[Tal Zaccai (TalZaccai)]

• Split healing into a read-only, no-secret producer and a privileged default-branch workflow_run finalizer.
• Execute only the immutable, verified default-branch healer and treat exact PR contents strictly as data in a credential-free repository.
• Reject PR-controlled package-manager/resolver code and regenerate lockfiles from sanitized inputs with trusted pnpm configuration.
• Independently verify the artifact, object graph, exact parents, tree, allowed diff, and live PR/base/head/ref/repository metadata before finalization.
• Mint the repository-scoped App token only after validation and expose it only to one clean bare-repository push process with an exact-head lease.
• Preserve legitimate generated README and lockfile healing, including App-authored pushes that retrigger normal PR checks.
• Add 20 focused offline security regressions and validate the full tools-script suite, standalone-pnpm healing, workflow parsing, formatting, frozen install, builds, repository policy, and ratchets.

Platform limitations: the finalizer becomes active only after landing on the default branch; GitHub has no atomic metadata-check/ref-update API, so the finalizer immediately revalidates metadata and uses an exact SHA lease to reject head races; hosted synchronize delivery cannot be proven offline.

[Copilot]

🟡 Changes recommended

Unresolved security vulnerabilities and healing failures undermine the intended isolation and reliability.

4 open issues

• Path traversal can overwrite the trusted healer CLI · New
• Commit verification permits CI-suppressing message suffixes · New
• Trial merge fails without configured Git committer identity · New
• Per-PR policy rejection aborts the entire healing scan · New

What changed in this PR

Hardens generated-file conflict healing by separating candidate preparation from privileged verification and pushing.

Changes:

• Splits healing into read-only producer and privileged finalizer workflows.
• Adds isolated lockfile regeneration, artifact validation, and exact-head push leases.
• Adds focused security and healing regression tests.

File	Description
ts/​tools/​scripts/​test/​generatedFileHealing.spec.mjs	Adds isolation, metadata, healing, and push tests.
ts/​tools/​scripts/​lib/​generatedFileHealing.mjs	Implements preparation, verification, and guarded pushing.
ts/​tools/​scripts/​heal-generated-files.mjs	Exposes prepare, verify, and push commands.
.github/​workflows/​heal-generated-files.yml	Creates candidates without write credentials.
.github/​workflows/​heal-generated-files-finalize.yml	Verifies candidates before minting an App token.

_{Review effort: Balanced}