Publish srcux candidate 0000000644-20261012-051418HEADdevelop

17 files changed, 437 insertions, 125 deletions

diff --git a/acct-group/airouter/airouter-1.ebuild b/acct-group/airouter/airouter-1.ebuild
new file mode 100644
index 000000000000..925447c3b96e
--- /dev/null
+++ b/acct-group/airouter/airouter-1.ebuild
@@ -0,0 +1,7 @@
+EAPI=8
+
+inherit acct-group
+
+DESCRIPTION="Group for the AIRouter runtime daemon"
+# The gid the Rust package's group already has (baldeagleos-repo acct-group/airouter-0).
+ACCT_GROUP_ID=979
diff --git a/acct-user/airouter/airouter-1.ebuild b/acct-user/airouter/airouter-1.ebuild
new file mode 100644
index 000000000000..8f87921a05ed
--- /dev/null
+++ b/acct-user/airouter/airouter-1.ebuild
@@ -0,0 +1,15 @@
+EAPI=8
+
+inherit acct-user
+
+DESCRIPTION="User for the AIRouter runtime daemon"
+# The uid of the account the Rust package created (baldeagleos-repo acct-user/airouter-0),
+# which this version takes over: its files and grants stay valid.
+ACCT_USER_ID=970
+# ntp: to inspect chronyd's command socket directory (/run/chrony, mode 0750) for the
+# [time] protected-path check; the reports themselves are read through sudo as ntp.
+ACCT_USER_GROUPS=( airouter ntp )
+ACCT_USER_HOME=/var/lib/airouter
+ACCT_USER_HOME_PERMS=0750
+
+acct-user_add_deps
diff --git a/app-crypt/jacksum/Manifest b/app-crypt/jacksum/Manifest
index cac53eb82536..55474e5b8d9f 100644
--- a/app-crypt/jacksum/Manifest
+++ b/app-crypt/jacksum/Manifest
@@ -1 +1,2 @@
 DIST jacksum-4.0.0.tar.gz 1861145 BLAKE2B f7cbf52d02b0a77454556830e0a9619312ad44b317ba41564c746f47c1d892274625f2f689aa25916eb6e3b22cbc6d2175ebabcfe73530315521d1476c946d18 SHA512 8f83c57b35a45ca55cf8a62201155fb6b13d08c095d24baebe44cb344de10a5fb2f225fd1c50ee40c10137626bb1f7d27a4a328ce3fc2c9780752b26edf45a97
+DIST jacksum-4.0.2.tar.gz 1941171 BLAKE2B b4db305d81b39de4c2256543b7ed01327309c46505a711c4f7c93a22efbd0b36b7a9a34760ceb91c55265392718284f140d7bb75d95d97751068144f7bc727f5 SHA512 d76e8058c59d7b3a4ca2aaa2f3279074f676b6f401312076c4f8dad747f02d968cb284d7647f5bb45250e3312bded9d67e42862cd732cb46d598ee8b9745d637
diff --git a/app-crypt/jacksum/jacksum-4.0.2.ebuild b/app-crypt/jacksum/jacksum-4.0.2.ebuild
new file mode 100644
index 000000000000..49313f9e8039
--- /dev/null
+++ b/app-crypt/jacksum/jacksum-4.0.2.ebuild
@@ -0,0 +1,30 @@
+# Copyright 1999-2026 Gentoo Authors
+# Distributed under the terms of the GNU General Public License v2
+
+EAPI=9
+
+JAVA_PKG_IUSE="doc source"
+
+inherit java-pkg-2 java-pkg-simple
+
+DESCRIPTION="Java utility for working with checksums, CRCs, and message digests (hashes)"
+HOMEPAGE="https://jacksum.net"
+SRC_URI="https://github.com/jonelo/jacksum/archive/v${PV}.tar.gz -> ${P}.tar.gz"
+S="${WORKDIR}/${P}"
+
+LICENSE="GPL-2"
+SLOT="0"
+KEYWORDS="~amd64"
+
+DEPEND=">=virtual/jdk-21:*"
+RDEPEND=">=virtual/jre-21:*"
+
+DOCS=(
+	CODE_OF_CONDUCT.md
+	README.md
+	RELEASE-NOTES.txt
+)
+
+JAVA_MAIN_CLASS="net.jacksum.cli.Main"
+JAVA_RESOURCE_DIRS="src/main/resources"
+JAVA_SRC_DIR="src/main/java"
diff --git a/dev-cpp/aws-sdk-cpp/Manifest b/dev-cpp/aws-sdk-cpp/Manifest
index 2f72b646aaad..e7f86208c575 100644
--- a/dev-cpp/aws-sdk-cpp/Manifest
+++ b/dev-cpp/aws-sdk-cpp/Manifest
@@ -2,3 +2,4 @@ DIST aws-sdk-cpp-1.11.712.tar.gz 80207334 BLAKE2B ae221b828a6b57bacb6a66725e827d
 DIST aws-sdk-cpp-1.11.764.tar.gz 81899504 BLAKE2B 87494fb5cdd79c97583b633b3268ac5cb7aa08152f8fa8494ea35b8552adae16fd9f5255667bdb5f55814dc5019d7c28d4022a2a68fd0bf8ecf4258b29c8a5d9 SHA512 41a4cbfedaf35b22a3f30fd3bb6cbd89ae2df9f62127db93a9a1a6405fc1c019695db4bd944ce0206a6cb812b5c2f028ca2b40d5d1780f37480813f8ee086549
 DIST aws-sdk-cpp-1.11.887.tar.gz 88687601 BLAKE2B fe70b4833e3629469da61c8af0c6bc0c4d7b46504524737ce18406232721fced255fb627b1b603c3d22d68ed1d838af951803d3b785186e4ac25c9011a2b7f26 SHA512 874be6a7b33be2197d529b49c8148ddb65a2831dd09d50ecfa6d3df1cf36727c3ba6b3f0d4ff2e664cc7b51e9f2a39e759cd6c523d63eef220b8c18d8ed2eee5
