@webpresso/agent-kit 3.1.30 → 3.3.0

package/dist/esm/audit/ci-test-perf.js

@@ -11,6 +11,7 @@
  */
 import { existsSync, readdirSync, readFileSync } from "node:fs";
 import { join, relative } from "node:path";
+import { parse as parseYaml } from "yaml";
 const WORKFLOW_DIR = ".github/workflows";
 const WORKFLOW_FILE_PATTERN = /\.(ya?ml)$/iu;
 /** Steps/jobs that intentionally serialize workers (mutation, Stryker, etc.). */
@@ -26,6 +27,16 @@ const SETUP_VP_CACHE_TRUE_PATTERN = /^\s*cache:\s*(?:true|pnpm|npm)\b/mu;
 const PACKAGE_INSTALL_PATTERN = /(?:\bvp\s+install\b|\bpnpm\s+install\b|\bnpm\s+ci\b|\bnpm\s+install\b|\bbun\s+install\b)/u;
 // Opt-out: put this comment on the same line or the line immediately above a serial force.
 const ALLOW_COMMENT_PATTERN = /ci-test-perf-allow(?:-serial)?\b/iu;
+const AGENT_KIT_SELF_CI_PATH = ".github/workflows/ci.agent-kit.yml";
+function readWorkflowJob(content, jobName) {
+    try {
+        const parsed = parseYaml(content);
+        return parsed.jobs?.[jobName];
+    }
+    catch {
+        return;
+    }
+}
 function walkWorkflowFiles(dir) {
     if (!existsSync(dir))
         return [];
@@ -112,6 +123,25 @@ function findViolations(root, file) {
                 `Cold installs inflate test job wall-clock without adding coverage.`,
         });
     }
+    if (relPath === AGENT_KIT_SELF_CI_PATH) {
+        const testJob = readWorkflowJob(content, "test");
+        const supervisorSteps = testJob?.steps?.filter((step) => typeof step.run === "string" && step.run.includes("bun scripts/run-vitest-projects.ts"));
+        const hasConcurrentLane = content.includes("WP_VITEST_PROJECT_MODE: concurrent");
+        const hasSerialLane = content.includes("WP_VITEST_PROJECT_MODE: serial");
+        if ((supervisorSteps?.length ?? 0) < 2 || !hasConcurrentLane || !hasSerialLane) {
+            violations.push({
+                file: relPath,
+                message: `${relPath}: agent-kit self-CI must run concurrent Test shards and the isolated serial lane ` +
+                    `through scripts/run-vitest-projects.ts so project concurrency and owned-process cleanup stay enforced.`,
+            });
+        }
+        if (testJob?.["timeout-minutes"] !== 5) {
+            violations.push({
+                file: relPath,
+                message: `${relPath}: agent-kit self-CI Test job must declare timeout-minutes: 5.`,
+            });
+        }
+    }
     return violations;
 }
 export function auditCiTestPerf(rootDirectory = process.cwd()) {

package/dist/esm/audit/command-surface.js

@@ -23,6 +23,7 @@ export function auditCommandSurface(root) {
     const verifySkillPath = path.join(root, "catalog/agent/skills/verify/SKILL.md");
     const codexVerifyPath = path.join(root, "packages/codex-plugin/skills/verify/SKILL.md");
     const claudeVerifyPath = path.join(root, "packages/claude-plugin/skills/verify/SKILL.md");
+    const opencodeVerifyPath = path.join(root, "packages/opencode-plugin/skills/verify/SKILL.md");
     const hookGuidancePath = path.join(root, "src/hooks/pretool-guard/dev-routing.ts");
     const requiredFiles = [
         cliPath,
@@ -35,6 +36,7 @@ export function auditCommandSurface(root) {
         verifySkillPath,
         codexVerifyPath,
         claudeVerifyPath,
+        opencodeVerifyPath,
         hookGuidancePath,
     ];
     for (const file of requiredFiles) {
@@ -65,8 +67,8 @@ export function auditCommandSurface(root) {
     if (!contains(mcpPrWaitPath, "buildStatusSnapshot")) {
         findings.push(violation("src/mcp/tools/pr-wait.ts", "MCP ready wait does not use the shared snapshot evaluator"));
     }
-    for (const file of [verifySkillPath, codexVerifyPath, claudeVerifyPath]) {
-        if (!contains(file, "wp review gate <blueprint-slug> --target HEAD --json")) {
+    for (const file of [verifySkillPath, codexVerifyPath, claudeVerifyPath, opencodeVerifyPath]) {
+        if (!contains(file, "wp review gate <blueprint-slug> --purpose delivery --target HEAD --json")) {
             findings.push(violation(path.relative(root, file), "missing executable review-gate lifecycle guidance"));
         }
     }

