@event4u/agent-config 1.33.0 → 1.34.0

package/.agent-src/skills/ui-component-architect/SKILL.md

@@ -0,0 +1,153 @@
+---
+name: ui-component-architect
+description: "Use when shaping a UI component tree — composition vs inheritance, slot patterns, prop API design, controlled vs uncontrolled, polymorphic — even on 'split this component'."
+personas:
+  - frontend-engineer
+source: package
+domain: engineering
+---
+
+# ui-component-architect
+
+> Decide the **shape** of a component tree before the markup is
+> written. Picks composition over inheritance, names the slot
+> contract, draws the controlled/uncontrolled axis, and stops
+> prop bags from growing into god-components. Stack-agnostic —
+> the same lens applies to Blade, Livewire, React, or Vue trees.
+> Pair with [`existing-ui-audit`](../existing-ui-audit/SKILL.md)
+> first; never invent components that already exist.
+
+## When to use
+
+- A new component / screen is being designed and the boundary
+  between parent and children is unclear.
+- An existing component has > 10 props, conditional rendering
+  trees nested ≥ 3 deep, or a `variant`-prop with > 4 values.
+- A primitive (button, card, dialog) is being added to the design
+  system and its API will be reused across teams.
+- German triggers: "wie schneide ich die Komponente?", "Slots
+  oder Props?", "controlled oder uncontrolled?".
+
+Do NOT use when:
+
+- The component is a one-off, used in one place, and unlikely to
+  be reused — over-architecting hurts more than it helps.
+- The question is **styling**, not shape — route to
+  [`tailwind-engineer`](../tailwind-engineer/SKILL.md).
+- The audit step has not run — route to
+  [`existing-ui-audit`](../existing-ui-audit/SKILL.md) first; reusing
+  beats inventing.
+
+## Procedure
+
+### 1. Inspect prior art, state the responsibility in one sentence
+
+Review existing components in the codebase for the same
+responsibility — extend rather than rebuild when a match is found.
+If none exists, write the new component's purpose: *"Renders a
+labelled input with inline error and hint."* If the sentence has an
+"and" joining two unrelated jobs, the component is two components.
+Reject the draft and split before continuing.
+
+### 2. Pick composition over inheritance
+
+Rules of thumb:
+
+| Pattern | When |
+|---|---|
+| Compound components (`Card.Header`, `Card.Body`) | Multiple slots with order semantics |
+| Children + named slots | One main child, plus 1–2 optional regions |
+| Render props / function-as-children | Caller controls rendering of internal state |
+| Polymorphic (`as` prop) | Same shell, different semantic element |
+| Inheritance / class-extension | Almost never — last resort for legacy adapters |
+
+Composition trades verbose call-sites for a tiny, stable component.
+Inheritance trades short call-sites for ABI fragility.
+
+### 3. Draw the controlled / uncontrolled axis
+
+For every piece of state (open, value, selected, expanded), pick:
+
+- **Controlled** — caller passes value + onChange. Caller owns
+  state. Use when state must sync across siblings or persist.
+- **Uncontrolled** — component owns state internally; caller reads
+  via ref or onChange callback. Use for ephemeral state local to
+  the component.
+- **Controlled with default** — both APIs supported via
+  `defaultValue` + optional `value`. The most flexible, also the
+  most code; reserve for design-system primitives.
+
+Mixing controlled / uncontrolled in the same prop without a
+default is the single largest source of "why doesn't my component
+update?" tickets.
+
+### 4. Cap the prop API
+
+Prop budget per component:
+
+| Tier | Cap |
+|---|---|
+| Primitive (Button, Input) | ≤ 6 props + `...rest` to underlying element |
+| Composite (Card, Dialog) | ≤ 8 props; prefer slots for variants |
+| Page section / feature shell | ≤ 4 props; everything else via context |
+
+Over-budget triggers a refactor: extract a config object, push
+state into context, or split into compound parts.
+
+### 5. Name the slot contract
+
+For every slot, document: required vs optional, expected element
+type or component, default rendering when absent, accessibility
+implications (does the slot become the accessible name?). Slots
+without contracts become "stuff a div in there and pray".
+
+## Output format
+
+Return:
+
+1. Responsibility + composition pick — single-sentence purpose, chosen
+   pattern (compound / slots / render-props / polymorphic) with the
+   one-line trade-off.
+2. State + prop API — controlled / uncontrolled / both per state piece,
+   prop list with type and purpose, slot inventory with a11y notes.
+3. Anti-case list — the combinations the component refuses to support
+   (the explicit "no" surface that callers can rely on).
+
+Concrete shape:
+
+```
+Component:        <Name>
+Responsibility:   <one sentence — reject if "and" joins two jobs>
+Pattern:          <compound | slots | render-props | polymorphic>
+State:            value=<controlled|uncontrolled|both>; open=<...>; ...
+Props (≤ tier):   [name: type — purpose]
+Slots:            [name: required? default? a11y note]
+Children:         <count, kind>
+Anti-cases:       <combinations the component refuses to support>
+```
+
+## Gotcha
+
+- `variant` props with > 4 values are usually two components in a
+  trench coat — split when the rendering branches diverge.
+- `as` polymorphism is cheap in TypeScript when typed via generics,
+  expensive without — the type cost is invisible in plain JS.
+- Compound components share state via context; nesting two
+  compound trees of the same family in one parent silently
+  crosses contexts — namespace the context per instance or
+  refuse the nesting.
+- "Render props" + memoization fight; if the function changes
+  every render, the child re-renders too. Stabilize via
+  `useCallback` or hoist.
+
+## Do NOT
+
+- Do NOT design a component without running
+  [`existing-ui-audit`](../existing-ui-audit/SKILL.md) first.
+  Reinventing primitives is the #1 source of design drift.
+- Do NOT use inheritance when composition fits — class-extension
+  hierarchies in UI age badly.
+- Do NOT ship a "kitchen-sink" prop (`config={...}`) just to dodge
+  the prop cap — that hides the API instead of taming it.
+- Do NOT push the architecture into the tracker as code AC — output
+  is a design note for refinement, not implementation steps.