 DIST aws-sdk-cpp-1.11.901.tar.gz 89901639 BLAKE2B 0afbce98bd160aed4f058db7f23e77e611cb5ca41376bf0766446eec3e9473f5da512ed8b3f75250f18e642028a3b1aa5dc2c27917846abf145de04aea49a4bc SHA512 3597d44716ff4e3feaff2a429b7b324af7ff269490014552fd7dbeeced49c9cf98fb83dbc709b342f72cd0822b93fc3126042ef00babab6dfae31d56427596a4
+DIST aws-sdk-cpp-1.11.909.tar.gz 90554070 BLAKE2B 32bdeac4e016f13be1aeb93dbef51ba7e6dc7992d2cbb15ea2c6b3b39e9ca20d42313ebd828a353da84039a3fe7564fb07b0135a397076ad2330bc66d318f178 SHA512 89f9d732f1603ae0685581022ffea161301f8a65a4e9839893ded2af72881534e40ce7dfa8b3fcd5ee623c528436557739069dcaf3a40d0f8fe839bf0a8dccf6
diff --git a/dev-cpp/aws-sdk-cpp/aws-sdk-cpp-1.11.909.ebuild b/dev-cpp/aws-sdk-cpp/aws-sdk-cpp-1.11.909.ebuild
new file mode 100644
index 000000000000..950b50a8cfd3
--- /dev/null
+++ b/dev-cpp/aws-sdk-cpp/aws-sdk-cpp-1.11.909.ebuild
@@ -0,0 +1,70 @@
+# Copyright 2025-2026 Gentoo Authors
+# Distributed under the terms of the GNU General Public License v2
+
+EAPI=8
+
+DESCRIPTION="AWS SDK for C++"
+HOMEPAGE="https://github.com/aws/aws-sdk-cpp"
+SRC_URI="https://github.com/aws/aws-sdk-cpp/archive/refs/tags/${PV}.tar.gz -> ${P}.tar.gz"
+
+inherit cmake
+
+LICENSE="Apache-2.0"
+SLOT="0"
+KEYWORDS="~amd64"
+
+# BUILD_ONLY lists
+declare -g -A AWS_GROUPS=(
+	[analytics]="amp;amplify;amplifybackend;amplifyuibuilder;appflow;appintegrations;athena;cleanrooms;cleanroomsml;cloudsearch;cloudsearchdomain;databrew;dataexchange;datapipeline;datazone;dsql;entityresolution;finspace;finspace-data;firehose;forecast;forecastquery;glue;kafka;kafkaconnect;kinesisanalytics;kinesisanalyticsv2;lakeformation;lookoutequipment;machinelearning;mwaa;mwaa-serverless;omics;pi;quicksight;repostspace"
+	[compute]="apigateway;apigatewaymanagementapi;apigatewayv2;application-autoscaling;apprunner;appstream;appsync;autoscaling;autoscaling-plans;batch;compute-optimizer;compute-optimizer-automation;ec2;ec2-instance-connect;ecr;ecr-public;ecs;eks;eks-auth;elasticbeanstalk;elasticfilesystem;elasticloadbalancing;elasticloadbalancingv2;elasticmapreduce;emr-containers;emr-serverless;imagebuilder;lambda;lambda-core;lambda-microvms;lightsail;m2;outposts;s3outposts;states;swf;workspaces-instances"
+	[database]="clouddirectory;dax;docdb;docdb-elastic;dynamodb;dynamodbstreams;elasticache;es;keyspaces;memorydb;neptune;neptunedata;neptune-graph;odb;opensearch;opensearchserverless;osis;rds;rds-data;redshift;redshift-data;redshift-serverless;sdb;simpledbv2;timestream-influxdb;timestream-query;timestream-write"
+	[devops]="artifact;b2bi;cloud9;codeartifact;codebuild;codecatalyst;codecommit;codeconnections;codedeploy;codeguruprofiler;codeguru-reviewer;codepipeline;codestar-connections;codestar-notifications;devicefarm;gamelift;gameliftstreams;keyspacesstreams;mturk-requester;proton;schemas;serverlessrepo"
+	[iot]="greengrass;greengrassv2;groundstation;iot;iot-data;iotdeviceadvisor;iotfleetwise;iot-jobs-data;iot-managed-integrations;iotsecuretunneling;iotsitewise;iotthingsgraph;iottwinmaker;iotwireless"
+	[management]="account;appconfig;appconfigdata;applicationcostprofiler;application-insights;application-signals;AWSMigrationHub;bcm-data-exports;bcm-pricing-calculator;billing;billingconductor;budgets;ce;cloudcontrol;cloudformation;cloudtrail;cloudtrail-data;controlcatalog;controltower;cost-optimization-hub;cur;discovery;dlm;dms;drs;fms;invoicing;launch-wizard;license-manager;license-manager-linux-subscriptions;license-manager-user-subscriptions;marketplace-agreement;marketplace-catalog;marketplacecommerceanalytics;marketplace-deployment;marketplace-discovery;marketplace-entitlement;marketplace-reporting;meteringmarketplace;mgn;migrationhub-config;migrationhuborchestrator;migration-hub-refactor-spaces;migrationhubstrategy;mpa;organizations;partnercentral-account;partnercentral-benefits;partnercentral-channel;partnercentral-revenue-measurement;partnercentral-selling;pricing-plan-manager;ram;resource-explorer-2;resource-groups;resourcegroupstaggingapi;savingsplans;servicecatalog;servicecatalog-appregistry;service-quotas;ssm;ssm-contacts;ssm-guiconnect;ssm-incidents;ssm-quicksetup;ssm-sap;supplychain;support;support-app;taxsettings;workspaces;workspaces-thin-client;workspaces-web"