package/dist/esm/audit/host-substitution-risk.d.ts

@@ -0,0 +1,2 @@
+import type { RepoAuditResult } from "./repo-guardrails.js";
+export declare function auditHostSubstitutionRisk(rootDirectory?: string): RepoAuditResult;

package/dist/esm/audit/host-substitution-risk.js

@@ -0,0 +1,256 @@
+import { existsSync, readFileSync, readdirSync, statSync } from "node:fs";
+import path from "node:path";
+import { parse as parseYaml } from "yaml";
+import { readTrustedJsonFile } from "#shared-utils/read-json-file.js";
+const AGENT_KIT_PACKAGE = "@webpresso/agent-kit";
+const SCORECARD_REL = "docs/host-substitution-scorecard.md";
+const BASELINES_REL = "maintainers/host-baselines";
+const SCORECARD_HEADERS = [
+    "capability",
+    "class",
+    "substitution risk",
+    "observed native overlap",
+    "repo-owned invariant",
+    "independent verifier",
+    "blueprints",
+    "investment",
+];
+const CLASS_VALUES = new Set(["core", "bridge", "utility"]);
+const RISK_VALUES = new Set(["low", "medium", "high"]);
+const INVESTMENT_VALUES = new Set(["invest", "maintain", "minimize"]);
+const SURFACE_STATUS_VALUES = new Set(["full", "partial", "none", "in-progress"]);
+function violation(file, message) {
+    return { file, message };
+}
+function isRecord(value) {
+    return typeof value === "object" && value !== null && !Array.isArray(value);
+}
+function packageName(root) {
+    try {
+        const parsed = readTrustedJsonFile(path.join(root, "package.json"));
+        return typeof parsed.name === "string" ? parsed.name : null;
+    }
+    catch {
+        return null;
+    }
+}
+function splitMarkdownRow(line) {
+    return line
+        .trim()
+        .replace(/^\|/u, "")
+        .replace(/\|$/u, "")
+        .split("|")
+        .map((cell) => cell.trim());
+}
+function parseScorecard(markdown) {
+    const lines = markdown.split(/\r?\n/u);
+    const rows = [];
+    const errors = [];
+    for (let index = 0; index < lines.length - 1; index += 1) {
+        const header = splitMarkdownRow(lines[index] ?? "").map((cell) => cell.toLowerCase());
+        if (header.join("|") !== SCORECARD_HEADERS.join("|"))
+            continue;
+        const separator = lines[index + 1] ?? "";
+        if (!/^\s*\|[\s:|-]+\|\s*$/u.test(separator)) {
+            errors.push("scorecard table header must be followed by a markdown separator row");
+            continue;
+        }
+        for (let rowIndex = index + 2; rowIndex < lines.length; rowIndex += 1) {
+            const line = lines[rowIndex] ?? "";
+            if (!line.trimStart().startsWith("|"))
+                break;
+            const cells = splitMarkdownRow(line);
+            if (cells.length !== SCORECARD_HEADERS.length) {
+                errors.push(`scorecard row ${rowIndex + 1} has ${cells.length} cells`);
+                continue;
+            }
+            rows.push(Object.fromEntries(SCORECARD_HEADERS.map((key, i) => [key, cells[i] ?? ""])));
+        }
+        return { rows, errors };
+    }
+    errors.push(`missing scorecard table with headers: ${SCORECARD_HEADERS.join(" | ")}`);
+    return { rows, errors };
+}
+function cleanToken(value) {
+    return value.replace(/^`|`$/gu, "").trim();
+}
+function splitCellList(value) {
+    return value
+        .split(/(?:<br\s*\/?>|,)/iu)
+        .map((item) => cleanToken(item))
+        .filter((item) => item.length > 0 && item !== "--" && item.toLowerCase() !== "none");
+}
+function scanBlueprintIds(root) {
+    const ids = new Set();
+    const base = path.join(root, "blueprints");
+    if (!existsSync(base))
+        return ids;
+    for (const status of ["draft", "planned", "in-progress", "completed", "archived", "parked"]) {
+        const statusDir = path.join(base, status);
+        if (!existsSync(statusDir))
