vouchington-tooling 0.12.3 → 0.13.0

package/README.md

@@ -71,14 +71,13 @@ vouchington stage-review-payload optional|required <source> <destination>
 For persistent `pnpm-install`, v5 metadata tracks structural inputs separately from the
 `--install-scripts` policy. A warm scripts-enabled tree can therefore toggle
 `true → false → true` without forced reconciliation; a tree first installed with scripts disabled
-uses one script-suppressed verification install followed by `pnpm rebuild --pending --recursive`.
-When only newly pending dependency package IDs remain, it instead rebuilds those exact IDs without
-rerunning first-party workspace hooks.
-If that generic rebuild leaves only pnpm's root importer marker, one root-only pending rebuild runs
-the root lifecycle hook; every other residual ID remains a hard failure. An isolated native-binary
+uses two script-suppressed verification installs followed by `pnpm rebuild --pending --recursive`.
+Before rebuilding, duplicate pending IDs are collapsed. After rebuilding, IDs proven absent from
+the current workspace and installed virtual-store lockfiles are reported and removed; live
+dependency and workspace-importer IDs are retained. Any residual ID after the generic rebuild remains a reported hard failure. An isolated native-binary
 mismatch uses one strict forced install only when structural provenance
 matches, workspace links are valid, and pnpm records empty `ignoredBuilds` and `pendingBuilds` ledgers;
-otherwise it retains the script-free then strict reconciliation. Native and workspace-link health
+otherwise it retains the two script-free reconciliation passes. Native and workspace-link health
 are verified before its metadata stamp is refreshed.
 The command emits a structured non-secret provenance diagnostic identifying changed structural
 categories, the last script policy, script capability, and native-binary health.
@@ -153,6 +152,10 @@ import {
   checkHarnessConfig,
   dumpHarnessPolicy,
 } from 'vouchington-tooling/agent-harness-config'
+import {
+  inspectHarnessEnvironment,
+  selectHarnessSession,
+} from 'vouchington-tooling/agent-harness-identity'
 import {
   readVitestReportAttempts,
   writeVitestBlobManifest,
@@ -247,6 +250,10 @@ classifier stays available in plan mode; its defined sandbox profile still requi
 `unrestricted` disables the sandbox. Repo checks surface user-level trust or mode prerequisites
 instead of claiming that repo files alone activate them.
 
+`agent-harness-identity` inspects the four harness environment signals without choosing a winner.
+Callers supply their own precedence to `selectHarnessSession`, keeping product-specific identity
+policy out of this package.
+
 `checkWorkspaceGatesPolicy` rejects tracked test assertions that hard-code the exact version of a
 dependency declared by a non-fixture package manifest. Assert dependency membership or placement,
 or derive a configuration or documentation package spec from that manifest instead.

package/dist/agent-harness-config/types.d.mts

@@ -1,5 +1,7 @@
-export declare const HARNESS_IDS: readonly ['claude', 'codex', 'grok', 'cursor'];
-export type HarnessId = (typeof HARNESS_IDS)[number];
+import { HARNESS_IDS } from '../agent-harness-identity/index.mts';
+import type { HarnessId } from '../agent-harness-identity/index.mts';
+export { HARNESS_IDS };
+export type { HarnessId };
 export type ApplyTarget = {
     readonly kind: 'global';
 } | {

package/dist/agent-harness-config/types.mjs

@@ -1 +1,2 @@
-export const HARNESS_IDS = ['claude', 'codex', 'grok', 'cursor'];
+import { HARNESS_IDS } from '../agent-harness-identity/index.mjs';
+export { HARNESS_IDS };

package/dist/agent-harness-identity/index.d.mts

@@ -0,0 +1,26 @@
+export declare const HARNESS_IDS: readonly ['claude', 'codex', 'grok', 'cursor'];
+export type HarnessId = (typeof HARNESS_IDS)[number];
+export interface HarnessEnvironment {
+    readonly claude: {
+        readonly compatMode: boolean;
+        readonly sessionId?: string;
+    };
+    readonly codex: {
+        readonly sessionId?: string;
+    };
+    readonly cursor: {
+        readonly agentMarker: boolean;
+        readonly sessionId?: string;
+    };
+    readonly grok: {
+        readonly agentMarker: boolean;
+        readonly hookEvent: boolean;
+        readonly sessionId?: string;
+    };
+}
+export interface HarnessSessionIdentity {
+    readonly harness: HarnessId;
+    readonly sessionId: string;
+}
+export declare function inspectHarnessEnvironment(env?: NodeJS.ProcessEnv): HarnessEnvironment;
+export declare function selectHarnessSession(environment: HarnessEnvironment, precedence: readonly HarnessId[]): HarnessSessionIdentity | undefined;