+	[media]="deadline;elementalinference;ivs;ivschat;ivs-realtime;kinesis;kinesisvideo;kinesis-video-archived-media;kinesis-video-media;kinesis-video-signaling;kinesis-video-webrtc-storage;mediaconnect;mediaconvert;medialive;mediatailor;voice-id"
+	[messaging]="chatbot;chime;chime-sdk-identity;chime-sdk-media-pipelines;chime-sdk-meetings;chime-sdk-messaging;chime-sdk-voice;connect;connectcampaigns;connectcampaignsv2;connectcases;connect-contact-lens;connectparticipant;customer-profiles;email;eventbridge;mailmanager;mq;notifications;notificationscontacts;pinpoint;pinpoint-email;pinpoint-sms-voice-v2;pipes;rum;scheduler;sesv2;sms-voice;sns;socialmessaging;sqs;sustainability;uxc;wickr;wisdom;workmail;workmailmessageflow"
+	[ml]="agent-registry;agent-registry-control;bedrock;bedrock-agent;bedrock-agent-runtime;bedrock-data-automation;bedrock-data-automation-runtime;bedrock-runtime;comprehend;comprehendmedical;frauddetector;kendra;kendra-ranking;lex;lex-models;lexv2-models;lexv2-runtime;medical-imaging;personalize;personalize-events;personalize-runtime;polly;qapps;qbusiness;qconnect;rekognition;sagemaker;sagemaker-a2i-runtime;sagemaker-edge;sagemaker-featurestore-runtime;sagemaker-geospatial;sagemakerjobruntime;sagemaker-metrics;sagemaker-runtime;sagemaker-runtime-http2;textract;transcribe;transcribestreaming;translate"
+	[monitor]="aiops;appfabric;config;devops-agent;devops-guru;fis;grafana;health;healthlake;inspector;inspector2;inspector-scan;internetmonitor;logs;monitoring;oam;observabilityadmin;resiliencehub;resiliencehubv2;security-ir;synthetics;trustedadvisor;wellarchitected;xray"
+	[networking]="appmesh;arc-zonal-shift;cloudfront;cloudfront-keyvaluestore;directconnect;geo-maps;geo-places;geo-routes;globalaccelerator;interconnect;location;network-firewall;networkflowmonitor;networkmanager;networkmonitor;route53;route53domains;route53globalresolver;route53profiles;route53-recovery-cluster;route53-recovery-control-config;route53-recovery-readiness;route53resolver;servicediscovery;tnb;vpc-lattice"
+	[security]="accessanalyzer;account-access;acm;acm-pca;auditmanager;cloudhsm;cloudhsmv2;codeguru-security;detective;directory-service-data;guardduty;iam;iam-toolbox;macie2;payment-cryptography;payment-cryptography-data;pca-connector-ad;pca-connector-scep;pcs;rolesanywhere;secretsmanager;securityagent;securityhub;securitylake;shield;signer;signer-data;signin;sso;sso-admin;supportauthz;verifiedpermissions;waf;waf-regional;wafv2"
+	[storage]="awstransfer;backup;backup-gateway;backupsearch;datasync;ebs;fsx;glacier;importexport;mediapackage;mediapackagev2;mediapackage-vod;mediastore;mediastore-data;rbin;s3;s3control;s3-crt;s3files;s3tables;snowball;snow-device-management;storagegateway;workdocs"
+	[uncategorized]="braket;connecthealth;ds;evs;freetier;managedblockchain;managedblockchain-query;nova-act"
+)
+
+IUSE="${!AWS_GROUPS[*]}"
+
+DEPEND="dev-cpp/aws-crt-cpp:=
+	dev-libs/aws-c-auth:=
+	dev-libs/aws-c-common:=
+	dev-libs/aws-c-compression:=
+	dev-libs/aws-c-event-stream:=
+	dev-libs/aws-c-http:=
+	dev-libs/aws-c-io:=
+	dev-libs/aws-c-mqtt:=
+	dev-libs/aws-c-s3:=
+	dev-libs/aws-c-sdkutils:=
+	dev-libs/aws-checksums:=
+	net-misc/curl:=
+	virtual/zlib:="
+RDEPEND="${DEPEND}"
+BDEPEND="dev-libs/aws-c-common"
+
+src_configure() {
+	local mybuildtargets="core;kms;identity-management;sts;cognito-identity;cognito-idp;cognito-sync;identitystore;sso-oidc;events;pricing"
+
+	local g
+	for g in "${!AWS_GROUPS[@]}"; do
+		if use "${g}"; then
+			mybuildtargets+=";${AWS_GROUPS[$g]}"
+		fi
+	done
+
+	local mycmakeargs=(
+		-DLEGACY_BUILD=ON
+		-DBUILD_DEPS=OFF # disable embedded 3rd-party repositories.
