feat: extract mintcore shared library with JWKSVerifier and status endpoint

Extract shared functionality from internal/mint into internal/mintcore
module for reuse by both the mint and devmint Cloud Functions. Includes
JWKSVerifier, OIDC token handling, STS exchange, GitHub API helpers,
claims parsing, and the common handler framework.

Update provisioner to bundle mintcore alongside mint source, rewriting
go.mod replace directives for the deployed directory layout. Add embed
copies at internal/dispatch/gcf/mintsrc/mintcore/*.embed.

Move all mint tests to mintcore since the logic now lives there. Update
CLI commands (admin, inference, mint, run) to use mintcore.BuildRepoProviderID.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

Author: ggallen

CLAUDE.md

@@ -22,6 +22,8 @@ Fullsend is a platform for fully autonomous agentic development for GitHub-hoste
 
 When changing `internal/mint/main.go`, always copy it to `internal/dispatch/gcf/mintsrc/main.go.embed`. If `go.mod` or `go.sum` changed, sync those to `go.mod.embed` and `go.sum.embed` too.
 
+The `internal/mintcore/` module is shared between the mint and devmint. Its files are also embedded for Cloud Function deployment at `internal/dispatch/gcf/mintsrc/mintcore/*.embed`. When changing any file in `internal/mintcore/`, sync it to the corresponding `.embed` file under `mintsrc/mintcore/`. Note: the mint's `go.mod.embed` uses `replace mintcore => ./mintcore` (not `../mintcore`), because `provisioner.go` rewrites the replace directive at bundle time to match the deployed directory layout.
+
 **Forge abstraction:** All git forge operations must go through the `forge.Client` interface in `internal/forge/forge.go`. Do not use `exec.Command("gh", ...)` or direct GitHub API calls outside `internal/forge/github/`. See [AGENTS.md](AGENTS.md#forge-abstraction) for details.
 
 When making changes to Go code under `cmd/` or `internal/`:

README.md

@@ -42,7 +42,8 @@ This is not a product spec. It's an evolving exploration of a hard problem space
   - [konflux-ci](docs/problems/applied/konflux-ci/) — Kubernetes-native CI/CD platform (the original proving ground)
 - **[docs/plans/](docs/plans/)** — Implementation plans for accepted or in-progress designs:
   - [Universal Harness Access](docs/plans/universal-harness-access.md) — Making harnesses and agents universally accessible via URLs and paths, enabling community sharing and composability
-  - [Universal Harness Access — Implementation](docs/plans/universal-harness-access-implementation.md) — Phased PR breakdown for ADR-0038 Phase 1 (MVP)
+  - [Universal Harness Access — Phase 1 Implementation](docs/plans/universal-harness-access-phase1.md) — Phased PR breakdown for ADR-0038 Phase 1 (MVP)
+  - [Universal Harness Access — Phase 2 Implementation](docs/plans/universal-harness-access-phase2.md) — Phased PR breakdown for ADR-0038 Phase 2 (transitive dependency resolution)
   - [Agent Execution Environment](docs/plans/agent-execution-environment.md) — Sandbox and runtime environment for agent execution
   - [Vertex AI Inference Provisioning](docs/plans/vertex-inference-provisioning.md) — Provisioning and configuration for Vertex AI inference endpoints
   - [ADR-0046 Drift Scanner](docs/plans/2026-03-06-adr46-drift-scanner.md) — Implementation plan for ADR-0046 drift detection tool

