Integrate remaining Transcripted PRs with verified repairs and strict boundaries

.agent-review/AGENTS.md

@@ -1,6 +1,8 @@
-# Agent Review Folder
+# Agent review folder
 
-Only write sanitized PR review evidence here.
+Sanitized review evidence from local agent runs. `README.md` here has the rules; the short version:
 
-Do not use existing images in this folder as current UI truth. They may belong
-to older branches or closed issues.
+- Only sanitized material belongs here: no private transcripts, customer data, tokens, personal paths, or real user content.
+- `visuals/` holds screenshots or GIFs for PRs that change UI, app copy, or user-facing flow. Prefer small PNGs; GIFs only when motion matters. `.agents/test-matrix.yml` expects them for UI changes.
+- Nothing here is current UI truth. A visual is evidence for the PR or issue it came from. For the current look, read the code or take a fresh screenshot from your branch.
+- `test-audit-2026-09-30/` is a point-in-time test audit. It lists tests deleted since, so `scripts/dev/check-doc-paths.py` skips its files; don't trust its paths.

.agents/AGENTS.md

@@ -0,0 +1,35 @@
+# .agents
+
+Machine-read config for agent workflow and the ratchet baselines behind the repo checks. Not code, but wrong edits here silently loosen a guard.
+
+## Files
+
+- `agent-contract.json` — areas, path prefixes, owning docs, invariants, manual proof. Read by `scripts/dev/agent-context.py` and `scripts/dev/agent-check.py`. A new `AGENTS.md` for an area belongs in its `docs` list.
+- `test-matrix.yml` — changed path to required checks. Drives `bash check.sh`, `scripts/dev/agent-preflight.sh`, and `scripts/dev/test-matrix-checks.py`. Commands run only from the allowed executables in `scripts/dev/agent-check.py`.
+- `qa-gates.yml`, `board-scorecard.yml` — risk-to-gate map and per-board scoring registry (`docs/board-scorecard.md`).
+- `modules.json` — every `Sources/**/*.swift` file maps to one module, with the modules and Core tiers it may name. A new top-level `Sources/` folder needs an entry here and an `AGENTS.md`.
+- `plugins/marketplace.json` — local plugin marketplace entry for the companion build.
+- `*-baseline.json` — grandfathered violations. See below.
+
+## Baselines only shrink
+
+| Baseline | Guard | Shrink with |
+| --- | --- | --- |
+| `file-size-baseline.json` (Swift files over 800 lines) | `scripts/dev/check-file-size.py` | `--shrink` |
+| `test-shape-baseline.json` (source-text and wall-clock tests) | `scripts/dev/check-test-shape.py` | `--shrink` |
+| `source-pin-baseline.json` (`resolved-pins` counts per test file) | `scripts/dev/check-source-pins.py` | `--count-baseline --shrink` |
+| `concurrency-baseline.json` (Swift 6 warnings per `Sources/` folder) | `scripts/dev/concurrency-census.sh` | `--shrink` |
+
+- The `--shrink` flags only lower existing counts and drop dead entries. They never add a folder or raise a count; new violations require a reviewed human edit.
+- Raising a baseline or adding an entry is a reviewed human edit with the reason in the PR. Don't do it to make a check pass; split the file, move the type down, or pass plain values instead.
+- A baseline entry that no longer applies fails the check until you shrink it, so the files carry no dead entries.
+- `check-module-boundaries.py` is a lexer. A surprising violation is more likely a checker bug than a real edge: fix the checker or add to `ambiguousNames` with a reason, don't baseline noise.
+- `concurrency-census.sh` needs prebuilt deps (`bash build-deps.sh`).
+
+## Editing the contract and matrix
+
+- Keep `agent-contract.json` `docs` entries pointing at files that exist, and consistent with `agentsDoc` in `modules.json`.
+- Run `python3 scripts/dev/agent-context.py <paths>` to see what an area change resolves to, and `python3 scripts/dev/agent-check.py --self-test` after changing the matrix or contract.
+- `AGENTS.md` at the repo root wins for workflow when it disagrees with these files.
+
+Module boundaries have no baseline or shrink mode: every forbidden crossing fails.

