bus: row 236, two out-of-manifest pins: gitea is a known grant method, and the broker imports giteaName and parseGiteaUrl (gate run sage-2554, #1742)

packages/bus/tests/grant-host.test.mjs

@@ -86,7 +86,8 @@ test('G1, R4: the grant takes exactly method, agent, host, commands and rotateBy
   for (const bad of [
     noRotate,
     { ...g, extra: 1 },
-    { ...g, method: 'gitea' },
+    // Row 236 (#1742) makes gitea a known method with its own path, so the unknown method is another name.
+    { ...g, method: 'ftp' },
     { ...g, method: 'Host' },
     { ...g, agent: 'Ops' },
     { ...g, agent: '' },

packages/bus/tests/project-runtime.test.mjs

@@ -30,7 +30,8 @@ test('Broker keeps the sandbox client import closure: only the listed imports, n
     // Row 234 (#1740) reads HOST_ID for the hosts verbs.
     // Row 213 (#1714) reads CREATIVE_DEFINITIONS for the creative raise refusal (M6). Row 194
     // (#1692, D2.4) reads unhireableAction, the hire veto's action name.
-    "import { ID_PATTERN, THREAD_DEFINITION, END_PROTECTED, forkProblem, forkUrl, credentialKind, validArgv, commandAllowed, HOST_ID, CREATIVE_DEFINITIONS, unhireableAction } from '../../business/src/vocabulary.mjs';",
+    // Row 236 (#1742, #436b) reads giteaName and parseGiteaUrl for the Gitea grant path.
+    "import { ID_PATTERN, THREAD_DEFINITION, END_PROTECTED, forkProblem, forkUrl, credentialKind, validArgv, commandAllowed, HOST_ID, CREATIVE_DEFINITIONS, unhireableAction, giteaName, parseGiteaUrl } from '../../business/src/vocabulary.mjs';",
   ]);
   assert.doesNotMatch(source, /\bimport\s*\(/);
   assert.doesNotMatch(readFileSync(new URL('../src/landing.mjs', import.meta.url), 'utf8'), /\bimport\b/);