:'
-        version: 26.1.1
+        version: 26.1.2
 
   .claude/hooks/fleet/no-registry-mutation-in-repo-script-nudge:
     dependencies:
@@ -1573,13 +1573,13 @@ importers:
     devDependencies:
       '@types/node':
         specifier: 'catalog:'
-        version: 26.1.1
+        version: 26.1.2
 
   .claude/hooks/fleet/no-removal-comment-nudge:
     devDependencies:
       '@types/node':
         specifier: 'catalog:'
-        version: 26.1.1
+        version: 26.1.2
 
   .claude/hooks/fleet/no-repo-scope-in-fleet-config-guard:
     dependencies:
@@ -1589,7 +1589,7 @@ importers:
     devDependencies:
       '@types/node':
         specifier: 'catalog:'
-        version: 26.1.1
+        version: 26.1.2
 
   .claude/hooks/fleet/no-revert-guard:
     dependencies:
@@ -1602,7 +1602,7 @@ importers:
     devDependencies:
       '@types/node':
         specifier: 'catalog:'
-        version: 26.1.1
+        version: 26.1.2
 
   .claude/hooks/fleet/no-strip-types-guard:
     dependencies:
@@ -1612,13 +1612,13 @@ importers:
     devDependencies:
       '@types/node':
         specifier: 'catalog:'
-        version: 26.1.1
+        version: 26.1.2
 
   .claude/hooks/fleet/no-subagent-commit-guard:
     devDependencies:
       '@types/node':
         specifier: 'catalog:'
-        version: 26.1.1
+        version: 26.1.2
 
   .claude/hooks/fleet/no-tail-install-out-guard:
     dependencies:
@@ -1628,7 +1628,7 @@ importers:
     devDependencies:
       '@types/node':
         specifier: 'catalog:'
-        version: 26.1.1
+        version: 26.1.2
 
   .claude/hooks/fleet/no-test-in-scripts-guard:
     dependencies:
@@ -1638,25 +1638,25 @@ importers:
     devDependencies:
       '@types/node':
         specifier: 'catalog:'
-        version: 26.1.1
+        version: 26.1.2
 
   .claude/hooks/fleet/no-token-in-dotenv-guard:
     devDependencies:
       '@types/node':
         specifier: 'catalog:'
-        version: 26.1.1
+        version: 26.1.2
 
   .claude/hooks/fleet/no-total-squash-guard:
     devDependencies:
       '@types/node':
         specifier: 'catalog:'
-        version: 26.1.1
+        version: 26.1.2
 
   .claude/hooks/fleet/no-tsx-guard:
     devDependencies:
       '@types/node':
         specifier: 'catalog:'
-        version: 26.1.1
+        version: 26.1.2
 
   .claude/hooks/fleet/no-underscore-ident-guard:
     dependencies:
@@ -1666,7 +1666,7 @@ importers:
     devDependencies:
       '@types/node':
         specifier: 'catalog:'
-        version: 26.1.1
+        version: 26.1.2
 
   .claude/hooks/fleet/no-unisolated-git-fixture-guard:
     dependencies:
@@ -1676,7 +1676,7 @@ importers:
     devDependencies:
       '@types/node':
         specifier: 'catalog:'
-        version: 26.1.1
+        version: 26.1.2
 
   .claude/hooks/fleet/no-unmocked-net-guard:
     dependencies:
@@ -1686,7 +1686,7 @@ importers:
     devDependencies:
       '@types/node':
         specifier: 'catalog:'
-        version: 26.1.1
+        version: 26.1.2
 
   .claude/hooks/fleet/no-upstream-gitlink-guard:
     dependencies:
@@ -1696,7 +1696,7 @@ importers:
     devDependencies:
       '@types/node':
         specifier: 'catalog:'
-        version: 26.1.1
+        version: 26.1.2
 
   .claude/hooks/fleet/no-verify-format-nudge:
     dependencies:
@@ -1706,7 +1706,7 @@ importers:
     devDependencies:
       '@types/node':
         specifier: 'catalog:'
-        version: 26.1.1
+        version: 26.1.2
 
   .claude/hooks/fleet/no-version-bump-pr-guard:
     dependencies:
@@ -1716,19 +1716,19 @@ importers:
     devDependencies:
       '@types/node':
         specifier: 'catalog:'
-        version: 26.1.1
+        version: 26.1.2
 
   .claude/hooks/fleet/no-wheelhouse-pr-guard:
     devDependencies:
       '@types/node':
         specifier: 'catalog:'
-        version: 26.1.1
+        version: 26.1.2
 
   .claude/hooks/fleet/node-modules-staging-guard:
     devDependencies:
       '@types/node':
         specifier: 'catalog:'
-        version: 26.1.1
+        version: 26.1.2
 
   .claude/hooks/fleet/non-fleet-pr-issue-ask-guard:
     dependencies:
@@ -1740,7 +1740,7 @@ importers:
     devDependencies:
       '@types/node':
         specifier: 'catalog:'
-        version: 26.1.1
+        version: 26.1.2
 
   .claude/hooks/fleet/npm-otp-flow-nudge:
     dependencies:
@@ -1750,7 +1750,7 @@ importers:
     devDependencies:
       '@types/node':
         specifier: 'catalog:'
-        version: 26.1.1
+        version: 26.1.2
 
   .claude/hooks/fleet/npmrc-trust-optout-guard:
     dependencies:
@@ -1760,7 +1760,7 @@ importers:
     devDependencies:
       '@types/node':
         specifier: 'catalog:'
-        version: 26.1.1
+        version: 26.1.2
 
   .claude/hooks/fleet/options-param-naming-guard:
     dependencies:
@@ -1779,7 +1779,7 @@ importers:
     devDependencies:
       '@types/node':
         specifier: 'catalog:'
-        version: 26.1.1
+        version: 26.1.2
 
   .claude/hooks/fleet/oxlint-plugin-load-nudge:
     dependencies:
@@ -1789,7 +1789,7 @@ importers:
     devDependencies:
       '@types/node':
         specifier: 'catalog:'
-        version: 26.1.1
+        version: 26.1.2
 
   .claude/hooks/fleet/package-manager-auto-update-guard:
     devDependencies:
@@ -1798,25 +1798,25 @@ importers:
         version: '@socketsecurity/lib@6.5.2(typescript@7.0.2)'
       '@types/node':
         specifier: 'catalog:'
-        version: 26.1.1
+        version: 26.1.2
 
   .claude/hooks/fleet/parallel-agent-edit-guard:
     devDependencies:
       '@types/node':
         specifier: 'catalog:'
-        version: 26.1.1
+        version: 26.1.2
 
