@ethlete/agent-rules 0.1.0-next.14 → 0.1.0-next.16

package/CHANGELOG.md

@@ -1,5 +1,78 @@
 # @ethlete/agent-rules
 
+## 0.1.0-next.16
+
+### Patch Changes
+
+- Name the `take-until-destroyed-last` lint rule in the styleguide lint lookup and the RxJS skill.
+- A design call now lists its drawings as `variants` in `variant-<key>.ts` files, and `et design check` takes `--variant`; the old `options` key and `--option` flag are gone.
+
+## 0.1.0-next.15
+
+### Minor Changes
+
+- Three skills vendored from mattpocock/skills: `grilling`, `domain-modeling`, and the `grill-with-docs` entry point that runs both.
+- New opt-in `subagent-model-policy` hook: a Claude Code subagent call must name its `model`, and `fable` asks the user first. The new `subagent-models` rule says which model fits which task.
+- Add a `codex-subagent` skill: delegate a task to a Codex agent through a wrapper that prints only the final message, read-only unless you pass `--write`.
+- The `context-warning` hook now reaches the agent at session start, between its own tool
+  batches and as a turn ends, not only when the user sends a message.
+- Give a design call rounds, a result band for the chain of winners, a contact sheet of every option and a compare overlay
+- `spec/` is now a branch type of its own, for specification and planning work, so it no longer reports
+  `unknown-type`.
+- Two new agent endpoint ops: `day.rows` answers the rows a day drew with the id each edit names, and
+  `day.edits` corrects one. `timetrack rows` and `timetrack edit` reach both.
+- A new `settings.rules` agent op, and an `ethlete-agents timetrack rules` command, read the rules that
+  name a day's work out of the encrypted store.
+- `timetrack day --out` writes a private file it will not overwrite unasked, printed provider text can
+  no longer drive the terminal, and `timetrack edit` refuses a call naming two edits.
+- The timetrack CLI now makes the server prove it holds this run's token before it sends a request,
+  and follows no redirect. It needs Timetrack with agent contract version 2.
+
+### Patch Changes
+
+- A placeholder now says which checkout, and which piece of it, its name stands for. Two of them may
+  carry one name: a spec track and the branch that implements it are both called after the feature.
+- A placeholder repair now reads every branch and only the checkout's own author, so work on an
+  unmerged branch is no longer invisible to it.
+- Splitting a checkout-wide placeholder no longer refuses over a day with no commit. It always
+  removes the record and its checkout-wide rule, so later branches can get records of their own.
+- Let an agent delete a placeholder through `timetrack standins --remove`, and report
+  which checkout and branch each one covers. A record of the wider grain blocked every
+  branch of its checkout, and only a click could clear it.
+- A placeholder can be given another name: `timetrack standins --rename <id> --name <text>`. Its
+  days and the rules that name it stay, which a delete and a fresh record would lose.
+- Design exploration: the story checker and the screenshot template now also detect Vite's compile error overlay, not only webpack's.
+- The `handoff` skill now tells the agent to name only its own invocation form, so a saved handoff no longer reports the Claude Code and Codex commands side by side.
+- A handoff is now written only when work is actually left: the `handoff` skill tests for it first, and the `context-warning` hook's auto-mode escalation no longer forces a file.
+- `ethlete-agents timetrack day [YYYY-MM-DD]` reports the evidence a day holds, and `--out <path>`
+  writes it to a file. The app's store is encrypted, so this is the only way a script reads a real day.
+- `context-warning` hook: the critical tier now asks the agent to finish or hand off instead of forcing a handoff, and every later prompt repeats the remaining budget.
+- Context warnings now distinguish sub-agent pressure from the main session and track each thread independently.
+- A work path is cut to the project its checkout declares, not to a fixed depth. Where a repository
+  declares none, its own commits pick the grain between them.
+- Add the `design-exploration` skill: visual design work runs as a dialog, one open call at a time.
+- The design-exploration skill now works in calls instead of story ids, and carries three sub-agent
+  briefs for drawing, checking and writing up one.
+- The design-exploration skill now puts a repository's design work in `.ethlete/design/`, with one
+  project per slug segment. Each project names its own `styles` and `head`, so one project's type
+  scale and fonts no longer reach another project's drawings.
+- On resume, the handoff skill now says to read only what you are about to change, instead of
+  re-reading the plan files the handoff already summarises.
+- Say which placeholder holds a whole checkout, and refuse a delete that would strand
+  the days it covers. A checkout answered by a placeholder no longer reports as named
+  by an issue.
+- A placeholder that covered a whole checkout can be cut into one per directory its commits worked in.
+  `timetrack standins --split <id>` reads the directories and the user picks the pieces.
+- A split can name the checkout of a record that holds none, and a claimed directory the commits
+  never named opens a piece of its own.
+- `et design [checkout]` serves the design page of any repository that keeps a `.ethlete/design`
+  folder, and `et design check` says why a call does not render.
+- `et design check --call` now reports `NO BROWSER` when neither the checkout nor the package
+  resolves `playwright`, instead of throwing the module loader's own error.
+- `repoNamingDecisions`, the `naming.offers` op and `ethlete-agents timetrack naming` say why a checkout was offered no name.
+- An agent reads the open stand-ins through `standIn.list` and `ethlete-agents timetrack standins`. It may list them and never write one.
+- `status` and `ethlete-agents timetrack status` report `tempoReady`. Without a Tempo token the app reads no worklog history, and nothing said so.
+
 ## 0.1.0-next.14
 
