vouchington-tooling 0.11.0 → 0.11.2

package/dist/agent-harness-config/policy.mjs

@@ -0,0 +1,51 @@
+export const DEFAULT_EXTRA_WRITABLE_ROOTS = [
+    '~/.cargo',
+    '~/Library/pnpm',
+    '~/.local/share/pnpm',
+    '~/.pnpm-store',
+    '~/Library/Caches/no-mistakes',
+    '~/Library/Caches/pnpm',
+    '~/.pnpm-state',
+    '~/.cache/no-mistakes',
+    '~/.cache/pnpm',
+    '~/.local/state/pnpm',
+    '/var/folders',
+    '/private/var/folders',
+];
+export const CLAUDE_DEFAULT_MODE = 'auto';
+export const CODEX_APPROVAL_POLICY = 'on-request';
+export const CODEX_APPROVALS_REVIEWER = 'auto_review';
+export const CODEX_SANDBOX_MODE = 'workspace-write';
+export const GROK_PERMISSION_MODE = 'auto';
+export const GROK_SANDBOX_PROFILE = 'workspace-write';
+export const GROK_AUTO_MODE_ENABLED = true;
+export const GROK_DEFAULT_AUTO_MODE = true;
+export const CURSOR_APPROVAL_MODE = 'auto-review';
+export const CURSOR_SANDBOX_MODE = 'enabled';
+export function dumpHarnessPolicy(extraWritableRoots = DEFAULT_EXTRA_WRITABLE_ROOTS) {
+    return {
+        claude: {
+            defaultMode: CLAUDE_DEFAULT_MODE,
+            sandboxEnabled: true,
+            sandboxFailIfUnavailable: true,
+            useAutoModeDuringPlan: true,
+        },
+        codex: {
+            approval_policy: CODEX_APPROVAL_POLICY,
+            approvals_reviewer: CODEX_APPROVALS_REVIEWER,
+            sandbox_mode: CODEX_SANDBOX_MODE,
+        },
+        cursor: { approvalMode: CURSOR_APPROVAL_MODE, sandboxMode: CURSOR_SANDBOX_MODE },
+        extraWritableRoots: [...extraWritableRoots],
+        grok: {
+            auto_mode_enabled: GROK_AUTO_MODE_ENABLED,
+            default_auto_mode: GROK_DEFAULT_AUTO_MODE,
+            permission_mode: GROK_PERMISSION_MODE,
+            sandbox_profile_defined: GROK_SANDBOX_PROFILE,
+            sandbox_profile_requires_cli_selection: true,
+        },
+    };
+}
+export function sameValue(left, right) {
+    return JSON.stringify(left) === JSON.stringify(right);
+}

package/dist/agent-harness-config/prerequisites.d.mts

@@ -0,0 +1,2 @@
+import type { HarnessConfigOptions, HarnessPrerequisite } from './types.mts';
+export declare function checkHarnessPrerequisites(root: string | undefined, options?: HarnessConfigOptions): Promise<HarnessPrerequisite[]>;

package/dist/agent-harness-config/prerequisites.mjs

@@ -0,0 +1,67 @@
+import { readFile } from 'node:fs/promises';
+import { homedir } from 'node:os';
+import { join, resolve } from 'node:path';
+import { readTomlKey } from './merge-toml.mjs';
+import { CURSOR_APPROVAL_MODE } from './policy.mjs';
+import { HARNESS_IDS } from './types.mjs';
+async function readOptional(path) {
+    try {
+        return await readFile(path, 'utf8');
+    }
+    catch (error) {
+        if (error.code === 'ENOENT')
+            return '';
+        throw error;
+    }
+}
+function selected(options, harness) {
+    return (options?.harnesses ?? HARNESS_IDS).includes(harness);
+}
+function homeDir(options) {
+    return resolve(options?.home ?? homedir());
+}
+async function codexTrust(root, options) {
+    const source = await readOptional(join(homeDir(options), '.codex', 'config.toml'));
+    const table = `projects.${JSON.stringify(resolve(root))}`;
+    return {
+        harness: 'codex',
+        key: 'trusted-project',
+        message: 'trust this project in Codex before relying on its .codex/config.toml',
+        satisfied: readTomlKey(source, table, 'trust_level') === 'trusted',
+    };
+}
+async function cursorApproval(options) {
+    const source = await readOptional(join(homeDir(options), '.cursor', 'cli-config.json'));
+    let satisfied = false;
+    try {
+        const parsed = JSON.parse(source);
+        satisfied = parsed.approvalMode === CURSOR_APPROVAL_MODE;
+    }
+    catch {
+        // A missing or invalid user config leaves the prerequisite unsatisfied.
+    }
+    return {
+        harness: 'cursor',
+        key: 'global-auto-review',
+        message: 'set approvalMode=auto-review in ~/.cursor/cli-config.json',
+        satisfied,
+    };
+}
+function grokSandbox() {
+    return {
+        harness: 'grok',
+        key: 'sandbox-profile-selection',
+        message: 'start Grok with --sandbox workspace-write to activate the defined profile',
+        satisfied: false,
+    };
+}
+export async function checkHarnessPrerequisites(root, options) {
+    const prerequisites = [];
+    if (selected(options, 'grok'))
+        prerequisites.push(grokSandbox());
+    if (root !== undefined && selected(options, 'codex'))
+        prerequisites.push(await codexTrust(root, options));
+    if (root !== undefined && selected(options, 'cursor'))
+        prerequisites.push(await cursorApproval(options));
+    return prerequisites;
+}

package/dist/agent-harness-config/toml-value.d.mts

@@ -0,0 +1,6 @@
+import type { TomlValue } from './types.mts';
+export declare function formatTomlValue(value: TomlValue): string;
+export declare function parseTomlValue(text: string, start: number): {
+    end: number;
+    value: boolean | string | string[];
+};