+		-DBUILD_ONLY="${mybuildtargets}"
+		-DAWS_SDK_WARNINGS_ARE_ERRORS=OFF
+	)
+
+	cmake_src_configure
+}
diff --git a/dev-java/jna/Manifest b/dev-java/jna/Manifest
index c3132217103e..e8b1bedf2c1b 100644
--- a/dev-java/jna/Manifest
+++ b/dev-java/jna/Manifest
@@ -1 +1,2 @@
 DIST jna-5.18.1.tar.gz 117189568 BLAKE2B 32d641ef9f9565cd9469379ab848da4a7fef147ecba7ef20569590dfa76a66d677a0822f5a99bf567e4e70f41955173b118feb24f1bb717f57e08aac21e77acd SHA512 ce20cb336e49196bb438c5c575a4e7a708b59ee96f19510218c50a60f9f2124f299aa4e5f749963734d17f6cabcb77c6c0d5eed1aeaf14d03913bd31cc9d0846
+DIST jna-5.19.1.tar.gz 121713304 BLAKE2B d81fead660532332a779480b7eb8cc526118a130788c15d0011f328daaa8c290357f14377d85246c1b18f90d08fd1e3c1aa00f1702e2f056bc08cefbd133eff2 SHA512 77a76442731f83bab7edce44b62d9c7b8ba5b55aff6e102d4114cbf5673d9a15b25f12f3185d54670537b0501a0835082182f499f5ff3e29feec8d139a0a14fb
diff --git a/dev-java/jna/jna-5.19.1.ebuild b/dev-java/jna/jna-5.19.1.ebuild
new file mode 100644
index 000000000000..9a08f0d47c6b
--- /dev/null
+++ b/dev-java/jna/jna-5.19.1.ebuild
@@ -0,0 +1,184 @@
+# Copyright 1999-2026 Gentoo Authors
+# Distributed under the terms of the GNU General Public License v2
+
+EAPI=9
+
+JAVA_PKG_IUSE="doc source test"
+JAVA_TESTING_FRAMEWORKS="junit-4"
+
+inherit java-pkg-2 java-pkg-simple toolchain-funcs
+
+DESCRIPTION="Java Native Access"
+HOMEPAGE="https://github.com/java-native-access/jna"
+SRC_URI="https://github.com/java-native-access/jna/archive/${PV}.tar.gz -> ${P}.tar.gz"
+S="${WORKDIR}/${P}"
+
+LICENSE="|| ( Apache-2.0 LGPL-2.1+ )"
+SLOT="0"
+KEYWORDS="~amd64 ~arm64 ~ppc64"
+
+BDEPEND="virtual/pkgconfig"
+
+CDEPEND=">=dev-libs/libffi-3.4:="
+
+DEPEND="
+	${CDEPEND}
+	>=virtual/jdk-11:*
+	x11-base/xorg-proto:0
+	x11-libs/libXt
+	test? (
+		dev-java/reflections:0
+		net-print/cups
+	)
+"
+
+RDEPEND="
+	${CDEPEND}
+	>=virtual/jre-1.8:*
+"
+
+DOCS=( README.md CHANGES.md OTHERS )
+
+JAVADOC_SRC_DIRS=( {contrib/platform/,}src )
+
+PATCHES=(
+	"${FILESDIR}/5.11.0-makefile-flags.patch"
+	"${FILESDIR}/jna-5.11.0-no-Werror.patch"
+	"${FILESDIR}/jna-5.13.0-testpath.patch"
+	"${FILESDIR}/jna-5.13.0-LibCTest.patch"
+)
+
+src_prepare() {
+	java-pkg-2_src_prepare
+	java-pkg_clean
+
+	# build.xml lines 245-250
+	sed \
+		-e "/VERSION =/s:TEMPLATE:${PV}:" \
+		-e "/VERSION_NATIVE =/s:TEMPLATE:${PV}:" \
+		-i src/com/sun/jna/Version.java || die
+	sed \
+		-e "s:^JNA_JNI_VERSION=.*$:JNA_JNI_VERSION=${PV}:" \
+		-i native/Makefile || die
+}
+
+src_compile() {
+	einfo "Compiling jna.jar"
+	JAVA_INTERMEDIATE_JAR_NAME="com.sun.jna"
+	JAVA_JAR_FILENAME="jna.jar"
+	JAVA_MAIN_CLASS="com.sun.jna.Native"
+	JAVA_MODULE_INFO_OUT="src"
+	JAVA_SRC_DIR="src"
+	java-pkg-simple_src_compile
+	JAVA_GENTOO_CLASSPATH_EXTRA+=":jna.jar"
+	rm -r target || die
+
+	einfo "Compiling jna-platform.jar"
+	JAVA_INTERMEDIATE_JAR_NAME="com.sun.jna.platform"
+	JAVA_JAR_FILENAME="jna-platform.jar"
+	JAVA_MAIN_CLASS=""	# Did the eclass forget to unset this variable?
+	JAVA_MODULE_INFO_OUT="contrib/platform/src"
+	JAVA_SRC_DIR="contrib/platform/src"
+	java-pkg-simple_src_compile
+	JAVA_GENTOO_CLASSPATH_EXTRA+=":jna-platform.jar"
+	rm -r target || die
+
+	#954164
+	rm contrib/platform/src/com.sun.jna.platform/versions/9/module-info.java || die
+	use doc && ejavadoc
+
+	einfo "Generating headers com_sun_jna_Native.h com_sun_jna_Function.h"
+	ejavac -h native -classpath "src" \
+		"src/com/sun/jna/Function.java" \
+		"src/com/sun/jna/Native.java" || die
+
+	einfo "Building native library"
+	cd native || die
+	local args=(
+		CC="$(tc-getCC)"
+		STRIP=true
+		DYNAMIC_LIBFFI=true
+	)
+	emake "${args[@]}"
+}
+
+src_test() {
+	rm -r  contrib/platform/test/com/sun/jna/platform/{mac,unix,win32} || die
+	rm -r test/com/sun/jna/wince || die
+	rm -r test/com/sun/jna/win32 || die
+
+	# 1) testLoadFromJarAbsolute(com.sun.jna.LibraryLoadTest)
+	# java.lang.UnsatisfiedLinkError: Unable to load library '/libtestlib-jar.so':
+	# /libtestlib-jar.so: cannot open shared object file: No such file or directory
+	jar cvf build/jna-test.jar \
+		-C build/native libtestlib-jar.so \
+		-C test com/sun/jna/data || die
+	JAVA_GENTOO_CLASSPATH_EXTRA+=":build/jna-test.jar"
+
+	JAVA_TEST_EXTRA_ARGS=(
+		-Djna.nosys=true
+		-Djna.boot.library.path=build/native
+		-Djna.library.path=build/native
+		--enable-native-access=ALL-UNNAMED
+	)
+
+	JAVA_TEST_GENTOO_CLASSPATH="junit-4,reflections"
+
+	einfo "Testing jna-platform"
+	JAVA_TEST_RUN_ONLY=( com.sun.jna.platform.linux.XAttrUtilTest )	# If not run first, it would fail.
