[systemfsoftware-maker]

Summary

• Update the xstate flake input to 372be24c758e7bd08116a63d5f40ab5f9f823adf and regenerate the pnpm tarball integrity for its unchanged filename.
• Keep Effect and all other locked dependencies unchanged. Prerequisite for SYS-1237.

Verification

• nix build .#sfs-deps --no-link --print-out-paths -L — passed.
• nix build .#pnpm-store --no-link --print-out-paths -L — passed; exercises the lock against the generated tarballs.
• pnpm install --frozen-lockfile — passed.
• pnpm --filter @endgame/site typecheck — passed.
• pnpm --filter @endgame/site test — passed, 3 files / 13 tests.
• pnpm prepare && pnpm --filter @endgame/site lint — passed. Before pnpm prepare, lint failed with Unknown plugin: 'effecttsgo'.
• Executed an installed xstate machine transition: visible + FLAG -> flagged.
• Confirmed the tarball's SHA-512 matches the regenerated lock entry.

No new tests: this is a mechanical dependency lock update; existing importer tests exercise the behavior.

Code review: skipped (mechanical diff). Root review requested on this maker PR.

Full pnpm check:ci (START-4) and pnpm journeys (START-5) remain pending off-host; local execution is restricted to touched-package checks (OP28).

[kiro-systemf]

Approved at exact head cda675f.

Independent ce-code-review run 20261108-190505-def2b163 is Ready to merge with no findings or testing gaps; scope and metadata match this head. Maker evidence includes sfs-deps and pnpm-store builds, frozen install, importer typecheck/lint and 13 passing tests. Effect remains unchanged.

The reviewer did not independently rebuild the source derivation or establish cross-platform reproducibility. CI check remains in progress; this approval does not waive required CI or claim full check:ci/journeys ran.