+            continue;
+        for (const entry of readdirSync(statusDir)) {
+            if (entry.startsWith("."))
+                continue;
+            const absolute = path.join(statusDir, entry);
+            if (entry.endsWith(".md")) {
+                ids.add(`${status}/${entry.replace(/\.md$/u, "")}`);
+                continue;
+            }
+            if (statSync(absolute).isDirectory() && existsSync(path.join(absolute, "_overview.md"))) {
+                ids.add(`${status}/${entry}`);
+            }
+        }
+    }
+    return ids;
+}
+function activeBlueprintIds(root) {
+    const ids = new Set();
+    for (const id of scanBlueprintIds(root)) {
+        if (id.startsWith("planned/") || id.startsWith("in-progress/"))
+            ids.add(id);
+    }
+    return ids;
+}
+function validateScorecard(root) {
+    const scorecardPath = path.join(root, SCORECARD_REL);
+    if (!existsSync(scorecardPath)) {
+        return { checked: 1, violations: [violation(SCORECARD_REL, "scorecard file is missing")] };
+    }
+    const parsed = parseScorecard(readFileSync(scorecardPath, "utf8"));
+    const violations = parsed.errors.map((message) => violation(SCORECARD_REL, message));
+    const seenCapabilities = new Set();
+    const allBlueprintIds = scanBlueprintIds(root);
+    const active = activeBlueprintIds(root);
+    const activeCoverage = new Map();
+    for (const id of active)
+        activeCoverage.set(id, 0);
+    for (const [index, row] of parsed.rows.entries()) {
+        const rowLabel = `row ${index + 1}`;
+        const capability = cleanToken(row.capability ?? "");
+        if (!/^[a-z][a-z0-9-]*$/u.test(capability)) {
+            violations.push(violation(SCORECARD_REL, `${rowLabel}: capability must be a stable kebab-case id`));
+        }
+        else if (seenCapabilities.has(capability)) {
+            violations.push(violation(SCORECARD_REL, `${rowLabel}: duplicate capability ${capability}`));
+        }
+        seenCapabilities.add(capability);
+        const kind = cleanToken(row.class ?? "");
+        if (!CLASS_VALUES.has(kind)) {
+            violations.push(violation(SCORECARD_REL, `${rowLabel}: class must be core, bridge, or utility`));
+        }
+        const risk = cleanToken(row["substitution risk"] ?? "");
+        if (!RISK_VALUES.has(risk)) {
+            violations.push(violation(SCORECARD_REL, `${rowLabel}: substitution risk must be low, medium, or high`));
+        }
+        const investment = cleanToken(row.investment ?? "");
+        if (!INVESTMENT_VALUES.has(investment)) {
+            violations.push(violation(SCORECARD_REL, `${rowLabel}: investment must be invest, maintain, or minimize`));
+        }
+        for (const verifier of splitCellList(row["independent verifier"] ?? "")) {
+            if (!verifier.startsWith("repo:"))
+                continue;
+            const verifierPath = verifier.slice("repo:".length);
+            if (!existsSync(path.join(root, verifierPath))) {
+                violations.push(violation(SCORECARD_REL, `${rowLabel}: verifier path missing: ${verifier}`));
+            }
+        }
+        for (const blueprint of splitCellList(row.blueprints ?? "")) {
+            if (!/^(?:draft|planned|in-progress|completed|archived|parked)\/[a-z0-9][a-z0-9-]*$/u.test(blueprint)) {
+                violations.push(violation(SCORECARD_REL, `${rowLabel}: invalid blueprint reference ${blueprint}`));
+                continue;
+            }
+            if (!allBlueprintIds.has(blueprint)) {
+                violations.push(violation(SCORECARD_REL, `${rowLabel}: blueprint reference does not exist: ${blueprint}`));
+            }
+            if (activeCoverage.has(blueprint)) {