 ### Minor Changes

package/README.md

@@ -280,7 +280,7 @@ per hook in the config:
 
 ```json
 {
-  "hooks": ["context-warning"]
+  "hooks": ["context-warning", "subagent-model-policy"]
 }
 ```
 
@@ -298,18 +298,47 @@ unregisters and deletes the script again. Codex only loads project-local hooks o
 Available hooks:
 
 - **`context-warning`** - warns once per tier (and instructs the agent) when the session
-  context crosses 70% / 85% of the token budget, recommending a handoff. Under Claude the
+  context crosses 70% / 85% / 95% of the token budget, recommending a handoff. Under Claude the
   budget is capped at the 200k long-context pricing boundary: on 1M-window models every
   request past 200k input tokens bills the whole context at a premium rate, so the
   warnings fire at ~140k/~170k instead of deep into the expensive range. Codex uses
   the model-specific 272k pricing boundary for GPT-5.6, GPT-5.5 and GPT-5.4, and the
   rollout's reported context window for models without that pricing rule.
 
+  The 85% tier asks the agent to choose - finish the task, or hand off - because a session
+  is often a step or two from done when it fires. The 95% tier takes that choice away. Every
+  prompt after the first warning carries a short reminder instead of a new warning: the
+  remaining budget, and how to work so that either ending stays cheap. The `handoff` skill
+  calls this handoff mode.
+
+  Under Claude the hook runs on four events, because a warning that only a user prompt can
+  trigger never reaches a long autonomous run. `SessionStart` names the budget before the
+  first request. `UserPromptSubmit` carries the tiered warning and the reminder.
+  `PostToolBatch` fires between the agent's own model requests, so it learns the count while
+  it works. `Stop` fires as a turn ends over 85% and the turn then continues, so the agent
+  must take one of three and say which: finish, hand off, or cross the boundary on purpose
+  for a reason it states. Each event speaks once per tier. Codex has none of the three, so
+  its registration stays on `UserPromptSubmit`.
+
   Two things are Claude-only: the separate user-facing line (Codex documents only
   `additionalContext`, so there the warning is folded into the text the model is told to
   relay), and the auto-mode escalation that writes the handoff file unprompted - Codex's
   `permission_mode` values are undocumented, so no value enables it.
 
+  Codex sub-agents are tracked by their own thread ids even though they share the root
+  session id. A sub-agent warning tells that child to report its state to the parent; it
+  never tells the user or the main agent to hand off the root session.
+
+- **`subagent-model-policy`** (Claude Code only) - gates every call to the subagent tool.
+  A call that names no `model` is denied and the model table is returned instead: haiku for
+  a lookup, opus for real work, sonnet in between, fable for judgment-heavy work. Without
+  it a subagent inherits the model leading the session, which is how an expensive model
+  ends up doing every grep it delegates; with it, that mistake costs one tool call.
+
+  A call that names `fable` asks the user - it is the most expensive option, and only the
+  user knows whether the task is judgment-heavy. A fork and an agent type whose own
+  definition sets a model both pass untouched, because `model` would change nothing there.
+
 Hooks can be turned off per machine - see the local config below.
 
 ## Git hooks (opt-in)
@@ -437,9 +466,14 @@ scope: consumer # consumer | sdk | both
 requires: ['@ethlete/core'] # optional
 paths: ['**/*.css'] # optional; becomes Claude `paths` and Cursor `globs` on rules
 vars: [docsBaseUrl] # optional
+modelInvocation: false # optional; a skill only the user may start
 ---
 ```
 
+A content file vendored from another repository keeps its upstream wording apart from the
+link syntax, and names its source in the body. `THIRD-PARTY-LICENSES.md` lists each one,
+its upstream commit and its license.
+
 `content/output-styles/<name>.md` is a third kind, and the only one this package does not
 compile: it is a Claude Code output style verbatim, so its frontmatter is Claude's
 (`name`, `description`, `keep-coding-instructions`) and `output-style` installs the file

package/THIRD-PARTY-LICENSES.md

@@ -0,0 +1,35 @@
+# Third-party content
+
+Content in this package that comes from another repository, with the license it keeps.
+To update one, copy it again from upstream and record the new commit here.
+
+## [mattpocock/skills](https://github.com/mattpocock/skills)
+
+Commit `3cca18b` (2026-09-04). Vendored skills, kept as written upstream apart from the
+generator's own link syntax:
+
+- `content/skills/grill-with-docs` - the entry point; calls the other two.
+- `content/skills/grilling`
+- `content/skills/domain-modeling`
+
+MIT License
+
+Copyright (c) 2026 Matt Pocock
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.