feat(cloud): expose prompt authority calls to autosync

[dnlrsls]

🔗 Linked Issue

Closes #1458

Child of tracker #1464. Merge into feat/prompt-inbox-foundation-tracker, not main. This adapter-only slice exposes existing authenticated transport calls to the autosync boundary; it does not enable the handshake or verified-delete enforcement by itself.

🏷️ PR Type

• type:bug — Bug fix
• type:feature — New feature
• type:question — Question requiring tracked work
• type:docs — Documentation only
• type:refactor — Code refactoring
• type:chore — Maintenance
• type:breaking-change — Breaking change

📝 Summary

• Forward session authority registration and immutable prompt-pair claim from the production autosync transport adapter to the existing remote transport.
• Verify authenticated HTTPS endpoint order and exact alpha-session/beta-prompt request fields without introducing a cloud inference rule.

📂 Changes

File	Change
cmd/engram/main.go	Expose two forwarding methods through the production mutation adapter.
cmd/engram/autosync_e2e_test.go	Test bearer-authenticated registration and claim payload/order via TLS server.

52 added lines; no generated or transient paths. Docs N/A: no new user-facing flow exists until the follow-up autosync preflight and remote gate.

🧪 Test Plan

• Focused regression: go test ./cmd/engram -run '^TestMutationTransportAdapterForwardsPromptAuthority$' -count=1 — PASS after observed compile RED.
• Affected package: go test ./cmd/engram -count=1 — PASS.
• Other checks: go vet ./cmd/engram, git diff --check, CRLF-normalized gofmt comparison — PASS (independent verifier). Native review review-4b127a0923090e62 approved/acknowledged.
• GitHub full CI/policy checks — pending after push.

🤖 Automated Checks

Pending; do not infer broad unit/E2E/plugin/lint/Windows results from local evidence.

✅ Contributor Checklist

• Linked approved issue feat(store): preserve admitted prompt identity through sync and deletion #1458 (status:approved).
• Exactly one type:* label: type:feature.
• Focused, package, additional checks recorded; CI pending.
• Docs N/A until behavior is wired by follow-up child.
• Conventional commit; no co-author trailer.
• All changed paths comply with transient-artifact policy.

💬 Notes for Reviewers

This corrects the missing production forwarding that a fake transport had masked; it does not register or claim automatically yet. T4b3a2 will add fail-closed eligible-source preflight and starvation-safe journal pagination; T4b3b handles explicit legacy reauthorization; T4c gates cloud deletes. Only #1464 can eventually approach the main queue after full integration.

[coderabbitai]

Important

Review skipped

Auto reviews are disabled on base/target branches other than the default branch.

Please check the settings in the CodeRabbit UI or the .coderabbit.yaml file in this repository. To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: Repository UI

Review profile: ASSERTIVE

Plan: Advanced

Run ID: ce0824ed-9eb0-401c-b491-7b30ce7f03e3

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}