.agents/agent-contract.json

@@ -149,7 +149,7 @@
         "docs/release-packaging.md",
         "docs/sparkle-updates.md"
       ],
-      "docs": ["docs/release-packaging.md", "docs/sparkle-updates.md"],
+      "docs": ["scripts/release/AGENTS.md", "docs/release-packaging.md", "docs/sparkle-updates.md"],
       "keywords": ["release", "beta", "signing", "notarization", "sparkle", "homebrew", "appcast", "website", "download page", "transcripted.app", "notarize", "release candidate", "dmg"],
       "owns": "Distribution configuration, packaging, signing, notarization, Sparkle, and Homebrew.",
       "invariants": [
@@ -162,7 +162,7 @@
     {
       "id": "tests",
       "path_prefixes": ["Tests/"],
-      "docs": ["Tests/README.md"],
+      "docs": ["Tests/AGENTS.md", "Tests/README.md"],
       "keywords": ["test", "fast tests", "integration", "e2e", "fixture", "qa"],
       "owns": "Fast tests, package tests, deterministic smoke fixtures, and test contracts.",
       "invariants": [
@@ -176,7 +176,7 @@
     },
     {
       "id": "agent-workflow",
-      "path_prefixes": [".agents/", ".github/", "scripts/dev/"],
+      "path_prefixes": ["scripts/dev/"],
       "exact_paths": ["AGENTS.md", "CLAUDE.md", "WORKFLOW.md"],
       "docs": ["AGENTS.md", "docs/agent-closeout.md"],
       "keywords": ["agent", "codex", "claude", "preflight", "workflow", "review", "context"],
@@ -198,7 +198,133 @@
         "Tools remain local-first and consume saved artifacts through documented seams.",
         "Run the owning package tests for every tool change."
       ],
-      "manual_proof": ["Host-client connection behavior for MCP or installed tooling changes."]
+      "manual_proof": []
+    },
+    {
+      "id": "tools-capture-kit",
+      "path_prefixes": [
+        "Tools/TranscriptedCaptureKit/"
+      ],
+      "docs": [
+        "Tools/TranscriptedCaptureKit/AGENTS.md"
+      ],
+      "keywords": ["capture kit", "capture-library parsing"],
+      "owns": "Shared capture-library resolution and Markdown parsing.",
+      "invariants": [
+        "Tools remain local-first and consume saved artifacts through documented seams."
+      ],
+      "manual_proof": []
+    },
+    {
+      "id": "tools-cli",
+      "path_prefixes": [
+        "Tools/TranscriptedCLI/"
+      ],
+      "docs": [
+        "Tools/TranscriptedCLI/AGENTS.md"
+      ],
+      "keywords": ["offline cli", "transcripted cli"],
+      "owns": "Local capture CLI and offline transcription.",
+      "invariants": [
+        "Tools remain local-first and consume saved artifacts through documented seams."
+      ],
+      "manual_proof": []
+    },
+    {
+      "id": "tools-mcp",
+      "path_prefixes": [
+        "Tools/TranscriptedMCP/"
+      ],
+      "docs": [
+        "Tools/TranscriptedMCP/AGENTS.md"
+      ],
+      "keywords": ["mcp", "host-client"],
+      "owns": "Saved-capture MCP tools and opt-in companion controls.",
+      "invariants": [
+        "Tools remain local-first and consume saved artifacts through documented seams."
+      ],
+      "manual_proof": [
+        "Host-client connection behavior for MCP or installed tooling changes."
+      ]
+    },
+    {
+      "id": "tools-qa",
+      "path_prefixes": [
+        "Tools/TranscriptedQA/"
+      ],
+      "docs": [
+        "Tools/TranscriptedQA/AGENTS.md"
+      ],
+      "keywords": ["qa tool", "artifact validator"],