+	JAVA_TEST_SRC_DIR="contrib/platform/test"
+	local JAVA_TEST_RUN_LATER=$(find ${JAVA_TEST_SRC_DIR} \
+		! -name 'XAttrUtilTest.java' -name '*Test.java' -printf '%P\n')
+	JAVA_TEST_RUN_LATER="${JAVA_TEST_RUN_LATER//.java}"
+	JAVA_TEST_RUN_ONLY+=( ${JAVA_TEST_RUN_LATER//\//.} )
+	java-pkg-simple_src_test
+
+	einfo "Testing jna"
+	JAVA_TEST_SRC_DIR="test"
+
+	# Some tests need to run first, otherwise they would fail.
+	JAVA_TEST_RUN_ONLY=(
+		com.sun.jna.CallbacksTest
+		com.sun.jna.DirectTest
+		com.sun.jna.UnionTest
+	)
+	JAVA_TEST_RUN_ONLY+=( com.sun.jna.TypeMapperTest )
+	JAVA_TEST_RUN_ONLY+=( com.sun.jna.NativeTest )
+
+	# Here, those tests which were moved to top of the array are excluded.
+	# Also exclude 2 tests which must not run before the others.
+	local JAVA_TEST_RUN_LATER=$(find test \
+		-name "*Test.java" \
+		! -name 'CallbacksTest.java' \
+		! -name 'DirectTest.java' \
+		! -name 'UnionTest.java' \
+		! -name 'TypeMapperTest.java' \
+		! -name 'NativeTest.java' \
+		! -name 'DirectCallbacksTest.java' \
+		! -name 'VMCrashProtectionTest.java' -printf '%P\n')
+	JAVA_TEST_RUN_LATER="${JAVA_TEST_RUN_LATER//.java}"
+	JAVA_TEST_RUN_ONLY+=( ${JAVA_TEST_RUN_LATER//\//.} )
+
+	# This one makes trouble if run before some others.
+	JAVA_TEST_RUN_ONLY+=( com.sun.jna.VMCrashProtectionTest )
+	java-pkg-simple_src_test
+
+	# There was 1 failure:
+	# 1) testDefaultCallbackExceptionHandler(com.sun.jna.CallbacksTest)
+	# junit.framework.AssertionFailedError: Default handler not called
+	# 	at junit.framework.Assert.fail(Assert.java:57)
+	# 	at junit.framework.Assert.assertTrue(Assert.java:22)
+	# 	at junit.framework.TestCase.assertTrue(TestCase.java:192)
+	# 	at com.sun.jna.CallbacksTest.testDefaultCallbackExceptionHandler(CallbacksTest.java:865)
+	# Cannot run in same batch as 'com.sun.jna.CallbacksTest'.
+	# It would break other tests if run before and segmentation fault if run after.
+	JAVA_TEST_RUN_ONLY=( com.sun.jna.DirectCallbacksTest )
+	java-pkg-simple_src_test
+}
+
+src_install() {
+	JAVA_SRC_DIR=( {contrib/platform/,}src/* ) # for the 'source' flag
+	java-pkg-simple_src_install
+	java-pkg_dojar jna.jar
+	java-pkg_doso build/native/libjnidispatch.so
+}
diff --git a/dev-python/pycryptodome/Manifest b/dev-python/pycryptodome/Manifest
index 708add6eb371..2847e9cd7434 100644
--- a/dev-python/pycryptodome/Manifest
+++ b/dev-python/pycryptodome/Manifest
@@ -1,3 +1 @@
-DIST pycryptodome-3.23.0.gh.tar.gz 19732639 BLAKE2B 55ba3bea9d215dfd1f20262f9e333c78c126a7bb07b4f0ed795bb354a609082aea5ba1571fd29c76c716cfd7c74a6187509de7a8cc0e1eb03e27a2068c7aacb3 SHA512 564bad0257f50eaf9f4318c39bc224b79fe0051b4e2d6cff4c1070d2065cf9eb03bce661f9d21346414f9942bbc10a9f40e976eee104231718d1b9484fcbb022
-DIST pycryptodome-3.24.0.gh.tar.gz 19738917 BLAKE2B 12bd670a7862d7e6f8e108cc56f8c11515556b06ea9333132527b50444451348dfceb61458e1a0455483886ee412f95ad386d1d2af5dc80280b72f9ba35c8c18 SHA512 091ddb8baa0ca5632b08e4acfb7ddc010ba2580be41a6e5bd8f6b040de0b369fb7e4fc8730b84332800618b15defc5d9a07a44939c2a76c10ac567b08484e6be
 DIST pycryptodome-3.24.1.gh.tar.gz 19739898 BLAKE2B 7db01c5bd78f14d61620272d6a15105e3c640b933263a4720d5d047c55a0bd57e984fc150f96469aa29b7947b0fb62dbbe3e199587d146b08f30af28d781600b SHA512 90df69c1f003d9a06391709e09d1cb3124053c4eb4a062cba01e6048c1fc07ba29db36b94dbafc6e5f7f6f173321b8e687358d8a3cca88921234e74f46c17c37
