vouchington-tooling 0.1.4 → 0.1.6

package/README.md

@@ -20,6 +20,7 @@ vouchington gha-runtime-audit --pr-workflow CI --push-workflow '/^Main CI \\(.+\
 vouchington gha-output name
 vouchington gha-needs-results
 vouchington download-with-diagnostics <url> <destination>
+vouchington download-optional-run-artifacts --pattern 'coverage-*' --dir ./coverage-fallback
 vouchington host-pressure-diagnostics
 vouchington allocate-browser-safe-ports 2 --policy ./policy.json --forbidden-ports ./ports.json
 vouchington diagnose-port-collision --ports "2200 2216"
@@ -46,6 +47,11 @@ vouchington post-review
 vouchington stage-review-payload optional|required <source> <destination>
 ```
 
+`download-optional-run-artifacts` uses the current Actions run and host. Pattern mode discovers
+non-expired artifacts across the run, keeps the first result for each name (matching `gh run
+download`), and extracts each selected name into its own directory. Ordinary absence is reported as
+`availability=unavailable`; invalid names and cancellation remain hard failures.
+
 `retrospective-transcript` discovers Codex and Claude transcripts by default. It also reads a
 Claude-compatible transcript when `CURSOR_SESSION_ID` is set, and Grok's `updates.jsonl` session
 layout when `GROK_SESSION_ID` is set. Use `--grok-sessions-dir` to point discovery at a nondefault
@@ -128,8 +134,38 @@ import {
   readDiagnosticReportSummaries,
 } from 'vouchington-tooling/vitest-diagnostics'
 import { runRetrospectiveTranscript } from 'vouchington-tooling/retrospective-transcript'
+import { buildSessionFrictionReport, recordFriction } from 'vouchington-tooling/session-friction'
 ```
 
+`session-friction` is an opt-in capture and reporting library. Callers supply the session id,
+absolute log directory, host-independent observation, and journal loader; it does not inspect host
+environment variables, install hooks, or connect to a journal service by itself. Invoking
+`recordFriction` touches the session log even when no event is classified, preserving the
+difference between an observed clean session and missing evidence. Report markdown keeps backend
+diagnostics separate from its paste-safe output. Capture stores at most 500 events per session,
+truncates event detail to 1,000 characters, and consumes up to 500 entries from the journal loader
+when building a report, stopping earlier when its aggregate 1 MB inspected-byte budget is reached.
+Bounded journal scans that stop before exhaustion are reported as incomplete rather than clean.
+Report liveness inherits the caller-supplied journal loader, which must bound its own I/O and yields.
+Log reads are capped at 2 MB, journal Markdown at 10,000 bytes per entry,
+and rendered audit fields at 120 escaped characters. The supplied log directory must be dedicated
+to session-friction; existing directories must already be owner-only, while newly created
+directories and log files are enforced as owner-only when recording. Reads use a fixed bounded
+buffer that can detect growth one byte beyond the documented 2 MB cap.
+Ownership checks require POSIX effective-user IDs (Linux and macOS); session-friction throws on
+Windows and other platforms where those IDs are unavailable.
+Root-owned system symlink ancestors are supported for paths such as macOS `/var`; callers must not
+allow the directory chain to be mutated while it is being validated.
+Command-prefix normalization recognizes simple shell
+segments with single or double quotes; it does not evaluate substitutions or implement a full shell
+grammar. Normalization attempts limited redaction of obvious credential patterns but is not a secret
+scrubber; callers must ensure credentials are never included in captured commands.
+Failure classification inspects at most 100,000 structured-stderr characters, split evenly between
+the beginning and end when input exceeds that bound.
+Cooperating log readers and writers are serialized, including the initial clean-session
+touch. Recording and report log reads are synchronous: on contention they block the caller's
+event loop for up to one second before failing explicitly. Avoid these APIs on hot request paths.
+
 The artifact, review-payload, HTTP body, and pagination APIs validate untrusted inputs at their
 boundaries. Review posting lives in `gha-post-review` and talks to GitHub only through caller-supplied
 credentials (job token or a minted Claude GitHub App token).

package/dist/cli/index.mjs

@@ -26,6 +26,10 @@ const SCRIPT_PATHS = {
         command: 'bash',
         path: 'scripts/gha/download-with-diagnostics.sh',
     },
+    'download-optional-run-artifacts': {
+        command: 'bash',
+        path: 'scripts/gha/download-optional-run-artifacts.sh',
+    },
     'host-pressure-diagnostics': {
         command: 'bash',
         path: 'scripts/gha/host-pressure-diagnostics.sh',

package/dist/cli/parse.d.mts

@@ -44,5 +44,5 @@ export type ParsedCli = {
     kind: 'retrospective-transcript';
     args: string[];
 } | ParsedGhaRuntimeAudit | ParsedGhaArtifactsCleanup;
-export type ScriptCommand = 'gha-output' | 'gha-needs-results' | 'download-with-diagnostics' | 'host-pressure-diagnostics' | 'allocate-browser-safe-ports' | 'diagnose-port-collision' | 'prepare-trivy-db' | 'check-cache-size' | 'make-shard-matrix' | 'load-runner-env' | 'clean-workspace' | 'install-github-release' | 'run-with-timeout' | 'lint-links' | 'materialize-pr-context' | 'wait-for-apt-locks' | 'install-playwright-chromium-arm64' | 'ghcr-package-retention';
+export type ScriptCommand = 'gha-output' | 'gha-needs-results' | 'download-with-diagnostics' | 'download-optional-run-artifacts' | 'host-pressure-diagnostics' | 'allocate-browser-safe-ports' | 'diagnose-port-collision' | 'prepare-trivy-db' | 'check-cache-size' | 'make-shard-matrix' | 'load-runner-env' | 'clean-workspace' | 'install-github-release' | 'run-with-timeout' | 'lint-links' | 'materialize-pr-context' | 'wait-for-apt-locks' | 'install-playwright-chromium-arm64' | 'ghcr-package-retention';
 export declare function parseCli(argv: readonly string[]): ParsedCli;