docs/guides/dev/cli-internals.md

@@ -132,7 +132,7 @@ Both per-org and per-repo modes share the same core pipeline. The code follows t
 │  │  Both modes: ProvisionWIF() → create pool, provider, IAM   │ │
 │  │  ┌──────────────────────────────────────────┐              │ │
 │  │  │ Per-org:  org-wide WIF provider           │              │ │
-│  │  │ Per-repo: repo-scoped (BuildRepoProviderID)│             │ │
+│  │  │ Per-repo: repo-scoped (mintcore.BuildRepoProviderID)│     │ │
 │  │  └──────────────────────────────────────────┘              │ │
 │  └──────────┬─────────────────────────────────────────────────┘ │
 │             ▼                                                   │
@@ -191,7 +191,7 @@ Both modes call the same functions (`runAppSetup`, `gcf.NewProvisioner`, `Provis
 | **1. Discover** | `DiscoverMint()`, resolve app IDs | Discovers all org repos | Single repo validation |
 | **2. App setup** | `runAppSetup()` → PEMs + App IDs | All 7 roles by default | Excludes "fullsend" role |
 | **3. Mint** | `gcf.Provision()` or `EnsureOrgInMint()` | — | + `RegisterPerRepoWIF()` |
-| **4. WIF** | `ProvisionWIF()` | Org-wide provider ID | `BuildRepoProviderID()` (repo-scoped) |
+| **4. WIF** | `ProvisionWIF()` | Org-wide provider ID | `mintcore.BuildRepoProviderID()` (repo-scoped) |
 | **5. Scaffold** | `scaffold.PerRepoCustomizedDirs()` / `WalkFullsendRepo()` | Creates `.fullsend` repo, pushes workflows + optional binary | Writes `.fullsend/` dir + shim workflow + optional binary in target repo |
 | **6. Secrets** | Same secret names, same API calls | Config repo + org variable | Target repo + `PER_REPO_GUARD` |
 | **7. Enrollment** | — | `EnrollmentLayer` enables repos | No-op (self-contained) |

docs/guides/infrastructure/infrastructure-reference.md

@@ -63,7 +63,7 @@ The mint is a GCP Cloud Function that exchanges GitHub OIDC tokens for scoped Gi
 │  │  6. Create Scoped Installation Token              │           │
 │  │     ├─ POST /installations/{id}/access_tokens     │           │
 │  │     ├─ Scope to requested repos[]                 │           │
-│  │     └─ Apply rolePermissions minimum set          │           │
+│  │     └─ Apply RolePermissions() minimum set         │           │
 │  │                                                   │           │
 │  └──────────┬───────────────────────────────────────┘           │
 │             │                                                   │
@@ -102,6 +102,19 @@ A single mint instance can serve multiple orgs:
 - `ROLE_APP_IDS` maps `{org}/{role}` to GitHub App IDs
 - Updates are applied atomically by redeploying the function with updated env vars
 
+### Status Endpoint
+
+`GET /v1/status` returns the configured roles available for the authenticated caller's org.
+
+- **Authentication:** Bearer OIDC JWT (same as `/v1/token`)
+- **Authorization:** Any valid OIDC token from an allowed org — no role restriction
+- **Response:**
+  ```json
+  {"org": "my-org", "roles": ["coder", "review", "triage"]}
+  ```
+- **Use case:** Workflow diagnostics — discover which roles are available before requesting a token
+- **Security:** Returns only the requesting org and its role names (not app IDs, not other orgs' roles)
+
 ---
 
 ## Inference — Agent Platform with Workload Identity Federation

go.mod

@@ -11,7 +11,6 @@ require (
 	github.com/spf13/cobra v1.10.2
 	github.com/stretchr/testify v1.11.1
 	golang.org/x/crypto v0.50.0
-	golang.org/x/net v0.52.0
 	golang.org/x/oauth2 v0.36.0
 	golang.org/x/term v0.42.0
 	golang.org/x/text v0.36.0
@@ -32,6 +31,7 @@ require (
 	github.com/davecgh/go-spew v1.1.2-0.20180830191138-d8f796af33cc // indirect
 	github.com/deckarep/golang-set/v2 v2.8.0 // indirect
 	github.com/dustin/go-humanize v1.0.1 // indirect
+	github.com/fullsend-ai/fullsend/internal/mintcore v0.0.0
 	github.com/go-errors/errors v1.5.1 // indirect
 	github.com/go-jose/go-jose/v3 v3.0.5 // indirect
 	github.com/go-logr/logr v1.4.3 // indirect
@@ -63,3 +63,5 @@ require (
 	google.golang.org/protobuf v1.36.11 // indirect
 	k8s.io/klog/v2 v2.140.0 // indirect
 )
+
+replace github.com/fullsend-ai/fullsend/internal/mintcore => ./internal/mintcore

