fix(ci): restore typecheck/format scripts and re-format drift

.beans/dotfiles-7n69--restore-typecheckformat-scripts-dropped-in-devcont.md

@@ -0,0 +1,22 @@
+---
+# dotfiles-7n69
+title: Restore typecheck/format scripts dropped in devcontainer refactor
+status: in-progress
+type: bug
+priority: normal
+created_at: 2026-05-08T16:36:14Z
+updated_at: 2026-05-08T16:44:35Z
+---
+
+CI has been failing since 60c24bc (Nov 25, 2025) — refactor that extracted the devcontainer to pickled-devcontainer over-deleted from package.json: it stripped the entire scripts block (typecheck, format, format:check, lint, test) and dropped typescript from devDependencies, when it only meant to remove the devcontainer:\* scripts.
+
+The .github/workflows/ci.yml workflow still calls npm run typecheck and npm run format:check, and CLAUDE.md still documents these scripts as the test suite. tsconfig.json + home/.finicky.ts also still exist.
+
+## Checklist
+
+- [x] Diagnose root cause (package.json scripts deleted by 60c24bc)
+- [x] Restore scripts block to package.json
+- [x] Re-add typescript to devDependencies
+- [x] Run npm install to regenerate lockfile
+- [x] Run npm run lint locally to verify (typecheck passes; format:check fixed 35 drifted files)
+- [ ] Push branch, open PR, watch CI go green

agents/.skill-lock.json

@@ -168,4 +168,4 @@
     "warp",
     "claude-code"
   ]
-}
+}

bin/md2rich

@@ -9,7 +9,7 @@
 set -euo pipefail
 
 usage() {
-    cat <<EOF
+  cat << EOF
 Usage: md2rich [file.md]
 
 Convert markdown to rich text and copy to clipboard.
@@ -21,40 +21,40 @@ Examples:
     cat notes.md | md2rich
     echo "**bold** and *italic*" | md2rich
 EOF
-    exit "${1:-0}"
+  exit "${1:-0}"
 }
 
 # Check dependencies
-if ! command -v pandoc &>/dev/null; then
-    echo "error: pandoc is required but not installed" >&2
-    echo "  brew install pandoc" >&2
-    exit 1
+if ! command -v pandoc &> /dev/null; then
+  echo "error: pandoc is required but not installed" >&2
+  echo "  brew install pandoc" >&2
+  exit 1
 fi
 
 # Handle --help
 [[ "${1:-}" == "-h" || "${1:-}" == "--help" ]] && usage 0
 
 # Get input from file or stdin
 if [[ $# -gt 0 ]]; then
-    # File argument
-    if [[ ! -f "$1" ]]; then
-        echo "error: file not found: $1" >&2
-        exit 1
-    fi
-    input=$(cat "$1")
+  # File argument
+  if [[ ! -f "$1" ]]; then
+    echo "error: file not found: $1" >&2
+    exit 1
+  fi
+  input=$(cat "$1")
 else
-    # Stdin
-    if [[ -t 0 ]]; then
-        echo "error: no input provided (pass a file or pipe markdown)" >&2
-        usage 1
-    fi
-    input=$(cat)
+  # Stdin
+  if [[ -t 0 ]]; then
+    echo "error: no input provided (pass a file or pipe markdown)" >&2
+    usage 1
+  fi
+  input=$(cat)
 fi
 
 # Check for empty input
 if [[ -z "$input" ]]; then
-    echo "error: input is empty" >&2
-    exit 1
+  echo "error: input is empty" >&2
+  exit 1
 fi
 
 # Convert and copy

bin/tmux-command-palette

@@ -4,9 +4,9 @@
 #
 
 # Colors (catppuccin mocha)
-blue='\033[38;2;137;180;250m'   # #89b4fa
-green='\033[38;2;166;227;161m'  # #a6e3a1
-dim='\033[38;2;108;112;134m'    # #6c7086 (overlay0)
+blue='\033[38;2;137;180;250m'  # #89b4fa
+green='\033[38;2;166;227;161m' # #a6e3a1
+dim='\033[38;2;108;112;134m'   # #6c7086 (overlay0)
 reset='\033[0m'
 