   .claude/hooks/fleet/parallel-agent-on-stop-nudge:
     devDependencies:
       '@types/node':
         specifier: 'catalog:'
-        version: 26.1.1
+        version: 26.1.2
 
   .claude/hooks/fleet/parallel-agent-removal-nudge:
     devDependencies:
       '@types/node':
         specifier: 'catalog:'
-        version: 26.1.1
+        version: 26.1.2
 
   .claude/hooks/fleet/parallel-agent-staging-guard:
     dependencies:
@@ -1826,7 +1826,7 @@ importers:
     devDependencies:
       '@types/node':
         specifier: 'catalog:'
-        version: 26.1.1
+        version: 26.1.2
 
   .claude/hooks/fleet/path-guard:
     dependencies:
@@ -1842,7 +1842,7 @@ importers:
     devDependencies:
       '@types/node':
         specifier: 'catalog:'
-        version: 26.1.1
+        version: 26.1.2
 
   .claude/hooks/fleet/paths-mts-inherit-guard:
     dependencies:
@@ -1852,13 +1852,13 @@ importers:
     devDependencies:
       '@types/node':
         specifier: 'catalog:'
-        version: 26.1.1
+        version: 26.1.2
 
   .claude/hooks/fleet/personal-path-guard:
     devDependencies:
       '@types/node':
         specifier: 'catalog:'
-        version: 26.1.1
+        version: 26.1.2
 
   .claude/hooks/fleet/plan-location-guard:
     dependencies:
@@ -1868,19 +1868,19 @@ importers:
     devDependencies:
       '@types/node':
         specifier: 'catalog:'
-        version: 26.1.1
+        version: 26.1.2
 
   .claude/hooks/fleet/plan-review-nudge:
     devDependencies:
       '@types/node':
         specifier: 'catalog:'
-        version: 26.1.1
+        version: 26.1.2
 
   .claude/hooks/fleet/pnpm-filter-zero-match-nudge:
     devDependencies:
       '@types/node':
         specifier: 'catalog:'
-        version: 26.1.1
+        version: 26.1.2
 
   .claude/hooks/fleet/pointer-comment-nudge:
     dependencies:
@@ -1893,13 +1893,13 @@ importers:
     devDependencies:
       '@types/node':
         specifier: 'catalog:'
-        version: 26.1.1
+        version: 26.1.2
 
   .claude/hooks/fleet/post-push-ci-monitor-nudge:
     devDependencies:
       '@types/node':
         specifier: 'catalog:'
-        version: 26.1.1
+        version: 26.1.2
 
   .claude/hooks/fleet/pr-vs-push-default-nudge:
     dependencies:
@@ -1909,13 +1909,13 @@ importers:
     devDependencies:
       '@types/node':
         specifier: 'catalog:'
-        version: 26.1.1
+        version: 26.1.2
 
   .claude/hooks/fleet/pre-commit-race-nudge:
     devDependencies:
       '@types/node':
         specifier: 'catalog:'
-        version: 26.1.1
+        version: 26.1.2
 
   .claude/hooks/fleet/prefer-async-spawn-guard:
     dependencies:
@@ -1925,13 +1925,13 @@ importers:
     devDependencies:
       '@types/node':
         specifier: 'catalog:'
-        version: 26.1.1
+        version: 26.1.2
 
   .claude/hooks/fleet/prefer-evergreen-target-nudge:
     devDependencies:
       '@types/node':
         specifier: 'catalog:'
-        version: 26.1.1
+        version: 26.1.2
 
   .claude/hooks/fleet/prefer-fn-decl-guard:
     dependencies:
@@ -1941,7 +1941,7 @@ importers:
     devDependencies:
       '@types/node':
         specifier: 'catalog:'
-        version: 26.1.1
+        version: 26.1.2
 
   .claude/hooks/fleet/prefer-json-clone-guard:
     dependencies:
@@ -1957,7 +1957,7 @@ importers:
     devDependencies:
       '@types/node':
         specifier: 'catalog:'
-        version: 26.1.1
+        version: 26.1.2
 
   .claude/hooks/fleet/prefer-rebase-over-revert-nudge:
     dependencies:
@@ -1970,13 +1970,13 @@ importers:
     devDependencies:
       '@types/node':
         specifier: 'catalog:'
-        version: 26.1.1
+        version: 26.1.2
 
   .claude/hooks/fleet/prefer-type-import-guard:
     devDependencies:
       '@types/node':
         specifier: 'catalog:'
-        version: 26.1.1
+        version: 26.1.2
 
   .claude/hooks/fleet/prefer-vitest-guard:
     dependencies:
@@ -1986,7 +1986,7 @@ importers:
     devDependencies:
       '@types/node':
         specifier: 'catalog:'
-        version: 26.1.1
+        version: 26.1.2
 
   .claude/hooks/fleet/primary-checkout-branch-guard:
     dependencies:
@@ -1996,7 +1996,7 @@ importers:
     devDependencies:
       '@types/node':
         specifier: 'catalog:'
-        version: 26.1.1
+        version: 26.1.2
 
   .claude/hooks/fleet/primary-checkout-on-default-stop-guard:
     dependencies:
@@ -2006,13 +2006,13 @@ importers:
     devDependencies:
       '@types/node':
         specifier: 'catalog:'
-        version: 26.1.1
+        version: 26.1.2
 
   .claude/hooks/fleet/private-name-nudge:
     devDependencies:
       '@types/node':
         specifier: 'catalog:'
-        version: 26.1.1
+        version: 26.1.2
 
   .claude/hooks/fleet/proc-environ-exfil-guard:
     dependencies:
@@ -2022,7 +2022,7 @@ importers:
     devDependencies:
       '@types/node':
         specifier: 'catalog:'
-        version: 26.1.1
+        version: 26.1.2
 
   .claude/hooks/fleet/prompt-injection-guard:
     dependencies:
@@ -2032,7 +2032,7 @@ importers:
     devDependencies:
       '@types/node':
         specifier: 'catalog:'
-        version: 26.1.1
+        version: 26.1.2
 
   .claude/hooks/fleet/provenance-publish-nudge:
     dependencies:
@@ -2042,13 +2042,13 @@ importers:
     devDependencies:
       '@types/node':
         specifier: 'catalog:'
-        version: 26.1.1
+        version: 26.1.2
 
   .claude/hooks/fleet/public-surface-nudge:
     devDependencies:
       '@types/node':
         specifier: 'catalog:'
-        version: 26.1.1
+        version: 26.1.2
 
   .claude/hooks/fleet/pull-request-target-guard:
     dependencies:
@@ -2058,13 +2058,13 @@ importers:
     devDependencies:
       '@types/node':
         specifier: 'catalog:'
-        version: 26.1.1
+        version: 26.1.2
 
