fix(ci): dedupe auth-profile sqlite allowlist

jewseppi · jewseppi · commit f49e8ee76137 · 2026-06-15T21:05:55.000-04:00
diff --git a/scripts/check-kysely-guardrails.mjs b/scripts/check-kysely-guardrails.mjs
@@ -45,10 +45,10 @@ const rawSqliteAllowPathGroups = {
     "src/state/sqlite-schema-shape.test-support.ts",
   ],
   "backup snapshot maintenance": ["src/commands/backup-verify.ts", "src/infra/backup-create.ts"],
+  "agent auth profile read-only bootstrap": ["src/agents/auth-profiles/sqlite.ts"],
   "doctor legacy state migration": ["src/infra/state-migrations.ts"],
   "Kysely-backed stores that own a DatabaseSync boundary": [
     "src/acp/event-ledger.ts",
-    "src/agents/auth-profiles/sqlite.ts",
     "src/agents/subagent-registry.store.ts",
     "src/cron/run-log.ts",
     "src/cron/run-log/sqlite-store.ts",