diff --git a/dev-python/pycryptodome/pycryptodome-3.23.0.ebuild b/dev-python/pycryptodome/pycryptodome-3.23.0.ebuild
deleted file mode 100644
index e2677a1156e5..000000000000
--- a/dev-python/pycryptodome/pycryptodome-3.23.0.ebuild
+++ /dev/null
@@ -1,60 +0,0 @@
-# Copyright 1999-2026 Gentoo Authors
-# Distributed under the terms of the GNU General Public License v2
-
-EAPI=8
-
-DISTUTILS_EXT=1
-DISTUTILS_USE_PEP517=setuptools
-PYTHON_COMPAT=( python3_{13..14} )
-PYTHON_REQ_USE="threads(+)"
-
-inherit distutils-r1
-
-DESCRIPTION="A self-contained cryptographic library for Python"
-HOMEPAGE="
-	https://www.pycryptodome.org/
-	https://github.com/Legrandin/pycryptodome/
-	https://pypi.org/project/pycryptodome/
-"
-SRC_URI="
-	https://github.com/Legrandin/pycryptodome/archive/v${PV}.tar.gz
-		-> ${P}.gh.tar.gz
-"
-
-LICENSE="BSD-2 Unlicense"
-SLOT="0"
-KEYWORDS="~alpha amd64 arm arm64 ~hppa ~loong ~m68k ~mips ppc ppc64 ~riscv ~s390 ~sparc x86 ~arm64-macos ~x64-macos ~x64-solaris"
-
-DEPEND="
-	dev-libs/gmp:=
-	>=dev-libs/libtomcrypt-1.18.2-r1:=
-"
-BDEPEND="
-	$(python_gen_cond_dep 'dev-python/cffi[${PYTHON_USEDEP}]' 'python*')
-"
-RDEPEND="
-	${DEPEND}
-	${BDEPEND}
-"
-
-PATCHES=(
-	"${FILESDIR}/pycryptodome-3.10.1-system-libtomcrypt.patch"
-)
-
-python_prepare_all() {
-	# make sure we're unbundling it correctly
-	rm -r src/libtom || die
-
-	distutils-r1_python_prepare_all
-}
-
-python_test() {
-	local -x PYTHONPATH=${S}/test_vectors:${PYTHONPATH}
-	"${EPYTHON}" - <<-EOF || die
-		import sys
-		from Crypto import SelfTest
-		SelfTest.run(verbosity=2, stream=sys.stdout)
-	EOF
-
-	# TODO: run cmake tests from src/test?
-}
diff --git a/dev-python/pycryptodome/pycryptodome-3.24.0.ebuild b/dev-python/pycryptodome/pycryptodome-3.24.0.ebuild
deleted file mode 100644
index 3692b03106fe..000000000000
--- a/dev-python/pycryptodome/pycryptodome-3.24.0.ebuild
+++ /dev/null
@@ -1,60 +0,0 @@
-# Copyright 1999-2026 Gentoo Authors
-# Distributed under the terms of the GNU General Public License v2
-
-EAPI=8
-
-DISTUTILS_EXT=1
-DISTUTILS_USE_PEP517=setuptools
-PYTHON_COMPAT=( python3_{13..14} )
-PYTHON_REQ_USE="threads(+)"
-
-inherit distutils-r1
-
-DESCRIPTION="A self-contained cryptographic library for Python"
-HOMEPAGE="
-	https://www.pycryptodome.org/
-	https://github.com/Legrandin/pycryptodome/
-	https://pypi.org/project/pycryptodome/
-"
-SRC_URI="
-	https://github.com/Legrandin/pycryptodome/archive/v${PV}.tar.gz
-		-> ${P}.gh.tar.gz
-"
-
-LICENSE="BSD-2 Unlicense"
-SLOT="0"
-KEYWORDS="~alpha ~amd64 ~arm ~arm64 ~hppa ~loong ~m68k ~mips ~ppc ~ppc64 ~riscv ~s390 ~sparc ~x86 ~arm64-macos ~x64-macos ~x64-solaris"
-
-DEPEND="
-	dev-libs/gmp:=
-	>=dev-libs/libtomcrypt-1.18.2-r1:=
-"
-BDEPEND="
-	$(python_gen_cond_dep 'dev-python/cffi[${PYTHON_USEDEP}]' 'python*')
-"
-RDEPEND="
-	${DEPEND}
-	${BDEPEND}
-"
-
-PATCHES=(
-	"${FILESDIR}/pycryptodome-3.10.1-system-libtomcrypt.patch"
-)
-
-python_prepare_all() {
-	# make sure we're unbundling it correctly
-	rm -r src/libtom || die
-
-	distutils-r1_python_prepare_all
-}
-
-python_test() {
-	local -x PYTHONPATH=${S}/test_vectors:${PYTHONPATH}
-	"${EPYTHON}" - <<-EOF || die
-		import sys
-		from Crypto import SelfTest
-		SelfTest.run(verbosity=2, stream=sys.stdout)
-	EOF
-
-	# TODO: run cmake tests from src/test?
