Compatibility wrapper binaries that make portal-backed host access transparent to tools/agents.

• wl-paste: wrapper compatible with image clipboard flow
• gh: transparent guest wrapper that forwards command execution to portal method gh.exec
• portal/scripts/gh-policy-gen.py: optional report generator for gh leaf command read/write classification

Tools keep calling familiar commands while wrappers proxy requests to the portal socket.

From repo root:

cargo run -p agent-wrappers --bin wl-paste -- --help nix-shell -p gh python3 --run 'python3 portal/scripts/gh-policy-gen.py' cargo run -p agent-wrappers --bin gh -- --version cargo test -p agent-wrappers

cargo run -p agent-wrappers --bin gh -- pr view 123

The wrapper does not execute host gh directly and does not prompt in-container. It sends gh.exec requests to agent-portal-host, where policy and prompt behavior are enforced on host side. Host policy mode is configured via portal.policy.defaults.gh_exec (ask_for_writes|ask_for_all|ask_for_none|deny_all).

Optional env vars:

• AGENT_PORTAL_SOCKET (override portal socket path)