 # Format: colored key on left, description on right, with consistent alignment
@@ -26,11 +26,11 @@ formatted=$(tmux list-keys -N | awk -v blue="$blue" -v green="$green" -v dim="$d
 }')
 
 target=$(echo -e "$formatted" | fzf-tmux -p 80%,60% \
-    --ansi \
-    --no-sort \
-    --border-label ' command palette ' \
-    --prompt '  ' \
-    --bind 'tab:down,btab:up')
+  --ansi \
+  --no-sort \
+  --border-label ' command palette ' \
+  --prompt '  ' \
+  --bind 'tab:down,btab:up')
 
 [[ -z "$target" ]] && exit
 
@@ -44,7 +44,7 @@ full=$(tmux list-keys -T prefix | grep -F " ${key} " | head -1)
 
 # If not found in prefix table, try other tables
 if [[ -z "$full" ]]; then
-    full=$(tmux list-keys | grep -F " ${key} " | head -1)
+  full=$(tmux list-keys | grep -F " ${key} " | head -1)
 fi
 
 [[ -z "$full" ]] && exit
@@ -54,7 +54,7 @@ cmd=$(echo "$full" | awk '{ $1=$2=$3=$4=""; print $0 }' | sed 's/^ *//')
 
 # Handle copy-mode bindings
 if [[ "$cmd" == *"copy-mode"* ]] && [[ "$full" != *"prefix"* ]]; then
-    tmux copy-mode
+  tmux copy-mode
 fi
 
 tmux $cmd

claude/README.md

@@ -74,16 +74,16 @@ Stack files hold per-topic permissions and sandbox arrays (no scalars):
   "permissions": {
     "allow": [],
     "ask": [],
-    "deny": []
+    "deny": [],
   },
   "sandbox": {
     "network": {
-      "allowedHosts": []
+      "allowedHosts": [],
     },
     "filesystem": {
-      "allowWrite": []
-    }
-  }
+      "allowWrite": [],
+    },
+  },
 }
 ```
 
@@ -110,19 +110,17 @@ Create `claude/stacks/foo.jsonc`:
 {
   // Foo tool
   "permissions": {
-    "allow": [
-      "Bash(foo:*)"
-    ]
+    "allow": ["Bash(foo:*)"],
   },
   // Optional: sandbox config
   "sandbox": {
     "network": {
-      "allowedHosts": ["foo.example.com"]
+      "allowedHosts": ["foo.example.com"],
     },
     "filesystem": {
-      "allowWrite": ["~/.foo"]
-    }
-  }
+      "allowWrite": ["~/.foo"],
+    },
+  },
 }
 ```
 
@@ -176,11 +174,11 @@ claude-permissions cleanup --force
 
 ### Permission Lists
 
-| List    | Behavior                                                           |
-| ------- | ------------------------------------------------------------------ |
-| `allow` | Always permitted without prompting                                 |
+| List    | Behavior                                                            |
+| ------- | ------------------------------------------------------------------- |
+| `allow` | Always permitted without prompting                                  |
 | `ask`   | Always prompts for confirmation (useful for destructive operations) |
-| `deny`  | Always blocked                                                     |
+| `deny`  | Always blocked                                                      |
 
 ### Permission Format
 
@@ -238,5 +236,5 @@ jq '.sandbox.network.allowedHosts' ~/.claude/settings.json
 jq '.sandbox.filesystem.allowWrite' ~/.claude/settings.json
 