+      "owns": "Artifact validators and isolated smoke tools.",
+      "invariants": [
+        "Tools remain local-first and consume saved artifacts through documented seams."
+      ],
+      "manual_proof": []
+    },
+    {
+      "id": "tools-speaker-eval",
+      "path_prefixes": [
+        "Tools/SpeakerEvalHarness/"
+      ],
+      "docs": [
+        "Tools/SpeakerEvalHarness/AGENTS.md"
+      ],
+      "keywords": ["speaker eval", "corpus evaluation"],
+      "owns": "Headless speaker evaluation and corpus tooling.",
+      "invariants": [
+        "Tools remain local-first and consume saved artifacts through documented seams."
+      ],
+      "manual_proof": []
+    },
+    {
+      "id": "tools-lab",
+      "path_prefixes": [
+        "Tools/TranscriptedLab/"
+      ],
+      "docs": [
+        "Tools/TranscriptedLab/AGENTS.md"
+      ],
+      "keywords": ["transcripted lab", "native workbench"],
+      "owns": "Native experiment workbench and CLI.",
+      "invariants": [
+        "Tools remain local-first and consume saved artifacts through documented seams."
+      ],
+      "manual_proof": []
+    },
+    {
+      "id": "tools-live",
+      "path_prefixes": [
+        "Tools/TranscriptedLive/"
+      ],
+      "docs": [
+        "Tools/TranscriptedLive/AGENTS.md"
+      ],
+      "keywords": ["live broker", "live transport"],
+      "owns": "Opt-in live meeting broker and transports.",
+      "invariants": [
+        "Tools remain local-first and consume saved artifacts through documented seams."
+      ],
+      "manual_proof": [
+        "Live transport and client connection behavior."
+      ]
+    },
+    {
+      "id": "tools-companion",
+      "path_prefixes": [
+        "Tools/TranscriptedCompanion/"
+      ],
+      "docs": [
+        "Tools/TranscriptedCompanion/AGENTS.md"
+      ],
+      "keywords": ["companion plugin", "plugin packaging"],
+      "owns": "Portable plugin packaging and fixture tests.",
+      "invariants": [
+        "Tools remain local-first and consume saved artifacts through documented seams."
+      ],
+      "manual_proof": [
+        "Host-client connection behavior for installed companion tooling."
+      ]
     },
     {
       "id": "scripts-ops",
@@ -318,6 +444,26 @@
         "Do not infer product behavior from archived or generated material."
       ],
       "manual_proof": []
+    },
+    {
+      "id": "agent-config",
+      "path_prefixes": [".agents/"],
+      "exact_paths": [],
+      "docs": ["AGENTS.md", ".agents/AGENTS.md"],
+      "keywords": [],
+      "owns": "Machine-readable agent ownership, proof routing and shrink-only baselines.",
+      "invariants": ["Use one machine-readable source for ownership and proof routing.", "Do not duplicate executable check rules in prose.", "Scale orchestration with risk instead of file count alone."],
+      "manual_proof": []
+    },
+    {
+      "id": "github-workflows",
+      "path_prefixes": [".github/"],
+      "exact_paths": [],
+      "docs": ["AGENTS.md", ".github/AGENTS.md"],
+      "keywords": [],
+      "owns": "GitHub workflows, branch-check contracts and trusted release automation.",
+      "invariants": ["Use one machine-readable source for ownership and proof routing.", "Do not duplicate executable check rules in prose.", "Scale orchestration with risk instead of file count alone."],
+      "manual_proof": []
     }
   ]
 }