   .claude/hooks/fleet/push-protected-branch-guard:
     devDependencies:
       '@types/node':
         specifier: 'catalog:'
-        version: 26.1.1
+        version: 26.1.2
 
   .claude/hooks/fleet/readme-fleet-shape-guard:
     dependencies:
@@ -2074,7 +2074,7 @@ importers:
     devDependencies:
       '@types/node':
         specifier: 'catalog:'
-        version: 26.1.1
+        version: 26.1.2
 
   .claude/hooks/fleet/release-defers-to-script-guard:
     dependencies:
@@ -2084,7 +2084,7 @@ importers:
     devDependencies:
       '@types/node':
         specifier: 'catalog:'
-        version: 26.1.1
+        version: 26.1.2
 
   .claude/hooks/fleet/release-tag-tied-guard:
     dependencies:
@@ -2094,7 +2094,7 @@ importers:
     devDependencies:
       '@types/node':
         specifier: 'catalog:'
-        version: 26.1.1
+        version: 26.1.2
 
   .claude/hooks/fleet/release-workflow-guard:
     dependencies:
@@ -2107,13 +2107,13 @@ importers:
         version: '@socketsecurity/lib@6.5.2(typescript@7.0.2)'
       '@types/node':
         specifier: 'catalog:'
-        version: 26.1.1
+        version: 26.1.2
 
   .claude/hooks/fleet/reply-prose-nudge:
     devDependencies:
       '@types/node':
         specifier: 'catalog:'
-        version: 26.1.1
+        version: 26.1.2
 
   .claude/hooks/fleet/report-location-guard:
     dependencies:
@@ -2123,7 +2123,7 @@ importers:
     devDependencies:
       '@types/node':
         specifier: 'catalog:'
-        version: 26.1.1
+        version: 26.1.2
 
   .claude/hooks/fleet/reserved-script-dir-guard:
     dependencies:
@@ -2133,7 +2133,7 @@ importers:
     devDependencies:
       '@types/node':
         specifier: 'catalog:'
-        version: 26.1.1
+        version: 26.1.2
 
   .claude/hooks/fleet/rg-replace-flag-guard:
     devDependencies:
@@ -2142,7 +2142,7 @@ importers:
         version: '@socketsecurity/lib@6.5.2(typescript@7.0.2)'
       '@types/node':
         specifier: 'catalog:'
-        version: 26.1.1
+        version: 26.1.2
 
   .claude/hooks/fleet/rust-target-sweep-nudge:
     dependencies:
@@ -2152,7 +2152,7 @@ importers:
     devDependencies:
       '@types/node':
         specifier: 'catalog:'
-        version: 26.1.1
+        version: 26.1.2
 
   .claude/hooks/fleet/scan-label-in-commit-guard:
     dependencies:
@@ -2162,7 +2162,7 @@ importers:
     devDependencies:
       '@types/node':
         specifier: 'catalog:'
-        version: 26.1.1
+        version: 26.1.2
 
   .claude/hooks/fleet/secret-content-guard:
     devDependencies:
@@ -2171,19 +2171,19 @@ importers:
         version: '@socketsecurity/lib@6.5.2(typescript@7.0.2)'
       '@types/node':
         specifier: 'catalog:'
-        version: 26.1.1
+        version: 26.1.2
 
   .claude/hooks/fleet/sed-in-place-guard:
     devDependencies:
       '@types/node':
         specifier: 'catalog:'
-        version: 26.1.1
+        version: 26.1.2
 
   .claude/hooks/fleet/session-handoff-nudge:
     devDependencies:
       '@types/node':
         specifier: 'catalog:'
-        version: 26.1.1
+        version: 26.1.2
 
   .claude/hooks/fleet/setup-basics-tools:
     dependencies:
@@ -2193,7 +2193,7 @@ importers:
     devDependencies:
       '@types/node':
         specifier: 'catalog:'
-        version: 26.1.1
+        version: 26.1.2
 
   .claude/hooks/fleet/setup-claude-scanners:
     dependencies:
@@ -2203,7 +2203,7 @@ importers:
     devDependencies:
       '@types/node':
         specifier: 'catalog:'
-        version: 26.1.1
+        version: 26.1.2
 
   .claude/hooks/fleet/setup-firewall:
     dependencies:
@@ -2213,7 +2213,7 @@ importers:
     devDependencies:
       '@types/node':
         specifier: 'catalog:'
-        version: 26.1.1
+        version: 26.1.2
 
   .claude/hooks/fleet/setup-misc-tools:
     dependencies:
@@ -2223,7 +2223,7 @@ importers:
     devDependencies:
       '@types/node':
         specifier: 'catalog:'
-        version: 26.1.1
+        version: 26.1.2
 
   .claude/hooks/fleet/setup-security-tools:
     dependencies:
@@ -2232,7 +2232,7 @@ importers:
         version: 0.34.52
       '@socketregistry/packageurl-js-stable':
         specifier: 'catalog:'
-        version: '@socketregistry/packageurl-js@1.4.8'
+        version: '@socketregistry/packageurl-js@1.5.0'
       '@socketsecurity/lib-stable':
         specifier: 'catalog:'
         version: '@socketsecurity/lib@6.5.2(typescript@7.0.2)'
@@ -2245,25 +2245,25 @@ importers:
     devDependencies:
       '@types/node':
         specifier: 'catalog:'
-        version: 26.1.1
+        version: 26.1.2
 
   .claude/hooks/fleet/shallow-clone-guard:
     devDependencies:
       '@types/node':
         specifier: 'catalog:'
-        version: 26.1.1
+        version: 26.1.2
 
   .claude/hooks/fleet/single-lander-guard:
     devDependencies:
       '@types/node':
         specifier: 'catalog:'
-        version: 26.1.1
+        version: 26.1.2
 
   .claude/hooks/fleet/skill-usage-logger:
     devDependencies:
       '@types/node':
         specifier: 'catalog:'
-        version: 26.1.1
+        version: 26.1.2
 
   .claude/hooks/fleet/small-pr-nudge:
     dependencies:
@@ -2273,7 +2273,7 @@ importers:
     devDependencies:
       '@types/node':
         specifier: 'catalog:'
-        version: 26.1.1
+        version: 26.1.2
 
   .claude/hooks/fleet/soak-exclude-date-guard:
     dependencies:
@@ -2289,7 +2289,7 @@ importers:
     devDependencies:
       '@types/node':
         specifier: 'catalog:'
-        version: 26.1.1
+        version: 26.1.2
 
   .claude/hooks/fleet/soak-pin-needs-annotation-guard:
     dependencies:
@@ -2299,7 +2299,7 @@ importers:
     devDependencies:
       '@types/node':
         specifier: 'catalog:'
-        version: 26.1.1
+        version: 26.1.2
 