+                activeCoverage.set(blueprint, (activeCoverage.get(blueprint) ?? 0) + 1);
+            }
+        }
+    }
+    for (const [id, count] of activeCoverage) {
+        if (count !== 1) {
+            violations.push(violation(SCORECARD_REL, `active blueprint ${id} must be covered exactly once in scorecard blueprints column; found ${count}`));
+        }
+    }
+    return { checked: parsed.rows.length + activeCoverage.size, violations };
+}
+function validateHostBaseline(root, relPath) {
+    const violations = [];
+    const value = parseYaml(readFileSync(path.join(root, relPath), "utf8"));
+    if (!isRecord(value))
+        return [violation(relPath, "host baseline must be a YAML object")];
+    for (const key of ["host", "cli"]) {
+        if (typeof value[key] !== "string" || value[key].trim() === "") {
+            violations.push(violation(relPath, `${key} must be a non-empty string`));
+        }
+    }
+    for (const key of ["last_implemented", "last_observed"]) {
+        const record = value[key];
+        if (!isRecord(record)) {
+            violations.push(violation(relPath, `${key} must be an object`));
+            continue;
+        }
+        for (const child of ["version", "date"]) {
+            if (typeof record[child] !== "string" || record[child].trim() === "") {
+                violations.push(violation(relPath, `${key}.${child} must be a non-empty string`));
+            }
+        }
+    }
+    const sources = value.sources;
+    const docs = isRecord(sources) ? sources.docs : undefined;
+    if (!Array.isArray(docs) ||
+        docs.some((item) => typeof item !== "string" || !item.startsWith("https://"))) {
+        violations.push(violation(relPath, "sources.docs must be an array of https URLs"));
+    }
+    const surfaces = value.surfaces;
+    if (!isRecord(surfaces)) {
+        violations.push(violation(relPath, "surfaces must be an object"));
+    }
+    else {
+        for (const [name, raw] of Object.entries(surfaces)) {
+            if (!isRecord(raw)) {
+                violations.push(violation(relPath, `surfaces.${name} must be an object`));
+                continue;
+            }
+            if (typeof raw.status !== "string" || !SURFACE_STATUS_VALUES.has(raw.status)) {
+                violations.push(violation(relPath, `surfaces.${name}.status must be full, partial, none, or in-progress`));
+            }
+            if (typeof raw.notes !== "string" || raw.notes.trim() === "") {
+                violations.push(violation(relPath, `surfaces.${name}.notes must be a non-empty string`));
+            }
+        }
+    }
+    return violations;
+}
+function validateHostBaselines(root) {
+    const dir = path.join(root, BASELINES_REL);
+    if (!existsSync(dir)) {
+        return {
+            checked: 1,
+            violations: [violation(BASELINES_REL, "host baselines directory missing")],
+        };
+    }
+    const files = readdirSync(dir)
+        .filter((entry) => entry.endsWith(".yaml"))
+        .map((entry) => path.join(BASELINES_REL, entry));
+    return {
+        checked: files.length,
+        violations: files.flatMap((file) => validateHostBaseline(root, file)),
+    };
+}
+export function auditHostSubstitutionRisk(rootDirectory = process.cwd()) {
+    const root = path.resolve(rootDirectory);
+    const title = "Host substitution risk";
+    if (packageName(root) !== AGENT_KIT_PACKAGE)
+        return { ok: true, title, checked: 0, violations: [] };
+    const scorecard = validateScorecard(root);
+    const baselines = validateHostBaselines(root);
+    const violations = [...scorecard.violations, ...baselines.violations];
+    return {
+        ok: violations.length === 0,
+        title,
+        checked: scorecard.checked + baselines.checked,
+        violations,
+    };
+}