package/dist/cli/parse.mjs

@@ -4,6 +4,7 @@ const SCRIPT_COMMANDS = new Set([
     'gha-output',
     'gha-needs-results',
     'download-with-diagnostics',
+    'download-optional-run-artifacts',
     'host-pressure-diagnostics',
     'allocate-browser-safe-ports',
     'diagnose-port-collision',

package/dist/cli/usage.d.mts

@@ -1,2 +1,2 @@
-export declare const USAGE = "Usage: vouchington <command> [options]\n\nCommands:\n  runner-port-policy   Print or validate a runner port policy\n  with-host-lock       Run a command under a host-wide lock\n  gha-runtime-audit             Audit successful GitHub Actions job runtimes\n  gha-output                    Write a collision-safe multiline GITHUB_OUTPUT record\n  gha-needs-results             Fail if required GitHub Actions job results failed\n  download-with-diagnostics     Download a URL and report HTTP status on failure\n  host-pressure-diagnostics     Print a bounded host memory/OOM/PSI snapshot\n  allocate-browser-safe-ports   Allocate Fetch-safe localhost ports\n  diagnose-port-collision       Capture bounded localhost port diagnostics\n  prepare-trivy-db              Download the Trivy vulnerability database\n  gha-artifacts-cleanup         Delete classified GitHub Actions artifacts\n  http-origin                   Validate an optional HTTP(S) origin\n  vitest-blob-manifest          Stamp a vitest-blob-manifest:v1 identity file\n  pnpm-install                  Install a pnpm workspace with retry and release-age fail-fast\n  check-cache-size              Measure a path and decide whether to save a GHA cache\n  make-shard-matrix             Emit a [1..N] GitHub Actions shard matrix\n  load-runner-env               Overlay a runner env file onto GITHUB_ENV with injection guards\n  clean-workspace               Reset a persistent-runner workspace with a fork-PR trust gate\n  install-github-release        Download a checksum-verified GitHub Release binary\n  run-with-timeout              Run a command with GNU timeout or a Perl fallback\n  lint-links                    Two-pass lychee: internal links fail, external warn\n  materialize-pr-context        Dump PR title/body/files/diff/comments and #N crawl\n  wait-for-apt-locks            Wait until apt/dpkg lock files are free\n  install-playwright-chromium-arm64  Install Playwright Chromium from browsers.json\n  ghcr-package-retention        Delete old GHCR package versions past KEEP_MIN\n  nuget-central-version         Validate a Directory.Packages.props PackageVersion delta\n  swift-semantic-equal          Compare Swift sources ignoring comments and whitespace\n  post-review                   Post one COMMENT review from a staged payload file\n  stage-review-payload          Validate a review payload file into a staging directory\n  retrospective-transcript      Format facts from Claude-compatible, Codex, or Grok transcripts\n\nOptions:\n  -h, --help       Show this help\n  -v, --version    Print the package version\n\nrunner-port-policy\n  (no args)              Print the shipped policy as JSON\n  --file <path>          Validate and print a policy file\n  --reserved <port>      Print true if the port is reserved\n\nwith-host-lock\n  --name <family>\n  [--slots <n>]\n  --timeout-seconds <n>\n  [--command-timeout-seconds <n>]\n  [--failure-diagnostics <absolute-script>]\n  [--on-acquire-timeout fail|run-unlocked]\n  -- <command> [args...]\n\ngha-runtime-audit\n  [--repository owner/name]   Default GITHUB_REPOSITORY\n  [--branch main]\n  --pr-workflow <name|/regex/>     Repeatable\n  --push-workflow <name|/regex/>   Repeatable\n\ngha-output <name>\ngha-needs-results [label]\ndownload-with-diagnostics <url> <destination> [-- curl-args...]\nhost-pressure-diagnostics\nallocate-browser-safe-ports [count] [--policy path] [--forbidden-ports path]\ndiagnose-port-collision [--ports \"2200 2216\"] [--output-dir PATH]\nprepare-trivy-db\ngha-artifacts-cleanup run --run-id <id> [--keep-pattern glob] [--delete-pattern glob] [--patterns-file json]\ngha-artifacts-cleanup sweep --older-than-hours <n> [--keep-pattern glob] [--delete-pattern glob] [--patterns-file json]\nhttp-origin [--field NAME] [value]\nvitest-blob-manifest <suite> [reports-directory]\npnpm-install --runner-lifecycle persistent|ephemeral|ephemeral-full --install-scripts true|false\ncheck-cache-size <path> <max-bytes> <label>\nmake-shard-matrix <total>\nload-runner-env\nclean-workspace\ninstall-github-release --repo owner/name --version X --asset 'name-{platform}.tar.gz' --bin name [--tag-prefix PREFIX] [--no-checksum] [--checksums-asset NAME] [--version-flag FLAG] [--bin-dir DIR]\nrun-with-timeout <timeout-seconds> <kill-after-seconds> <command...>\nlint-links [--offline] [--config PATH] [--glob PATTERN] [files...]\nmaterialize-pr-context\nwait-for-apt-locks\ninstall-playwright-chromium-arm64 [name:archive...]\nghcr-package-retention <url-encoded-package>...\nnuget-central-version <trusted-props> <candidate-props> <metadata-json> <output-props>\nswift-semantic-equal <base> <head> <file.swift>\npost-review\nstage-review-payload optional|required <source> <destination>\nretrospective-transcript [--session-id ID] [--jsonl PATH] [--projects-dir PATH] [--codex-sessions-dir PATH] [--grok-sessions-dir PATH]\n";
+export declare const USAGE = "Usage: vouchington <command> [options]\n\nCommands:\n  runner-port-policy   Print or validate a runner port policy\n  with-host-lock       Run a command under a host-wide lock\n  gha-runtime-audit             Audit successful GitHub Actions job runtimes\n  gha-output                    Write a collision-safe multiline GITHUB_OUTPUT record\n  gha-needs-results             Fail if required GitHub Actions job results failed\n  download-with-diagnostics     Download a URL and report HTTP status on failure\n  download-optional-run-artifacts  Download optional artifacts from the current run\n  host-pressure-diagnostics     Print a bounded host memory/OOM/PSI snapshot\n  allocate-browser-safe-ports   Allocate Fetch-safe localhost ports\n  diagnose-port-collision       Capture bounded localhost port diagnostics\n  prepare-trivy-db              Download the Trivy vulnerability database\n  gha-artifacts-cleanup         Delete classified GitHub Actions artifacts\n  http-origin                   Validate an optional HTTP(S) origin\n  vitest-blob-manifest          Stamp a vitest-blob-manifest:v1 identity file\n  pnpm-install                  Install a pnpm workspace with retry and release-age fail-fast\n  check-cache-size              Measure a path and decide whether to save a GHA cache\n  make-shard-matrix             Emit a [1..N] GitHub Actions shard matrix\n  load-runner-env               Overlay a runner env file onto GITHUB_ENV with injection guards\n  clean-workspace               Reset a persistent-runner workspace with a fork-PR trust gate\n  install-github-release        Download a checksum-verified GitHub Release binary\n  run-with-timeout              Run a command with GNU timeout or a Perl fallback\n  lint-links                    Two-pass lychee: internal links fail, external warn\n  materialize-pr-context        Dump PR title/body/files/diff/comments and #N crawl\n  wait-for-apt-locks            Wait until apt/dpkg lock files are free\n  install-playwright-chromium-arm64  Install Playwright Chromium from browsers.json\n  ghcr-package-retention        Delete old GHCR package versions past KEEP_MIN\n  nuget-central-version         Validate a Directory.Packages.props PackageVersion delta\n  swift-semantic-equal          Compare Swift sources ignoring comments and whitespace\n  post-review                   Post one COMMENT review from a staged payload file\n  stage-review-payload          Validate a review payload file into a staging directory\n  retrospective-transcript      Format facts from Claude-compatible, Codex, or Grok transcripts\n\nOptions:\n  -h, --help       Show this help\n  -v, --version    Print the package version\n\nrunner-port-policy\n  (no args)              Print the shipped policy as JSON\n  --file <path>          Validate and print a policy file\n  --reserved <port>      Print true if the port is reserved\n\nwith-host-lock\n  --name <family>\n  [--slots <n>]\n  --timeout-seconds <n>\n  [--command-timeout-seconds <n>]\n  [--failure-diagnostics <absolute-script>]\n  [--on-acquire-timeout fail|run-unlocked]\n  -- <command> [args...]\n\ngha-runtime-audit\n  [--repository owner/name]   Default GITHUB_REPOSITORY\n  [--branch main]\n  --pr-workflow <name|/regex/>     Repeatable\n  --push-workflow <name|/regex/>   Repeatable\n\ngha-output <name>\ngha-needs-results [label]\ndownload-with-diagnostics <url> <destination> [-- curl-args...]\ndownload-optional-run-artifacts (--name <name> | --pattern <pattern>) --dir <directory>\nhost-pressure-diagnostics\nallocate-browser-safe-ports [count] [--policy path] [--forbidden-ports path]\ndiagnose-port-collision [--ports \"2200 2216\"] [--output-dir PATH]\nprepare-trivy-db\ngha-artifacts-cleanup run --run-id <id> [--keep-pattern glob] [--delete-pattern glob] [--patterns-file json]\ngha-artifacts-cleanup sweep --older-than-hours <n> [--keep-pattern glob] [--delete-pattern glob] [--patterns-file json]\nhttp-origin [--field NAME] [value]\nvitest-blob-manifest <suite> [reports-directory]\npnpm-install --runner-lifecycle persistent|ephemeral|ephemeral-full --install-scripts true|false\ncheck-cache-size <path> <max-bytes> <label>\nmake-shard-matrix <total>\nload-runner-env\nclean-workspace\ninstall-github-release --repo owner/name --version X --asset 'name-{platform}.tar.gz' --bin name [--tag-prefix PREFIX] [--expected-sha256 SHA256] [--no-checksum] [--checksums-asset NAME] [--version-flag FLAG] [--bin-dir DIR]\nrun-with-timeout <timeout-seconds> <kill-after-seconds> <command...>\nlint-links [--offline] [--config PATH] [--glob PATTERN] [files...]\nmaterialize-pr-context\nwait-for-apt-locks\ninstall-playwright-chromium-arm64 [name:archive...]\nghcr-package-retention <url-encoded-package>...\nnuget-central-version <trusted-props> <candidate-props> <metadata-json> <output-props>\nswift-semantic-equal <base> <head> <file.swift>\npost-review\nstage-review-payload optional|required <source> <destination>\nretrospective-transcript [--session-id ID] [--jsonl PATH] [--projects-dir PATH] [--codex-sessions-dir PATH] [--grok-sessions-dir PATH]\n";
 export declare function printUsage(stream?: NodeJS.WritableStream): void;