-}
diff --git a/net-misc/airouter/Manifest b/net-misc/airouter/Manifest
index 901113d742b0..7e5b20a27a01 100644
--- a/net-misc/airouter/Manifest
+++ b/net-misc/airouter/Manifest
@@ -10,3 +10,4 @@ DIST llmbridge-0.1.2-20260924.tar.zst 116381 BLAKE2B e3f2eeca9667b572d822707d039
 DIST airouter-0.1.2-r8.tar.zst 87713824 BLAKE2B c48ffb4f9f91bc87d79cae7e43fe5b9aa6abcb41c1ed1527034a8c7d33d9a3d8f7082897059a4ca517de4ed25b635803bb4dc8edee25d70f8bc006a48a7b6579 SHA512 65a44d62fa3b9501cf6377c291244f069ae8c1f302be82a7ab5209e9c597997a09b0725cb86cd3daefc50d1e2d132245738d810c89e3c40b5b1d51bff69d73c7
 DIST airouter-0.1.2-r9.tar.zst 87680153 BLAKE2B 66cef0000fdb9101dec8c96aaefd5a9022fb37dd2564a7beb4295b9b2cce5143d82e7c8832575f16ea9ab0f2c1c06fcf346081024025a6ffd76d82aaa838a110 SHA512 ed96a2ce94faf462bf4ce22f043cf3b570f744bb328a0afadd075a9fa7891d0f936ca0aeeed078d6958501eafe142f0e315a4bd2a81e01a999c5ca1f6c236d4f
 DIST mime_guess-2.0.5.crate 27166 BLAKE2B a8ec67e16a336e7d07c9aaa55025c24c3d4a62aae25213ce768786d9f292b76930132a880d662cd9a5d63aa899e9d488ab76fa9d99350e9f448ef484705ba4d9 SHA512 433c876e28394282cfbe14bb9543616cd296879f253ed331c15ace8a7d9f3629f5b596c2d5a64823a97ca9b774acc711b65006c46d54d1e9ee0553cbf1f13b7c
+DIST airouter-1.0.0_pre20261012.tar.gz 685451 BLAKE2B a07b1dd5d20ffc86d959394b74431cfc4bf3aee4d76a161e97ece035ba3460cded3cbd7df695e0b94956ae54cb4e5a9e98d47ee69277684664451a000b90d448 SHA512 c6110b5749cfc8ec7ab827303e537c0d5690ba803f022f1380de4d2fe5220590282d6d055e1de9f3809d00d1462c12d1ead276aabb09ecadb519bdaa8d005bb7
diff --git a/net-misc/airouter/airouter-1.0.0_pre20261012.ebuild b/net-misc/airouter/airouter-1.0.0_pre20261012.ebuild
new file mode 100644
index 000000000000..b68fda2cdd95
--- /dev/null
+++ b/net-misc/airouter/airouter-1.0.0_pre20261012.ebuild
@@ -0,0 +1,78 @@
+EAPI=8
+
+inherit cmake flag-o-matic
+
+DESCRIPTION="AIRouter runtime (C++; replaces the Rust 0.1.x airouterd)"
+HOMEPAGE="https://trunkmasters.com/airouter"
+SRC_URI="https://www.srcux.com/distfiles/${P}.tar.gz"
+
+# Mirrors the Rust net-misc/airouter; the license declaration is an owner decision.
+LICENSE="MIT"
+SLOT="0"
+KEYWORDS="~amd64"
+
+# The build pins exact dependency versions (M0 host pins). Compiler pins are
+# enforced by CMake itself (GCC 14.4.1 or Clang 23.1.3).
+DEPEND="
+	=dev-libs/boost-1.91.0*
+	=dev-libs/openssl-3.6.5*
+	=dev-db/postgresql-18.6*
+	=dev-cpp/nlohmann_json-3.12.0*
+	=dev-cpp/tomlplusplus-3.4.0*
+	=dev-cpp/yaml-cpp-0.9.0*
+"
+# chronyc reports are parsed in their verified CSV shapes (ADR-05 [time]).
+RDEPEND="
+	${DEPEND}
+	>=acct-group/airouter-1
+	>=acct-user/airouter-1
+	app-admin/sudo
+	=net-misc/chrony-4.9*
+	>=dev-lang/python-3.11
+"
+BDEPEND="
+	=dev-cpp/catch-3.15.3*
+	>=dev-lang/python-3.11
+"
+
+src_configure() {
+	# The project refuses in-source builds and requires an absolute build root.
+	export AIROUTER_CPP_BUILD_ROOT="${WORKDIR}/build"
+	# GCC 14 at -O2 reports -Wmismatched-new-delete (a -Werror error here) inside
+	# Boost.Asio's recycling awaitable-frame allocator: operator new and operator delete
+	# are a matched pair, but GCC sees the inlined aligned_alloc. The CMake presets
+	# (-O0, -O3) do not trigger it. Only this one diagnostic is disabled; -Werror stays.
+	append-cxxflags -Wno-mismatched-new-delete
+	local mycmakeargs=( -DAIROUTER_SANITIZER=none )
+	cmake_src_configure
+}
+
+src_test() {
+	# Unit and digest-vector tests run here. The PostgreSQL/bwrap end-to-end and the
+	# install-layout tests run in CI, outside the Portage sandbox.
+	cmake_src_test -R '^m1-(unit|digest-vectors)$'
+}
+
+src_install() {
+	cmake_src_install
+	newinitd "${ED}"/usr/share/airouter/openrc/airouterd.initd airouterd
+	newconfd "${ED}"/usr/share/airouter/openrc/airouterd.confd airouterd
+	insinto /etc/airouter
+	newins packaging/airouterd.toml.example airouterd.toml.example
+	# /var/lib/airouter is the acct-user home (owned there); the service's
+	# start_pre creates its receipts, run and log directories with checkpath.
+}
+
+pkg_postinst() {
+	elog "Copy /etc/airouter/airouterd.toml.example to airouterd.toml,"
+	elog "apply the schema with airouter-migrate (as the migrator role, from"
+	elog "/usr/share/airouter/sql), keep execution.cgroup equal to AIROUTERD_CGROUP"
+	elog "in /etc/conf.d/airouterd (the service delegates it at start),"
+	elog "create the [history] directory on its own filesystem (for example a ZFS dataset"
+	elog "outside the database's snapshots and backups; the daemon refuses a shared one),"
+	elog "set [time] to the NTS-authenticated chronyd (its socket, uid, config, the"
+	elog "config's sha256sum and the addresses its NTS server name resolves to), install"
+	elog "/usr/share/airouter/sudoers.airouter as /etc/sudoers.d/airouterd with"
+	elog "those addresses (it lets the service read chronyd's reports as ntp),"
+	elog "then: rc-service airouterd start."
+}
diff --git a/profiles/package.mask/srcux-workarounds b/profiles/package.mask/srcux-workarounds
index 99d9afecfc8b..873aef750291 100644
--- a/profiles/package.mask/srcux-workarounds
+++ b/profiles/package.mask/srcux-workarounds
@@ -21,3 +21,10 @@
 # 2026-09-24: qualified package-build candidates; coordinated runtime rollout
 # remains pending. AIRouter r7 predates completion of context lifecycle.
 =net-misc/airouter-0.1.2-r7
+
+# 2026-10-12: AIRouter C++ (replaces the Rust 0.1.2 line; runs on Alpha). Masked so
+# hosts with the Rust AIRouter are not upgraded by a world update; unmask per host
+# (bravo first, for the two-host qualification gate).