package/dist/esm/audit/registry.d.ts

@@ -14,11 +14,11 @@ export interface AuditKindDescriptor {
 }
 export declare const SCRIPT_AUDIT_KIND_IDS: readonly ["test-smells", "tph-e2e"];
 export declare const SPECIAL_AUDIT_KIND_IDS: readonly ["bundle-budget", "commit-message", "blueprint-pr-coverage", "mutation", "guardrails", "quality"];
-export declare const REPO_AUDIT_KIND_IDS: readonly ["catalog-drift", "package-surface", "command-surface", "reference-parity-matrix", "blueprint-readme-drift", "blueprint-lifecycle", "blueprint-trust", "roadmap-links", "docs-frontmatter", "agents", "vision", "tech-debt", "supported-agent-clis", "no-relative-parent-imports", "no-link-protocol", "no-relative-package-scripts", "test-isolation", "bucket-boundary", "skill-sizes", "broken-refs", "memory-rotation", "gitignore-agent-surfaces", "memory-unified", "compile-drift", "no-legacy-cli-bin", "architecture-drift", "cloudflare-deploy-contract", "toolchain-isolation", "absolute-path-policy", "no-first-party-mjs", "outside-review-runtime-ownership", "no-math-random", "agent-cost", "blueprint-db-consistency", "tech-debt-cadence", "cross-repo-correlation", "ai-contracts", "atomic-state-writes", "hook-surface", "hook-vendor-drift", "session-memory-hardcut", "open-source-licenses", "secrets-policy", "no-dev-vars", "secret-provider-quarantine", "github-actions-secrets", "security-quality-regressions", "secrets-config", "consumer-agent-kit-dependency", "ci-test-perf", "test-scan-perf", "worktree-main-ownership", "sast", "harness-surfaces", "weakness-mining", "harness-overlay-evidence", "legacy-workflow-identity", "rules", "skills"];
+export declare const REPO_AUDIT_KIND_IDS: readonly ["catalog-drift", "package-surface", "command-surface", "reference-parity-matrix", "blueprint-readme-drift", "blueprint-lifecycle", "blueprint-trust", "roadmap-links", "docs-frontmatter", "agents", "vision", "tech-debt", "supported-agent-clis", "no-relative-parent-imports", "no-link-protocol", "no-relative-package-scripts", "test-isolation", "bucket-boundary", "skill-sizes", "broken-refs", "memory-rotation", "gitignore-agent-surfaces", "memory-unified", "compile-drift", "no-legacy-cli-bin", "architecture-drift", "cloudflare-deploy-contract", "toolchain-isolation", "absolute-path-policy", "no-first-party-mjs", "outside-review-runtime-ownership", "no-math-random", "agent-cost", "blueprint-db-consistency", "tech-debt-cadence", "cross-repo-correlation", "ai-contracts", "atomic-state-writes", "hook-surface", "hook-vendor-drift", "session-memory-hardcut", "open-source-licenses", "secrets-policy", "no-dev-vars", "secret-provider-quarantine", "github-actions-secrets", "security-quality-regressions", "secrets-config", "consumer-agent-kit-dependency", "ci-test-perf", "ci-guardrails-wiring", "test-scan-perf", "worktree-main-ownership", "sast", "harness-surfaces", "weakness-mining", "harness-overlay-evidence", "host-substitution-risk", "legacy-workflow-identity", "rules", "skills", "typescript-version", "changeset-required"];
 export declare const AUDIT_KIND_DESCRIPTORS: readonly AuditKindDescriptor[];
-export declare const AUDIT_KIND_IDS: readonly ["test-smells", "tph-e2e", ...("absolute-path-policy" | "agent-cost" | "agents" | "ai-contracts" | "architecture-drift" | "atomic-state-writes" | "blueprint-db-consistency" | "blueprint-lifecycle" | "blueprint-pr-coverage" | "blueprint-readme-drift" | "blueprint-trust" | "broken-refs" | "bucket-boundary" | "bundle-budget" | "catalog-drift" | "ci-test-perf" | "cloudflare-deploy-contract" | "command-surface" | "commit-message" | "compile-drift" | "consumer-agent-kit-dependency" | "cross-repo-correlation" | "docs-frontmatter" | "github-actions-secrets" | "gitignore-agent-surfaces" | "guardrails" | "harness-overlay-evidence" | "harness-surfaces" | "hook-surface" | "hook-vendor-drift" | "legacy-workflow-identity" | "memory-rotation" | "memory-unified" | "mutation" | "no-dev-vars" | "no-first-party-mjs" | "no-legacy-cli-bin" | "no-link-protocol" | "no-math-random" | "no-relative-package-scripts" | "no-relative-parent-imports" | "open-source-licenses" | "outside-review-runtime-ownership" | "package-surface" | "quality" | "reference-parity-matrix" | "roadmap-links" | "rules" | "sast" | "secret-provider-quarantine" | "secrets-config" | "secrets-policy" | "security-quality-regressions" | "session-memory-hardcut" | "skill-sizes" | "skills" | "supported-agent-clis" | "tech-debt" | "tech-debt-cadence" | "test-isolation" | "test-scan-perf" | "toolchain-isolation" | "vision" | "weakness-mining" | "worktree-main-ownership")[]];