package/dist/agent-harness-identity/index.mjs

@@ -0,0 +1,30 @@
+export const HARNESS_IDS = ['claude', 'codex', 'grok', 'cursor'];
+function session(value) {
+    return value ? { sessionId: value } : {};
+}
+export function inspectHarnessEnvironment(env = process.env) {
+    return {
+        claude: {
+            compatMode: env.CLAUDECODE === '1',
+            ...session(env.CLAUDE_CODE_SESSION_ID),
+        },
+        codex: session(env.CODEX_THREAD_ID),
+        cursor: {
+            agentMarker: Boolean(env.CURSOR_AGENT),
+            ...session(env.CURSOR_SESSION_ID),
+        },
+        grok: {
+            agentMarker: Boolean(env.GROK_AGENT),
+            hookEvent: Boolean(env.GROK_HOOK_EVENT),
+            ...session(env.GROK_SESSION_ID),
+        },
+    };
+}
+export function selectHarnessSession(environment, precedence) {
+    for (const harness of precedence) {
+        const sessionId = environment[harness].sessionId;
+        if (sessionId)
+            return { harness, sessionId };
+    }
+    return undefined;
+}

package/dist/index.d.mts

@@ -1,5 +1,7 @@
 export { linkSkill, readSkillManifest } from './skill-discovery/index.mts';
 export type { LinkSkillOptions, LinkSkillResult, SkillManifest, SkillManifestEntry, } from './skill-discovery/index.mts';
+export { HARNESS_IDS, inspectHarnessEnvironment, selectHarnessSession, } from './agent-harness-identity/index.mts';
+export type { HarnessEnvironment, HarnessSessionIdentity } from './agent-harness-identity/index.mts';
 export { codexChildren, codexIdentity, computeTranscriptFacts, formatTranscriptFacts, formatUnavailable, resolveTranscriptFile, runRetrospectiveTranscript, } from './retrospective-transcript/index.mts';
 export type { ResolveOptions, TokenTotals, TranscriptFacts, } from './retrospective-transcript/index.mts';
 export { runRetrospectiveFacts } from './retrospective-facts/index.mts';
@@ -13,7 +15,7 @@ export type { EphemeralListenerOptions, RunnerPortPolicy } from './runner-port-p
 export { extractAlterTableAddColumnLocations, extractCreateIndexMetadata, extractCreateTableMetadata, extractDefaultFunction, extractDropIndexMetadata, extractFuncCallArgColumnNames, extractMigrationConstraintMetadata, initSqlAst, lineOfUtf8ByteOffset, MissingSqlAstParserError, parseSql, } from './sql-ast/index.mts';
 export type { ForeignKey, SqlCreateIndexMetadata, SqlCreateTableColumn, SqlCreateTableMetadata, SqlDropIndexMetadata, SqlIndexParam, SqlMigrationConstraintMetadata, } from './sql-ast/index.mts';
 export { dollarQuoteEnd, lineOf, maskSqlQuotedText, readDollarQuoteDelimiter, readStringLiteral, splitSqlStatements, sqlFragments, stripSqlComments, } from './sql-scanner/index.mts';
-export { applyHarnessConfig, checkHarnessConfig, dumpHarnessPolicy, planHarnessConfig, DEFAULT_EXTRA_WRITABLE_ROOTS, HARNESS_IDS, } from './agent-harness-config/index.mts';
+export { applyHarnessConfig, checkHarnessConfig, dumpHarnessPolicy, planHarnessConfig, DEFAULT_EXTRA_WRITABLE_ROOTS, } from './agent-harness-config/index.mts';
 export type { ApplyTarget, FilePlan, FileResult, HarnessApplyResult, HarnessCheckResult, HarnessConfigOptions, HarnessId, HarnessPlan, HarnessPolicyDump, JsonPatch, KeyDrift, TomlPatch, TomlValue, } from './agent-harness-config/index.mts';
 export { auditCiJobRuntime, parseWorkflowNameMatch } from './gha-runtime-audit/index.mts';
 export type { GhApiExecutor, RuntimeAuditOptions, RuntimeAuditResult, RuntimeAuditWorkflowFilter, RuntimeJobResult, RuntimeSample, } from './gha-runtime-audit/index.mts';

package/dist/index.mjs

@@ -1,5 +1,6 @@
 /* eslint-disable max-lines -- package entry point enumerates the supported public API. */
 export { linkSkill, readSkillManifest } from './skill-discovery/index.mjs';
+export { HARNESS_IDS, inspectHarnessEnvironment, selectHarnessSession, } from './agent-harness-identity/index.mjs';
 export { codexChildren, codexIdentity, computeTranscriptFacts, formatTranscriptFacts, formatUnavailable, resolveTranscriptFile, runRetrospectiveTranscript, } from './retrospective-transcript/index.mjs';
 export { runRetrospectiveFacts } from './retrospective-facts/index.mjs';
 export { appendJournal, assertSessionId, cleanupSnapshotPartitions, partitionSnapshot, probeBlackboard, readJournal, resolveBlackboardConnection, } from './agent-blackboard/index.mjs';
@@ -7,7 +8,7 @@ export { buildSessionFrictionReport, classifyFrictionObservation, FRICTION_LOG_M
 export { EphemeralListenerAttemptsExhaustedError, isRunnerReservedPort, listenOnRunnerUnreservedEphemeralPort, loadRunnerPortPolicy, runnerPortPolicy, validateRunnerPortPolicy, } from './runner-port-policy/index.mjs';
 export { extractAlterTableAddColumnLocations, extractCreateIndexMetadata, extractCreateTableMetadata, extractDefaultFunction, extractDropIndexMetadata, extractFuncCallArgColumnNames, extractMigrationConstraintMetadata, initSqlAst, lineOfUtf8ByteOffset, MissingSqlAstParserError, parseSql, } from './sql-ast/index.mjs';
 export { dollarQuoteEnd, lineOf, maskSqlQuotedText, readDollarQuoteDelimiter, readStringLiteral, splitSqlStatements, sqlFragments, stripSqlComments, } from './sql-scanner/index.mjs';
-export { applyHarnessConfig, checkHarnessConfig, dumpHarnessPolicy, planHarnessConfig, DEFAULT_EXTRA_WRITABLE_ROOTS, HARNESS_IDS, } from './agent-harness-config/index.mjs';
+export { applyHarnessConfig, checkHarnessConfig, dumpHarnessPolicy, planHarnessConfig, DEFAULT_EXTRA_WRITABLE_ROOTS, } from './agent-harness-config/index.mjs';
 export { auditCiJobRuntime, parseWorkflowNameMatch } from './gha-runtime-audit/index.mjs';
 export { checkGhaWorkspacePolicy } from './gha-workspace-policy/index.mjs';
 export { requireUpToDate } from './require-up-to-date/index.mjs';

package/dist/pnpm-install/install-operations.mjs

@@ -1,7 +1,7 @@
 import { scheduler } from 'node:timers/promises';
 import { runPnpm } from './exec.mjs';
 import { nativeBinariesMatchRuntime, repairedNativeBinariesMatchRuntime } from './native-health.mjs';
-import { buildLedgersAllowNativeRepair, deduplicatePendingBuilds, pendingBuilds, } from './pending-builds.mjs';
+import { buildLedgersAllowNativeRepair, deduplicatePendingBuilds, pendingBuilds, pruneStalePendingBuilds, } from './pending-builds.mjs';
 import { INSTALL_TERMINATION_FAILED } from './process.mjs';
 import { formatReleaseAgeFailure, isReleaseAgeViolation } from './release-age.mjs';
 import { findWorkspaceLinkMismatches, forcedInstallArgs, logWorkspaceLinkMismatches, } from './support.mjs';
@@ -60,8 +60,9 @@ export async function finalizePendingBuilds(options, runCapture, phase) {
             failPendingBuildLedger(phase, deduplicated);
         await install(['rebuild', '--pending', '--recursive'], options, 'pending scripts rebuild');
         const after = await pendingBuilds();
-        if (after.kind !== 'clear')
-            failPendingBuildLedger(phase, after);
+        const finalState = after.kind === 'pending' ? await pruneStalePendingBuilds() : after;
+        if (finalState.kind !== 'clear')
+            failPendingBuildLedger(phase, finalState);
     }
     await verifyInstallHealth(runCapture, phase);
     return options.installScripts ? { kind: 'clear' } : before;

package/dist/pnpm-install/pending-builds.d.mts

@@ -8,4 +8,5 @@ export type PendingBuildState = {
 };
 export declare function pendingBuilds(): Promise<PendingBuildState>;
 export declare function deduplicatePendingBuilds(): Promise<PendingBuildState>;
+export declare function pruneStalePendingBuilds(): Promise<PendingBuildState>;
 export declare function buildLedgersAllowNativeRepair(): Promise<boolean>;

package/dist/pnpm-install/pending-builds.mjs

@@ -1,11 +1,15 @@
-import { readFile, writeFile } from 'node:fs/promises';
+import { randomUUID } from 'node:crypto';
+import { readFile, rename, rm, writeFile } from 'node:fs/promises';
 import path from 'node:path';
 import { parse, stringify } from 'yaml';
 const modulesPath = () => path.join(process.cwd(), 'node_modules', '.modules.yaml');
+function isRecord(value) {
+    return typeof value === 'object' && value !== null && !Array.isArray(value);
+}
 async function buildLedgers() {
     try {
         const value = parse(await readFile(modulesPath(), 'utf8'));
-        if (typeof value !== 'object' || value === null || Array.isArray(value))
+        if (!isRecord(value))
             return undefined;
         // oxlint-disable-next-line no-mistakes/ts-no-const-aliases -- validate the parsed YAML object before reading its fields
         const record = value;
@@ -29,21 +33,61 @@ async function buildLedgers() {
 export async function pendingBuilds() {
     return (await buildLedgers())?.pendingBuilds ?? { kind: 'unknown' };
 }
+async function lockfileBuildIds(lockfilePath) {
+    try {
+        const lockfile = parse(await readFile(lockfilePath, 'utf8'));
+        if (!isRecord(lockfile) || !isRecord(lockfile.importers) || !isRecord(lockfile.packages))
+            return undefined;
+        return new Set([...Object.keys(lockfile.importers), ...Object.keys(lockfile.packages)]);
+    }
+    catch {
+        return undefined;
+    }
+}
+async function currentBuildIds(record) {
+    if (typeof record.virtualStoreDir !== 'string')
+        return undefined;
+    const [wanted, installed] = await Promise.all([
+        lockfileBuildIds(path.join(process.cwd(), 'pnpm-lock.yaml')),
+        lockfileBuildIds(path.resolve(path.dirname(modulesPath()), record.virtualStoreDir, 'lock.yaml')),
+    ]);
+    if (wanted === undefined || installed === undefined)
+        return undefined;
+    return new Set([...wanted, ...installed]);
+}
+async function rewritePendingBuilds(record, originalLength, ids) {
+    if (ids.length === originalLength)
+        return { ids: ids.toSorted(), kind: 'pending' };
+    const temporary = `${modulesPath()}.${randomUUID()}.tmp`;
+    try {
+        await writeFile(temporary, stringify({ ...record, pendingBuilds: ids }), { flag: 'wx' });
+        await rename(temporary, modulesPath());
+    }
+    catch {
+        await rm(temporary, { force: true });
+        return { kind: 'unknown' };
+    }
+    return pendingBuilds();
+}
 export async function deduplicatePendingBuilds() {
     const ledgers = await buildLedgers();
     if (ledgers === undefined || ledgers.pendingBuilds.kind !== 'pending')
         return ledgers?.pendingBuilds ?? { kind: 'unknown' };
     // `buildLedgers` has already verified every pending entry is a string.
     const unique = [...new Set(ledgers.record.pendingBuilds)];
-    if (unique.length === ledgers.pendingBuilds.ids.length)
-        return ledgers.pendingBuilds;
-    try {
-        await writeFile(modulesPath(), stringify({ ...ledgers.record, pendingBuilds: unique }));
-    }
-    catch {
+    return rewritePendingBuilds(ledgers.record, ledgers.pendingBuilds.ids.length, unique);
+}
+export async function pruneStalePendingBuilds() {
+    const ledgers = await buildLedgers();
+    if (ledgers === undefined || ledgers.pendingBuilds.kind !== 'pending')
+        return ledgers?.pendingBuilds ?? { kind: 'unknown' };
+    const current = await currentBuildIds(ledgers.record);
+    if (current === undefined)
         return { kind: 'unknown' };
-    }
-    return pendingBuilds();
+    const stale = ledgers.pendingBuilds.ids.filter((id) => !current.has(id));
+    if (stale.length > 0)
+        console.warn(`pending-build-ledger-pruned-stale IDs: ${JSON.stringify(stale)}`);
+    return rewritePendingBuilds(ledgers.record, ledgers.pendingBuilds.ids.length, ledgers.pendingBuilds.ids.filter((id) => current.has(id)));
 }
 export async function buildLedgersAllowNativeRepair() {
     const ledgers = await buildLedgers();

package/dist/pnpm-install/pnpm-install-fake-pnpm.test-helpers.mjs

@@ -15,6 +15,11 @@ calls=0
 if [ -f "$PNPM_CALLS" ]; then calls="$(cat "$PNPM_CALLS")"; fi
 calls=$((calls + 1))
 printf '%s' "$calls" > "$PNPM_CALLS"
+write_modules() {
+  mkdir -p "$PNPM_NODE_MODULES/.pnpm"
+  cp pnpm-lock.yaml "$PNPM_NODE_MODULES/.pnpm/lock.yaml"
+  printf 'virtualStoreDir: .pnpm\npendingBuilds: [%s]\n' "$1" > "$PNPM_NODE_MODULES/.modules.yaml"
+}
 print_release_age_violation() {
   printf '%s\\n' '✗ Lockfile failed supply-chain policy check (1 entries in 0.1s)'
   printf '%s\\n' '[ERR_PNPM_MINIMUM_RELEASE_AGE_VIOLATION] 1 lockfile entries failed verification:'
@@ -31,36 +36,36 @@ fi
 if [ -n "\${PNPM_SLEEP_SECONDS:-}" ]; then sleep "$PNPM_SLEEP_SECONDS"; fi
 if [ "\${1:-}" != rebuild ] && [ "\${PNPM_INVALID_PENDING_BUILDS:-0}" = 1 ]; then
   mkdir -p "$PNPM_NODE_MODULES"
-  printf 'pendingBuilds: invalid\n' > "$PNPM_NODE_MODULES/.modules.yaml"
+  printf 'virtualStoreDir: .pnpm\npendingBuilds: invalid\n' > "$PNPM_NODE_MODULES/.modules.yaml"
 elif [ "\${1:-}" != rebuild ] && [ -n "\${PNPM_PENDING_BUILDS:-}" ]; then
   mkdir -p "$PNPM_NODE_MODULES"
-  printf 'pendingBuilds: [%s]\\n' "$PNPM_PENDING_BUILDS" > "$PNPM_NODE_MODULES/.modules.yaml"
+  write_modules "$PNPM_PENDING_BUILDS"
 elif [ ! -f "$PNPM_NODE_MODULES/.modules.yaml" ]; then
   mkdir -p "$PNPM_NODE_MODULES"
-  printf 'pendingBuilds: []\\n' > "$PNPM_NODE_MODULES/.modules.yaml"
+  write_modules ''
 fi
 case " $* " in
   *' rebuild --pending --workspace-root '*)
-    printf 'pendingBuilds: [%s]\n' "\${PNPM_WORKSPACE_ROOT_REBUILD_PENDING_BUILDS:-}" > "$PNPM_NODE_MODULES/.modules.yaml"
+    write_modules "\${PNPM_WORKSPACE_ROOT_REBUILD_PENDING_BUILDS:-}"
     ;;
   *' rebuild '*)
     if [ "\${PNPM_REPAIR_NATIVE_ON_REBUILD:-0}" = 1 ]; then
       cp "$PNPM_NATIVE_REPLACEMENT" "$PNPM_NATIVE_ADDON"
     fi
     if [ "\${PNPM_REBUILD_INVALID_LEDGER:-0}" = 1 ]; then
-      printf 'pendingBuilds: invalid\n' > "$PNPM_NODE_MODULES/.modules.yaml"
+      printf 'virtualStoreDir: .pnpm\npendingBuilds: invalid\n' > "$PNPM_NODE_MODULES/.modules.yaml"
     elif [ "\${PNPM_REBUILD_REQUIRES_DEDUPED:-0}" = 1 ] && sed -n 's/.*\\[\\(.*\\)\\].*/\\1/p' "$PNPM_NODE_MODULES/.modules.yaml" | tr ',' '\\n' | sed 's/^ *//; s/ *$//' | sort | uniq -d | grep -q .; then
       cp "$PNPM_NODE_MODULES/.modules.yaml" "$PNPM_NODE_MODULES/.modules.yaml.rebuild-left-pending"
     elif [ -n "\${PNPM_REBUILD_PENDING_BUILDS:-}" ]; then
-      printf 'pendingBuilds: [%s]\n' "$PNPM_REBUILD_PENDING_BUILDS" > "$PNPM_NODE_MODULES/.modules.yaml"
+      write_modules "$PNPM_REBUILD_PENDING_BUILDS"
     else
-      printf 'pendingBuilds: []\n' > "$PNPM_NODE_MODULES/.modules.yaml"
+      write_modules ''
     fi
     if [ "\${PNPM_REBUILD_BREAK_LINK:-0}" = 1 ]; then rm -f "$PNPM_DEPENDENCY_LINK"; fi
     ;;
   *' --force '*)
     if [ -z "\${PNPM_PENDING_BUILDS:-}" ]; then
-      printf 'pendingBuilds: []\n' > "$PNPM_NODE_MODULES/.modules.yaml"
+      write_modules ''
     fi
     if [ "\${PNPM_DELETE_NATIVE:-0}" = 1 ]; then
       rm -f "$PNPM_NATIVE_ADDON"

