Rename sweep: FlashyLabs is AgenteLabs

.github/workflows/backlog.yml

@@ -114,10 +114,10 @@ jobs:
           TOKEN: ${{ secrets.ESTATE_DISPATCH_TOKEN }}
         run: |
           if [ -z "$TOKEN" ]; then
-            echo "::warning title=Fan-out is not configured::The record changed and the estate graph was not told. The daily merge still finds it, so this is a delay of up to 24 hours rather than a loss. Set ESTATE_DISPATCH_TOKEN (an org secret with contents:write on FlashyLabs/flashyos) to close it."
+            echo "::warning title=Fan-out is not configured::The record changed and the estate graph was not told. The daily merge still finds it, so this is a delay of up to 24 hours rather than a loss. Set ESTATE_DISPATCH_TOKEN (an org secret with contents:write on AgenteLabs/flashyos) to close it."
             exit 0
           fi
-          code=$(curl -sS -o /tmp/dispatch.out -w '%{http_code}' -X POST -H 'Accept: application/vnd.github+json' -H "Authorization: Bearer $TOKEN" https://api.github.com/repos/FlashyLabs/flashyos/dispatches -d '{"event_type":"estate-fragment-updated"}')
+          code=$(curl -sS -o /tmp/dispatch.out -w '%{http_code}' -X POST -H 'Accept: application/vnd.github+json' -H "Authorization: Bearer $TOKEN" https://api.github.com/repos/AgenteLabs/flashyos/dispatches -d '{"event_type":"estate-fragment-updated"}')
           if [ "$code" != "204" ]; then
             echo "::error title=Fan-out failed::flashyos returned $code to the dispatch. The daily merge is the fallback."
             cat /tmp/dispatch.out

.github/workflows/secret-scan.yml

@@ -17,4 +17,4 @@ permissions:
 
 jobs:
   secrets:
-    uses: FlashyLabs/flashy-infra/.github/workflows/secret-scan-reusable.yml@main
+    uses: AgenteLabs/flashy-infra/.github/workflows/secret-scan-reusable.yml@main

README.md

@@ -32,13 +32,13 @@ chain — without its rules changing.
 
 ### In the Flashy ecosystem
 
-- Powered by [@flashylabs/rails](https://github.com/flashylabs/flashy-rails) (consent-gated settlement on ledger)
+- Powered by [@flashylabs/rails](https://github.com/AgenteLabs/flashy-rails) (consent-gated settlement on ledger)
 - Adopted by [ClaimYour.Gold](https://claimyour.gold) (rewards settlement)
 - Foundation for the full integration example at [flashy-network](https://flashynetwork.com)
 
 ### See also
 
-- [@flashylabs/rails](https://github.com/flashylabs/flashy-rails) — Consent layer on top of ledger
+- [@flashylabs/rails](https://github.com/AgenteLabs/flashy-rails) — Consent layer on top of ledger
 - [Flashy Finance](https://flashy.financial) — Live financial rail (built on ledger + rails)
 - [flashy.tools](https://flashy.tools) — Full package catalog with discovery
 

flashyos.roles.json

@@ -41,7 +41,7 @@
   "repositories": [
     {
       "name": "flashy-ledger",
-      "url": "github.com/FlashyLabs/flashy-ledger",
+      "url": "github.com/AgenteLabs/flashy-ledger",
       "holds": [
         "domain",
         "ports",

package.json

@@ -51,12 +51,12 @@
   "devDependencies": {
     "@eslint/js": "^9.17.0",
     "@types/node": "^26.2.0",
-    "@vitest/coverage-v8": "^4.1.11",
+    "@vitest/coverage-v8": "^4.1.12",
     "eslint": "^9.17.0",
     "mongodb": "^6.21.0",
     "typescript": "^5.7.3",
     "typescript-eslint": "^8.19.0",
-    "vitest": "^4.1.11"
+    "vitest": "^4.1.12"
   },
   "peerDependencies": {
     "mongodb": "^6.21.0 || ^7.0.0"

public/.well-known/flashyos-charter.json

@@ -41,7 +41,7 @@
   "repositories": [
     {
       "name": "flashy-ledger",
-      "url": "github.com/FlashyLabs/flashy-ledger",
+      "url": "github.com/AgenteLabs/flashy-ledger",
       "holds": [
         "domain",
         "ports",

public/flashyos.roles.json

@@ -41,7 +41,7 @@
   "repositories": [
     {
       "name": "flashy-ledger",
-      "url": "github.com/FlashyLabs/flashy-ledger",
+      "url": "github.com/AgenteLabs/flashy-ledger",
       "holds": [
         "domain",
         "ports",

tests/workflow-pins.test.ts

@@ -9,7 +9,7 @@ import { describe, expect, it } from 'vitest';
  * compromises their account) and CI would silently start running whatever
  * that tag now points to. A commit SHA can't move.
  *
- * `FlashyLabs/flashy-infra/.github/workflows/secret-scan-reusable.yml@main`
+ * `AgenteLabs/flashy-infra/.github/workflows/secret-scan-reusable.yml@main`
  * is exempt: it is an internal, org-owned reusable workflow, not a
  * third-party action, so it does not carry the same retargeting risk this
  * test exists to catch.
@@ -22,7 +22,7 @@ import { describe, expect, it } from 'vitest';
 const root = join(__dirname, '..');
 const workflowsDir = join(root, '.github', 'workflows');
 const SHA_PIN = /^[0-9a-f]{40}$/;
-const INTERNAL_REUSABLE = /^FlashyLabs\//;
+const INTERNAL_REUSABLE = /^AgenteLabs\//;
 
 function findUsesLines(text: string) {
   return text