Merge remote-tracking branch 'origin/master' into dev-jenken

# Conflicts:
#	.hermes/shared-memory/pitfalls.md
#	server-rs/crates/api-server/src/modules/jump_hop.rs
#	src/components/rpg-entry/RpgEntryFlowShell.agent.interaction.test.tsx
#	src/services/jump-hop/jumpHopClient.test.ts

server-rs/crates/api-server/src/modules/jump_hop.rs

@@ -1,15 +1,16 @@
 use axum::{
-    Router, middleware,
+    middleware,
     routing::{delete, get, post},
+    Router,
 };
 
 use crate::{
     auth::{require_bearer_auth, require_runtime_principal_auth},
     jump_hop::{
         create_jump_hop_session, delete_jump_hop_work, execute_jump_hop_action,
-        get_jump_hop_gallery_detail, get_jump_hop_runtime_work, get_jump_hop_session,
-        jump_hop_run_jump, list_jump_hop_gallery, list_jump_hop_works, publish_jump_hop_work,
-        restart_jump_hop_run, start_jump_hop_run,
+        get_jump_hop_gallery_detail, get_jump_hop_leaderboard, get_jump_hop_runtime_work,
+        get_jump_hop_session, jump_hop_run_jump, list_jump_hop_gallery, list_jump_hop_works,
+        publish_jump_hop_work, restart_jump_hop_run, start_jump_hop_run,
     },
     state::AppState,
 };
@@ -62,6 +63,13 @@ pub fn router(state: AppState) -> Router<AppState> {
             "/api/runtime/jump-hop/works/{profile_id}",
             get(get_jump_hop_runtime_work),
         )
+        .route(
+            "/api/runtime/jump-hop/works/{profile_id}/leaderboard",
+            get(get_jump_hop_leaderboard).route_layer(middleware::from_fn_with_state(
+                state.clone(),
+                require_runtime_principal_auth,
+            )),
+        )
         .route(
             "/api/runtime/jump-hop/runs",
             post(start_jump_hop_run).route_layer(middleware::from_fn_with_state(