package/dist/agent-harness-config/toml-value.mjs

@@ -0,0 +1,69 @@
+export function formatTomlValue(value) {
+    if (typeof value === 'boolean')
+        return value ? 'true' : 'false';
+    if (typeof value === 'string')
+        return JSON.stringify(value);
+    const items = value.map((entry) => `  ${JSON.stringify(entry)},`).join('\n');
+    return `[\n${items}\n]`;
+}
+function skipSpaceAndComments(text, start) {
+    let index = start;
+    while (index < text.length) {
+        const char = text[index];
+        if (char === ' ' || char === '\t' || char === '\n' || char === '\r' || char === ',') {
+            index += 1;
+            continue;
+        }
+        if (char === '#') {
+            while (index < text.length && text[index] !== '\n')
+                index += 1;
+            continue;
+        }
+        break;
+    }
+    return index;
+}
+function parseTomlString(text, start) {
+    const quote = text[start];
+    let index = start + 1;
+    let value = '';
+    while (index < text.length) {
+        const char = text[index];
+        if (char === quote)
+            return { end: index + 1, value };
+        if (quote === '"' && char === '\\') {
+            const next = text[index + 1];
+            if (next === undefined)
+                break;
+            value += next === 'n' ? '\n' : next === 't' ? '\t' : next;
+            index += 2;
+            continue;
+        }
+        value += char;
+        index += 1;
+    }
+    throw new Error('unterminated TOML string');
+}
+export function parseTomlValue(text, start) {
+    const index = skipSpaceAndComments(text, start);
+    if (text.startsWith('true', index))
+        return { end: index + 4, value: true };
+    if (text.startsWith('false', index))
+        return { end: index + 5, value: false };
+    if (text[index] === '"' || text[index] === "'")
+        return parseTomlString(text, index);
+    if (text[index] !== '[')
+        throw new Error('unsupported TOML value');
+    const items = [];
+    let cursor = index + 1;
+    for (;;) {
+        cursor = skipSpaceAndComments(text, cursor);
+        if (text[cursor] === ']')
+            return { end: cursor + 1, value: items };
+        if (text[cursor] !== '"' && text[cursor] !== "'")
+            throw new Error('unsupported TOML array value');
+        const parsed = parseTomlString(text, cursor);
+        items.push(parsed.value);
+        cursor = parsed.end;
+    }
+}

package/dist/agent-harness-config/types.d.mts

@@ -0,0 +1,88 @@
+export declare const HARNESS_IDS: readonly ['claude', 'codex', 'grok', 'cursor'];
+export type HarnessId = (typeof HARNESS_IDS)[number];
+export type ApplyTarget = {
+    readonly kind: 'global';
+} | {
+    readonly kind: 'repo';
+    readonly root: string;
+};
+export interface JsonPatch {
+    readonly merge?: 'union';
+    readonly path: readonly string[];
+    readonly value: unknown;
+}
+export type TomlValue = boolean | string | readonly string[];
+export interface TomlPatch {
+    readonly key: string;
+    readonly table: string;
+    readonly value: TomlValue;
+}
+export type FilePlan = {
+    readonly format: 'json';
+    readonly patches: readonly JsonPatch[];
+    readonly path: string;
+} | {
+    readonly format: 'toml';
+    readonly patches: readonly TomlPatch[];
+    readonly path: string;
+};
+export interface KeyDrift {
+    readonly current: unknown;
+    readonly desired: unknown;
+    readonly key: string;
+    readonly path: string;
+}
+export interface FileResult {
+    readonly action: 'create' | 'update' | 'ok' | 'missing';
+    readonly drifts: readonly KeyDrift[];
+    readonly path: string;
+}
+export interface HarnessPlan {
+    readonly files: readonly FilePlan[];
+    readonly target: ApplyTarget;
+}
+export interface HarnessCheckResult {
+    readonly compliant: boolean;
+    readonly files: readonly FileResult[];
+    readonly prerequisites: readonly HarnessPrerequisite[];
+    readonly target: ApplyTarget;
+}
+export interface HarnessPrerequisite {
+    readonly harness: HarnessId;
+    readonly key: string;
+    readonly message: string;
+    readonly satisfied: boolean;
+}
+export interface HarnessApplyResult extends HarnessCheckResult {
+    readonly written: readonly string[];
+}
+export interface HarnessConfigOptions {
+    readonly extraWritableRoots?: readonly string[];
+    readonly harnesses?: readonly HarnessId[];
+    readonly home?: string;
+}
+export interface HarnessPolicyDump {
+    readonly claude: {
+        readonly defaultMode: 'auto';
+        readonly sandboxEnabled: true;
+        readonly sandboxFailIfUnavailable: true;
+        readonly useAutoModeDuringPlan: true;
+    };
+    readonly codex: {
+        readonly approval_policy: 'on-request';
+        readonly approvals_reviewer: 'auto_review';
+        readonly sandbox_mode: 'workspace-write';
+    };
+    readonly cursor: {
+        readonly approvalMode: 'auto-review';
+        readonly sandboxMode: 'enabled';
+    };
+    readonly extraWritableRoots: readonly string[];
+    readonly grok: {
+        readonly auto_mode_enabled: true;
+        readonly default_auto_mode: true;
+        readonly permission_mode: 'auto';
+        readonly sandbox_profile_defined: 'workspace-write';
+        readonly sandbox_profile_requires_cli_selection: true;
+    };
+}

package/dist/agent-harness-config/types.mjs

@@ -0,0 +1 @@
+export const HARNESS_IDS = ['claude', 'codex', 'grok', 'cursor'];

package/dist/browser-session-runner/watchdog.mjs

@@ -14,6 +14,7 @@ export function createWatchdogLifecycle() {
             complete = true;
             if (!cleanup)
                 return;
+            // oxlint-disable-next-line no-mistakes/ts-no-const-aliases -- preserve the registered cleanup before clearing mutable lifecycle state
             const next = cleanup;
             cleanup = undefined;
             run(next, onError);

