test: strengthen coding standards guardrails and consolidate allowlists

[cursor]

Summary

Audited the codebase against docs/coding-standards.md (the canonical architecture rules). All 83 automated guardrail tests pass, and the full suite (2512 tests) passes after build.

This PR adds a small hardening layer to prevent future drift:

• tests/coding-standards/allowed-tools.ts — single source of truth for the 11 fixed MCP tool names and handler file paths (previously duplicated across 6 test files)
• AGENTS.md consistency checks — ensures agent guidance stays aligned with coding standards (11 tools, Zod v4, pnpm standards:check)

Standards compliance review

Rule	Status	Enforcement
11 consolidated tools only (no new registerTool)	✅	architecture.test.ts
Toolsets are pure data (no HarnessClient/Registry/logger)	✅	architecture.test.ts
Shared response extractors	✅	architecture.test.ts + structural-validation.test.ts
Scope model + no manual scope injection	✅	toolset-scope.test.ts, registry-contract.test.ts
identifierFields + operationPolicy on endpoints	✅	registry-contract.test.ts
Error handling (toMcpError / errorResult)	✅	error-handling.test.ts
No console.log() in src/	✅	architecture.test.ts
Zod v4 + .describe() on inputs	✅	architecture.test.ts, registry-metadata.test.ts
Write ops require confirmation	✅	registry-metadata.test.ts
Singleton HarnessClient	✅	architecture.test.ts
File organization	✅	file-organization.test.ts

CI (.github/workflows/ci.yml) runs pnpm standards:check on every PR.

Note on standards snapshot

The automation prompt referenced an older snapshot (10 tools, Zod v3). The current canonical docs (docs/coding-standards.md, AGENTS.md) correctly document 11 tools (including harness_schema) and Zod v4.

Checklist

• pnpm build passes
• pnpm typecheck passes
• pnpm test passes (2512 tests)
• pnpm standards:check passes (83 tests)
• No new MCP tool handlers
• No console.log() in src/

  

[CLAassistant]

Thank you for your submission! We really appreciate it. Like many open source projects, we ask that you all sign our Contributor License Agreement before we can accept your contribution.
1 out of 2 committers have signed the CLA.

✅ thisrohangupta
❌ cursoragent
_{You have signed the CLA already but the status is still pending? Let us recheck it.}