chore(consistency): sync task status from DB [auto]

Updated by fix-consistency on 2026-04-26:
  - update .custodian-brief.md for the-custodian

.custodian-brief.md

@@ -1,15 +1,12 @@
 <!-- custodian-brief: generated by fix-consistency — do not edit manually -->
 # Custodian Brief — the-custodian
 
-**Domain:** railiance  
+**Domain:** custodian  
-**Last synced:** 2026-04-26 11:24 UTC  
+**Last synced:** 2026-04-26 11:27 UTC  
 **State Hub:** http://127.0.0.1:8000 *(adjust if running on a remote machine)*
 
 ## Active Workstreams
 
-### Cross-Repo E2E Sandbox Framework
-Progress: 8/8 done  |  workstream_id: `b68de20b-e397-4f97-b1be-ad30711fc2a6`
-
 ### Interactive — the-custodian
 Progress: 4/4 done  |  workstream_id: `370c2481-6806-41eb-a917-f8874f03184f`
 
@@ -67,6 +64,6 @@ Progress: 0/9 done  |  workstream_id: `9cc32158-2f5c-4ef6-9713-aacce4623d5e`
 ## MCP Orientation (when available)
 
 If the state-hub MCP server is reachable, call:
-`get_domain_summary("railiance")`
+`get_domain_summary("custodian")`
 This provides richer cross-domain context.
 If the MCP call fails, use this file as your orientation source.

state-hub/scripts/ingest_sbom.py

@@ -22,6 +22,7 @@ import argparse
 import json
 import os
 import re
+import socket
 import sys
 import urllib.error
 import urllib.request
@@ -505,6 +506,23 @@ def post_ingest(api_base: str, repo_slug: str, entries: list[dict]) -> dict:
 # Entry point
 # ---------------------------------------------------------------------------
 
+def _resolve_repo_path_from_hub(api_base: str, repo_slug: str) -> Path | None:
+    """Query the hub for this host's registered path for repo_slug."""
+    try:
+        url = f"{api_base}/repos/{repo_slug}/"
+        with urllib.request.urlopen(url) as resp:
+            data = json.loads(resp.read())
+        hostname = socket.gethostname()
+        host_paths = data.get("host_paths", {})
+        if hostname in host_paths:
+            p = Path(host_paths[hostname])
+            if p.exists():
+                return p
+    except Exception:
+        pass
+    return None
+
+
 def main() -> None:
     parser = argparse.ArgumentParser(
         description="Ingest a repo's lockfiles and tool manifests into the State Hub SBOM store."
@@ -512,14 +530,28 @@ def main() -> None:
     parser.add_argument("--repo", required=True, help="Managed-repo slug (e.g. 'the-custodian')")
     parser.add_argument("--lockfile", action="append", dest="lockfiles",
                         metavar="PATH", help="Path to a specific lockfile (repeatable)")
-    parser.add_argument("--repo-path", default=".", help="Repo root for auto-detection/scan (default: cwd)")
+    parser.add_argument("--repo-path", default=None,
+                        help="Repo root for auto-detection/scan (default: resolved from hub host_paths)")
     parser.add_argument("--scan", action="store_true",
                         help="Recursively find ALL lockfiles under --repo-path (deprecated; now default behaviour)")
     parser.add_argument("--api-base", default=API_BASE, help="State Hub API base URL")
     parser.add_argument("--dry-run", action="store_true", help="Parse only — do not submit")
     args = parser.parse_args()
 
-    repo_root = Path(args.repo_path).resolve()
+    if args.repo_path is not None:
+        repo_root = Path(args.repo_path).resolve()
+    else:
+        resolved = _resolve_repo_path_from_hub(args.api_base, args.repo)
+        if resolved:
+            repo_root = resolved
+            print(f"  Repo path resolved from hub: {repo_root}")
+        else:
+            print(
+                f"ERROR: --repo-path not given and hub lookup failed for '{args.repo}'.\n"
+                f"  Register the repo first or pass --repo-path explicitly.",
+                file=sys.stderr,
+            )
+            sys.exit(1)
     all_entries: list[dict] = []
 
     if args.lockfiles: