@event4u/agent-config 1.25.0 → 1.27.0

package/.claude-plugin/marketplace.json

@@ -6,7 +6,7 @@
   },
   "metadata": {
     "description": "Shared agent configuration \u2014 skills for AI coding tools (Claude Code, Augment, Cursor, Cline, Windsurf, Gemini CLI).",
-    "version": "1.25.0"
+    "version": "1.27.0"
   },
   "plugins": [
     {
@@ -153,6 +153,7 @@
         "./.claude/skills/memory-propose",
         "./.claude/skills/merge-conflicts",
         "./.claude/skills/migration-creator",
+        "./.claude/skills/mobile-e2e-strategy",
         "./.claude/skills/mode",
         "./.claude/skills/module",
         "./.claude/skills/module-create",
@@ -198,6 +199,7 @@
         "./.claude/skills/prompt-optimizer",
         "./.claude/skills/quality-fix",
         "./.claude/skills/quality-tools",
+        "./.claude/skills/react-native-setup",
         "./.claude/skills/react-shadcn-ui",
         "./.claude/skills/readme-reviewer",
         "./.claude/skills/readme-writing",

package/CHANGELOG.md

@@ -318,6 +318,38 @@ our recommendation order, not its support status.
   users" tension without removing any path that an existing user
   might rely on.
 
+## [1.27.0](https://github.com/event4u-app/agent-config/compare/1.26.0...1.27.0) (2026-05-08)
+
+### Features
+
+* **governance:** add no-unsolicited-rebase rule ([b17e4bc](https://github.com/event4u-app/agent-config/commit/b17e4bc8482342a8f3b9c47f40994e17a6eab626))
+* **governance:** add domain-adoption-policy rule ([30a45c3](https://github.com/event4u-app/agent-config/commit/30a45c352a7c9b16dfe455f31bf87c253fe95014))
+* **mobile:** add mobile track skills and iOS simulator guideline ([f4dbb5c](https://github.com/event4u-app/agent-config/commit/f4dbb5cc32065e76d39981d18bc4513551a5da8b))
+
+### Bug Fixes
+
+* **governance:** set tier 2a on no-unsolicited-rebase rule ([284ced0](https://github.com/event4u-app/agent-config/commit/284ced0c7b53ec9a394234a37ee5b370d2278802))
+* **governance:** allowlist .agent-src.uncompressed/ substring in domain-adoption-policy ([e2091dc](https://github.com/event4u-app/agent-config/commit/e2091dc660ce4c437c1b5035aaa1179f469e7abe))
+
+### Chores
+
+* **roadmap:** archive road-to-mobile-adoption ([cc5e6ea](https://github.com/event4u-app/agent-config/commit/cc5e6ea4228666b9784fd468095bb2c096430672))
+* regenerate tool projections and counts for mobile + governance ([b36d495](https://github.com/event4u-app/agent-config/commit/b36d4957a43b26d0786ae73f11097091ca28fbbb))
+
+## [1.26.0](https://github.com/event4u-app/agent-config/compare/1.25.0...1.26.0) (2026-05-08)
+
+### Features
+
+* **linter:** replace size heuristics with structural-density model ([95584ac](https://github.com/event4u-app/agent-config/commit/95584ac5e74948b71a9d13ff5ec6870c110be489))
+
+### Documentation
+
+* **contracts:** add linter structural model + update size-and-scope ([32fa8b2](https://github.com/event4u-app/agent-config/commit/32fa8b2b7cc65148f7bc28fb782f20670d6640bc))
+
+### Chores
+
+* gitignore density logs + archive completed structural-linter roadmap ([0a94ece](https://github.com/event4u-app/agent-config/commit/0a94ece8ac724386a5d49451b1e0d3058f2644cf))
+
 ## [1.25.0](https://github.com/event4u-app/agent-config/compare/1.24.0...1.25.0) (2026-05-08)
 
 ### Features

package/README.md

@@ -7,7 +7,7 @@ Give your AI agents an audit-disciplined orchestration contract — testing, Git
 > Your agent picks up the project's stack, runs tests, prepares PRs, fixes CI — and follows your team's coding standards while doing it. Stack-aware skill sets ship for PHP (Laravel · Symfony · Zend/Laminas), JavaScript (Next.js · React · Node), and cross-stack concerns (API · testing · security · observability).
 