package/dist/cli/index.mjs

@@ -2,7 +2,11 @@
 import { readFileSync, realpathSync } from 'node:fs';
 import { resolve } from 'node:path';
 import { pathToFileURL } from 'node:url';
+import { runAgentHarnessConfigCli } from '../agent-harness-config/cli.mjs';
+import { runPostReviewCli } from '../gha-post-review/cli.mjs';
+import { runStageReviewPayloadCli } from '../gha-review-payload/cli.mjs';
 import { readPackageVersion } from '../package-version.mjs';
+import { runSwiftSemanticEqualCli } from '../swift-semantic-equal/cli.mjs';
 import { runGhaArtifactsCleanup } from './commands/gha-artifacts-cleanup.mjs';
 import { runGhaRuntimeAudit } from './commands/gha-runtime-audit.mjs';
 import { runHttpOrigin } from './commands/http-origin.mjs';
@@ -10,9 +14,6 @@ import { runPnpmInstallCli } from './commands/pnpm-install.mjs';
 import { runRunnerPortPolicy } from './commands/runner-port-policy.mjs';
 import { runScript } from './commands/spawn-script.mjs';
 import { runNugetCentralVersionCommand } from './commands/nuget-central-version.mjs';
-import { runPostReviewCommand } from './commands/post-review.mjs';
-import { runStageReviewPayloadCommand } from './commands/stage-review-payload.mjs';
-import { runSwiftSemanticEqualCommand } from './commands/swift-semantic-equal.mjs';
 import { runVitestBlobManifestCommand } from './commands/vitest-blob-manifest.mjs';
 import { runVitestReportAttemptCommand } from './commands/vitest-report-attempt.mjs';
 import { runPrepareVitestReportsCommand } from './commands/prepare-vitest-reports.mjs';
@@ -89,6 +90,8 @@ export function runCli(argv = process.argv) {
             return runRunnerPortPolicy(parsed);
         case 'with-host-lock':
             return runWithHostLock(parsed.args);
+        case 'agent-harness-config':
+            return runAgentHarnessConfigCli(parsed.args);
         case 'gha-runtime-audit':
             return runGhaRuntimeAudit(parsed);
         case 'script': {
@@ -106,11 +109,11 @@ export function runCli(argv = process.argv) {
         case 'nuget-central-version':
             return runNugetCentralVersionCommand(parsed.args);
         case 'swift-semantic-equal':
-            return runSwiftSemanticEqualCommand(parsed.args);
+            return runSwiftSemanticEqualCli(parsed.args);
         case 'post-review':
-            return runPostReviewCommand();
+            return runPostReviewCli();
         case 'stage-review-payload':
-            return runStageReviewPayloadCommand(parsed.args);
+            return runStageReviewPayloadCli(parsed.args);
         case 'http-origin':
             return runHttpOrigin(parsed.field, parsed.value);
         case 'gha-artifacts-cleanup':

package/dist/cli/parse.d.mts

@@ -14,6 +14,9 @@ export type ParsedCli = {
 } | {
     kind: 'with-host-lock';
     args: string[];
+} | {
+    kind: 'agent-harness-config';
+    args: string[];
 } | {
     kind: 'script';
     command: ScriptCommand;

package/dist/cli/parse.mjs

@@ -35,6 +35,8 @@ export function parseCli(argv) {
         return parseRunnerPortPolicy(rest);
     if (command === 'with-host-lock')
         return { kind: 'with-host-lock', args: rest };
+    if (command === 'agent-harness-config')
+        return { kind: 'agent-harness-config', args: rest };
     if (command === 'gha-runtime-audit')
         return parseGhaRuntimeAudit(rest);
     if (command === 'pnpm-install')

package/dist/cli/usage.d.mts

@@ -1,2 +1,2 @@
-export declare const USAGE = "Usage: vouchington <command> [options]\n\nCommands:\n  runner-port-policy   Print or validate a runner port policy\n  with-host-lock       Run a command under a host-wide lock\n  gha-runtime-audit             Audit successful GitHub Actions job runtimes\n  require-up-to-date            Require HEAD to include a fetched remote branch\n  gitleaks-directory-scan       Scan a directory with Gitleaks\n  ast-grep-examples             Run AST-grep rule examples\n  ast-grep-pack                 Print shipped unconditional AST-grep pack paths as JSON\n  gha-workspace-policy          Check GitHub Actions workspace safety policy\n  gha-output                    Write a collision-safe multiline GITHUB_OUTPUT record\n  gha-needs-results             Fail if required GitHub Actions job results failed\n  download-with-diagnostics     Download a URL and report HTTP status on failure\n  download-optional-run-artifacts  Download optional artifacts from the current run\n  host-pressure-diagnostics     Print a bounded host memory/OOM/PSI snapshot\n  allocate-browser-safe-ports   Allocate Fetch-safe localhost ports\n  diagnose-port-collision       Capture bounded localhost port diagnostics\n  prepare-trivy-db              Download the Trivy vulnerability database\n  gha-artifacts-cleanup         Delete classified GitHub Actions artifacts\n  http-origin                   Validate an optional HTTP(S) origin\n  vitest-blob-manifest          Stamp a vitest-blob-manifest:v1 identity file\n  vitest-report-attempt         Write or read a Vitest report-attempt marker\n  prepare-vitest-reports        Validate and select Vitest report JSON files\n  pnpm-install                  Install a pnpm workspace with retry and release-age fail-fast\n  check-cache-size              Measure a path and decide whether to save a GHA cache\n  make-shard-matrix             Emit a [1..N] GitHub Actions shard matrix\n  load-runner-env               Overlay a runner env file onto GITHUB_ENV with injection guards\n  clean-workspace               Reset a persistent-runner workspace with a fork-PR trust gate\n  install-github-release        Download a checksum-verified GitHub Release binary\n  run-with-timeout              Run a command with GNU timeout or a Perl fallback\n  lint-links                    Two-pass lychee: internal links fail, external warn\n  materialize-pr-context        Dump PR title/body/files/diff/comments and #N crawl\n  wait-for-apt-locks            Wait until apt/dpkg lock files are free\n  install-playwright-chromium-arm64  Install Playwright Chromium from browsers.json\n  ghcr-package-retention        Delete old GHCR package versions past KEEP_MIN\n  harness-admission-lane        Compute a GITHUB_RUN_ID admission lane for fleet fan-out\n  harness-assert-gates          Fail if any named HARNESS_*_ENABLED gate is enabled\n  nuget-central-version         Validate a Directory.Packages.props PackageVersion delta\n  swift-semantic-equal          Compare Swift sources ignoring comments and whitespace\n  post-review                   Post one COMMENT review from a staged payload file\n  stage-review-payload          Validate a review payload file into a staging directory\n  retrospective-transcript      Format facts from Claude-compatible, Codex, or Grok transcripts\n  link-skill                    Link one packaged skill into an explicit consumer directory\n  retrospective-facts           Gather immutable facts for a retrospective\n  agent-blackboard              Probe and journal an Agent Blackboard deployment\n\nOptions:\n  -h, --help       Show this help\n  -v, --version    Print the package version\n\nrunner-port-policy\n  (no args)              Print the shipped policy as JSON\n  --file <path>          Validate and print a policy file\n  --reserved <port>      Print true if the port is reserved\n\nwith-host-lock\n  --name <family>\n  [--slots <n>]\n  --timeout-seconds <n>\n  [--command-timeout-seconds <n>]\n  [--failure-diagnostics <absolute-script>]\n  [--on-acquire-timeout fail|run-unlocked]\n  -- <command> [args...]\n\ngha-runtime-audit\n  [--repository owner/name]   Default GITHUB_REPOSITORY\n  [--branch main]\n  --pr-workflow <name|/regex/>     Repeatable\n  --push-workflow <name|/regex/>   Repeatable\n\nrequire-up-to-date --remote <name> --branch <name>\ngitleaks-directory-scan --config <path> [--directory <path>]\nast-grep-examples --rules <directory> --config <path>\nast-grep-pack\ngha-workspace-policy [--root <directory>] [--workflow-directory <directory>] [--action-directory <directory>]\n\ngha-output <name>\ngha-needs-results [label]\ndownload-with-diagnostics <url> <destination> [-- curl-args...]\ndownload-optional-run-artifacts (--name <name> | --pattern <pattern>) --dir <directory>\nhost-pressure-diagnostics\nallocate-browser-safe-ports [count] [--policy path] [--forbidden-ports path]\ndiagnose-port-collision [--ports \"2200 2216\"] [--output-dir PATH]\nprepare-trivy-db\ngha-artifacts-cleanup run --run-id <id> [--keep-pattern glob] [--delete-pattern glob] [--patterns-file json]\ngha-artifacts-cleanup sweep --older-than-hours <n> [--keep-pattern glob] [--delete-pattern glob] [--patterns-file json]\nhttp-origin [--field NAME] [value]\nvitest-blob-manifest <suite> [reports-directory]\nvitest-report-attempt <write DIRECTORY SUITE|read ROOT>\nprepare-vitest-reports [primary-directory] [fallback-directory] [output-directory]\npnpm-install --runner-lifecycle persistent|ephemeral|ephemeral-full --install-scripts true|false\ncheck-cache-size <path> <max-bytes> <label>\nmake-shard-matrix <total>\nload-runner-env\nclean-workspace\ninstall-github-release --repo owner/name --version X --asset 'name-{platform}.tar.gz' --bin name [--tag-prefix PREFIX] [--expected-sha256 SHA256] [--no-checksum] [--checksums-asset NAME] [--version-flag FLAG] [--bin-dir DIR]\nrun-with-timeout <timeout-seconds> <kill-after-seconds> <command...>\nlint-links [--offline] [--config PATH] [--glob PATTERN] [files...]\nmaterialize-pr-context\nwait-for-apt-locks\ninstall-playwright-chromium-arm64 [name:archive...]\nghcr-package-retention <url-encoded-package>...\nharness-admission-lane <lanes>\nharness-assert-gates <gate>...\nnuget-central-version <trusted-props> <candidate-props> <metadata-json> <output-props>\nswift-semantic-equal <base> <head> <file.swift>\npost-review\nstage-review-payload optional|required <source> <destination>\nretrospective-transcript [--session-id ID] [--jsonl PATH] [--projects-dir PATH] [--codex-sessions-dir PATH] [--grok-sessions-dir PATH]\nlink-skill <name> --source-root <skills-dir> --target-root <consumer-skills-dir>  Link a packaged or repository-local skill\nretrospective-facts (--pr NUMBER | --branch NAME | --no-pr) [--repo OWNER/NAME] [--raw]\nagent-blackboard probe\nagent-blackboard journal append --session-id UUID --agent NAME --version VERSION --file PATH [--parent-session-id UUID] [--timestamp ISO8601]\nagent-blackboard journal entries --session-id UUID\nagent-blackboard snapshot partition --snapshot PATH --checksum SHA256 --counts '{\"sessions\":N,\"entries\":N,\"records\":N,\"bytes\":N}'\nagent-blackboard snapshot cleanup [--snapshot PATH] [--partition-directory PATH --receipt JSON]\n";
+export declare const USAGE = "Usage: vouchington <command> [options]\n\nCommands:\n  runner-port-policy   Print or validate a runner port policy\n  with-host-lock       Run a command under a host-wide lock\n  agent-harness-config          Apply classifier-auto + sandbox keys to agent harnesses\n  gha-runtime-audit             Audit successful GitHub Actions job runtimes\n  require-up-to-date            Require HEAD to include a fetched remote branch\n  gitleaks-directory-scan       Scan a directory with Gitleaks\n  ast-grep-examples             Run AST-grep rule examples\n  ast-grep-pack                 Print shipped unconditional AST-grep pack paths as JSON\n  gha-workspace-policy          Check GitHub Actions workspace safety policy\n  gha-output                    Write a collision-safe multiline GITHUB_OUTPUT record\n  gha-needs-results             Fail if required GitHub Actions job results failed\n  download-with-diagnostics     Download a URL and report HTTP status on failure\n  download-optional-run-artifacts  Download optional artifacts from the current run\n  host-pressure-diagnostics     Print a bounded host memory/OOM/PSI snapshot\n  allocate-browser-safe-ports   Allocate Fetch-safe localhost ports\n  diagnose-port-collision       Capture bounded localhost port diagnostics\n  prepare-trivy-db              Download the Trivy vulnerability database\n  gha-artifacts-cleanup         Delete classified GitHub Actions artifacts\n  http-origin                   Validate an optional HTTP(S) origin\n  vitest-blob-manifest          Stamp a vitest-blob-manifest:v1 identity file\n  vitest-report-attempt         Write or read a Vitest report-attempt marker\n  prepare-vitest-reports        Validate and select Vitest report JSON files\n  pnpm-install                  Install a pnpm workspace with retry and release-age fail-fast\n  check-cache-size              Measure a path and decide whether to save a GHA cache\n  make-shard-matrix             Emit a [1..N] GitHub Actions shard matrix\n  load-runner-env               Overlay a runner env file onto GITHUB_ENV with injection guards\n  clean-workspace               Reset a persistent-runner workspace with a fork-PR trust gate\n  install-github-release        Download a checksum-verified GitHub Release binary\n  run-with-timeout              Run a command with GNU timeout or a Perl fallback\n  lint-links                    Two-pass lychee: internal links fail, external warn\n  materialize-pr-context        Dump PR title/body/files/diff/comments and #N crawl\n  wait-for-apt-locks            Wait until apt/dpkg lock files are free\n  install-playwright-chromium-arm64  Install Playwright Chromium from browsers.json\n  ghcr-package-retention        Delete old GHCR package versions past KEEP_MIN\n  harness-admission-lane        Compute a GITHUB_RUN_ID admission lane for fleet fan-out\n  harness-assert-gates          Fail if any named HARNESS_*_ENABLED gate is enabled\n  nuget-central-version         Validate a Directory.Packages.props PackageVersion delta\n  swift-semantic-equal          Compare Swift sources ignoring comments and whitespace\n  post-review                   Post one COMMENT review from a staged payload file\n  stage-review-payload          Validate a review payload file into a staging directory\n  retrospective-transcript      Format facts from Claude-compatible, Codex, or Grok transcripts\n  link-skill                    Link one packaged skill into an explicit consumer directory\n  retrospective-facts           Gather immutable facts for a retrospective\n  agent-blackboard              Probe and journal an Agent Blackboard deployment\n\nOptions:\n  -h, --help       Show this help\n  -v, --version    Print the package version\n\nrunner-port-policy\n  (no args)              Print the shipped policy as JSON\n  --file <path>          Validate and print a policy file\n  --reserved <port>      Print true if the port is reserved\n\nwith-host-lock\n  --name <family>\n  [--slots <n>]\n  --timeout-seconds <n>\n  [--command-timeout-seconds <n>]\n  [--failure-diagnostics <absolute-script>]\n  [--on-acquire-timeout fail|run-unlocked]\n  -- <command> [args...]\n\nagent-harness-config dump\nagent-harness-config check|apply [--global] [--repo PATH]... [--harness claude|codex|grok|cursor]...\n  [--home PATH]\n\ngha-runtime-audit\n  [--repository owner/name]   Default GITHUB_REPOSITORY\n  [--branch main]\n  --pr-workflow <name|/regex/>     Repeatable\n  --push-workflow <name|/regex/>   Repeatable\n\nrequire-up-to-date --remote <name> --branch <name>\ngitleaks-directory-scan --config <path> [--directory <path>]\nast-grep-examples --rules <directory> --config <path>\nast-grep-pack\ngha-workspace-policy [--root <directory>] [--workflow-directory <directory>] [--action-directory <directory>]\n\ngha-output <name>\ngha-needs-results [label]\ndownload-with-diagnostics <url> <destination> [-- curl-args...]\ndownload-optional-run-artifacts (--name <name> | --pattern <pattern>) --dir <directory>\nhost-pressure-diagnostics\nallocate-browser-safe-ports [count] [--policy path] [--forbidden-ports path]\ndiagnose-port-collision [--ports \"2200 2216\"] [--output-dir PATH]\nprepare-trivy-db\ngha-artifacts-cleanup run --run-id <id> [--keep-pattern glob] [--delete-pattern glob] [--patterns-file json]\ngha-artifacts-cleanup sweep --older-than-hours <n> [--keep-pattern glob] [--delete-pattern glob] [--patterns-file json]\nhttp-origin [--field NAME] [value]\nvitest-blob-manifest <suite> [reports-directory]\nvitest-report-attempt <write DIRECTORY SUITE|read ROOT>\nprepare-vitest-reports [primary-directory] [fallback-directory] [output-directory]\npnpm-install --runner-lifecycle persistent|ephemeral|ephemeral-full --install-scripts true|false\ncheck-cache-size <path> <max-bytes> <label>\nmake-shard-matrix <total>\nload-runner-env\nclean-workspace\ninstall-github-release --repo owner/name --version X --asset 'name-{platform}.tar.gz' --bin name [--tag-prefix PREFIX] [--expected-sha256 SHA256] [--no-checksum] [--checksums-asset NAME] [--version-flag FLAG] [--bin-dir DIR]\nrun-with-timeout <timeout-seconds> <kill-after-seconds> <command...>\nlint-links [--offline] [--config PATH] [--glob PATTERN] [files...]\nmaterialize-pr-context\nwait-for-apt-locks\ninstall-playwright-chromium-arm64 [name:archive...]\nghcr-package-retention <url-encoded-package>...\nharness-admission-lane <lanes>\nharness-assert-gates <gate>...\nnuget-central-version <trusted-props> <candidate-props> <metadata-json> <output-props>\nswift-semantic-equal <base> <head> <file.swift>\npost-review\nstage-review-payload optional|required <source> <destination>\nretrospective-transcript [--session-id ID] [--jsonl PATH] [--projects-dir PATH] [--codex-sessions-dir PATH] [--grok-sessions-dir PATH]\nlink-skill <name> --source-root <skills-dir> --target-root <consumer-skills-dir>  Link a packaged or repository-local skill\nretrospective-facts (--pr NUMBER | --branch NAME | --no-pr) [--repo OWNER/NAME] [--raw]\nagent-blackboard probe\nagent-blackboard journal append --session-id UUID --agent NAME --version VERSION --file PATH [--parent-session-id UUID] [--timestamp ISO8601]\nagent-blackboard journal entries --session-id UUID\nagent-blackboard snapshot partition --snapshot PATH --checksum SHA256 --counts '{\"sessions\":N,\"entries\":N,\"records\":N,\"bytes\":N}'\nagent-blackboard snapshot cleanup [--snapshot PATH] [--partition-directory PATH --receipt JSON]\n";
 export declare function printUsage(stream?: NodeJS.WritableStream): void;