package/dist/cli/usage.mjs

@@ -7,6 +7,7 @@ Commands:
   gha-output                    Write a collision-safe multiline GITHUB_OUTPUT record
   gha-needs-results             Fail if required GitHub Actions job results failed
   download-with-diagnostics     Download a URL and report HTTP status on failure
+  download-optional-run-artifacts  Download optional artifacts from the current run
   host-pressure-diagnostics     Print a bounded host memory/OOM/PSI snapshot
   allocate-browser-safe-ports   Allocate Fetch-safe localhost ports
   diagnose-port-collision       Capture bounded localhost port diagnostics
@@ -59,6 +60,7 @@ gha-runtime-audit
 gha-output <name>
 gha-needs-results [label]
 download-with-diagnostics <url> <destination> [-- curl-args...]
+download-optional-run-artifacts (--name <name> | --pattern <pattern>) --dir <directory>
 host-pressure-diagnostics
 allocate-browser-safe-ports [count] [--policy path] [--forbidden-ports path]
 diagnose-port-collision [--ports "2200 2216"] [--output-dir PATH]
@@ -72,7 +74,7 @@ check-cache-size <path> <max-bytes> <label>
 make-shard-matrix <total>
 load-runner-env
 clean-workspace
-install-github-release --repo owner/name --version X --asset 'name-{platform}.tar.gz' --bin name [--tag-prefix PREFIX] [--no-checksum] [--checksums-asset NAME] [--version-flag FLAG] [--bin-dir DIR]
+install-github-release --repo owner/name --version X --asset 'name-{platform}.tar.gz' --bin name [--tag-prefix PREFIX] [--expected-sha256 SHA256] [--no-checksum] [--checksums-asset NAME] [--version-flag FLAG] [--bin-dir DIR]
 run-with-timeout <timeout-seconds> <kill-after-seconds> <command...>
 lint-links [--offline] [--config PATH] [--glob PATTERN] [files...]
 materialize-pr-context

package/dist/gha-post-review/post.mjs

@@ -1,4 +1,4 @@
-import { ReviewPayloadError, bodyOnlyReviewFallback, indexReviewFiles, parseReviewPayload, remapReviewComments, } from '../gha-review-payload/index.mjs';
+import { ReviewPayloadError, indexReviewFiles, parseReviewPayload, remapReviewComments, } from '../gha-review-payload/index.mjs';
 export { MAX_REVIEW_COMMENTS as MAX_COMMENTS, MAX_REVIEW_PAYLOAD_BYTES as MAX_PAYLOAD_BYTES, ReviewPayloadError as PostReviewError, } from '../gha-review-payload/index.mjs';
 export function runPostReview(payloadPath, io) {
     try {
@@ -12,14 +12,7 @@ export function runPostReview(payloadPath, io) {
         const first = io.postReview(review);
         if (first.ok)
             return { posted: true };
-        if (first.status !== 422) {
-            throw new ReviewPayloadError(`GitHub review POST failed (HTTP ${first.status}).`);
-        }
-        const retry = io.postReview(bodyOnlyReviewFallback(review, first.status));
-        if (!retry.ok) {
-            throw new ReviewPayloadError(`GitHub review POST retry failed (HTTP ${retry.status}).`);
-        }
-        return { posted: true };
+        throw new ReviewPayloadError(`GitHub review POST failed (HTTP ${first.status}).`);
     }
     finally {
         io.removeFile(payloadPath);

package/dist/gha-review-payload/index.d.mts

@@ -1,4 +1,4 @@
-export { MAX_REVIEW_COMMENTS, MAX_REVIEW_PAYLOAD_BYTES, ReviewPayloadError, bodyOnlyReviewFallback, parseReviewPayload, reviewCommentSubject, } from './payload.mts';
+export { MAX_REVIEW_COMMENTS, MAX_REVIEW_PAYLOAD_BYTES, ReviewPayloadError, parseReviewPayload, reviewCommentSubject, } from './payload.mts';
 export type { ReviewComment, ReviewSide, SanitizedReview } from './payload.mts';
 export { indexReviewFiles, parsePatchCommentable, parseReviewFilesJson } from './diff.mts';
 export type { CommentableIndex, CommentableLine, LineKind, ReviewFile } from './diff.mts';

package/dist/gha-review-payload/index.mjs

@@ -1,4 +1,4 @@
-export { MAX_REVIEW_COMMENTS, MAX_REVIEW_PAYLOAD_BYTES, ReviewPayloadError, bodyOnlyReviewFallback, parseReviewPayload, reviewCommentSubject, } from './payload.mjs';
+export { MAX_REVIEW_COMMENTS, MAX_REVIEW_PAYLOAD_BYTES, ReviewPayloadError, parseReviewPayload, reviewCommentSubject, } from './payload.mjs';
 export { indexReviewFiles, parsePatchCommentable, parseReviewFilesJson } from './diff.mjs';
 export { nearestReviewLine, remapReviewComments, rewriteSnappedSuggestion, snapReviewNote, } from './remap.mjs';
 export { readRegularReviewPayload, stageReviewPayload, writeStagedOutput } from './file.mjs';

package/dist/gha-review-payload/payload.d.mts

@@ -23,8 +23,6 @@ export type SanitizedReview = {
 export declare function reviewCommentSubject(comment: ReviewComment): string;
 /**
  * Parses untrusted JSON into the exact review wire shape accepted by the caller's poster.
- * Unknown fields and malformed comments are dropped; the supplied commit id always wins.
+ * Unknown fields are ignored, malformed findings fail closed, and the supplied commit id wins.
  */
 export declare function parseReviewPayload(bytes: Buffer, commitId: string): SanitizedReview;
-/** Builds the body-only fallback used when inline review placement is rejected. */
-export declare function bodyOnlyReviewFallback(review: SanitizedReview, status: number): SanitizedReview;