 <p align="center">
-  <strong>142 Skills</strong> · <strong>58 Rules</strong> · <strong>103 Commands</strong> · <strong>58 Guidelines</strong> · <strong>8 AI Tools</strong>
+  <strong>144 Skills</strong> · <strong>60 Rules</strong> · <strong>103 Commands</strong> · <strong>59 Guidelines</strong> · <strong>8 AI Tools</strong>
 </p>
 
 ---
@@ -368,7 +368,7 @@ Every developer gets the same behavior. No per-user setup needed.
 native slash-commands)
 
 > **What this means in practice:** Augment Code and Claude Code get the full
-> package (rules + 142 skills + 103 native commands). Cursor, Cline, Windsurf,
+> package (rules + 144 skills + 103 native commands). Cursor, Cline, Windsurf,
 > Gemini CLI, and GitHub Copilot only get the **rules** natively; skills and
 > commands are available to them as documentation the agent can read, not as
 > first-class features.

package/docs/architecture.md

@@ -96,10 +96,10 @@ fails on any source-side violation, without producing artifacts.
 
 | Layer | Count | Purpose |
 |---|---|---|
-| **Skills** | 142 | On-demand expertise — stack analysis (Laravel · Symfony · Zend / Laminas · Next.js · React · Node), testing, Docker, API design, security, observability, … |
-| **Rules** | 58 | Always-active constraints — coding standards, scope control, verification, language-and-tone, agent-authority |
+| **Skills** | 144 | On-demand expertise — stack analysis (Laravel · Symfony · Zend / Laminas · Next.js · React · Node), testing, Docker, API design, security, observability, … |
+| **Rules** | 60 | Always-active constraints — coding standards, scope control, verification, language-and-tone, agent-authority |
 | **Commands** | 103 | Slash-command workflows — `/commit`, `/create-pr`, `/fix ci`, `/optimize skills`, `/feature plan`, `/work`, `/implement-ticket`, `/compress`, … |
-| **Guidelines** | 58 | Reference material cited by skills — PHP patterns, Eloquent, Playwright, agent-infra, … |
+| **Guidelines** | 59 | Reference material cited by skills — PHP patterns, Eloquent, Playwright, agent-infra, … |
 | **Templates** | 7 | Scaffolds for features, roadmaps, contexts, skills, overrides |
 | **Contexts** | 5 | Shared knowledge about the system itself |
 

package/docs/catalog.md

@@ -1,13 +1,13 @@
 # agent-config — Public Catalog
 
-Consumer-facing catalog of all **358 public artefacts** shipped by
+Consumer-facing catalog of all **363 public artefacts** shipped by
 this package. Internal package-maintenance rules and deprecation shims
 are excluded.
 
 > **Regenerate:** `python3 scripts/generate_index.py`
 > Auto-generated — do not edit manually.
 
-## Skills (142)
+## Skills (144)
 
