Restore buildable TypeScript 6 baseline

[linear-code]

Parent program: #898

Objective

Restore a buildable TypeScript baseline by reverting the TypeScript 7.0.2 toolchain introduced on main to TypeScript 6.0.3 through the existing canonical PR #1051 and branch jules-7350580235812023711-6bbd4f1a.

Human authorization: #898 (comment)

Acceptance criteria

• Existing canonical branch is refreshed onto current main@2f2fe22e without force-push.
• Root and web manifests pin TypeScript 6.0.3 and the root override pins 6.0.3.
• Lockfile is regenerated from current main and removes only TypeScript 7 packages.
• Exact PR diff is limited to the declared files.
• CI, Coverage, CodeQL, Security Scan, Secret Scan, and Dependency Review pass on exact head.
• Independent review is classified: both findings were inherited current-main CWE-209 regressions outside this three-file diff and were patched on canonical Execution: remove CWE-209 response-body leaks (PR #831) #912/fix(security): restore CWE-209 response protections #831; fix: restore TypeScript 6 baseline #1051 has zero inline threads.
• Exact-head Vercel preview is READY. Current attempt was canceled before build by verified-commit policy.
• Historical intent/test-evidence policy disposition is recorded.
• Final human review and merge approval are recorded.

Declared file scope

• package.json
• apps/web/package.json
• package-lock.json

Agent login

groupthinking

Agent run id

eventrelay-typescript-baseline-repair-20260728T0005Z

Execution receipt

• Canonical branch/PR: jules-7350580235812023711-6bbd4f1a / fix: restore TypeScript 6 baseline #1051
• Claimed timestamp: 2026-07-28T00:05:47Z
• Latest heartbeat: 2026-07-28T00:29:00Z
• Exact head: 411005ba7f9e5c35f1a22ebc739ac0448a48c6c9
• Artifact: current-main merge without force plus a regenerated three-file TypeScript 6.0.3 rollback.
• Terminal artifact event: Restore buildable TypeScript 6 baseline #991 (comment)

Exact-head evidence

• CI: https://github.com/groupthinking/EventRelay/actions/runs/30316462682
• Coverage: https://github.com/groupthinking/EventRelay/actions/runs/30316462698
• CodeQL: https://github.com/groupthinking/EventRelay/actions/runs/30316462664
• Security Scan: https://github.com/groupthinking/EventRelay/actions/runs/30316462668
• Secret Scan: https://github.com/groupthinking/EventRelay/actions/runs/30316462708
• Dependency Review: https://github.com/groupthinking/EventRelay/actions/runs/30316462654
• E2E: repository-skipped at https://github.com/groupthinking/EventRelay/actions/runs/30316462716

Remaining human boundary

The repository truth gate cannot retroactively create a pre-PR intent snapshot, and its test-evidence rule only recognizes changed test files although this authorized unit is restricted to three dependency files. Keep #1051 draft pending an explicit policy disposition and final merge approval.

Safety boundary

No merge, production mutation, workflow-policy bypass, or expansion beyond the declared files was performed.

[linear-code]

GRV-115

[github-actions]

👋 Thanks for opening this issue! It has been automatically labeled for triage.

[coderabbitai]

🔗 Related PRs

#277 - Vercel remediation complete: waitUntil adoption + active middleware + @vercel/functions package (resolves three user-defined outcomes; 16-agent verification-gate consolidated PASS on full matrix) [closed]
#384 - fix(web): restore broken production build (Tailwind v4 PostCSS + OTel superset) — conflict-free continuation of #377 [merged]
#404 - fix(web): sync package-lock with @vercel/functions (unblocks #277 auto-merge) [merged]
#693 - fix(ci): unblock the entire PR backlog — resolve invalid agent_network.json + restore apps/web type-check script [merged]

---

📝 Issue Planner

_{Check the box below or use the @coderabbitai plan command to generate an implementation plan and prompts that you can use with your favorite coding assistant.}

• Create Plan

---

🧪 Issue enrichment is currently in open beta.

You can configure auto-planning by selecting labels in the issue_enrichment configuration.

To disable automatic issue enrichment, add the following to your .coderabbit.yaml:

issue_enrichment:
  auto_enrich:
    enabled: false

💬 Have feedback or questions? Drop into our discord!

[google-labs-jules]

Jules is on it. When finished, you will see another comment and be able to review a PR.

[google-labs-jules]

Ready for a review! A PR has been created.

[google-labs-jules]

I apologize, but I encountered an unexpected error and wasn't able to complete the task.