+=net-misc/airouter-1.0.0_pre20261012
+=acct-user/airouter-1
+=acct-group/airouter-1
diff --git a/sci-libs/mumps/mumps-5.6.2.ebuild b/sci-libs/mumps/mumps-5.6.2-r1.ebuild
index 967f2d87ecca..20f5d9103f20 100644
--- a/sci-libs/mumps/mumps-5.6.2.ebuild
+++ b/sci-libs/mumps/mumps-5.6.2-r1.ebuild
@@ -175,7 +175,7 @@ src_compile() {
 
 	if use static-libs; then
 		emake clean
-		emake alllib
+		emake all
 	fi
 }
 
@@ -207,10 +207,8 @@ src_install() {
 
 	doins -r include
 	if ! use mpi; then
-		dolib.so libseq/lib*$(get_libname)*
 		insinto /usr/include/mpiseq
 		doins libseq/*.h
-		use static-libs && dolib.a libseq/libmpiseq.a
 	fi
 
 	dodoc README ChangeLog VERSION
diff --git a/sys-kernel/git-sources/Manifest b/sys-kernel/git-sources/Manifest
index 4d48820854e9..45104f6e54f7 100644
--- a/sys-kernel/git-sources/Manifest
+++ b/sys-kernel/git-sources/Manifest
@@ -5,3 +5,4 @@ DIST patch-7.3-rc3.patch 62002991 BLAKE2B e32eb54d83cae41de0bb31ebba3e64125e4851
 DIST patch-7.3-rc4.patch 62676099 BLAKE2B b6811aeee08e3287992c5f336579d8d00c8e64ce9dab83c8f3bc365ac5d1435453cf0cdfbccd35ae70144b536b2cdab6d22509aacdcc8ce67c40f9a51a831961 SHA512 62dca532dcef909dc9158e26fe196df8784d4bfb9b071f2bc05624ea5765f57c53ccf8e03b991adeb1d281a6b175903ff3e99af2b9de266d15e7b0f112f4658b
 DIST patch-7.3-rc5.patch 63453223 BLAKE2B f79cf0c47631475d838750403ce5c5d1a425b71cd3776b6e545c2efdd57c62a493c6a15f65dead68269385220e6e45368baf2252b46b123fd11b80513769e550 SHA512 b58a43e86106acc7d7acac7dd624ae9f82452db8dee6d795c1633d4fc0b72c370cd6288fa6d89b25c241f2a5708cdfc66a0f549f8d0d8f7c83d3c172c087a625
 DIST patch-7.3-rc6.patch 64038834 BLAKE2B 562d8cb20f9daa32eaf8b538215e7e3194083b9d9816a34e34c428156b7ae7533588d3abdb069f2924ddaacab9ce5c5df0e93b36e80adb7e359ab88d6dac09ce SHA512 492a6094bb485cb00ff8636f5ceb06359b232f3224cc27f0113afe3ad0291fd15459e887cf76cb74527527dfe690ede8c66b3626b37277fb008016f28b5e3d96
+DIST patch-7.3-rc7.patch 64647750 BLAKE2B 6cf3986eee66937796955811ff4539fa777dce98d7efb873488629a9b4ccdd308e665eb091b9c36b0cb35c2d3c900277aa0e9fe84408e914c65ce2c1c2e1f0ae SHA512 0359e742e9cc1fe7e468d64feaf5a9f1b4c4046a83228c192622d877ca6be9dbb803a1b9beb52513ae37161d16c5156ff54abfc2e21c178d9bc7a8cf229cc9d3
diff --git a/sys-kernel/git-sources/git-sources-7.3_rc7.ebuild b/sys-kernel/git-sources/git-sources-7.3_rc7.ebuild
new file mode 100644
index 000000000000..60499f05ca99
--- /dev/null
+++ b/sys-kernel/git-sources/git-sources-7.3_rc7.ebuild
@@ -0,0 +1,40 @@
+# Copyright 1999-2026 Gentoo Authors
+# Distributed under the terms of the GNU General Public License v2
+
+EAPI="8"
+
+UNIPATCH_STRICTORDER="yes"
+K_NOUSENAME="yes"
+K_NOSETEXTRAVERSION="yes"
+K_NOUSEPR="yes"
+K_SECURITY_UNSUPPORTED="1"
+K_BASE_VER="7.2"
+K_EXP_GENPATCHES_NOUSE="1"
+K_FROM_GIT="yes"
+K_NODRYRUN="yes"
+ETYPE="sources"
+CKV="${PVR/-r/-git}"
+
+# only use this if it's not an _rc/_pre release
+[ "${PV/_pre}" == "${PV}" ] && [ "${PV/_rc}" == "${PV}" ] && OKV="${PV}"
+inherit kernel-2
+detect_version
+
+DESCRIPTION="The very latest -git version of the Linux kernel"
+HOMEPAGE="https://www.kernel.org"
+SRC_URI="${KERNEL_URI}"
+
+KEYWORDS="~alpha ~amd64 ~arm ~arm64 ~hppa ~loong ~ppc ~ppc64 ~s390 ~sparc ~x86"
+
+K_EXTRAEINFO="This kernel is not supported by Gentoo due to its unstable and
+experimental nature. If you have any issues, try a matching vanilla-sources
+ebuild -- if the problem is not there, please contact the upstream kernel
+developers at https://bugzilla.kernel.org and on the linux-kernel mailing list to
+report the problem so it can be fixed in time for the next kernel release."
+
+DEPEND="${RDEPEND}
+	sys-devel/patch"
+
+pkg_postinst() {
+	postinst_sources
+}