 | kind | name | extra | description |
 |---|---|---|---|
@@ -87,6 +87,7 @@ are excluded.
 | skill | [`md-language-check`](../.agent-src/skills/md-language-check/SKILL.md) |  | Use BEFORE saving any .md under .augment/, .agent-src*/, or agents/ — scans umlauts, German function words, and quoted German phrases outside DE:/EN: anchor blocks. Hard gate per language-and-tone. |
 | skill | [`merge-conflicts`](../.agent-src/skills/merge-conflicts/SKILL.md) |  | Use when the user has merge conflicts or says "resolve conflicts". Understands conflict markers, resolution strategies, and verification workflow. |
 | skill | [`migration-creator`](../.agent-src/skills/migration-creator/SKILL.md) |  | Use when the user says "create migration", "add column", or "new table". Creates migrations with correct table prefixes, column naming, and multi-tenant awareness. |
+| skill | [`mobile-e2e-strategy`](../.agent-src/skills/mobile-e2e-strategy/SKILL.md) |  | Use when picking a mobile E2E framework — Detox / Appium / Maestro / XCUITest / Espresso — or planning iOS Simulator / Android Emulator coverage in CI for RN, Expo, or native apps. |
 | skill | [`module-management`](../.agent-src/skills/module-management/SKILL.md) |  | Use when the user says "create module", "explore module", or works within app/Modules/. Understands module structure, auto-loading, route registration, and namespace conventions. |
 | skill | [`multi-tenancy`](../.agent-src/skills/multi-tenancy/SKILL.md) |  | Use when working with the multi-tenant architecture — customer DB switching, FQDN routing, tenant isolation, or cross-tenant operations. |
 | skill | [`okr-tree-modeling`](../.agent-src/skills/okr-tree-modeling/SKILL.md) |  | Use when decomposing a company objective into team OKRs, auditing a draft OKR tree, or stress-testing an existing one for measurability and laddering. |
@@ -112,6 +113,7 @@ are excluded.
 | skill | [`project-docs`](../.agent-src/skills/project-docs/SKILL.md) |  | Use when looking for project-specific documentation. Knows which docs exist in agents/docs/ and agents/contexts/ and maps work areas to relevant docs. |
 | skill | [`prompt-optimizer`](../.agent-src/skills/prompt-optimizer/SKILL.md) |  | Use when the user wants a prompt optimized for ChatGPT, Claude, Gemini, or another AI — 'make this prompt better', 'optimize for ChatGPT', 'rewrite my prompt' — even without saying 'optimize'. |
 | skill | [`quality-tools`](../.agent-src/skills/quality-tools/SKILL.md) |  | Use when PHPStan, Rector, or ECS output appears — \"phpstan says mixed\", type errors, \"fix code style\", \"run rector\" — even when Eloquent/Laravel/model code is also mentioned. |
+| skill | [`react-native-setup`](../.agent-src/skills/react-native-setup/SKILL.md) |  | Use when setting up React Native or Expo dev environments — Xcode, Android Studio, CocoaPods, EAS, Metro, New Architecture — even when the user just says 'my RN build won't start'. |
 | skill | [`react-shadcn-ui`](../.agent-src/skills/react-shadcn-ui/SKILL.md) |  | Use when building React UI on shadcn/ui primitives + Tailwind — the apply/review/polish skill dispatched by `directives/ui/*` for the `react-shadcn` stack. |
 | skill | [`readme-reviewer`](../.agent-src/skills/readme-reviewer/SKILL.md) |  | Use when reviewing a README for accuracy, usability, and alignment with the actual repository. Detects invented content, broken setup steps, and structural issues. |
 | skill | [`readme-writing`](../.agent-src/skills/readme-writing/SKILL.md) |  | Use when creating, rewriting, or significantly improving a README based on the actual repository structure, commands, and intended audience. |
@@ -154,7 +156,7 @@ are excluded.
 | skill | [`verify-completion-evidence`](../.agent-src/skills/verify-completion-evidence/SKILL.md) |  | Use when claiming 'done', suggesting a commit, push, or PR — runs the evidence gate so completion claims come from fresh output in this message, not memory or earlier runs. |
 | skill | [`websocket`](../.agent-src/skills/websocket/SKILL.md) |  | Use when building real-time features — WebSocket broadcasting, live updates, presence channels, connection state — even when the user just says 'push this to the client live'. |
 
-## Rules (55)
+## Rules (57)
 
