chore: sync Harlan upstream and adapt review skills - #22

…arlan-zw#363)

…w#386)

* fix(github-agent): verify conflict deletions and index scope

* fix(github-agent): preserve Git paths and digest bytes

…harlan-zw#387)

* fix(github-agent): normalize poll identity and require check evidence

* fix(github-agent): require base evidence for conflict failures

…arlan-zw#388)

* fix(github-agent): keep Baseline repair independent of its trigger

* fix(github-agent): keep Review snapshots from retiring Baseline work

* fix(github-agent): wait for Baseline retirement before Review

* fix(github-agent): retire obsolete Baseline ActionRequired

* fix(github-agent): resume Review after verified Baseline recovery

* fix(github-agent): release completed Baseline repair waits

…zw#391)

…rlan-zw#393)

* docs(skills): clarify email and Chrome identities

* feat(browser): add prompt-free Clients and Agent Chrome

* test(browser): run identity checks in CI

* docs(browser): default to Agent with personal login fallback

…#395)

…arlan-zw#397)

…lan-zw#400)

…harlan-zw#407)

…n-zw#408)

…#410)

…rlan-zw#412)

…-zw#414)

…zw#413)

…#635)

Co-authored-by: Harlan GitHub Agent <harlan-github-agent[bot]@users.noreply.github.com>

Co-authored-by: Harlan GitHub Agent <harlan-github-agent[bot]@users.noreply.github.com>

…n-zw#637)

Committed screenshots prevented every immutable source and diff read. Preserve text evidence and expose binary metadata without changing review policy.

Co-authored-by: Harlan GitHub Agent <harlan-github-agent[bot]@users.noreply.github.com>

…w#640)

Co-authored-by: Harlan GitHub Agent <harlan-github-agent[bot]@users.noreply.github.com>

…#639)

Co-authored-by: Harlan GitHub Agent <harlan-github-agent[bot]@users.noreply.github.com>

…w#643)

* fix(github-agent): resume stored Review publication retries

* fix(github-agent): limit Review recovery to existing retries

* fix(github-agent): retain Review publication retry lineage

---------

Co-authored-by: Harlan GitHub Agent <harlan-github-agent[bot]@users.noreply.github.com>

* fix(vitals): bound Scan detail reads and report missing proof

* fix(vitals): preserve missing metric coverage

* fix(vitals): describe measured persistence after coverage gaps

* fix(vitals): split persistence evidence into short sentences

---------

Co-authored-by: Harlan GitHub Agent <harlan-github-agent[bot]@users.noreply.github.com>

…#641)

* fix(github-agent): authenticate shared SEO routine workers

* fix(github-agent): keep guest secrets out of launcher arguments

* fix(github-agent): authenticate Routine issue implementations

---------

Co-authored-by: Harlan GitHub Agent <harlan-github-agent[bot]@users.noreply.github.com>

Co-authored-by: Harlan GitHub Agent <harlan-github-agent[bot]@users.noreply.github.com>

…uxt/fonts 1.0 emits fonts as Vite build assets under /_nuxt/fonts, so the dashboard server drops its dead /_fonts route. @pierre/diffs stays on 1.2.0: every later release (harlan-zw#608)

Co-authored-by: Harlan GitHub Agent <harlan-github-agent[bot]@users.noreply.github.com>

Co-authored-by: Harlan GitHub Agent <harlan-github-agent[bot]@users.noreply.github.com>

* fix(vitals): compare Scans within one Lighthouse release

* fix(vitals): allow required local performance builds

* fix(routines): supply bounded ownership evidence

* fix(vitals): block unproved local performance claims

---------

Co-authored-by: Harlan GitHub Agent <harlan-github-agent[bot]@users.noreply.github.com>

* chore(deps): align Octorun Vitest with catalog

* fix(sandbox): expose installed browser packages

Resolve canonical pnpm package entry points and mount only their declared dependency closure. Start browser commands through the pinned Node runtime without exposing controller browser state.

---------

Co-authored-by: Harlan GitHub Agent <harlan-github-agent[bot]@users.noreply.github.com>

Browser setup invokes npm from the worker PATH. Resolve its installed package and bundled dependencies through the existing readonly mounts and pinned Node launcher. Keep the larger dependency bound specific to npm.

Co-authored-by: Harlan GitHub Agent <harlan-github-agent[bot]@users.noreply.github.com>

Co-authored-by: Harlan GitHub Agent <harlan-github-agent[bot]@users.noreply.github.com>

* fix(sandbox): bootstrap browsers with Node 24

* fix(sandbox): retain package command variants

* fix(sandbox): repair missing browser runtime packages

* test(sandbox): recover interrupted browser setup

* fix(sandbox): narrow npm package lookup explicitly

---------

Co-authored-by: Harlan GitHub Agent <harlan-github-agent[bot]@users.noreply.github.com>

Co-authored-by: Harlan GitHub Agent <harlan-github-agent[bot]@users.noreply.github.com>

)

Co-authored-by: Harlan GitHub Agent <harlan-github-agent[bot]@users.noreply.github.com>

…an-zw#655)

* feat(vitals): validate retained performance comparisons

* feat(vitals): gate issue publication on measured evidence

* fix(vitals): isolate evidence helper from active server

---------

Co-authored-by: Harlan GitHub Agent <harlan-github-agent[bot]@users.noreply.github.com>

Merge harlan-zw/harlan-agent-kit main (9c94eb4, 472 commits) into the
Wolfstar fork. Upstream was rebranded and formatted with Oxfmt before the
three-way merge, so only real fork changes conflicted.

- Keep Oxlint and Oxfmt in place of ESLint, and the Claude provider.
- Move Claude support to an idempotent final schema step so upstream
  migrations keep their numbers. Journals at the fork's old version 58
  receive the restart operation columns they skipped.
- Keep external Harlan packages and Skill sources under harlan-zw.
- CLAUDE.md now imports AGENTS.md, following upstream's rename.
- Declare pr-evidence, post-merge-cleanup, review-replies, and
  review-findings by Aref Mozafari in .skills/skilld.json, pinned by commit.