fix: refresh nix transit vendoring hash

• [MSN] No active missions on the board
• [EXC] Board idle, no stories queued or active
• [HLT] 2 warnings, no structural errors detected

Author: rupurt

flake.nix

@@ -122,7 +122,7 @@
                 "candle-kernels-0.9.2" = "sha256-ywjfKjuViDvJEho/IO2jR73ObwbMznWwQgSrAbJS1v0=";
                 "candle-ug-0.9.2" = "sha256-ywjfKjuViDvJEho/IO2jR73ObwbMznWwQgSrAbJS1v0=";
                 "sift-0.2.0" = "sha256-mlOVOWZFB0vrWlCy/ntlj3LRcn8HiojN4Wv+K9hnQ5U=";
-                "transit-core-0.1.0" = "sha256-4VvRHAf+ABRDe1q5giH/VtsJo66JJjsCKbmP/7RlXN0=";
+                "transit-core-0.1.0" = "sha256-KRsbmHsTZoH9AZTPIiIkozchXBfWZ1XK3rXkXnBsh1U=";
               };
             };
             nativeBuildInputs = [ pkgs.pkg-config ] ++ pkgs.lib.optionals (isLinux && cudaEnabled) [ cudaToolkit ];

src/infrastructure/dev_workflow_contracts.rs

@@ -344,6 +344,29 @@ fn nix_package_tracks_locked_sift_revision_for_vendoring() {
     );
 }
 
+#[test]
+fn nix_package_tracks_locked_transit_revision_for_vendoring() {
+    let cargo_lock = read_repo_file("Cargo.lock");
+    let flake = read_repo_file("flake.nix");
+    let needle = "git+https://github.com/spoke-sh/transit.git?branch=main#";
+    let revision_start = cargo_lock
+        .find(needle)
+        .map(|index| index + needle.len())
+        .expect("Cargo.lock should pin the transit git dependency by revision");
+    let revision = &cargo_lock[revision_start..revision_start + 40];
+    let expected_hash = match revision {
+        "b5fb008a241bc6abe3bbde570cc9e773a4a7d341" => {
+            "sha256-KRsbmHsTZoH9AZTPIiIkozchXBfWZ1XK3rXkXnBsh1U="
+        }
+        _ => panic!("update the nix transit output hash contract for transit revision {revision}"),
+    };
+
+    assert!(
+        flake.contains(&format!("\"transit-core-0.1.0\" = \"{expected_hash}\";")),
+        "flake should pin the transit-core vendored source hash for the locked transit revision:\nCargo.lock rev: {revision}\nExpected hash: {expected_hash}\n{flake}",
+    );
+}
+
 #[test]
 fn root_workspace_lockfile_exists_for_clean_ci_installs() {
     assert!(