   .claude/hooks/fleet/squash-history-nudge:
     dependencies:
@@ -2309,7 +2309,7 @@ importers:
     devDependencies:
       '@types/node':
         specifier: 'catalog:'
-        version: 26.1.1
+        version: 26.1.2
 
   .claude/hooks/fleet/stale-process-sweeper:
     dependencies:
@@ -2321,7 +2321,7 @@ importers:
     devDependencies:
       '@types/node':
         specifier: 'catalog:'
-        version: 26.1.1
+        version: 26.1.2
 
   .claude/hooks/fleet/sweep-ds-store:
     dependencies:
@@ -2331,7 +2331,7 @@ importers:
     devDependencies:
       '@types/node':
         specifier: 'catalog:'
-        version: 26.1.1
+        version: 26.1.2
 
   .claude/hooks/fleet/target-arch-env-guard:
     dependencies:
@@ -2341,7 +2341,7 @@ importers:
     devDependencies:
       '@types/node':
         specifier: 'catalog:'
-        version: 26.1.1
+        version: 26.1.2
 
   .claude/hooks/fleet/test-script-defers-guard:
     dependencies:
@@ -2351,7 +2351,7 @@ importers:
     devDependencies:
       '@types/node':
         specifier: 'catalog:'
-        version: 26.1.1
+        version: 26.1.2
 
   .claude/hooks/fleet/token-guard: {}
 
@@ -2359,13 +2359,13 @@ importers:
     devDependencies:
       '@types/node':
         specifier: 'catalog:'
-        version: 26.1.1
+        version: 26.1.2
 
   .claude/hooks/fleet/trust-downgrade-guard:
     devDependencies:
       '@types/node':
         specifier: 'catalog:'
-        version: 26.1.1
+        version: 26.1.2
 
   .claude/hooks/fleet/tsc-canonical-tsconfig-guard:
     dependencies:
@@ -2375,7 +2375,7 @@ importers:
     devDependencies:
       '@types/node':
         specifier: 'catalog:'
-        version: 26.1.1
+        version: 26.1.2
 
   .claude/hooks/fleet/unaddressed-review-feedback-guard:
     dependencies:
@@ -2388,7 +2388,7 @@ importers:
     devDependencies:
       '@types/node':
         specifier: 'catalog:'
-        version: 26.1.1
+        version: 26.1.2
 
   .claude/hooks/fleet/unbacked-claim-commit-guard:
     dependencies:
@@ -2398,13 +2398,13 @@ importers:
     devDependencies:
       '@types/node':
         specifier: 'catalog:'
-        version: 26.1.1
+        version: 26.1.2
 
   .claude/hooks/fleet/uncodified-lesson-nudge:
     devDependencies:
       '@types/node':
         specifier: 'catalog:'
-        version: 26.1.1
+        version: 26.1.2
 
   .claude/hooks/fleet/unpushed-main-nudge:
     devDependencies:
@@ -2413,19 +2413,19 @@ importers:
         version: '@socketsecurity/lib@6.5.2(typescript@7.0.2)'
       '@types/node':
         specifier: 'catalog:'
-        version: 26.1.1
+        version: 26.1.2
 
   .claude/hooks/fleet/untrusted-coauthor-guard:
     devDependencies:
       '@types/node':
         specifier: 'catalog:'
-        version: 26.1.1
+        version: 26.1.2
 
   .claude/hooks/fleet/use-repo-test-script-guard:
     devDependencies:
       '@types/node':
         specifier: 'catalog:'
-        version: 26.1.1
+        version: 26.1.2
 
   .claude/hooks/fleet/uses-sha-verify-guard:
     dependencies:
@@ -2437,13 +2437,13 @@ importers:
     devDependencies:
       '@types/node':
         specifier: 'catalog:'
-        version: 26.1.1
+        version: 26.1.2
 
   .claude/hooks/fleet/verify-absence-claims-nudge:
     devDependencies:
       '@types/node':
         specifier: 'catalog:'
-        version: 26.1.1
+        version: 26.1.2
 
   .claude/hooks/fleet/verify-render-pre-commit-nudge:
     dependencies:
@@ -2453,7 +2453,7 @@ importers:
     devDependencies:
       '@types/node':
         specifier: 'catalog:'
-        version: 26.1.1
+        version: 26.1.2
 
   .claude/hooks/fleet/version-bump-order-guard:
     dependencies:
@@ -2466,7 +2466,7 @@ importers:
     devDependencies:
       '@types/node':
         specifier: 'catalog:'
-        version: 26.1.1
+        version: 26.1.2
 
   .claude/hooks/fleet/vitest-vs-node-test-guard:
     dependencies:
@@ -2476,7 +2476,7 @@ importers:
     devDependencies:
       '@types/node':
         specifier: 'catalog:'
-        version: 26.1.1
+        version: 26.1.2
 
   .claude/hooks/fleet/wheelhouse-drift-guard:
     dependencies:
@@ -2486,7 +2486,7 @@ importers:
     devDependencies:
       '@types/node':
         specifier: 'catalog:'
-        version: 26.1.1
+        version: 26.1.2
 
   .claude/hooks/fleet/workflow-multiline-body-guard:
     dependencies:
@@ -2496,7 +2496,7 @@ importers:
     devDependencies:
       '@types/node':
         specifier: 'catalog:'
-        version: 26.1.1
+        version: 26.1.2
 
   .claude/hooks/fleet/workflow-uses-comment-guard:
     dependencies:
@@ -2512,7 +2512,7 @@ importers:
     devDependencies:
       '@types/node':
         specifier: 'catalog:'
-        version: 26.1.1
+        version: 26.1.2
 
   .config/fleet/oxlint-plugin:
     dependencies:
@@ -2752,52 +2752,52 @@ packages:
     engines: {node: '>=20.19.0'}
     hasBin: true
 
-  '@anthropic-ai/claude-code-darwin-arm64@2.1.216':
-    resolution: {integrity: sha512-Gm0AShldYRsrkdW3lskH0QwsDvU93sATZXjv7HtmGisZlq3YcBV/UwJbi1F5wA/b+cVeptvznjG7A3faaPjz4Q==}
+  '@anthropic-ai/claude-code-darwin-arm64@2.1.220':
+    resolution: {integrity: sha512-rmtd41Bf+n+YnhjSjtQ8WG5qy8KKogUp3YRfQrkLsTgPUD0H3j869rBInBJT3SHrKQ0hLghQLGM73CC1C+USLQ==}
     cpu: [arm64]
     os: [darwin]
 
