From 9ad58d4c2c4fe8e1c25c6193e2cfde9f1db1d013 Mon Sep 17 00:00:00 2001
From: MelaBuilt AI <282087817+MelaBuilt-AI@users.noreply.github.com>
Date: Fri, 16 Oct 2026 11:50:09 -0400
Subject: [PATCH] fix: align npm installer with accepted Linux archive

---
 tooling/release/npm-installer/README.md             | 2 +-
 tooling/release/npm-installer/install.mjs           | 2 +-
 tooling/release/npm-installer/test/install.test.mjs | 2 +-
 3 files changed, 3 insertions(+), 3 deletions(-)

diff --git a/tooling/release/npm-installer/README.md b/tooling/release/npm-installer/README.md
index 150faa5..9a0f105 100644
--- a/tooling/release/npm-installer/README.md
+++ b/tooling/release/npm-installer/README.md
@@ -18,7 +18,7 @@ Local candidate verification without publication:
 AIW_TEST_ARCHIVE=/path/to/AgentIntersect-World-0.15.0-rc.2-linux-x64.tar.gz node --test tooling/release/npm-installer/test/install.test.mjs
 ```
 
-The test uses `--archive` solely to supply the **same exact pinned archive** locally; it still checks the checksum. This unpublished candidate pairs with the clean application source `aea6234ecd9c3386b346d5f35ad47dd404f387cd` archive, SHA-256 `8ac77357fdaa709226ea19b3edfeb065ad20daddab3179694b847d394f27436f`. Application and bootstrap source commits are recorded separately in the private kit. Do not mix older rc.2 archive or npm tarball bytes with this pair.
+The test uses `--archive` solely to supply the **same exact pinned archive** locally; it still checks the checksum. This unpublished candidate pairs with the clean application source `4bdb0cc6986ef87677c57da5499963fc78f67eb1` archive, SHA-256 `d9ebb915087f61da953f12923bbd798a2c47549af34c670f3ffba7d17298fe98`. These are the unchanged October 12 application bytes, not a rebuild for this bootstrap update. Application and bootstrap source commits are recorded separately in the private kit. Do not mix older rc.2 archive or npm tarball bytes with this pair.
 
 For private transfer, use the exact local npm tarball and app archive from the same checksum-verified kit:
 
diff --git a/tooling/release/npm-installer/install.mjs b/tooling/release/npm-installer/install.mjs
index b202e01..1e93844 100644
--- a/tooling/release/npm-installer/install.mjs
+++ b/tooling/release/npm-installer/install.mjs
@@ -19,7 +19,7 @@ import { pipeline } from "node:stream/promises";
 const version = "0.15.0-rc.2";
 const name = `AgentIntersect-World-${version}-linux-x64`;
 const sha256 =
-  "8ac77357fdaa709226ea19b3edfeb065ad20daddab3179694b847d394f27436f";
+  "d9ebb915087f61da953f12923bbd798a2c47549af34c670f3ffba7d17298fe98";
 const url = `https://github.com/MelaBuilt-AI/AgentIntersect-World/releases/download/v${version}/${name}.tar.gz`;
 
 async function exists(path) {
diff --git a/tooling/release/npm-installer/test/install.test.mjs b/tooling/release/npm-installer/test/install.test.mjs
index a549d5b..38a299e 100644
--- a/tooling/release/npm-installer/test/install.test.mjs
+++ b/tooling/release/npm-installer/test/install.test.mjs
@@ -75,7 +75,7 @@ test(
       assert.equal(
         JSON.parse(readFileSync(join(installed, "BUILD.json"), "utf8"))
           .sourceCommit,
-        "aea6234ecd9c3386b346d5f35ad47dd404f387cd",
+        "4bdb0cc6986ef87677c57da5499963fc78f67eb1",
       );
       const repeat = run();
       assert.equal(repeat.status, 0, repeat.stderr);