package/dist/pnpm-install/pnpm-install-fixture.test-helpers.mjs

@@ -18,10 +18,11 @@ export async function makeFixture() {
     const pnpmBin = join(root, 'bin');
     const pnpmLog = join(root, 'pnpm.log');
     const summary = join(root, 'summary.md');
+    const lockfile = 'lockfileVersion: 9\nimporters:\n  .: {}\n  backend: {}\n  packages/consumer: {}\n  packages/dependency: {}\npackages:\n  dependency: {}\n';
     await Promise.all([
         writeJson(join(root, 'package.json'), { name: 'fixture-root', private: true }),
         writeFile(join(root, 'pnpm-workspace.yaml'), 'packages:\n  - packages/*\nminimumReleaseAge: 2880\n'),
-        writeFile(join(root, 'pnpm-lock.yaml'), 'lockfileVersion: 9\npackages: {}\n'),
+        writeFile(join(root, 'pnpm-lock.yaml'), lockfile),
         writeJson(join(consumer, 'package.json'), {
             name: '@fixture/consumer',
             dependencies: { '@fixture/dependency': 'workspace:^' },

package/dist/retrospective-transcript/index.mjs

@@ -2,6 +2,7 @@ import { existsSync, globSync } from 'node:fs';
 import { readFile } from 'node:fs/promises';
 import { homedir } from 'node:os';
 import { basename, dirname, join } from 'node:path';
+import { inspectHarnessEnvironment, selectHarnessSession, } from '../agent-harness-identity/index.mjs';
 import { codexChildren, codexIdentity, computeCodex } from './codex.mjs';
 import { segmentCodex } from './codex-segment.mjs';
 import { computeClaude } from './claude.mjs';
@@ -28,9 +29,8 @@ export function resolveTranscriptFile(options) {
     }
     const env = options.env ?? process.env;
     const sessionId = options.sessionId ??
-        ['CODEX_THREAD_ID', 'CLAUDE_CODE_SESSION_ID', 'CURSOR_SESSION_ID', 'GROK_SESSION_ID']
-            .map((key) => env[key])
-            .find(Boolean);
+        selectHarnessSession(inspectHarnessEnvironment(env), ['codex', 'claude', 'cursor', 'grok'])
+            ?.sessionId;
     if (!sessionId)
         return {
             error: 'no session id (pass --session-id or set CODEX_THREAD_ID, CLAUDE_CODE_SESSION_ID, CURSOR_SESSION_ID, or GROK_SESSION_ID)',

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "vouchington-tooling",
-  "version": "0.12.3",
+  "version": "0.13.0",
   "description": "Vouchington CLI and extractable tooling libraries.",
   "homepage": "https://github.com/vouchington/vouchington-tooling/tree/main/packages/vouchington-tooling#readme",
   "bugs": {
@@ -33,6 +33,11 @@
       "import": "./dist/index.mjs",
       "default": "./dist/index.mjs"
     },
+    "./agent-harness-identity": {
+      "types": "./dist/agent-harness-identity/index.d.mts",
+      "import": "./dist/agent-harness-identity/index.mjs",
+      "default": "./dist/agent-harness-identity/index.mjs"
+    },
     "./skill-discovery": {
       "types": "./dist/skill-discovery/index.d.mts",
       "import": "./dist/skill-discovery/index.mjs",