-  '@anthropic-ai/claude-code-darwin-x64@2.1.216':
-    resolution: {integrity: sha512-Kn9PGMoA1cCIo98HbRbrC3wfLZPE1NVCHMf6axCYeQK4oUyTz8Jb/Hyg9+BpwFgHVOCsR3+bnSMEhrzj7yS3Jg==}
+  '@anthropic-ai/claude-code-darwin-x64@2.1.220':
+    resolution: {integrity: sha512-hbuoG+YCo37VzSKzKJ47ymRmt/YjASc3dRcsZtCcftLYdopv8KL889x/IbCl3cfp/VqV2rRDZ0f3aUDpHUFweQ==}
     cpu: [x64]
     os: [darwin]
 
-  '@anthropic-ai/claude-code-linux-arm64-musl@2.1.216':
-    resolution: {integrity: sha512-ortjlgDBu+BZ2NQuqQwQ43oU9mNxhN67uAUVGZNmgLCjzEfnjdYzXZU7On2De9pu8WBfTsAVdb0WqtbnfVaZCA==}
+  '@anthropic-ai/claude-code-linux-arm64-musl@2.1.220':
+    resolution: {integrity: sha512-m37ALw8jcbSknuyG7xDQjGPY7Gth3eX8iFY1XFEWABVq1iUMVAUn96WC9eqwi8/JSqyG2t3oNRiqHdi2ZNKFGQ==}
     cpu: [arm64]
     os: [linux]
     libc: [musl]
 
-  '@anthropic-ai/claude-code-linux-arm64@2.1.216':
-    resolution: {integrity: sha512-g2/K+v6MiIKY65SlPoFv8cRbRvroHxhvHPCf8lPDMMyRLG9fpHGGLZSR21W8OPjbqTZK8GcFcOaKrjQJrWveZw==}
+  '@anthropic-ai/claude-code-linux-arm64@2.1.220':
+    resolution: {integrity: sha512-VHFI8mKruIntKn7eq81sbyS19/KWmQcmJQsS/C+j9M/E+w0s4UytgsL7DADPjBE/GByNiKoRtLYDMntCjRlOdA==}
     cpu: [arm64]
     os: [linux]
     libc: [glibc]
 
-  '@anthropic-ai/claude-code-linux-x64-musl@2.1.216':
-    resolution: {integrity: sha512-GBEdZ0Bi6qziIcxG4chVoYKrC30tphmm5hneUfDjmR8sZqMOn0T44mL2ON1lYaT5jn02Y3zMUCK3GyJt8Bm/kw==}
+  '@anthropic-ai/claude-code-linux-x64-musl@2.1.220':
+    resolution: {integrity: sha512-+QyT1KikOdMRKReWFaBYGsroYx2vEjjx54DwhMoC24oE1DxjC+SlKjeOTRXAKiu0fr0O549Lkhg2tuT5xtQpAQ==}
     cpu: [x64]
     os: [linux]
     libc: [musl]
 
-  '@anthropic-ai/claude-code-linux-x64@2.1.216':
-    resolution: {integrity: sha512-BMf+Z3QM4Aj9qjA/qSYrl/JvajKxSgJUMRBnlSR4RP1qrUNWiAcWe7mljj3Au/zEv9Ahh/oi679rcqA6cTtwuQ==}
+  '@anthropic-ai/claude-code-linux-x64@2.1.220':
+    resolution: {integrity: sha512-3CGFCnI0gpgsqNeJruFALBDGJaKXOuok3alQEg56ty2yOPpIrOx/r2Y0+T4uhJl7kP5Hzw4IFkxo4DZKWvzQ7Q==}
     cpu: [x64]
     os: [linux]
     libc: [glibc]
 
-  '@anthropic-ai/claude-code-win32-arm64@2.1.216':
-    resolution: {integrity: sha512-eiGj4hSzVqf3f6RSdpGtPnT9mk5m9/cgyW07O4ztVBAckL/lh3TAZ6w3cxMozaZZ7rdz0TX3BLqx8wa8FJ8eng==}
+  '@anthropic-ai/claude-code-win32-arm64@2.1.220':
+    resolution: {integrity: sha512-APqZwFBn38DBUwB65uUTetW7lbtUqFfAfOWKvkmOyqFDswDEsInaINuIwqMCl44WYcch10SaHhEZdXJU9MG3aQ==}
     cpu: [arm64]
     os: [win32]
 
-  '@anthropic-ai/claude-code-win32-x64@2.1.216':
-    resolution: {integrity: sha512-wS3SS+M0RiRM76Cg7OYrdvL7qHO80tEX9OVH5zZ1FsZ2nZGMZzERNpONcaahtPWOSbWWrjb0ez39K24tkZFIWQ==}
+  '@anthropic-ai/claude-code-win32-x64@2.1.220':
+    resolution: {integrity: sha512-UGrjH8cGhC6PzhTyZSdgf/RpKxpfk9XJZ/RT/wsG2AJg9yEJLjLg6/TrnlL8RFbEv6Zahu0Quytc02UOpA/GiA==}
     cpu: [x64]
     os: [win32]
 
-  '@anthropic-ai/claude-code@2.1.216':
-    resolution: {integrity: sha512-UH4XncIO6ceNZMq2HxphEn9YR7uu5NGVJMcogGSPvu0nXRw8ubEjbu5cD3Dhvx3vXxizwFA82tmk6mVXjhr/dw==}
+  '@anthropic-ai/claude-code@2.1.220':
+    resolution: {integrity: sha512-ogBrvwkqF9f8okmnXKxmRNHuvtFxFEffe5pWdqOV3iQDxlUOKirFqnyWC7NGXXnDA4WkkbPH8pvSbwyCR2Auyw==}
     engines: {node: '>=22.0.0'}
     hasBin: true
 
@@ -3358,10 +3358,6 @@ packages:
     resolution: {integrity: sha512-MZ5dyXOtiEc7q3801T+2EmKkxrd55BOSQnG8z/8/IkIJzDxqBxGGBKVyixqFm3W657TyUEBfIT9iWgSB6ipFsA==}
     engines: {node: '>=18'}
 
-  '@socketregistry/packageurl-js@1.4.8':
-    resolution: {integrity: sha512-u9Mlg3zeiCr8FHdG6Sxd4T8dWS/zVzW270tS67JdDra2hrzPfgsmbWr7itlQc/0P9uWX6gslISs88YQvi3Z5SQ==}
-    engines: {node: '>=24', npm: '>=12.0.0', pnpm: '>=11.0.5'}
-
   '@socketregistry/packageurl-js@1.5.0':
     resolution: {integrity: sha512-Yqnq50McfKVqKCUKRIhW3XcnjxzFoysBDkUktOuLzOdy4cWi0smVqvLNSkS3f4sdDJYpRBjcxTlb2ajHr+cURQ==}
     engines: {node: '>=24', npm: '>=12.0.1', pnpm: '>=11.0.5'}
@@ -3388,10 +3384,6 @@ packages:
       typescript:
         optional: true
 
