@@ -6,7 +6,7 @@
 //                      legitimately tolerate a missing ref (e.g. probing
 //                      remote default-branch HEAD which may not be set up
 //                      locally) and provide their own fallback. Silent
-//                      by design — _shared/helpers.mts can't import the canonical
+//                      by design — _shared/util.mts can't import the canonical
 //                      logger because it runs before the Node-version
 //                      gate has cleared, and a fire-and-forget dynamic
 //                      import races process exit. Callers that need to
 
@@ -1,5 +1,5 @@
 // Logger-leak matcher — shared by the commit-time scanLoggerLeaks
-// (.git-hooks/_shared/helpers.mts) and the edit-time logger-guard
+// (.git-hooks/_shared/util.mts) and the edit-time logger-guard
 // (.claude/hooks/fleet/). Both flag direct `console.*` / `process.std*.write`
 // calls (the fleet rule: use getDefaultLogger()). Previously the commit side
 // used a REGEX and the edit side an AST walk — divergent engines that could
 
@@ -1,5 +1,5 @@
 // Personal-path leak matcher — shared by the commit-time scanPersonalPaths
-// (.git-hooks/_shared/helpers.mts) and the edit-time personal-path-guard
+// (.git-hooks/_shared/util.mts) and the edit-time personal-path-guard
 // (.claude/hooks/fleet/). Both surfaces import THESE regexes + helpers so the
 // two can't drift, which lock-step inline copies cannot promise. Gate-free
 // (no Node-25 hard-exit like helpers.mts) so the Claude hook can import it on
 
@@ -4,7 +4,7 @@
 // comment / commit-message / supply-chain scanners, file + git IO, and the
 // staged-state gates. Each hook imports `getDefaultLogger` from
 // `@socketsecurity/lib-stable/logger/default` directly for output; this module
-// stays import-light so the cost of `import '../_shared/helpers.mts'` is bounded.
+// stays import-light so the cost of `import '../_shared/util.mts'` is bounded.
 //
 // Requires Node 24+ for default-on native .mts type-stripping, no flag needed.
 import './node-version.mts'
 
@@ -46,7 +46,7 @@ import {
   stagedIndexIsEmpty,
   stripTemplateLayer,
   suppressionFor,
-} from '../_shared/helpers.mts'
+} from '../_shared/util.mts'
 
 const logger = getDefaultLogger()
 
@@ -63,7 +63,7 @@ function refuseCatastrophicDeletion(): number {
   // excluded before the count, so it needs no bypass either. A surgical
   // `git commit --only <paths>` sees ONLY the named paths, never a foreign
   // deletion staged elsewhere in the working index — see
-  // catastrophicDeletionReason's comment in _shared/helpers.mts for the
+  // catastrophicDeletionReason's comment in _shared/util.mts for the
   // verified GIT_INDEX_FILE scoping this relies on.
   const wipeReason = catastrophicDeletionReason()
   if (wipeReason) {
 
@@ -30,7 +30,7 @@ import { fileURLToPath } from 'node:url'
 
 import { getDefaultLogger } from '@socketsecurity/lib-stable/logger/default'
 
-import { gitLines } from '../_shared/helpers.mts'
+import { gitLines } from '../_shared/util.mts'
 // Canonical shared identity reader (.git-hooks/_shared/). Same source the
 // commit-author-guard PreToolUse hook and the commit-msg git-stage backstop
 // use; the DATA is the cascaded .config/fleet|repo/git-authors.json.
 
@@ -31,9 +31,9 @@ import { errorMessage } from '@socketsecurity/lib-stable/errors/message'
 import { getDefaultLogger } from '@socketsecurity/lib-stable/logger/default'
 
 // Import `splitLines` from the barrel, not the scan-core leaf, so the Node-25
-// version gate in `../_shared/helpers.mts` runs at load — every gate below
+// version gate in `../_shared/util.mts` runs at load — every gate below
 // assumes native .mts type stripping.
-import { splitLines } from '../_shared/helpers.mts'
+import { splitLines } from '../_shared/util.mts'
 import { debugCheck } from '../_shared/check-output.mts'
 import { scanCommitMessages } from '../_shared/push/commit-messages.mts'
 import { scanFilesInRange } from '../_shared/push/file-scan.mts'
 
@@ -109,6 +109,8 @@ docs/fleet/fuzzing linguist-generated=true
 docs/fleet/perf linguist-generated=true
 docs/fleet/testing linguist-generated=true
 docs/fleet/workflows linguist-generated=true
+docs/references/fleet/fixtures/package-intelligence-v1 linguist-generated=true
+docs/references/fleet/package-intelligence-v1.md linguist-generated=true
 docs/references/fleet/sfw-local-install.md linguist-generated=true
 patches/fleet/@polka__url@1.0.0-next.29.patch linguist-generated=true
 patches/fleet/brace-expansion@5.0.12.patch linguist-generated=true
@@ -121,6 +123,7 @@ scripts/fleet/npm/scan/receipt.mts linguist-generated=true
 scripts/fleet/npm/scan/staged.mts linguist-generated=true
 scripts/fleet/registry/npm/scan/ndjson.mts linguist-generated=true
 scripts/fleet/registry/npm/scan/run.mts linguist-generated=true
+scripts/fleet/registry/npm/staged.mts linguist-generated=true
 scripts/fleet/setup/bootstrap/zero-dep-packages.mjs linguist-generated=true
 scripts/fleet/setup/lib/check/sfw.mjs linguist-generated=true
 scripts/fleet/setup/lib/error-message.mjs linguist-generated=true
@@ -141,6 +144,7 @@ test/fleet/unit/credentials/otp/bindings.test.mts linguist-generated=true
 test/fleet/unit/fix/plan.test.mts linguist-generated=true
 test/fleet/unit/fix/run.test.mts linguist-generated=true
 test/fleet/unit/lockstep/emit-mirror-globs.test.mts linguist-generated=true
+test/fleet/unit/registry/apple/ci/keychain.test.mts linguist-generated=true
 test/fleet/unit/registry/cargo/placeholder.test.mts linguist-generated=true
 test/fleet/unit/registry/npm/placeholder.test.mts linguist-generated=true
 test/fleet/unit/setup/lib/pnpm-path.test.mts linguist-generated=true