 | kind | name | type | description |
 |---|---|---|---|
@@ -175,6 +177,7 @@ are excluded.
 | rule | [`context-hygiene`](../.agent-src/rules/context-hygiene.md) | auto | When debugging, fixing errors, or running long conversations — 3-failure stop rule, tool-loop detection, fresh-chat triggers |
 | rule | [`direct-answers`](../.agent-src/rules/direct-answers.md) | always | Always — direct, unembellished answers. No flattery, no invented facts (verify load-bearing claims, otherwise ask). Emojis only as functional markers. Brevity is the default. |
 | rule | [`docker-commands`](../.agent-src/rules/docker-commands.md) | auto | Running PHP commands inside Docker containers — artisan, composer, phpstan, rector, ecs, phpunit, tests, migrations, and any CLI tool execution |
+| rule | [`domain-adoption-policy`](../.agent-src/rules/domain-adoption-policy.md) | auto | Adopting a new domain track (mobile, ML, blockchain, scientific computing, IoT, gaming) into the suite — gates the import on demand, ownership, CI fit, and Sunset compatibility BEFORE any harvest |
 | rule | [`downstream-changes`](../.agent-src/rules/downstream-changes.md) | auto | After EVERY code edit, find ALL downstream changes needed to existing files, including callers, tests, imports, types, and documentation |
 | rule | [`e2e-testing`](../.agent-src/rules/e2e-testing.md) | auto | Playwright E2E tests — locators, assertions, Page Objects, fixtures, CI, and flaky test prevention |
 | rule | [`guidelines`](../.agent-src/rules/guidelines.md) | manual | Writing or reviewing code — check relevant guideline before writing or reviewing code |
@@ -189,6 +192,7 @@ are excluded.
 | rule | [`no-attribution-footers`](../.agent-src/rules/no-attribution-footers.md) | auto | Generating PR/issue/comment/commit-message bodies — forbids 'Generated with', 'Co-authored by', or 'Pull Request opened by' attribution footers |
 | rule | [`no-cheap-questions`](../.agent-src/rules/no-cheap-questions.md) | always | No cheap questions — never ask what context answers, never offer Iron-Law-violating options, never stage no-trade-off choices; mode-independent (off / auto / on) |
 | rule | [`no-roadmap-references`](../.agent-src/rules/no-roadmap-references.md) | auto | Linking transient files (agents/roadmaps/, agents/council-{questions,responses,sessions}/) from a stable artifact — both layers expire; promote findings |
+| rule | [`no-unsolicited-rebase`](../.agent-src/rules/no-unsolicited-rebase.md) | auto | Working with git history — never rewrite, rebase, squash, fixup, or amend without explicit user request; the linear/squashed shape is the user's call, not a tidiness reflex |
 | rule | [`non-destructive-by-default`](../.agent-src/rules/non-destructive-by-default.md) | always | Agent is never destructive — Hard Floor always asks for prod-trunk merges, deploys, pushes, prod data/infra, bulk deletions, and bulk-deletion/infra commits; no autonomy or roadmap bypass |
 | rule | [`onboarding-gate`](../.agent-src/rules/onboarding-gate.md) | auto | First turn of a conversation on a project — check onboarding.onboarded in .agent-settings.yml; when false, prompt to run /onboard before any request |
 | rule | [`package-ci-checks`](../.agent-src/rules/package-ci-checks.md) | manual | Before pushing to remote or creating a PR in the agent-config package — run all CI checks locally first |
@@ -322,7 +326,7 @@ are excluded.
 | command | [`upstream-contribute`](../.agent-src/commands/upstream-contribute.md) |  | Contribute a learning, skill, rule, or fix from a consumer project back to the shared agent-config package |
 | command | [`work`](../.agent-src/commands/work.md) |  | Drive a free-form prompt end-to-end through refine → score → plan → implement → test → verify → report — Option-A loop over the `work_engine` Python engine, confidence-band gated, no auto-git. |
 
-## Guidelines (58)
+## Guidelines (59)
 
 | kind | name | category | description |
 |---|---|---|---|
@@ -334,6 +338,7 @@ are excluded.
 | guideline | [`developer-judgment`](../docs/guidelines/agent-infra/developer-judgment.md) | agent-infra |  |
 | guideline | [`direct-answers-demos`](../docs/guidelines/agent-infra/direct-answers-demos.md) | agent-infra |  |
 | guideline | [`engineering-memory-data-format`](../docs/guidelines/agent-infra/engineering-memory-data-format.md) | agent-infra |  |
+| guideline | [`ios-simulator-guide`](../docs/guidelines/agent-infra/ios-simulator-guide.md) | agent-infra |  |
 | guideline | [`language-and-tone-examples`](../docs/guidelines/agent-infra/language-and-tone-examples.md) | agent-infra |  |
 | guideline | [`layered-settings`](../docs/guidelines/agent-infra/layered-settings.md) | agent-infra |  |
 | guideline | [`mcp-request-signing`](../docs/guidelines/agent-infra/mcp-request-signing.md) | agent-infra |  |