 # Verify claudeconfig.sh output
-./claudeconfig.sh  # Watch for "Loaded base role", "Merged X stack" messages
+./claudeconfig.sh # Watch for "Loaded base role", "Merged X stack" messages
 ```

claude/stacks/beans.jsonc

@@ -7,11 +7,8 @@
       "Bash(beans query:*)",
       "Bash(beans show:*)",
       "Bash(beans update:*)",
-      "Bash(beans:*)"
+      "Bash(beans:*)",
     ],
-    "ask": [
-      "Bash(beans archive:*)",
-      "Bash(beans delete:*)"
-    ]
-  }
+    "ask": ["Bash(beans archive:*)", "Bash(beans delete:*)"],
+  },
 }

claude/stacks/colima.jsonc

@@ -12,16 +12,14 @@
       "Bash(colima stop:*)",
       "Bash(colima template:*)",
       "Bash(colima version:*)",
-      "Bash(colima:*)"
-    ]
+      "Bash(colima:*)",
+    ],
   },
 
   // source: agent-safehouse
   "sandbox": {
     "filesystem": {
-      "allowWrite": [
-        "~/.colima"
-      ]
-    }
-  }
+      "allowWrite": ["~/.colima"],
+    },
+  },
 }

claude/stacks/datadog.jsonc

@@ -1,10 +1,7 @@
 {
   "sandbox": {
     "network": {
-      "allowedHosts": [
-        "app.datadoghq.com",
-        "api.datadoghq.com"
-      ]
+      "allowedHosts": ["app.datadoghq.com", "api.datadoghq.com"],
     },
-  }
+  },
 }

claude/stacks/docs.jsonc

@@ -1,18 +1,12 @@
 {
   // Reference documentation sites
   "permissions": {
-    "allow": [
-      "WebFetch(domain:karafka.io)",
-      "WebFetch(domain:lima-vm.io)"
-    ]
+    "allow": ["WebFetch(domain:karafka.io)", "WebFetch(domain:lima-vm.io)"],
   },
   // source: agent-safehouse
   "sandbox": {
     "network": {
-      "allowedHosts": [
-        "karafka.io",
-        "lima-vm.io"
-      ]
-    }
-  }
+      "allowedHosts": ["karafka.io", "lima-vm.io"],
+    },
+  },
 }

claude/stacks/dotslash.jsonc

@@ -1,16 +1,12 @@
 {
   // DotSlash tool launcher (Meta)
   "permissions": {
-    "allow": [
-      "Bash(dotslash:*)"
-    ]
+    "allow": ["Bash(dotslash:*)"],
   },
 
   "sandbox": {
     "filesystem": {
-      "allowWrite": [
-        "~/Library/Caches/dotslash"
-      ]
-    }
-  }
+      "allowWrite": ["~/Library/Caches/dotslash"],
+    },
+  },
 }

claude/stacks/git.jsonc

@@ -61,7 +61,7 @@
       "Bash(git tag:*)",
 
       // hk git hooks tool (from old web.json)
-      "WebFetch(domain:hk.jdx.dev)"
+      "WebFetch(domain:hk.jdx.dev)",
     ],
 
     // Operations that warrant confirmation
@@ -70,7 +70,7 @@
       "Bash(git clean -fdx:*)",
       "Bash(git push --force:*)",
       "Bash(git push -f:*)",
-      "Bash(git reset --hard:*)"
+      "Bash(git reset --hard:*)",
     ],
 
     // Destructive operations that should never be auto-allowed
@@ -82,16 +82,14 @@
       "Bash(git push --force upstream main:*)",
       "Bash(git push --force upstream master:*)",
       "Bash(git push -f upstream main:*)",
-      "Bash(git push -f upstream master:*)"
-    ]
+      "Bash(git push -f upstream master:*)",
+    ],
   },
 
   // source: agent-safehouse
   "sandbox": {
     "network": {
-      "allowedHosts": [
-        "hk.jdx.dev"
-      ]
-    }
-  }
+      "allowedHosts": ["hk.jdx.dev"],
+    },
+  },
 }

claude/stacks/go.jsonc

@@ -26,8 +26,8 @@
       "Bash(goreleaser build:*)",
       "Bash(goreleaser check:*)",
       "Bash(goreleaser release:*)",
-      "Bash(goreleaser:*)"
-    ]
+      "Bash(goreleaser:*)",
+    ],
   },
 
   // source: agent-safehouse
@@ -40,8 +40,8 @@
         "~/.config/go",
         "~/.cache/golangci-lint",
         "~/Library/Caches/golangci-lint",
-        "~/.local/share/go"
-      ]
-    }
-  }
+        "~/.local/share/go",
+      ],
+    },
+  },
 }

claude/stacks/mcp.jsonc

@@ -6,10 +6,8 @@
       "mcp__MCPProxy__call_tool_write",
       "mcp__MCPProxy__read_cache",
       "mcp__MCPProxy__retrieve_tools",
-      "mcp__MCPProxy__upstream_servers"
+      "mcp__MCPProxy__upstream_servers",
     ],
-    "ask": [
-      "mcp__MCPProxy__call_tool_destructive"
-    ]
-  }
+    "ask": ["mcp__MCPProxy__call_tool_destructive"],
+  },
 }