package/dist/cli/usage.mjs

@@ -3,6 +3,7 @@ export const USAGE = `Usage: vouchington <command> [options]
 Commands:
   runner-port-policy   Print or validate a runner port policy
   with-host-lock       Run a command under a host-wide lock
+  agent-harness-config          Apply classifier-auto + sandbox keys to agent harnesses
   gha-runtime-audit             Audit successful GitHub Actions job runtimes
   require-up-to-date            Require HEAD to include a fetched remote branch
   gitleaks-directory-scan       Scan a directory with Gitleaks
@@ -63,6 +64,10 @@ with-host-lock
   [--on-acquire-timeout fail|run-unlocked]
   -- <command> [args...]
 
+agent-harness-config dump
+agent-harness-config check|apply [--global] [--repo PATH]... [--harness claude|codex|grok|cursor]...
+  [--home PATH]
+
 gha-runtime-audit
   [--repository owner/name]   Default GITHUB_REPOSITORY
   [--branch main]

package/dist/gha-artifacts-cleanup/classify.mjs

@@ -16,6 +16,7 @@ export function parseArtifactPatternsJson(value) {
     if (value === null || typeof value !== 'object' || Array.isArray(value)) {
         throw new Error('patterns file must be a JSON object with keep and delete arrays');
     }
+    // oxlint-disable-next-line no-mistakes/ts-no-const-aliases -- establish a record view after validating the untrusted patterns object
     const record = value;
     return {
         keepPatterns: stringArray(record.keep, 'keep'),

package/dist/gha-post-review/claude-token.mjs

@@ -23,6 +23,7 @@ export function oidcTokenRequest(env) {
 function readToken(payload) {
     if (payload === null || typeof payload !== 'object')
         return '';
+    // oxlint-disable-next-line no-mistakes/ts-no-const-aliases -- establish a record view after validating the untrusted response object
     const record = payload;
     const token = record.token ?? record.app_token ?? record.value;
     return typeof token === 'string' ? token : '';
@@ -30,6 +31,7 @@ function readToken(payload) {
 function readErrorMessage(payload) {
     if (payload === null || typeof payload !== 'object')
         return '';
+    // oxlint-disable-next-line no-mistakes/ts-no-const-aliases -- establish a record view after validating the untrusted response object
     const record = payload;
     if (typeof record.message === 'string' && record.message.length > 0)
         return record.message;

package/dist/gha-post-review/github.mjs

@@ -22,6 +22,7 @@ export function postWithGh(repository, prNumber, payload, token, exec) {
         return { ok: true, status: 201, body: '' };
     }
     catch (error) {
+        // oxlint-disable-next-line no-mistakes/ts-no-const-aliases -- isolate the process-error shape assertion at the catch boundary
         const err = error;
         const text = `${err.stdout ?? ''}${err.stderr ?? ''}${err.message ?? ''}`;
         const status = Number(/HTTP\s+(\d{3})/u.exec(text)?.[1] ?? 0);

package/dist/gha-post-review/post.mjs

@@ -1,5 +1,11 @@
 import { ReviewPayloadError, indexReviewFiles, parseReviewPayload, remapReviewComments, } from '../gha-review-payload/index.mjs';
-export { MAX_REVIEW_COMMENTS as MAX_COMMENTS, MAX_REVIEW_PAYLOAD_BYTES as MAX_PAYLOAD_BYTES, ReviewPayloadError as PostReviewError, } from '../gha-review-payload/index.mjs';
+export { 
+// oxlint-disable-next-line no-mistakes/ts-no-export-renaming -- preserve the package's established public compatibility name
+MAX_REVIEW_COMMENTS as MAX_COMMENTS, 
+// oxlint-disable-next-line no-mistakes/ts-no-export-renaming -- preserve the package's established public compatibility name
+MAX_REVIEW_PAYLOAD_BYTES as MAX_PAYLOAD_BYTES, 
+// oxlint-disable-next-line no-mistakes/ts-no-export-renaming -- preserve the package's established public compatibility name
+ReviewPayloadError as PostReviewError, } from '../gha-review-payload/index.mjs';
 export function runPostReview(payloadPath, io) {
     try {
         const selectedHeadSha = io.getHeadSha();

package/dist/gha-pr-checkpoint/codec.mjs

@@ -38,6 +38,7 @@ export function parseCheckpoint(body, options = {}) {
 export function validateCheckpoint(value, options = {}) {
     if (!value || typeof value !== 'object')
         return undefined;
+    // oxlint-disable-next-line no-mistakes/ts-no-const-aliases -- establish the candidate checkpoint type before complete field validation
     const checkpoint = value;
     const marker = options.marker ?? CHECKPOINT_MARKER;
     if (checkpoint.marker !== marker ||