package/dist/gha-review-payload/payload.mjs

@@ -49,7 +49,7 @@ export function reviewCommentSubject(comment) {
 }
 /**
  * Parses untrusted JSON into the exact review wire shape accepted by the caller's poster.
- * Unknown fields and malformed comments are dropped; the supplied commit id always wins.
+ * Unknown fields are ignored, malformed findings fail closed, and the supplied commit id wins.
  */
 export function parseReviewPayload(bytes, commitId) {
     if (!isCommitId(commitId)) {
@@ -70,42 +70,26 @@ export function parseReviewPayload(bytes, commitId) {
     }
     const record = parsed;
     const body = typeof record.body === 'string' ? record.body : '';
-    const rawComments = Array.isArray(record.comments) ? record.comments : [];
-    const valid = rawComments.flatMap((comment) => {
+    if (record.comments !== undefined && !Array.isArray(record.comments)) {
+        throw new ReviewPayloadError('comments must be an array when provided.');
+    }
+    const rawComments = record.comments ?? [];
+    if (rawComments.length > MAX_REVIEW_COMMENTS) {
+        throw new ReviewPayloadError(`Payload has more than ${MAX_REVIEW_COMMENTS} inline comments.`);
+    }
+    const comments = rawComments.map((comment) => {
         const sanitized = sanitizeComment(comment);
-        return sanitized ? [sanitized] : [];
+        if (!sanitized)
+            throw new ReviewPayloadError('Every finding must be a valid inline comment.');
+        return sanitized;
     });
-    const kept = valid.slice(0, MAX_REVIEW_COMMENTS);
-    const overflow = valid.slice(MAX_REVIEW_COMMENTS);
-    const parts = [body];
-    if (overflow.length > 0) {
-        parts.push(`## Comments over the ${MAX_REVIEW_COMMENTS}-comment cap`, ...overflow.map((comment) => `- ${reviewCommentSubject(comment)}`));
-    }
-    const reviewBody = parts.filter((part) => part.length > 0).join('\n\n');
-    if (reviewBody.length === 0 && kept.length === 0) {
+    if (body.length === 0 && comments.length === 0) {
         throw new ReviewPayloadError('Payload has no review body and no valid comments.');
     }
     return {
         event: 'COMMENT',
         commit_id: commitId,
-        body: reviewBody.length > 0 ? reviewBody : 'Inline findings only.',
-        comments: kept,
-    };
-}
-/** Builds the body-only fallback used when inline review placement is rejected. */
-export function bodyOnlyReviewFallback(review, status) {
-    const listed = review.comments.length === 0
-        ? []
-        : [
-            '## Inline findings not posted',
-            `The inline comments were rejected (HTTP ${status}). The findings were:`,
-            ...review.comments.map((comment) => `- ${reviewCommentSubject(comment)}`),
-        ];
-    const body = [review.body, ...listed].filter((part) => part.length > 0).join('\n\n');
-    return {
-        event: 'COMMENT',
-        commit_id: review.commit_id,
-        body: body.length > 0 ? body : `Inline findings not posted (HTTP ${status}).`,
-        comments: [],
+        body: body.length > 0 ? body : 'Inline findings only.',
+        comments,
     };
 }

package/dist/gha-review-payload/remap.d.mts

@@ -9,5 +9,5 @@ export declare function nearestReviewLine(candidates: Array<{
     line: number;
     kind: LineKind;
 } | undefined;
-/** Places comments on commentable diff lines, remapping renames and recording dropped findings. */
+/** Places every finding on a commentable diff line and fails if any finding cannot be placed. */
 export declare function remapReviewComments(review: SanitizedReview, index: CommentableIndex): SanitizedReview;

package/dist/gha-review-payload/remap.mjs

@@ -1,4 +1,4 @@
-import { reviewCommentSubject } from './payload.mjs';
+import { ReviewPayloadError } from './payload.mjs';
 export function snapReviewNote(path, line) {
     return `_Regarding \`${path}:${line}\` (not in the diff hunk; posted on the nearest commentable line)._`;
 }
@@ -62,28 +62,19 @@ function placeComment(comment, index) {
         return withSnap({ ...target, side: alt, line: nearAlt.line }, originalPath, originalLine);
     return null;
 }
-/** Places comments on commentable diff lines, remapping renames and recording dropped findings. */
+/** Places every finding on a commentable diff line and fails if any finding cannot be placed. */
 export function remapReviewComments(review, index) {
     const kept = [];
-    const dropped = [];
     for (const comment of review.comments) {
         const placed = placeComment(comment, index);
-        if (placed)
-            kept.push(placed);
-        else
-            dropped.push(comment);
+        if (!placed) {
+            throw new ReviewPayloadError(`Inline finding cannot be placed on the pull request diff: ${comment.path}:${comment.line}.`);
+        }
+        kept.push(placed);
     }
-    const extras = dropped.length === 0
-        ? []
-        : [
-            '## Inline findings not posted',
-            'These comments could not be placed on a diff hunk:',
-            ...dropped.map((comment) => `- ${reviewCommentSubject(comment)}`),
-        ];
-    const body = [review.body, ...extras].filter((part) => part.length > 0).join('\n\n');
     return {
         ...review,
-        body: body.length > 0 ? body : 'Inline findings only.',
+        body: review.body.length > 0 ? review.body : 'Inline findings only.',
         comments: kept,
     };
 }