go.sum

@@ -144,8 +144,6 @@ golang.org/x/net v0.0.0-20210226172049-e18ecbb05110/go.mod h1:m0MpNAwzfU5UDzcl9v
 golang.org/x/net v0.0.0-20220722155237-a158d28d115b/go.mod h1:XRhObCWvk6IyKnWLug+ECip1KBveYUHfp+8e9klMJ9c=
 golang.org/x/net v0.6.0/go.mod h1:2Tu9+aMcznHK/AK1HMvgo6xiTLG5rD5rZLDS+rp2Bjs=
 golang.org/x/net v0.10.0/go.mod h1:0qNGK6F8kojg2nk9dLZ2mShWaEBan6FAoqfSigmmuDg=
-golang.org/x/net v0.52.0 h1:He/TN1l0e4mmR3QqHMT2Xab3Aj3L9qjbhRm78/6jrW0=
-golang.org/x/net v0.52.0/go.mod h1:R1MAz7uMZxVMualyPXb+VaqGSa3LIaUqk0eEt3w36Sw=
 golang.org/x/oauth2 v0.36.0 h1:peZ/1z27fi9hUOFCAZaHyrpWG5lwe0RJEEEeH0ThlIs=
 golang.org/x/oauth2 v0.36.0/go.mod h1:YDBUJMTkDnJS+A4BP4eZBjCqtokkg1hODuPjwiGPO7Q=
 golang.org/x/sync v0.0.0-20190423024810-112230192c58/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM=

internal/cli/admin.go

@@ -22,6 +22,7 @@ import (
 	"github.com/fullsend-ai/fullsend/internal/config"
 	"github.com/fullsend-ai/fullsend/internal/dispatch"
 	"github.com/fullsend-ai/fullsend/internal/dispatch/gcf"
+	"github.com/fullsend-ai/fullsend/internal/mintcore"
 	"github.com/fullsend-ai/fullsend/internal/forge"
 	gh "github.com/fullsend-ai/fullsend/internal/forge/github"
 	"github.com/fullsend-ai/fullsend/internal/inference"
@@ -792,7 +793,7 @@ func runPerRepoInstall(ctx context.Context, c perRepoInstallConfig) error {
 			printer.StepInfo("Would provision WIF infrastructure in GCP project " + inferenceProject)
 			printer.StepInfo(fmt.Sprintf("  Service account: fullsend-mint@%s.iam.gserviceaccount.com", inferenceProject))
 			printer.StepInfo("  WIF pool: " + gcf.DefaultInferencePool)
-			printer.StepInfo(fmt.Sprintf("  WIF provider: %s", gcf.BuildRepoProviderID(owner, repo)))
+			printer.StepInfo(fmt.Sprintf("  WIF provider: %s", mintcore.BuildRepoProviderID(owner, repo)))
 			printer.StepInfo(fmt.Sprintf("  Repo restriction: %s/%s", owner, repo))
 			printer.Blank()
 		}

internal/cli/inference.go

@@ -9,6 +9,7 @@ import (
 	"github.com/spf13/cobra"
 
 	"github.com/fullsend-ai/fullsend/internal/dispatch/gcf"
+	"github.com/fullsend-ai/fullsend/internal/mintcore"
 	"github.com/fullsend-ai/fullsend/internal/ui"
 )
 
@@ -135,7 +136,7 @@ func runInferenceProvisionDryRun(cmd *cobra.Command, printer *ui.Printer, org, r
 		printer.Blank()
 		printer.StepInfo(fmt.Sprintf("Repository:   %s", repo))
 		parts := strings.SplitN(repo, "/", 2)
-		providerID := gcf.BuildRepoProviderID(parts[0], parts[1])
+		providerID := mintcore.BuildRepoProviderID(parts[0], parts[1])
 		printer.StepInfo(fmt.Sprintf("WIF provider: %s (repo-scoped)", providerID))
 		printer.StepInfo(fmt.Sprintf("Condition:    assertion.repository == '%s'", strings.ToLower(repo)))
 	} else {
@@ -285,7 +286,7 @@ func runInferenceStatus(cmd *cobra.Command, org, repo, project, pool, provider,
 	providerName := provider
 	if repo != "" {
 		parts := strings.SplitN(repo, "/", 2)
-		providerName = gcf.BuildRepoProviderID(parts[0], parts[1])
+		providerName = mintcore.BuildRepoProviderID(parts[0], parts[1])
 	}
 