package/dist/gha-review-payload/diff.mjs

@@ -38,6 +38,7 @@ function asReviewFiles(parsed) {
     return items.flatMap((item) => {
         if (item === null || typeof item !== 'object')
             return [];
+        // oxlint-disable-next-line no-mistakes/ts-no-const-aliases -- establish a record view after validating the untrusted file entry
         const record = item;
         if (typeof record.filename !== 'string' || record.filename.length === 0)
             return [];

package/dist/gha-review-payload/payload.mjs

@@ -17,6 +17,7 @@ function isCommitId(value) {
 function sanitizeComment(raw) {
     if (raw === null || typeof raw !== 'object' || Array.isArray(raw))
         return null;
+    // oxlint-disable-next-line no-mistakes/ts-no-const-aliases -- establish a record view after validating the untrusted comment object
     const record = raw;
     if (typeof record.path !== 'string' || record.path.length === 0 || record.path.includes('\0')) {
         return null;
@@ -68,6 +69,7 @@ export function parseReviewPayload(bytes, commitId) {
     if (parsed === null || typeof parsed !== 'object' || Array.isArray(parsed)) {
         throw new ReviewPayloadError('Payload must be a JSON object.');
     }
+    // oxlint-disable-next-line no-mistakes/ts-no-const-aliases -- establish a record view after validating the untrusted payload object
     const record = parsed;
     const body = typeof record.body === 'string' ? record.body : '';
     if (record.comments !== undefined && !Array.isArray(record.comments)) {

package/dist/gha-workspace-policy/shared.mjs

@@ -38,6 +38,7 @@ export function visitRunSteps(document, isAction, visitor) {
     for (const [jobId, value] of Object.entries(jobs)) {
         if (!value || typeof value !== 'object')
             continue;
+        // oxlint-disable-next-line no-mistakes/ts-no-const-aliases -- establish a job record view after the runtime object check
         const job = value;
         if (typeof job.uses === 'string')
             continue;

package/dist/http-link-pagination/index.mjs

@@ -117,6 +117,7 @@ function skipWhitespace(value, index) {
     return index;
 }
 function readToken(value, index) {
+    // oxlint-disable-next-line no-mistakes/ts-no-const-aliases -- preserve the token start while advancing the cursor
     const start = index;
     while (index < value.length && isTokenCharacter(value[index]))
         index += 1;

package/dist/index.d.mts

@@ -13,6 +13,8 @@ export type { EphemeralListenerOptions, RunnerPortPolicy } from './runner-port-p
 export { extractAlterTableAddColumnLocations, extractCreateIndexMetadata, extractCreateTableMetadata, extractDefaultFunction, extractDropIndexMetadata, extractFuncCallArgColumnNames, extractMigrationConstraintMetadata, initSqlAst, lineOfUtf8ByteOffset, MissingSqlAstParserError, parseSql, } from './sql-ast/index.mts';
 export type { ForeignKey, SqlCreateIndexMetadata, SqlCreateTableColumn, SqlCreateTableMetadata, SqlDropIndexMetadata, SqlIndexParam, SqlMigrationConstraintMetadata, } from './sql-ast/index.mts';
 export { dollarQuoteEnd, lineOf, maskSqlQuotedText, readDollarQuoteDelimiter, readStringLiteral, splitSqlStatements, sqlFragments, stripSqlComments, } from './sql-scanner/index.mts';
+export { applyHarnessConfig, checkHarnessConfig, dumpHarnessPolicy, planHarnessConfig, DEFAULT_EXTRA_WRITABLE_ROOTS, HARNESS_IDS, } from './agent-harness-config/index.mts';
+export type { ApplyTarget, FilePlan, FileResult, HarnessApplyResult, HarnessCheckResult, HarnessConfigOptions, HarnessId, HarnessPlan, HarnessPolicyDump, JsonPatch, KeyDrift, TomlPatch, TomlValue, } from './agent-harness-config/index.mts';
 export { auditCiJobRuntime, parseWorkflowNameMatch } from './gha-runtime-audit/index.mts';
 export type { GhApiExecutor, RuntimeAuditOptions, RuntimeAuditResult, RuntimeAuditWorkflowFilter, RuntimeJobResult, RuntimeSample, } from './gha-runtime-audit/index.mts';
 export { checkGhaWorkspacePolicy } from './gha-workspace-policy/index.mts';

package/dist/index.mjs

@@ -7,6 +7,7 @@ export { buildSessionFrictionReport, classifyFrictionObservation, FRICTION_LOG_M
 export { EphemeralListenerAttemptsExhaustedError, isRunnerReservedPort, listenOnRunnerUnreservedEphemeralPort, loadRunnerPortPolicy, runnerPortPolicy, validateRunnerPortPolicy, } from './runner-port-policy/index.mjs';
 export { extractAlterTableAddColumnLocations, extractCreateIndexMetadata, extractCreateTableMetadata, extractDefaultFunction, extractDropIndexMetadata, extractFuncCallArgColumnNames, extractMigrationConstraintMetadata, initSqlAst, lineOfUtf8ByteOffset, MissingSqlAstParserError, parseSql, } from './sql-ast/index.mjs';
 export { dollarQuoteEnd, lineOf, maskSqlQuotedText, readDollarQuoteDelimiter, readStringLiteral, splitSqlStatements, sqlFragments, stripSqlComments, } from './sql-scanner/index.mjs';
+export { applyHarnessConfig, checkHarnessConfig, dumpHarnessPolicy, planHarnessConfig, DEFAULT_EXTRA_WRITABLE_ROOTS, HARNESS_IDS, } from './agent-harness-config/index.mjs';
 export { auditCiJobRuntime, parseWorkflowNameMatch } from './gha-runtime-audit/index.mjs';
 export { checkGhaWorkspacePolicy } from './gha-workspace-policy/index.mjs';
 export { requireUpToDate } from './require-up-to-date/index.mjs';