-  '@socketsecurity/sdk@4.1.2':
-    resolution: {integrity: sha512-CZ9EjVf6M5MDfkG8eIZ1WGmSnQDB4VdT76QbOHticVEQW4LnU4cJ9Uev6SSDsAVECw1KkNtU0ZkDngI4XQUWOg==}
-    engines: {node: '>=18.20.8', npm: '>=12.0.0', pnpm: '>=11.0.5'}
-
   '@socketsecurity/sdk@4.1.3':
     resolution: {integrity: sha512-iaUkTWdBvUt5SMkfdhIOdt66sxZ0TakW/Ni533YbuHJpe1qQN3gq7KHCjEqEQUeL4o6YRsJ2G/XoUrwrXx+jvQ==}
     engines: {node: '>=24', npm: '>=12.0.1', pnpm: '>=11.0.5'}
@@ -3432,8 +3424,8 @@ packages:
   '@types/node@18.19.130':
     resolution: {integrity: sha512-GRaXQx6jGfL8sKfaIDD6OupbIHBr9jv7Jnaml9tB7l4v068PAOXqfcujMMo5PhbIs6ggR1XODELqahT2R8v0fg==}
 
-  '@types/node@26.1.1':
-    resolution: {integrity: sha512-nxAkRSVkN1Y0JC1W8ky/fTfkGsMmcrRsbx+3XoZE+rMOX71kLYTV7fLXpqud1GpbpP5TuffXFqfX7fH2GgZREw==}
+  '@types/node@26.1.2':
+    resolution: {integrity: sha512-Vu4a5UFA9rIIFJ7rB/Vaafh9lrCQszopTCx6KjFboXTGQbPNasehVR5TEiithSDGyd1DEiUByggTZsg8jukeIg==}
 
   '@types/semver@7.7.1':
     resolution: {integrity: sha512-FmgJfu+MOcQ370SD0ev7EI8TlCAfKYU+B4m5T3yXc1CiRN94g/SZPtsCkk506aUDtlMnFZvasDwHHUcZUEaYuA==}
@@ -4079,8 +4071,8 @@ packages:
     resolution: {integrity: sha512-wHTUcDUoZ1H5/0iVqEudYW4/kAlN5cZ3j/bXn0Dpbizl9iaUVeWSHqiOjsgk6OW2bkLclbBjzewBz6weQ1zA2Q==}
     engines: {node: '>=18'}
 
-  globby@16.2.1:
-    resolution: {integrity: sha512-JmsqJalahxxgW8V2ecSQ2G7UjPlI9cpKdrkG9KoNiXhd/YslXOTEB0cViENWUznuovIuNT+FkMbraDGjr4FCUg==}
+  globby@16.2.2:
+    resolution: {integrity: sha512-NLvV9ubZ6NDsJaOpKPy3cQeJpKi9DcWiyCiFUpJPA0YihRqiE6RWaLUmgNNPr8MgPpLZjnBjSmou7uZBRJv9wA==}
     engines: {node: '>=20'}
 
   graceful-fs@4.2.10:
@@ -4348,8 +4340,8 @@ packages:
     peerDependencies:
       markdownlint-cli2: '>=0.0.4'
 
-  markdownlint-cli2@0.23.1:
-    resolution: {integrity: sha512-20JPI5W+HpV1OA+pUM712wgvL4GzYNUvbmhLU8KlEYJ1kCDx4soZ4/Xqd+WkLrPTOKMAn8SfO3zYFrK8GLlwQg==}
+  markdownlint-cli2@0.23.2:
+    resolution: {integrity: sha512-eUhcnkSpzURo/o4htSqc7LPDszgOOTknhU4eY/sPHvMCLxnTCYscv1gw1/js/idmaZPisv9ECVEIORcllqjTUw==}
     engines: {node: '>=22'}
     hasBin: true
 
@@ -4687,8 +4679,8 @@ packages:
     os: [darwin, linux, win32]
     hasBin: true
 
-  postcss@8.5.20:
-    resolution: {integrity: sha512-lW616l85ucIQL+FocMmL7pQFPqBmwejrCMg+iPxyImlrANNJG9NHq/RkyCZopDhd8C3LA03PHRJDjkbGu8vvug==}
+  postcss@8.5.23:
+    resolution: {integrity: sha512-g50586zr4bZmwFiTlflMu8E0bDTb5I5gertgwAKmsdUlTQIhZtunzUlD1WSzwcVWPoAVpsrA6vlfCD7oXvRwgg==}
     engines: {node: ^10 || ^12 || >=14}
 
   propagate@2.0.1:
@@ -5201,40 +5193,40 @@ snapshots:
       tinyexec: 1.2.4
       tinyglobby: 0.2.17
 
-  '@anthropic-ai/claude-code-darwin-arm64@2.1.216':
+  '@anthropic-ai/claude-code-darwin-arm64@2.1.220':
     optional: true
 
-  '@anthropic-ai/claude-code-darwin-x64@2.1.216':
+  '@anthropic-ai/claude-code-darwin-x64@2.1.220':
     optional: true
 
-  '@anthropic-ai/claude-code-linux-arm64-musl@2.1.216':
+  '@anthropic-ai/claude-code-linux-arm64-musl@2.1.220':
     optional: true
 
-  '@anthropic-ai/claude-code-linux-arm64@2.1.216':
+  '@anthropic-ai/claude-code-linux-arm64@2.1.220':
     optional: true
 
-  '@anthropic-ai/claude-code-linux-x64-musl@2.1.216':
+  '@anthropic-ai/claude-code-linux-x64-musl@2.1.220':
     optional: true
 
-  '@anthropic-ai/claude-code-linux-x64@2.1.216':
+  '@anthropic-ai/claude-code-linux-x64@2.1.220':
     optional: true
 
-  '@anthropic-ai/claude-code-win32-arm64@2.1.216':
+  '@anthropic-ai/claude-code-win32-arm64@2.1.220':
     optional: true
 
-  '@anthropic-ai/claude-code-win32-x64@2.1.216':
+  '@anthropic-ai/claude-code-win32-x64@2.1.220':
     optional: true
 
