[T-Crypt]

Why

A quality pass over oh-my-pocket found two documents that no longer matched the code, and one user-facing route group with no test. The extension docs drifted as modules were added, and the push routes were untested.

What changed

• docs/map.md lists every built-in extension in install order, including routers, read-economy, loop-guard, pruner, tool-repair, and today.
• docs/extensions.md names the host members a drop-in can use, including envFor, routerFor, loopGuard, pip, pipCompaction, and pruner.
• test/push-routes.test.ts covers the /api/push routes, the largest untested gap among core server modules.
• docs/triage-2026-10-16.md records where the 20 open upstream issues stand for this fork.

Scope

This covers docs accuracy, one new test file, and a triage note. It leaves the code alone and adds no dependencies. The README's battery test counts and its extensions summary row are left as they are.

Blast radius

Docs and one new test file. Nothing under src/ or web/ changes, so no running server is affected.

Verification

• npm test passes 643 of 643 tests, including the 3 new ones.
• npm run check, npm run lint, and npm run check:web pass.
• node --test test/push-routes.test.ts passes 3 of 3.
• npx prettier --check passes on every changed file. The full npm run format:check warns on an untracked opencode.json that this worktree holds and the repository does not.