package/docs/contracts/linter-structural-model.md

@@ -0,0 +1,180 @@
+---
+stability: beta
+---
+
+# Linter Structural Model
+
+**Status:** LOCKED — shipped 2026-05-08 on
+`feat/road-to-structural-linter-reform`. The linter now applies the
+structural model to skills, rules, and commands.
+
+## Why a structural model
+
+Council convergence (Sonnet + GPT-4o, 2026-05-06): raw line / word
+counts produce ratchet drift. Three failure modes that the pure-size
+gate cannot distinguish:
+
+- A 500-line skill with **one** 10-step procedure (legitimate) vs a
+  500-line skill with **ten** independent procedures (split candidate).
+- A 1700-word command that **delegates** to a cluster (legitimate
+  orchestrator) vs a 1700-word command that **inlines** the work.
+- A 60-line rule whose body is a **verbatim Iron-Law block**
+  (legitimate) vs a 60-line rule that is **prose explanation**
+  (split candidate).
+
+The structural model replaces the size threshold with four primitives.
+
+## Primitives
+
+### 1. Density score (0.0 – 1.0)
+
+```
+density = structured_lines / total_non_blank_lines
+```
+
+`structured_lines` = lines inside fenced blocks + markdown-table rows
++ bullet-list lines + numbered-list lines + section-heading lines.
+Higher = more structured (catalogue, table, code, list); lower =
+prose-dominant.
+
+### 2. Multi-workflow detector (skills only)
+
+Skills with **≥ 2 `## Procedure`** (or `## Procedure: <name>`)
+sections ship multiple independently invocable procedures. Combined
+with size, this is the cluster-split signal.
+
+### 3. Delegation detector (commands only)
+
+Command has a delegation signal when **either** holds:
+
+- frontmatter declares `cluster:` or `routes_to:`
+- body contains ≥ 3 markdown links to other `.md` files
+
+Absence of both signals on a large command = inlined logic.
+
+### 4. Iron-Law block detector (rules only)
+
+A fenced block is an Iron-Law block when its body has **≥ 30
+alphabetical characters** with **≥ 60 % uppercase** across **≥ 1
+non-empty line**. The 30-character floor filters single ALL-CAPS
+markers (`OK`, `WIP`); the 60 % uppercase floor catches verbatim
+imperatives (`NEVER COMMIT.`).
+
+## Phase 1 calibration (2026-05-08)
+
+Sweep covered all 310 lintable artifacts via
+[`scripts/measure_density.py`](../../scripts/measure_density.py); raw
+data lives at `agents/.density-snapshot.jsonl` (local-only — re-run
+`python3 scripts/measure_density.py --root .agent-src --jsonl
+agents/.density-snapshot.jsonl` to regenerate).
+
+| Type | Count | Avg density | Median | Bucket [0.4-0.6] | Bucket [0.6-1.0] |
+|---|---|---|---|---|---|
+| skill | 142 | 0.76 | 0.78 | 22 | 119 |
+| command | 103 | 0.59 | 0.57 | 46 | 45 |
+| rule | 58 | 0.47 | 0.48 | 25 | 11 |
+| persona | 7 | 0.38 | 0.38 | 1 | 0 |
+
+Iron-Law detector recall on 9 canonical Iron-Law rules: **8 / 9** (all
+except `agent-authority`, which uses a markdown-table index instead of
+a fenced block — correct miss).
+
+`quality-tools` (411 lines, single workflow): density **0.83**, single
+procedure → no warning under the new model. ✓ roadmap success criterion.
+
+`optimize/augmentignore.md` (1679 words): delegation signal **present**
+(frontmatter `routes_to:`) → no warning under the new model. ✓ roadmap
+success criterion.
+
+Of 13 commands ≥ 1000 words, only **2** lack a delegation signal —
+both are candidates for Phase 4.1 review (`compress.md`,
+`project-analyze.md`; the latter has density 0.86, exempt under the
+density-AND-delegation gate).
+
+## Warn rules (shipped Phase 3, 2026-05-08)
+
+| Artifact | Warn condition |
+|---|---|
+| **skill** | `lines > 400` AND (`density < 0.6` OR `procedures ≥ 2`) |
+| **command** | `words > 1000` AND no delegation signal AND `density < 0.65` |
+| **rule** | `lines > 60` AND `density < 0.5` AND `iron_law_blocks == 0` |