-  '@anthropic-ai/claude-code@2.1.216':
+  '@anthropic-ai/claude-code@2.1.220':
     optionalDependencies:
-      '@anthropic-ai/claude-code-darwin-arm64': 2.1.216
-      '@anthropic-ai/claude-code-darwin-x64': 2.1.216
-      '@anthropic-ai/claude-code-linux-arm64': 2.1.216
-      '@anthropic-ai/claude-code-linux-arm64-musl': 2.1.216
-      '@anthropic-ai/claude-code-linux-x64': 2.1.216
-      '@anthropic-ai/claude-code-linux-x64-musl': 2.1.216
-      '@anthropic-ai/claude-code-win32-arm64': 2.1.216
-      '@anthropic-ai/claude-code-win32-x64': 2.1.216
+      '@anthropic-ai/claude-code-darwin-arm64': 2.1.220
+      '@anthropic-ai/claude-code-darwin-x64': 2.1.220
+      '@anthropic-ai/claude-code-linux-arm64': 2.1.220
+      '@anthropic-ai/claude-code-linux-arm64-musl': 2.1.220
+      '@anthropic-ai/claude-code-linux-x64': 2.1.220
+      '@anthropic-ai/claude-code-linux-x64-musl': 2.1.220
+      '@anthropic-ai/claude-code-win32-arm64': 2.1.220
+      '@anthropic-ai/claude-code-win32-x64': 2.1.220
 
   '@anthropic-ai/sdk@0.39.0':
     dependencies:
@@ -5608,8 +5600,6 @@ snapshots:
 
   '@socketregistry/hasown@1.0.7': {}
 
-  '@socketregistry/packageurl-js@1.4.8': {}
-
   '@socketregistry/packageurl-js@1.5.0': {}
 
   '@socketregistry/safe-buffer@1.0.9': {}
@@ -5622,8 +5612,6 @@ snapshots:
     optionalDependencies:
       typescript: 7.0.2
 
-  '@socketsecurity/sdk@4.1.2': {}
-
   '@socketsecurity/sdk@4.1.3': {}
 
   '@standard-schema/spec@1.1.0': {}
@@ -5658,14 +5646,14 @@ snapshots:
 
   '@types/node-fetch@2.6.13':
     dependencies:
-      '@types/node': 26.1.1
+      '@types/node': 26.1.2
       form-data: 4.0.6
 
   '@types/node@18.19.130':
     dependencies:
       undici-types: 5.26.5
 
-  '@types/node@26.1.1':
+  '@types/node@26.1.2':
     dependencies:
       undici-types: 8.3.0
 
@@ -5782,7 +5770,7 @@ snapshots:
       obug: 2.1.3
       std-env: 4.2.0
       tinyrainbow: 3.1.0
-      vitest: 4.1.10(@types/node@26.1.1)(@vitest/coverage-v8@4.1.10)(@vitest/ui@4.1.10)(vite@8.1.5(@types/node@26.1.1)(jiti@2.7.0)(yaml@2.9.0))
+      vitest: 4.1.10(@types/node@26.1.2)(@vitest/coverage-v8@4.1.10)(@vitest/ui@4.1.10)(vite@8.1.5(@types/node@26.1.2)(jiti@2.7.0)(yaml@2.9.0))
 
   '@vitest/expect@4.1.10':
     dependencies:
@@ -5793,13 +5781,13 @@ snapshots:
       chai: 6.2.2
       tinyrainbow: 3.1.0
 
-  '@vitest/mocker@4.1.10(vite@8.1.5(@types/node@26.1.1)(jiti@2.7.0)(yaml@2.9.0))':
+  '@vitest/mocker@4.1.10(vite@8.1.5(@types/node@26.1.2)(jiti@2.7.0)(yaml@2.9.0))':
     dependencies:
       '@vitest/spy': 4.1.10
       estree-walker: 3.0.3
       magic-string: 1.1.0
     optionalDependencies:
-      vite: 8.1.5(@types/node@26.1.1)(jiti@2.7.0)(yaml@2.9.0)
+      vite: 8.1.5(@types/node@26.1.2)(jiti@2.7.0)(yaml@2.9.0)
 
   '@vitest/pretty-format@4.1.10':
     dependencies:
@@ -5828,7 +5816,7 @@ snapshots:
       sirv: 3.0.2
       tinyglobby: 0.2.17
       tinyrainbow: 3.1.0
-      vitest: 4.1.10(@types/node@26.1.1)(@vitest/coverage-v8@4.1.10)(@vitest/ui@4.1.10)(vite@8.1.5(@types/node@26.1.1)(jiti@2.7.0)(yaml@2.9.0))
+      vitest: 4.1.10(@types/node@26.1.2)(@vitest/coverage-v8@4.1.10)(@vitest/ui@4.1.10)(vite@8.1.5(@types/node@26.1.2)(jiti@2.7.0)(yaml@2.9.0))
 
   '@vitest/utils@4.1.10':
     dependencies:
@@ -6254,7 +6242,7 @@ snapshots:
     dependencies:
       ini: 4.1.1
 
-  globby@16.2.1:
+  globby@16.2.2:
     dependencies:
       '@sindresorhus/merge-streams': 4.0.0
       fast-glob: 3.3.3
@@ -6464,19 +6452,19 @@ snapshots:
       punycode.js: 2.3.1
       uc.micro: 2.1.0
 
-  markdownlint-cli2-formatter-default@0.0.6(markdownlint-cli2@0.23.1(supports-color@7.2.0)):
+  markdownlint-cli2-formatter-default@0.0.6(markdownlint-cli2@0.23.2(supports-color@7.2.0)):
     dependencies:
-      markdownlint-cli2: 0.23.1(supports-color@7.2.0)
+      markdownlint-cli2: 0.23.2(supports-color@7.2.0)
 
-  markdownlint-cli2@0.23.1(supports-color@7.2.0):
+  markdownlint-cli2@0.23.2(supports-color@7.2.0):
     dependencies:
-      globby: 16.2.1
+      globby: 16.2.2
       js-yaml: 5.2.2
       jsonc-parser: 3.3.1
       jsonpointer: 5.0.1
       markdown-it: 14.3.0
       markdownlint: 0.41.1(supports-color@7.2.0)
-      markdownlint-cli2-formatter-default: 0.0.6(markdownlint-cli2@0.23.1(supports-color@7.2.0))
+      markdownlint-cli2-formatter-default: 0.0.6(markdownlint-cli2@0.23.2(supports-color@7.2.0))
       micromatch: 4.0.8
       smol-toml: 1.7.0
     transitivePeerDependencies:
@@ -6924,7 +6912,7 @@ snapshots:
 
   portless@0.15.4: {}
 
-  postcss@8.5.20:
+  postcss@8.5.23:
     dependencies:
       nanoid: 3.3.16
       picocolors: 1.1.1
@@ -6945,7 +6933,7 @@ snapshots:
       '@protobufjs/path': 1.1.2
       '@protobufjs/pool': 1.1.0
       '@protobufjs/utf8': 1.1.2
-      '@types/node': 26.1.1
+      '@types/node': 26.1.2
       long: 5.3.2
 
   pump@3.0.4:
@@ -7305,23 +7293,23 @@ snapshots:
 
   verkit@0.1.2: {}
 
-  vite@8.1.5(@types/node@26.1.1)(jiti@2.7.0)(yaml@2.9.0):
+  vite@8.1.5(@types/node@26.1.2)(jiti@2.7.0)(yaml@2.9.0):
     dependencies:
       lightningcss: 1.32.0
       picomatch: 4.0.5
-      postcss: 8.5.20
+      postcss: 8.5.23
       rolldown: 1.1.4
       tinyglobby: 0.2.17
     optionalDependencies:
-      '@types/node': 26.1.1
+      '@types/node': 26.1.2
       fsevents: 2.3.3
       jiti: 2.7.0
       yaml: 2.9.0
 