 	result := &inferenceStatusResult{
@@ -505,7 +506,7 @@ func runInferenceDeprovisionDryRun(printer *ui.Printer, org, repo, project, pool
 		printer.Header("Dry run: deprovision repo " + repo + " from inference")
 		printer.Blank()
 		parts := strings.SplitN(repo, "/", 2)
-		providerID := gcf.BuildRepoProviderID(parts[0], parts[1])
+		providerID := mintcore.BuildRepoProviderID(parts[0], parts[1])
 		printer.StepInfo(fmt.Sprintf("Repository:   %s", repo))
 		printer.StepInfo(fmt.Sprintf("GCP project:  %s", project))
 		printer.StepInfo(fmt.Sprintf("WIF pool:     %s", pool))
@@ -543,7 +544,7 @@ func runInferenceDeprovision(cmd *cobra.Command, printer *ui.Printer, org, repo,
 		printer.Blank()
 
 		parts := strings.SplitN(repo, "/", 2)
-		providerID := gcf.BuildRepoProviderID(parts[0], parts[1])
+		providerID := mintcore.BuildRepoProviderID(parts[0], parts[1])
 
 		provisioner := gcf.NewProvisioner(gcf.Config{
 			ProjectID:   project,

internal/cli/mint.go

@@ -28,6 +28,7 @@ import (
 	"github.com/fullsend-ai/fullsend/internal/appsetup"
 	"github.com/fullsend-ai/fullsend/internal/config"
 	"github.com/fullsend-ai/fullsend/internal/dispatch/gcf"
+	"github.com/fullsend-ai/fullsend/internal/mintcore"
 	"github.com/fullsend-ai/fullsend/internal/ui"
 )
 
@@ -697,7 +698,7 @@ func runMintEnrollRepo(ctx context.Context, printer *ui.Printer, repoFullName, p
 		printer.StepInfo(fmt.Sprintf("  Would add %s to ALLOWED_ORGS", owner))
 		printer.StepInfo(fmt.Sprintf("  Would copy PEMs from %s for %d roles", appSet, len(roleList)))
 		printer.StepInfo(fmt.Sprintf("  Would add %s to PER_REPO_WIF_REPOS", repoFullName))
-		printer.StepInfo(fmt.Sprintf("  Would create WIF provider: %s", gcf.BuildRepoProviderID(owner, repo)))
+		printer.StepInfo(fmt.Sprintf("  Would create WIF provider: %s", mintcore.BuildRepoProviderID(owner, repo)))
 		return nil
 	}
 
@@ -1078,7 +1079,7 @@ func runMintUnenrollRepo(ctx context.Context, printer *ui.Printer, repoFullName,
 	printer.StepDone("Mint verified")
 
 	if dryRun {
-		providerID := gcf.BuildRepoProviderID(owner, repo)
+		providerID := mintcore.BuildRepoProviderID(owner, repo)
 		printer.Blank()
 		printer.StepInfo("Dry run — no changes will be made")
 		printer.Blank()
@@ -1110,7 +1111,7 @@ func runMintUnenrollRepo(ctx context.Context, printer *ui.Printer, repoFullName,
 	printer.StepDone("Repo removed from PER_REPO_WIF_REPOS")
 
 	// Step 2: Disable or delete WIF provider.
-	providerID := gcf.BuildRepoProviderID(owner, repo)
+	providerID := mintcore.BuildRepoProviderID(owner, repo)
 	if deleteProvider {
 		printer.StepStart("Deleting WIF provider " + providerID)
 		if err := provisioner.DeleteWIFProvider(ctx, providerID); err != nil {

internal/cli/run.go

@@ -24,8 +24,11 @@ import (
 
 	"github.com/spf13/cobra"
 
+	"github.com/fullsend-ai/fullsend/internal/config"
 	"github.com/fullsend-ai/fullsend/internal/envfile"
+	"github.com/fullsend-ai/fullsend/internal/fetch"
 	"github.com/fullsend-ai/fullsend/internal/harness"
+	"github.com/fullsend-ai/fullsend/internal/resolve"
 	"github.com/fullsend-ai/fullsend/internal/sandbox"
 	"github.com/fullsend-ai/fullsend/internal/scaffold"
 	"github.com/fullsend-ai/fullsend/internal/security"
@@ -49,6 +52,7 @@ func newRunCmd() *cobra.Command {
 	var envFiles []string
 	var noPostScript bool
 	var debugFilter string
+	var offline bool
 
 	cmd := &cobra.Command{
 		Use:   "run <agent-name>",
@@ -58,7 +62,7 @@ func newRunCmd() *cobra.Command {
 		RunE: func(cmd *cobra.Command, args []string) error {
 			agentName := args[0]
 			printer := ui.New(os.Stdout)
-			return runAgent(agentName, fullsendDir, outputBase, targetRepo, fullsendBinary, envFiles, noPostScript, debugFilter, printer)
+			return runAgent(cmd.Context(), agentName, fullsendDir, outputBase, targetRepo, fullsendBinary, envFiles, noPostScript, debugFilter, offline, printer)
 		},
 	}
 