package/dist/index.d.mts

@@ -1,5 +1,7 @@
 export { codexChildren, codexIdentity, computeTranscriptFacts, formatTranscriptFacts, formatUnavailable, resolveTranscriptFile, runRetrospectiveTranscript, } from './retrospective-transcript/index.mts';
 export type { ResolveOptions, TokenTotals, TranscriptFacts, } from './retrospective-transcript/index.mts';
+export { buildSessionFrictionReport, classifyFrictionObservation, FRICTION_LOG_MAX_EVENTS, isConformingCiFailureBlock, normalizeCommandPrefix, readFrictionLog, recordFriction, } from './session-friction/index.mts';
+export type { FrictionEvent, FrictionEventKind, FrictionLogOptions, FrictionLogReadResult, FrictionObservation, JournalEntry, JournalLoader, JournalLoadResult, PermissionRequestObservation, SessionFrictionReport, SessionFrictionReportOptions, ToolResultObservation, } from './session-friction/index.mts';
 export { EphemeralListenerAttemptsExhaustedError, isRunnerReservedPort, listenOnRunnerUnreservedEphemeralPort, loadRunnerPortPolicy, runnerPortPolicy, validateRunnerPortPolicy, } from './runner-port-policy/index.mts';
 export type { EphemeralListenerOptions, RunnerPortPolicy } from './runner-port-policy/index.mts';
 export { extractAlterTableAddColumnLocations, extractCreateIndexMetadata, extractCreateTableMetadata, extractDefaultFunction, extractDropIndexMetadata, extractFuncCallArgColumnNames, extractMigrationConstraintMetadata, initSqlAst, lineOfUtf8ByteOffset, MissingSqlAstParserError, parseSql, } from './sql-ast/index.mts';
@@ -35,7 +37,7 @@ export { MissingResponseBodyError, readResponseBody, readResponseBodyAsBuffer, R
 export type { ReadResponseBodyOptions } from './http-body/index.mts';
 export { parseAstGrepRuleArgs, runAstGrepRule } from './ast-grep-rule/index.mts';
 export type { AstGrepRuleInvocation, RunAstGrepRuleOptions } from './ast-grep-rule/index.mts';
-export { bodyOnlyReviewFallback, indexReviewFiles, MAX_REVIEW_COMMENTS, MAX_REVIEW_PAYLOAD_BYTES, nearestReviewLine, parsePatchCommentable, parseReviewFilesJson, parseReviewPayload, readRegularReviewPayload, remapReviewComments, ReviewPayloadError, reviewCommentSubject, rewriteSnappedSuggestion, snapReviewNote, stageReviewPayload, writeStagedOutput, } from './gha-review-payload/index.mts';
+export { indexReviewFiles, MAX_REVIEW_COMMENTS, MAX_REVIEW_PAYLOAD_BYTES, nearestReviewLine, parsePatchCommentable, parseReviewFilesJson, parseReviewPayload, readRegularReviewPayload, remapReviewComments, ReviewPayloadError, reviewCommentSubject, rewriteSnappedSuggestion, snapReviewNote, stageReviewPayload, writeStagedOutput, } from './gha-review-payload/index.mts';
 export type { CommentableIndex, CommentableLine, LineKind, PayloadRequirement, ReviewComment, ReviewFile, ReviewSide, SanitizedReview, } from './gha-review-payload/index.mts';
 export { CLAUDE_OIDC_AUDIENCE, createActionsClaudeTokenIo, mintClaudeAppToken, PostReviewError, requireEnv, resolveReviewPostToken, revokeClaudeAppToken, runPostReview, runPostReviewCli, withClaudeAppToken, } from './gha-post-review/index.mts';
 export type { ClaudeTokenIo, PostResult, PostReviewIo, PullFile, ReviewPostToken, } from './gha-post-review/index.mts';

package/dist/index.mjs

@@ -1,5 +1,6 @@
 /* eslint-disable max-lines -- package entry point enumerates the supported public API. */
 export { codexChildren, codexIdentity, computeTranscriptFacts, formatTranscriptFacts, formatUnavailable, resolveTranscriptFile, runRetrospectiveTranscript, } from './retrospective-transcript/index.mjs';
+export { buildSessionFrictionReport, classifyFrictionObservation, FRICTION_LOG_MAX_EVENTS, isConformingCiFailureBlock, normalizeCommandPrefix, readFrictionLog, recordFriction, } from './session-friction/index.mjs';
 export { EphemeralListenerAttemptsExhaustedError, isRunnerReservedPort, listenOnRunnerUnreservedEphemeralPort, loadRunnerPortPolicy, runnerPortPolicy, validateRunnerPortPolicy, } from './runner-port-policy/index.mjs';
 export { extractAlterTableAddColumnLocations, extractCreateIndexMetadata, extractCreateTableMetadata, extractDefaultFunction, extractDropIndexMetadata, extractFuncCallArgColumnNames, extractMigrationConstraintMetadata, initSqlAst, lineOfUtf8ByteOffset, MissingSqlAstParserError, parseSql, } from './sql-ast/index.mjs';
 export { dollarQuoteEnd, lineOf, maskSqlQuotedText, readDollarQuoteDelimiter, readStringLiteral, splitSqlStatements, sqlFragments, stripSqlComments, } from './sql-scanner/index.mjs';
@@ -20,7 +21,7 @@ export { decide, deriveRetryAttempt } from './transient-retry/index.mjs';
 export { escapeSpreadsheetFormula, parseCsvRows, streamCsvRows, stripCsvBom } from './csv/index.mjs';
 export { MissingResponseBodyError, readResponseBody, readResponseBodyAsBuffer, ResponseBodyTooLargeError, } from './http-body/index.mjs';
 export { parseAstGrepRuleArgs, runAstGrepRule } from './ast-grep-rule/index.mjs';
-export { bodyOnlyReviewFallback, indexReviewFiles, MAX_REVIEW_COMMENTS, MAX_REVIEW_PAYLOAD_BYTES, nearestReviewLine, parsePatchCommentable, parseReviewFilesJson, parseReviewPayload, readRegularReviewPayload, remapReviewComments, ReviewPayloadError, reviewCommentSubject, rewriteSnappedSuggestion, snapReviewNote, stageReviewPayload, writeStagedOutput, } from './gha-review-payload/index.mjs';
+export { indexReviewFiles, MAX_REVIEW_COMMENTS, MAX_REVIEW_PAYLOAD_BYTES, nearestReviewLine, parsePatchCommentable, parseReviewFilesJson, parseReviewPayload, readRegularReviewPayload, remapReviewComments, ReviewPayloadError, reviewCommentSubject, rewriteSnappedSuggestion, snapReviewNote, stageReviewPayload, writeStagedOutput, } from './gha-review-payload/index.mjs';
 export { CLAUDE_OIDC_AUDIENCE, createActionsClaudeTokenIo, mintClaudeAppToken, PostReviewError, requireEnv, resolveReviewPostToken, revokeClaudeAppToken, runPostReview, runPostReviewCli, withClaudeAppToken, } from './gha-post-review/index.mjs';
 export { nextPageCursorFromLinkHeader, nextPageUrlFromLinkHeader, validatePaginationRequestUrl, } from './http-link-pagination/index.mjs';
 export { cmdDownloadCoverage, cmdDownloadVitestBlobs, cmdUpload, mintPresignedControl, transportObjectKeys, } from './coverage-transport/index.mjs';