-export declare const MCP_AUDIT_KIND_IDS: readonly ["test-smells", "tph-e2e", "agents", "catalog-drift", "package-surface", "reference-parity-matrix", "docs-frontmatter", "blueprint-readme-drift", "blueprint-pr-coverage", "blueprint-lifecycle", "blueprint-trust", "architecture-drift", "cloudflare-deploy-contract", "absolute-path-policy", "no-first-party-mjs", "no-math-random", "roadmap-links", "bundle-budget", "commit-message", "tech-debt", "supported-agent-clis", "hook-surface", "harness-surfaces", "weakness-mining", "harness-overlay-evidence", "ai-contracts", "atomic-state-writes", "no-relative-package-scripts", "toolchain-isolation", "open-source-licenses", "secrets-policy", "no-dev-vars", "github-actions-secrets", "secret-provider-quarantine", "security-quality-regressions", "secrets-config", "consumer-agent-kit-dependency", "ci-test-perf", "test-scan-perf", "session-memory-hardcut", "worktree-main-ownership", "sast"];
-export declare const AFFECTED_SAFE_AUDIT_KIND_IDS: readonly ["blueprint-readme-drift", "blueprint-lifecycle", "bucket-boundary", "skill-sizes", "broken-refs", "no-dev-vars", "absolute-path-policy", "secret-provider-quarantine", "secrets-config", "docs-frontmatter", "no-relative-parent-imports", "no-link-protocol", "no-first-party-mjs", "no-math-random", "test-scan-perf"];
+export declare const AUDIT_KIND_IDS: readonly ["test-smells", "tph-e2e", ...("absolute-path-policy" | "agent-cost" | "agents" | "ai-contracts" | "architecture-drift" | "atomic-state-writes" | "blueprint-db-consistency" | "blueprint-lifecycle" | "blueprint-pr-coverage" | "blueprint-readme-drift" | "blueprint-trust" | "broken-refs" | "bucket-boundary" | "bundle-budget" | "catalog-drift" | "changeset-required" | "ci-guardrails-wiring" | "ci-test-perf" | "cloudflare-deploy-contract" | "command-surface" | "commit-message" | "compile-drift" | "consumer-agent-kit-dependency" | "cross-repo-correlation" | "docs-frontmatter" | "github-actions-secrets" | "gitignore-agent-surfaces" | "guardrails" | "harness-overlay-evidence" | "harness-surfaces" | "hook-surface" | "hook-vendor-drift" | "host-substitution-risk" | "legacy-workflow-identity" | "memory-rotation" | "memory-unified" | "mutation" | "no-dev-vars" | "no-first-party-mjs" | "no-legacy-cli-bin" | "no-link-protocol" | "no-math-random" | "no-relative-package-scripts" | "no-relative-parent-imports" | "open-source-licenses" | "outside-review-runtime-ownership" | "package-surface" | "quality" | "reference-parity-matrix" | "roadmap-links" | "rules" | "sast" | "secret-provider-quarantine" | "secrets-config" | "secrets-policy" | "security-quality-regressions" | "session-memory-hardcut" | "skill-sizes" | "skills" | "supported-agent-clis" | "tech-debt" | "tech-debt-cadence" | "test-isolation" | "test-scan-perf" | "toolchain-isolation" | "typescript-version" | "vision" | "weakness-mining" | "worktree-main-ownership")[]];
+export declare const MCP_AUDIT_KIND_IDS: readonly ["test-smells", "tph-e2e", "agents", "catalog-drift", "package-surface", "reference-parity-matrix", "docs-frontmatter", "blueprint-readme-drift", "blueprint-pr-coverage", "blueprint-lifecycle", "blueprint-trust", "architecture-drift", "cloudflare-deploy-contract", "absolute-path-policy", "no-first-party-mjs", "no-math-random", "roadmap-links", "bundle-budget", "commit-message", "tech-debt", "supported-agent-clis", "hook-surface", "harness-surfaces", "weakness-mining", "harness-overlay-evidence", "host-substitution-risk", "ai-contracts", "atomic-state-writes", "no-relative-package-scripts", "toolchain-isolation", "open-source-licenses", "secrets-policy", "no-dev-vars", "github-actions-secrets", "secret-provider-quarantine", "security-quality-regressions", "secrets-config", "consumer-agent-kit-dependency", "ci-test-perf", "test-scan-perf", "session-memory-hardcut", "worktree-main-ownership", "typescript-version", "ci-guardrails-wiring", "sast", "changeset-required"];
+export declare const AFFECTED_SAFE_AUDIT_KIND_IDS: readonly ["blueprint-readme-drift", "blueprint-lifecycle", "bucket-boundary", "skill-sizes", "broken-refs", "no-dev-vars", "absolute-path-policy", "secret-provider-quarantine", "secrets-config", "docs-frontmatter", "no-relative-parent-imports", "no-link-protocol", "no-first-party-mjs", "no-math-random", "test-scan-perf", "ci-guardrails-wiring", "changeset-required"];
 export type AuditKindId = (typeof AUDIT_KIND_IDS)[number];
 export type RepoAuditKindId = (typeof REPO_AUDIT_KIND_IDS)[number];
 export type MCPAuditKindId = (typeof MCP_AUDIT_KIND_IDS)[number];