.agents/auto-merge-lanes.json

@@ -9,7 +9,8 @@
   "blocking_labels": [
     "needs owner review",
     "do not merge",
-    "hold"
+    "hold",
+    "waiting-on-human"
   ],
   "allowed_authors": [
     "r3dbars"
@@ -37,7 +38,9 @@
     ".agents/modules.json",
     ".agents/auto-merge-lanes.json",
     "AGENTS.md",
-    "WORKFLOW.md"
+    "WORKFLOW.md",
+    "docs/automations/**",
+    "docs/threat-model.md"
   ],
   "lanes": [
     {

.agents/file-size-baseline.json

@@ -8,10 +8,9 @@
     "Sources/Meeting/MeetingImportedAudioPreparer.swift": 1052,
     "Sources/Meeting/MeetingPromptHeuristics.swift": 992,
     "Sources/Meeting/MeetingSessionController.swift": 842,
-    "Sources/Observability/AnalyticsReporter.swift": 889,
+    "Sources/Observability/AnalyticsReporter.swift": 885,
     "Sources/Observability/SparkleUpdaterController.swift": 1177,
     "Sources/Speech/ParakeetDeviceRecovery.swift": 805,
-    "Sources/Support/TranscriptedPermissionAccess.swift": 975,
     "Sources/TranscriptedCore/Audio/Audio.swift": 813,
     "Sources/TranscriptedCore/Audio/AudioDeviceRecovery.swift": 1022,
     "Sources/TranscriptedCore/Audio/CoreAudioSystemAudioCapture.swift": 1056,
@@ -21,16 +20,12 @@
     "Sources/TranscriptedCore/Services/FailedTranscriptionManager.swift": 856,
     "Sources/TranscriptedCore/Speaker/RetroactiveSpeakerUpdater.swift": 1421,
     "Sources/TranscriptedCore/Speaker/SpeakerProfileProvenance.swift": 885,
-    "Sources/TranscriptedKeyboard/GhostInputController.swift": 1434,
-    "Sources/TranscriptedWriting/Core/Text/WritingSecretScrubber.swift": 1459,
-    "Sources/TranscriptedWriting/Runtime/PersonalHistory/PersonalHistoryStore.swift": 870,
+    "Sources/TranscriptedWriting/Core/Text/WritingSecretScrubber.swift": 1286,
     "Sources/TranscriptedWriting/Runtime/ScreenMemory/ScreenCaptureService.swift": 920,
-    "Sources/UI/Overlay/MeetingOverlayController.swift": 1297,
-    "Sources/UI/Overlay/NotchIslandSpeakerReviewView.swift": 1328,
+    "Sources/UI/Overlay/MeetingOverlayController.swift": 1292,
     "Sources/UI/Overlay/NotchIslandView.swift": 1286,
     "Sources/UI/Settings/PermissionsOnboardingView.swift": 948,
     "Sources/UI/Settings/QuietHomeLibrary.swift": 1012,
-    "Sources/UI/Shared/DictionaryPastMeetingFix.swift": 894,
-    "Tools/TranscriptedQA/Sources/TranscriptedQA/Commands/UISmoke.swift": 1018
+    "Sources/UI/Shared/DictionaryPastMeetingFix.swift": 894
   }
 }

.agents/modules.json

@@ -1,5 +1,5 @@
 {
-  "_comment": "Module map for the app's Swift sources. Every Sources/**/*.swift file maps to exactly one module (longest path prefix wins). mayDependOn lists the modules whose types a module may name; Core:<tier> grants a slice of TranscriptedCore's public types (Core:core-engine is all of it). Checked by scripts/dev/check-module-boundaries.py; grandfathered crossings live in .agents/module-boundary-baseline.json. A new top-level Sources/ folder needs an entry here and an AGENTS.md.",
+  "_comment": "Module map for the app's Swift sources. Every Sources/**/*.swift file maps to exactly one module (longest path prefix wins). mayDependOn lists the modules whose types a module may name; Core:<tier> grants a slice of TranscriptedCore's public types (Core:core-engine is all of it). Checked by scripts/dev/check-module-boundaries.py; nothing is grandfathered, so every crossing fails. A new top-level Sources/ folder needs an entry here and an AGENTS.md.",
   "modules": [
     {
       "name": "Core",