+
+The 200-line rule **error** stays unconditional. No new frontmatter
+keys ship — the four structural primitives are the contract.
+
+Calibration sweep on the 2026-05-08 corpus (310 artifacts):
+
+| Type | Old warns | New warns | New band | Δ |
+|---|---|---|---|---|
+| rule | 23 | 2 | 3.4 % | −91 % |
+| skill | 2 | 1 | 0.7 % | −50 % |
+| command | 9 | 1 | 1.0 % | −89 % |
+| **total** | **34** | **4** | **1.3 %** | **−88 %** |
+
+Pass rate: 186 → 209 (`pass`); 124 → 101 (`pass_with_warnings`); 0
+errors. Each remaining warning is a genuine structural defect:
+
+- `compress.md` (1569 words, density 0.58, no delegation signal) —
+  inlined logic in a non-orchestrator command.
+- `artifact-drafting-protocol.md` rule (65 lines, density 0.37, no
+  Iron-Law block) — prose-dominant long rule.
+- `minimal-safe-diff.md` rule (69 lines, density 0.41, no Iron-Law
+  block) — prose-dominant long rule.
+- `ai-council/SKILL.md` (525 lines, density 0.37) — orchestrator
+  skill below the density floor; refactor candidate.
+
+Roadmap target ≤ 10 % rule-warning band. ✓ (3.4 %)
+
+## Frontmatter contract — Phase 2 decisions (2026-05-08)
+
+AI Council run (Claude Sonnet 4.5 + GPT-4o, 2 rounds, $0.046; raw
+transcript local-only per the council-references convention).
+
+**Key 1 — `iron_law:` frontmatter — DECISION: Option A (auto-detect, no tag).**
+
+Both council members converged on Option A. The detector recall on
+the canonical 9-rule set is 8 / 9, and the one miss
+(`agent-authority`) uses a markdown-table priority index that is
+**not** an Iron-Law imperative — its body delegates to the rules it
+indexes. The detector is correct to skip it. No `iron_law:`
+frontmatter key is added.
+
+**Key 2 — `density_exempt:` frontmatter — DECISION: Option A (no flag).**
+
+Council split:
+
+- Sonnet 4.5: Reject any flag. Add **type-based density floors**
+  (orchestrators 0.35, executors 0.6, imperatives 0.4) so the
+  detector classifies structurally instead of relying on author
+  declarations.
+- GPT-4o: Adopt Option C (`density_exempt: true` + required
+  `density_exempt_reason:`) with periodic re-audit.
+
+Sonnet's structural argument carries: an escape hatch for a 1-in-142
+corpus case ships maintenance debt across every future artifact that
+brushes the boundary. The single failing skill (`ai-council`,
+density 0.36) is a documentation-heavy reference-orchestrator and is
+left as a Phase-4 review candidate — either restructure the skill or
+add orchestrator-aware type-floors as a follow-up. No
+`density_exempt:` key is added in Phase 3.
+
+The Phase-3 implementation therefore ships **zero new frontmatter
+keys** — the structural primitives are the contract.
+
+## Out of scope
+
+- Hard error thresholds beyond the 200-line rule cap.
+- Automatic refactoring of artifacts that fail the new model.
+- Cross-artifact dependency counts (a skill linking 4 other skills is
+  `routes_to` doing its job, not a defect).
+
+## References
+
+- `scripts/measure_density.py` — Phase 1.1 measurement tool.
+- `agents/.density-snapshot.jsonl` — full per-artifact metrics
+  (gitignored, re-run the measurement script to regenerate).
+- `scripts/skill_linter.py` — structural-model implementation
+  (`_density_score`, `_count_procedure_sections`,
+  `_command_delegation_signal`, `_iron_law_blocks`).
+- `docs/guidelines/agent-infra/size-and-scope.md` — guideline now
+  describes the structural model; Option 2 transition notes removed.

package/docs/getting-started.md

@@ -115,7 +115,7 @@ Your agent is now:
 - **Respecting your codebase** — no conflicting patterns
 - **Following standards** — consistent code quality
 
-This is enforced automatically by 58 rules. No configuration needed.
+This is enforced automatically by 60 rules. No configuration needed.
 
 ---