package/dist/pnpm-deploy/normalize.mjs

@@ -18,6 +18,7 @@ function pinPrunedAt(prodDir) {
     if (parsed === null || typeof parsed !== 'object' || Array.isArray(parsed)) {
         throw new Error(`${modulesPath} is not a JSON object`);
     }
+    // oxlint-disable-next-line no-mistakes/ts-no-const-aliases -- establish the mutable manifest shape after validating the parsed object
     const manifest = parsed;
     manifest.prunedAt = EPOCH_PRUNED_AT;
     fs.writeFileSync(modulesPath, `${JSON.stringify(manifest, null, 2)}\n`);

package/dist/pnpm-install/install-operations.d.mts

@@ -1,5 +1,6 @@
 import { type CommandResult, type InstallOptions } from './support.mts';
 export declare function withScriptPolicy(args: string[], installScripts: boolean): string[];
 export declare function install(args: string[], options: InstallOptions, label: string): Promise<void>;
-export declare function reconcileOrFail(options: InstallOptions, runCapture: (args: string[]) => Promise<CommandResult>): Promise<void>;
+export declare function reconcileOrFail(options: InstallOptions): Promise<void>;
+export declare function finalizePendingBuilds(options: InstallOptions, runCapture: (args: string[]) => Promise<CommandResult>, phase: string): Promise<import("./pending-builds.mts").PendingBuildState>;
 export declare function repairIsolatedNativeMismatch(options: InstallOptions, runCapture: (args: string[]) => Promise<CommandResult>, mismatchedNativePaths: string[]): Promise<boolean>;

package/dist/pnpm-install/install-operations.mjs

@@ -1,7 +1,7 @@
 import { scheduler } from 'node:timers/promises';
 import { runPnpm } from './exec.mjs';
 import { nativeBinariesMatchRuntime, repairedNativeBinariesMatchRuntime } from './native-health.mjs';
-import { buildLedgersAllowNativeRepair } from './pending-builds.mjs';
+import { buildLedgersAllowNativeRepair, pendingBuilds } from './pending-builds.mjs';
 import { INSTALL_TERMINATION_FAILED } from './process.mjs';
 import { formatReleaseAgeFailure, isReleaseAgeViolation } from './release-age.mjs';
 import { findWorkspaceLinkMismatches, forcedInstallArgs, logWorkspaceLinkMismatches, } from './support.mjs';
@@ -28,10 +28,9 @@ export async function install(args, options, label) {
     }
     fail(`${label} failed after ${options.maxAttempts} attempt${options.maxAttempts === 1 ? '' : 's'}`);
 }
-export async function reconcileOrFail(options, runCapture) {
+export async function reconcileOrFail(options) {
     await install([...forcedInstallArgs, '--ignore-scripts', '--ignore-pnpmfile'], options, 'script-free reconciliation');
-    await install(withScriptPolicy(forcedInstallArgs, options.installScripts), options, 'strict persistent reconciliation');
-    await verifyInstallHealth(runCapture, 'persistent reconciliation');
+    await install([...forcedInstallArgs, '--ignore-scripts'], options, 'second script-free persistent reconciliation');
 }
 async function verifyInstallHealth(runCapture, phase, repairedNativePaths = []) {
     const [nativesMatch, remaining] = await Promise.all([
@@ -47,6 +46,19 @@ async function verifyInstallHealth(runCapture, phase, repairedNativePaths = [])
         fail(`${phase} completed with invalid workspace links`);
     }
 }
+export async function finalizePendingBuilds(options, runCapture, phase) {
+    const before = await pendingBuilds();
+    if (options.installScripts && before.kind === 'unknown')
+        fail(`${phase} completed without a clear pending build ledger`);
+    if (options.installScripts && before.kind === 'pending') {
+        await install(['rebuild', '--pending', '--recursive'], options, 'pending scripts rebuild');
+        const after = await pendingBuilds();
+        if (after.kind !== 'clear')
+            fail(`${phase} completed without a clear pending build ledger`);
+    }
+    await verifyInstallHealth(runCapture, phase);
+    return options.installScripts ? { kind: 'clear' } : before;
+}
 export async function repairIsolatedNativeMismatch(options, runCapture, mismatchedNativePaths) {
     if (!(await buildLedgersAllowNativeRepair()))
         return false;

package/dist/pnpm-install/metadata.d.mts

@@ -3,7 +3,7 @@ import { type ProvenanceStatus } from './transition.mts';
 declare const componentNames: readonly ['lockfile', 'npm-config', 'pnpm', 'pnpmfiles', 'runtime', 'workspace-config', 'workspace-manifests'];
 type ComponentName = (typeof componentNames)[number];
 type StructuralProvenance = Record<ComponentName, string>;
-export declare function persistentMetadataFingerprintV4(runCapture: CaptureCommand): Promise<{
+export declare function persistentMetadataFingerprintV5(runCapture: CaptureCommand): Promise<{
     lockfile: string;
     'npm-config': string;
     pnpm: string;
@@ -12,7 +12,7 @@ export declare function persistentMetadataFingerprintV4(runCapture: CaptureComma
     'workspace-config': string;
     'workspace-manifests': string;
 }>;
-export declare function persistentMetadataStatusV4(provenance: StructuralProvenance): Promise<ProvenanceStatus>;
-export declare function writePersistentMetadataStampV4(provenance: StructuralProvenance, installScripts: boolean, resetScriptsEnabledCapability: boolean, pendingDependencyBuilds?: string[]): Promise<void>;
+export declare function persistentMetadataStatusV5(provenance: StructuralProvenance): Promise<ProvenanceStatus>;
+export declare function writePersistentMetadataStampV5(provenance: StructuralProvenance, installScripts: boolean, scriptsEnabledInstallVerified: boolean): Promise<void>;
 export declare function persistentDependencyTreeIsCold(): Promise<boolean>;
 export {};