package/dist/esm/audit/registry.js

@@ -17,6 +17,8 @@ const affectedSafeKinds = [
     "no-first-party-mjs",
     "no-math-random",
     "test-scan-perf",
+    "ci-guardrails-wiring",
+    "changeset-required",
 ];
 const mcpKindIds = [
     "test-smells",
@@ -44,6 +46,7 @@ const mcpKindIds = [
     "harness-surfaces",
     "weakness-mining",
     "harness-overlay-evidence",
+    "host-substitution-risk",
     "ai-contracts",
     "atomic-state-writes",
     "no-relative-package-scripts",
@@ -60,7 +63,10 @@ const mcpKindIds = [
     "test-scan-perf",
     "session-memory-hardcut",
     "worktree-main-ownership",
+    "typescript-version",
+    "ci-guardrails-wiring",
     "sast",
+    "changeset-required",
 ];
 const affectedSafe = new Set(affectedSafeKinds);
 const mcpKinds = new Set(mcpKindIds);
@@ -132,15 +138,19 @@ const repoKinds = [
     "secrets-config",
     "consumer-agent-kit-dependency",
     "ci-test-perf",
+    "ci-guardrails-wiring",
     "test-scan-perf",
     "worktree-main-ownership",
     "sast",
     "harness-surfaces",
     "weakness-mining",
     "harness-overlay-evidence",
+    "host-substitution-risk",
     "legacy-workflow-identity",
     "rules",
     "skills",
+    "typescript-version",
+    "changeset-required",
 ];
 function descriptor(id, kindClass) {
     return {
@@ -151,7 +161,9 @@ function descriptor(id, kindClass) {
         gateClass: signalKinds.has(id) ? "signal" : "blocking",
         scopeSafety: affectedSafe.has(id) ? "affected-safe" : "full-scan-only",
         summaryLabel: id === "sast" ? "SAST" : id,
-        ...(id === "sast" ? { includedInGuardrails: false } : {}),
+        ...(["sast", "host-substitution-risk", "changeset-required"].includes(id)
+            ? { includedInGuardrails: false }
+            : {}),
         ...(["blueprint-readme-drift", "docs-frontmatter"].includes(id) ? { fixable: true } : {}),
     };
 }

package/dist/esm/audit/toolchain-isolation.js

@@ -133,10 +133,9 @@ function shouldSkipDirectory(name) {
         ".stryker-tmp",
         ".agent",
         ".agents",
-        ".gemini",
-        ".windsurf",
         ".runtime",
         ".codex",
+        ".grok",
         "_worktrees",
         // Gitignored Claude Code agent surface — agent worktree scratch under
         // .claude/worktrees/* carries vendored package manifests that are not the

package/dist/esm/audit/typescript-version.d.ts

@@ -0,0 +1,2 @@
+import type { RepoAuditResult } from "./repo-guardrails.js";
+export declare function auditTypescriptVersion(rootDirectory: string): RepoAuditResult;