-  vitest@4.1.10(@types/node@26.1.1)(@vitest/coverage-v8@4.1.10)(@vitest/ui@4.1.10)(vite@8.1.5(@types/node@26.1.1)(jiti@2.7.0)(yaml@2.9.0)):
+  vitest@4.1.10(@types/node@26.1.2)(@vitest/coverage-v8@4.1.10)(@vitest/ui@4.1.10)(vite@8.1.5(@types/node@26.1.2)(jiti@2.7.0)(yaml@2.9.0)):
     dependencies:
       '@vitest/expect': 4.1.10
-      '@vitest/mocker': 4.1.10(vite@8.1.5(@types/node@26.1.1)(jiti@2.7.0)(yaml@2.9.0))
+      '@vitest/mocker': 4.1.10(vite@8.1.5(@types/node@26.1.2)(jiti@2.7.0)(yaml@2.9.0))
       '@vitest/pretty-format': 4.1.10
       '@vitest/runner': 4.1.10
       '@vitest/snapshot': 4.1.10
@@ -7338,10 +7326,10 @@ snapshots:
       tinyexec: 1.2.4
       tinyglobby: 0.2.17
       tinyrainbow: 3.1.0
-      vite: 8.1.5(@types/node@26.1.1)(jiti@2.7.0)(yaml@2.9.0)
+      vite: 8.1.5(@types/node@26.1.2)(jiti@2.7.0)(yaml@2.9.0)
       why-is-node-running: 2.3.0
     optionalDependencies:
-      '@types/node': 26.1.1
+      '@types/node': 26.1.2
       '@vitest/coverage-v8': 4.1.10(vitest@4.1.10)
       '@vitest/ui': 4.1.10(vitest@4.1.10)
     transitivePeerDependencies:
diff --git a/pnpm-workspace.yaml b/pnpm-workspace.yaml
index 01dd7f3c8..733aed1b6 100644
--- a/pnpm-workspace.yaml
+++ b/pnpm-workspace.yaml
@@ -23,25 +23,25 @@ managePackageManagerVersions: false
 pmOnFail: warn
 
 catalog:
-  '@anthropic-ai/claude-code': 2.1.216
+  '@anthropic-ai/claude-code': 2.1.220
   '@babel/core': 7.29.7
   '@babel/types': 7.29.7
-  '@biomejs/biome': 2.5.4
+  '@biomejs/biome': 2.5.5
   '@dotenvx/dotenvx': 1.75.1
   '@redwoodjs/agent-ci': 0.17.1
   '@shadscan/cli': 0.2.0
   '@sinclair/typebox': 0.34.52
   '@socketregistry/packageurl-js': 1.5.0
-  '@socketregistry/packageurl-js-stable': npm:@socketregistry/packageurl-js@1.4.8
+  '@socketregistry/packageurl-js-stable': npm:@socketregistry/packageurl-js@1.5.0
   '@socketsecurity/lib': 6.5.2
   '@socketsecurity/lib-stable': npm:@socketsecurity/lib@6.5.2
   '@socketsecurity/registry': 2.0.5
   '@socketsecurity/registry-stable': npm:@socketsecurity/registry@2.0.5
   '@socketsecurity/sdk': 4.1.3
-  '@socketsecurity/sdk-stable': npm:@socketsecurity/sdk@4.1.2
+  '@socketsecurity/sdk-stable': npm:@socketsecurity/sdk@4.1.3
   '@types/adm-zip': 0.5.8
   '@types/mdast': 4.0.4
-  '@types/node': 26.1.1
+  '@types/node': 26.1.2
   '@types/semver': 7.7.1
   '@types/shell-quote': 1.7.5
   '@typescript/native-preview': 7.0.0-dev.20260510.1
@@ -49,7 +49,7 @@ catalog:
   '@ultrathink/acorn.rs.wasm': 0.1.1
   '@vitest/coverage-v8': 4.1.10
   '@vitest/ui': 4.1.10
-  acorn: 8.17.0
+  acorn: 8.18.0
   acorn-walk: 8.3.5
   adm-zip: 0.5.18
   'c8': 12.0.0
@@ -59,7 +59,7 @@ catalog:
   ecc-agentshield: 1.4.0
   'fast-check': 4.9.0
   magic-string: 1.1.0
-  'markdownlint-cli2': 0.23.1
+  'markdownlint-cli2': 0.23.2
   'mdast-util-from-markdown': 2.0.3
   'micromark': 4.0.2
   'neosanitize': 0.3.0
@@ -117,13 +117,13 @@ minimumReleaseAgeExclude:
   # verkit — new dev-only transitive of taze 19.16.0 (same owner directive);
   # exact-pinned so future versions re-soak.
 
-# Refuse transitive dependencies declared via git/tarball/local-tarball
-# specs — an npm package shouldn't be allowed to drag in a git URL we
-# don't control (bypasses npm registry validation, no provenance, no
-# soak window). Direct git deps are still allowed (the test suite at
-# pnpm/pkg-manager/core/test/install/blockExoticSubdeps.ts confirms
-# this). pnpm's current default is `false`; declared explicitly so a
-# future flip can't silently change install behavior.
+  # Refuse transitive dependencies declared via git/tarball/local-tarball
+  # specs — an npm package shouldn't be allowed to drag in a git URL we
+  # don't control (bypasses npm registry validation, no provenance, no
+  # soak window). Direct git deps are still allowed (the test suite at
+  # pnpm/pkg-manager/core/test/install/blockExoticSubdeps.ts confirms
+  # this). pnpm's current default is `false`; declared explicitly so a
+  # future flip can't silently change install behavior.
 blockExoticSubdeps: true
 confirmModulesPurge: false
 
@@ -174,9 +174,9 @@ overrides:
   'ast-v8-to-istanbul': '1.0.5'
   # advisory #23 (medium) — got 11.8.5 fix; bump to latest 11.x patch
   'got': '11.8.6'
-  'postcss': '8.5.20'
+  'postcss': '8.5.23'
   'rolldown': 'catalog:'
-  'tar': '7.5.20'
+  'tar': '7.5.22'
   'vite': 'catalog:'
   'which@>=4': '7.0.0'