package/dist/retrospective-transcript/codex-messages.d.mts

@@ -0,0 +1,8 @@
+import { type ParsedLine } from './shared.mts';
+export declare class CodexMessageCounter {
+    private previous;
+    private userPrompts;
+    private assistantResponses;
+    add(record: ParsedLine, payload: ParsedLine | undefined): void;
+    totals(): [number, number];
+}

package/dist/retrospective-transcript/codex-messages.mjs

@@ -0,0 +1,66 @@
+import { asRecord } from './shared.mjs';
+function isInjectedBlock(raw) {
+    const text = raw.trim();
+    // Hosted metadata occupies complete input blocks; inner fields can vary by runtime version.
+    const agents = /^# AGENTS\.md instructions for [^\r\n]+(?:\r?\n)+<INSTRUCTIONS(?:\s[^>]*)?>[\s\S]*<\/INSTRUCTIONS>$/.test(text);
+    const environment = /^<environment_context(?:\s[^>]*)?>[\s\S]*<\/environment_context>$/.test(text);
+    const skill = /^<skill(?:\s[^>]*)?>[\s\S]*<\/skill>$/.test(text);
+    return agents || environment || skill;
+}
+function isInjectedUser(payload) {
+    if (!Array.isArray(payload.content) || payload.content.length === 0)
+        return false;
+    return payload.content.map(asRecord).every((item) => {
+        return (item?.type === 'input_text' && typeof item.text === 'string' && isInjectedBlock(item.text));
+    });
+}
+function message(record, payload) {
+    if (record.type === 'response_item' && payload?.type === 'message') {
+        if (payload.role === 'user' || payload.role === 'assistant')
+            return { role: payload.role, schema: 'current' };
+    }
+    else if (record.type === 'event_msg') {
+        if (payload?.type === 'user_message')
+            return { role: 'user', schema: 'legacy' };
+        if (payload?.type === 'agent_message')
+            return { role: 'assistant', schema: 'legacy' };
+    }
+    return undefined;
+}
+function isDuplicate(previous, current) {
+    // Hosted rollouts currently emit user as current→legacy and assistant as legacy→current;
+    // keep directional to avoid merging inverse-order distinct turns (see pairing tests).
+    return ((current.role === 'user' && previous?.schema === 'current' && current.schema === 'legacy') ||
+        (current.role === 'assistant' && previous?.schema === 'legacy' && current.schema === 'current'));
+}
+export class CodexMessageCounter {
+    previous;
+    userPrompts = 0;
+    assistantResponses = 0;
+    add(record, payload) {
+        const current = message(record, payload);
+        const injected = current?.schema === 'current' &&
+            current.role === 'user' &&
+            payload !== undefined &&
+            isInjectedUser(payload);
+        if (!current) {
+            this.previous = undefined;
+            return;
+        }
+        // Injected records are transparent because hosted metadata can split a duplicate pair.
+        if (injected)
+            return;
+        if (this.previous?.role === current.role && isDuplicate(this.previous, current)) {
+            this.previous = undefined;
+            return;
+        }
+        if (current.role === 'user')
+            this.userPrompts++;
+        else
+            this.assistantResponses++;
+        this.previous = current;
+    }
+    totals() {
+        return [this.userPrompts, this.assistantResponses];
+    }
+}