@@ -70,13 +74,14 @@ func newRunCmd() *cobra.Command {
 	cmd.Flags().BoolVar(&noPostScript, "no-post-script", false, "skip post-script execution (agent still runs full inference)")
 	cmd.Flags().StringVar(&debugFilter, "debug", "", `enable Claude Code debug logging with optional category filter (e.g. "api,hooks")`)
 	cmd.Flags().Lookup("debug").NoOptDefVal = "*"
+	cmd.Flags().BoolVar(&offline, "offline", false, "reject network fetches; only use cached remote resources")
 	_ = cmd.MarkFlagRequired("fullsend-dir")
 	_ = cmd.MarkFlagRequired("target-repo")
 
 	return cmd
 }
 
-func runAgent(agentName, fullsendDir, outputBase, targetRepo, fullsendBinary string, envFiles []string, noPostScript bool, debug string, printer *ui.Printer) (runErr error) {
+func runAgent(ctx context.Context, agentName, fullsendDir, outputBase, targetRepo, fullsendBinary string, envFiles []string, noPostScript bool, debug string, offline bool, printer *ui.Printer) (runErr error) {
 	printer.Banner(Version())
 	printer.Blank()
 	printer.Header("Running agent: " + agentName)
@@ -109,6 +114,49 @@ func runAgent(agentName, fullsendDir, outputBase, targetRepo, fullsendBinary str
 		return fmt.Errorf("resolving paths: %w", err)
 	}
 
+	if h.HasURLReferences() {
+		orgConfigPath := filepath.Join(absFullsendDir, "config.yaml")
+		orgConfigData, err := os.ReadFile(orgConfigPath)
+		if err != nil {
+			printer.StepFail("Failed to load org config")
+			if os.IsNotExist(err) {
+				return fmt.Errorf("URL-referenced resources require an org-level config.yaml with allowed_remote_resources (expected at %s)", orgConfigPath)
+			}
+			return fmt.Errorf("reading org config for remote resource validation: %w", err)
+		}
+		orgCfg, err := config.ParseOrgConfig(orgConfigData)
+		if err != nil {
+			printer.StepFail("Failed to parse org config")
+			return fmt.Errorf("parsing org config: %w", err)
+		}
+
+		if err := h.ValidateAllowedRemoteResources(orgCfg.AllowedRemoteResources); err != nil {
+			printer.StepFail("Remote resource allowlist validation failed")
+			return fmt.Errorf("validating allowed remote resources: %w", err)
+		}
+
+		policy := fetch.DefaultPolicy
+		policy.Offline = offline
+
+		deps, err := resolve.ResolveHarness(ctx, h, resolve.ResolveOpts{
+			WorkspaceRoot: absFullsendDir,
+			FetchPolicy:   policy,
+			AuditLogPath:  filepath.Join(absFullsendDir, ".fullsend-cache", "fetch-audit.jsonl"),
+		})
+		if err != nil {
+			printer.StepFail("Remote resource resolution failed")
+			return fmt.Errorf("resolving remote resources: %w", err)
+		}
+
+		for _, dep := range deps {
+			if dep.CacheHit {
+				printer.StepInfo(fmt.Sprintf("Resolved %s (cache hit)", dep.URL))
+			} else {
+				printer.StepInfo(fmt.Sprintf("Fetched %s -> %s", dep.URL, dep.LocalPath))
+			}
+		}
+	}
+
 	if resolved, overridden := applySandboxImageOverride(h.Image); overridden {
 		printer.StepInfo(fmt.Sprintf("Image override via FULLSEND_SANDBOX_IMAGE: %s -> %s", h.Image, resolved))
 		h.Image = resolved