saravanakumardb1 141435fe95 feat(fleet): bind advertised capabilities to the enrolled token scope ... The claim path already constrained a factory to its enrolled scope, but the heartbeat trusted self-reported capabilities — so (with enforcement on) a factory could advertise e.g. engine:codex it was never granted, polluting the engine picker (GET /fleet/factories) and routing/explain decisions even though a codex job still couldn't be claimed by it. Heartbeat now intersects the factory's self-reported capabilities with the token scope when enforcement is ON: it may report FEWER (an engine temporarily unavailable) but never MORE than enrolled. Enforcement OFF is unchanged (self-reported caps pass through verbatim). Covered by new route tests. Generated with [Devin](https://cli.devin.ai/docs) Co-Authored-By: Devin <158243242+devin-ai-integration[bot]@users.noreply.github.com>		2026-06-01 12:14:09 -07:00
..
scripts	chore(platform): document script CLI output	2026-05-04 16:45:42 -07:00
src	feat(fleet): bind advertised capabilities to the enrolled token scope	2026-06-01 12:14:09 -07:00
.gitignore	fix(fleet): Phase 3 hardening — budget authz, idempotent accrual, cycle detection, artifact	2026-05-31 02:45:52 -07:00
Dockerfile	fix(docker): INFRA-gap-02 unblock full-stack docker compose up	2026-04-16 15:48:32 -07:00
package.json	chore(deps): bump @types/node 22 -> 25 (dev types)	2026-05-31 04:02:56 -07:00
POSTAL_SMTP_SETUP.md	feat(platform-service): add smtp email delivery and postal setup	2026-03-14 05:52:28 +00:00
tsconfig.json	feat(services): add platform-service (auth, audit, flags, notifications, blob)	2026-02-12 11:39:00 -08:00
vitest.config.ts	fix(ci): add --pool forks to all vitest test scripts to fix kill EPERM on Node v25	2026-03-27 23:23:38 -07:00