package/dist/retrospective-transcript/codex.mjs

@@ -1,4 +1,5 @@
 import { applyCommand, asNumber, asRecord, emptyFacts, emptyTokens, parseLines, } from './shared.mjs';
+import { CodexMessageCounter } from './codex-messages.mjs';
 import { customExecCommands } from './javascript-command.mjs';
 function usage(record) {
     const payload = asRecord(record.payload);
@@ -83,14 +84,13 @@ function applyRecords(records, facts, subagent, baseline = emptyTokens()) {
     let previous = baseline;
     const calls = new Set();
     const failed = new Set();
+    const messages = new CodexMessageCounter();
     let anonymousFailures = 0;
     let previousCompaction;
     for (const record of records) {
         const payload = asRecord(record.payload);
-        if (!subagent && record.type === 'event_msg' && payload?.type === 'user_message')
-            facts.userPrompts++;
-        if (!subagent && record.type === 'event_msg' && payload?.type === 'agent_message')
-            facts.assistantResponses++;
+        if (!subagent)
+            messages.add(record, payload);
         const compaction = record.type === 'compacted'
             ? 'top-level'
             : record.type === 'event_msg' && payload?.type === 'context_compacted'
@@ -135,6 +135,11 @@ function applyRecords(records, facts, subagent, baseline = emptyTokens()) {
                 anonymousFailures++;
         }
     }
+    if (!subagent) {
+        const [userPrompts, assistantResponses] = messages.totals();
+        facts.userPrompts += userPrompts;
+        facts.assistantResponses += assistantResponses;
+    }
     facts.failedToolCalls += [...failed].filter((id) => calls.has(id)).length + anonymousFailures;
 }
 export function codexChildren(lines, ownerPath = '/root') {

package/dist/session-friction/ci-failures.d.mts

@@ -0,0 +1,11 @@
+import type { FrictionLogReadResult, JournalEntry } from './types.mts';
+export declare function isConformingCiFailureBlock(markdown: string): boolean;
+export declare function getConformingGroups(entries: Iterable<JournalEntry>): string[];
+export declare function buildCiFailuresSection(sessionId: string, journal: {
+    status: 'ok';
+    markdownBlocks: string[];
+    truncated: boolean;
+} | {
+    status: 'unreachable';
+    diagnostic: string;
+}, frictionStatus: FrictionLogReadResult['status']): string;

package/dist/session-friction/ci-failures.mjs

@@ -0,0 +1,78 @@
+import { isWellFormedUnicode, markdownAuditText } from './text.mjs';
+const GROUP_HEADER = /^- `(recurring|one-off)` — `GitHub Actions` — .*[^\s]$/;
+const EVIDENCE = /^ {2}- Evidence: .*[^\s]$/;
+const ROOT_DIAGNOSTIC = /^ {2}- Root diagnostic: .*[^\s]$/;
+const DISPOSITION = /^ {2}- Disposition: .*[^\s]$/;
+const BLANK = /^\s*$/;
+const CI_FAILURES_HEADER = '## CI Failures';
+const CI_FAILURE_BLOCK_MAX_BYTES = 10_000;
+const FIELD_PREFIXES = [
+    '- `recurring` — `GitHub Actions` — ',
+    '- `one-off` — `GitHub Actions` — ',
+    '  - Evidence: ',
+    '  - Root diagnostic: ',
+    '  - Disposition: ',
+];
+function safeField(line) {
+    const prefix = FIELD_PREFIXES.find((value) => line.startsWith(value));
+    /* v8 ignore next -- matchBlock currently passes only fields with a known prefix. */
+    if (!prefix)
+        return markdownAuditText(line) || null;
+    const content = markdownAuditText(line.slice(prefix.length));
+    return content ? `${prefix}${content}` : null;
+}
+function matchBlock(markdown) {
+    if (!isWellFormedUnicode(markdown))
+        return null;
+    const lines = markdown.replace(/\r\n/g, '\n').replace(/\r/g, '\n').split('\n');
+    let index = 0;
+    const consume = (pattern) => {
+        while (index < lines.length && BLANK.test(lines[index]))
+            index++;
+        const line = lines[index];
+        if (line === undefined || !pattern.test(line))
+            return null;
+        index++;
+        return line;
+    };
+    const fields = [
+        consume(GROUP_HEADER),
+        consume(EVIDENCE),
+        consume(ROOT_DIAGNOSTIC),
+        consume(DISPOSITION),
+    ];
+    if (fields.some((field) => field === null))
+        return null;
+    if (!lines.slice(index).every((line) => BLANK.test(line)))
+        return null;
+    const safeFields = fields.map((field) => safeField(field));
+    if (safeFields.some((field) => field === null))
+        return null;
+    return safeFields.join('\n');
+}
+export function isConformingCiFailureBlock(markdown) {
+    if (markdown.length > CI_FAILURE_BLOCK_MAX_BYTES ||
+        Buffer.byteLength(markdown) > CI_FAILURE_BLOCK_MAX_BYTES)
+        return false;
+    return matchBlock(markdown) !== null;
+}
+function journalMarkdown(entries) {
+    return [...entries].flatMap((entry) => {
+        const data = entry?.data;
+        return data?.type === 'journal' && typeof data.markdown === 'string' ? [data.markdown] : [];
+    });
+}
+export function getConformingGroups(entries) {
+    return journalMarkdown(entries)
+        .map(matchBlock)
+        .filter((block) => block !== null);
+}
+export function buildCiFailuresSection(sessionId, journal, frictionStatus) {
+    if (journal.status === 'unreachable')
+        return `${CI_FAILURES_HEADER}\nStatus: unavailable (blackboard unreachable)`;
+    if (journal.markdownBlocks.length === 0 && frictionStatus === 'absent')
+        return `${CI_FAILURES_HEADER}\nStatus: unavailable (no friction log for session ${markdownAuditText(sessionId)})`;
+    if (journal.markdownBlocks.length === 0)
+        return `${CI_FAILURES_HEADER}\nStatus: none observed`;
+    return `${CI_FAILURES_HEADER}\nStatus: failures observed\n\n${journal.markdownBlocks.join('\n\n')}`;
+}

package/dist/session-friction/classify.d.mts

@@ -0,0 +1,2 @@
+import type { FrictionEvent, FrictionObservation } from './types.mts';
+export declare function classifyFrictionObservation(observation: FrictionObservation): Omit<FrictionEvent, 'timestamp'> | null;