package/dist/esm/audit/typescript-version.js

@@ -0,0 +1,123 @@
+import { existsSync, readdirSync, readFileSync } from "node:fs";
+import { join } from "node:path";
+import { parse as parseYaml } from "yaml";
+/**
+ * `wp audit typescript-version` — enforce the native TypeScript compiler major
+ * at consumers.
+ *
+ * agent-kit migrated itself to TypeScript 7 (the native Go compiler) and pins
+ * `typescript: ^7.0.2` in every shipped template, but nothing checked that a
+ * downstream consumer stayed on 7 — so a consumer could silently regress to a
+ * legacy TypeScript major (observed: edge-matte pinned `typescript: ^6.0.3`).
+ * This audit ships through `wp audit guardrails`, so consumers inherit it
+ * automatically on their next `wp` bump with no CI edits.
+ *
+ * It gates only the `typescript` compiler dependency. `@typescript/typescript6`
+ * — the Microsoft-published TS6 compiler-API compatibility package that
+ * agent-kit itself depends on until TS 7.1 stabilizes the programmatic API — is
+ * a distinct dependency and is never flagged.
+ */
+const REQUIRED_MAJOR = 7;
+const COMPILER_DEP = "typescript";
+// Inline escape hatch for a documented, temporary exception (e.g. a consumer
+// mid-migration). Placed as a comment in pnpm-workspace.yaml or in the manifest.
+const OPT_OUT_MARKER = "typescript-version-allow";
+/** Lowest major a version range can resolve to (the enforceable floor). */
+function majorFloor(range) {
+    const match = /(\d+)/u.exec(range);
+    return match ? Number(match[1]) : undefined;
+}
+/** `catalog:` / `workspace:` pins resolve elsewhere; `*`/`latest` carry no floor. */
+function isDelegatedPin(value) {
+    return (value.startsWith("catalog:") ||
+        value.startsWith("workspace:") ||
+        value === "*" ||
+        value === "latest");
+}
+function checkTypescriptPin(source, value, violations) {
+    if (isDelegatedPin(value))
+        return;
+    const major = majorFloor(value);
+    if (major === undefined || major >= REQUIRED_MAJOR)
+        return;
+    violations.push({
+        file: source,
+        severity: "error",
+        ruleId: "typescript-version",
+        message: `typescript is pinned to "${value}" (major ${major}); the native compiler ` +
+            `requires TypeScript ${REQUIRED_MAJOR}. Bump to ^${REQUIRED_MAJOR} (or a catalog: ref). ` +
+            `The @typescript/typescript6 compiler-API bridge is separate and allowed.`,
+    });
+}
+function collectManifestPaths(rootDirectory) {
+    const paths = [];
+    if (existsSync(join(rootDirectory, "package.json")))
+        paths.push("package.json");
+    for (const group of ["packages", "apps"]) {
+        const dir = join(rootDirectory, group);
+        if (!existsSync(dir))
+            continue;
+        for (const entry of readdirSync(dir, { withFileTypes: true })) {
+            if (!entry.isDirectory())
+                continue;
+            const manifest = join(group, entry.name, "package.json");
+            if (existsSync(join(rootDirectory, manifest)))
+                paths.push(manifest);
+        }
+    }
+    return paths;
+}
+export function auditTypescriptVersion(rootDirectory) {
+    const violations = [];
+    const sources = [];
+    let checked = 0;
+    // 1. Workspace catalog pin — the primary contract; catches catalog-level drift.
+    const workspacePath = join(rootDirectory, "pnpm-workspace.yaml");
+    if (existsSync(workspacePath)) {
+        const raw = readFileSync(workspacePath, "utf8");
+        sources.push({ path: "pnpm-workspace.yaml", kind: "pnpm-workspace" });
+        if (!raw.includes(OPT_OUT_MARKER)) {
+            const workspace = (parseYaml(raw) ?? {});
+            const catalogPin = workspace.catalog?.[COMPILER_DEP];
+            if (typeof catalogPin === "string") {
+                checked += 1;
+                checkTypescriptPin("pnpm-workspace.yaml (catalog.typescript)", catalogPin, violations);
+            }
+            // pnpm also supports NAMED catalogs (`catalogs.<name>.typescript`), a
+            // separate map from the default `catalog` above. A pin placed there
+            // resolves the same way for consumers using `catalog:<name>` refs, so it
+            // must be enforced identically or a consumer can dodge the check by
+            // moving the pin into a named catalog.
+            for (const [catalogName, entries] of Object.entries(workspace.catalogs ?? {})) {
+                const namedPin = entries[COMPILER_DEP];
+                if (typeof namedPin !== "string")
+                    continue;
+                checked += 1;
+                checkTypescriptPin(`pnpm-workspace.yaml (catalogs.${catalogName}.typescript)`, namedPin, violations);
+            }
+        }
+    }
+    // 2. Direct typescript pins in package manifests (catalog:/workspace: skipped —
+    //    they resolve through the catalog checked above).
+    for (const manifest of collectManifestPaths(rootDirectory)) {
+        const raw = readFileSync(join(rootDirectory, manifest), "utf8");
+        sources.push({ path: manifest, kind: "package-manifest" });
+        if (raw.includes(OPT_OUT_MARKER))
+            continue;
+        const parsed = JSON.parse(raw);
+        for (const field of ["dependencies", "devDependencies"]) {
+            const pin = parsed[field]?.[COMPILER_DEP];
+            if (typeof pin === "string") {
+                checked += 1;
+                checkTypescriptPin(`${manifest} (${field}.typescript)`, pin, violations);
+            }
+        }
+    }
+    return {
+        ok: violations.length === 0,
+        title: `TypeScript ${REQUIRED_MAJOR} consumer pin`,
+        checked,
+        sources,
+        violations,
+    };
+}