package/.agent-src/skills/unit-economics-modeling/SKILL.md

@@ -4,6 +4,7 @@ description: "Use when modeling CAC, LTV, gross-margin payback, or contribution
 status: active
 tier: senior
 source: package
+domain: product
 ---
 
 # unit-economics-modeling

package/.agent-src/skills/universal-project-analysis/SKILL.md

@@ -2,6 +2,7 @@
 name: universal-project-analysis
 description: "ONLY when user explicitly requests: full project analysis, deep codebase audit, or comprehensive architecture review. Routes to core and framework-specific analysis skills."
 source: package
+domain: discovery
 ---
 
 # universal-project-analysis

package/.agent-src/skills/upstream-contribute/SKILL.md

@@ -2,6 +2,7 @@
 name: upstream-contribute
 description: "Use when a learning, new skill, rule improvement, or bug fix from a consumer project should be contributed back to the shared agent-config package."
 source: package
+domain: process
 execution:
   type: assisted
   handler: internal

package/.agent-src/skills/using-git-worktrees/SKILL.md

@@ -2,6 +2,7 @@
 name: using-git-worktrees
 description: "Use when starting parallel work in isolation from the current branch — spawn a git worktree with ignore-safety checks and a clean test baseline — even when the user says 'try this on the side'."
 source: package
+domain: process
 ---
 
 # using-git-worktrees

package/.agent-src/skills/validate-feature-fit/SKILL.md

@@ -2,6 +2,7 @@
 name: "validate-feature-fit"
 description: "Validate whether a feature request fits the existing codebase — check for duplicates, contradictions, scope creep, and architectural misfit"
 source: package
+domain: quality
 execution:
   type: assisted
   handler: internal

package/.agent-src/skills/verify-completion-evidence/SKILL.md

@@ -2,6 +2,7 @@
 name: verify-completion-evidence
 description: "Use when claiming 'done', suggesting a commit, push, or PR — runs the evidence gate so completion claims come from fresh output in this message, not memory or earlier runs."
 source: package
+domain: quality
 ---
 
 # verify-completion-evidence

package/.agent-src/skills/websocket/SKILL.md

@@ -2,6 +2,7 @@
 name: websocket
 description: "Use when building real-time features — WebSocket broadcasting, live updates, presence channels, connection state — even when the user just says 'push this to the client live'."
 source: package
+domain: engineering
 ---
 
 # websocket

package/.claude-plugin/marketplace.json

@@ -6,7 +6,7 @@
   },
   "metadata": {
     "description": "Shared agent configuration \u2014 skills for AI coding tools (Claude Code, Augment, Cursor, Cline, Windsurf, Gemini CLI).",
-    "version": "1.33.0"
+    "version": "1.34.0"
   },
   "plugins": [
     {
@@ -15,6 +15,7 @@
       "source": "./",
       "strict": false,
       "skills": [
+        "./.claude/skills/accessibility-auditor",
         "./.claude/skills/adr-create",
         "./.claude/skills/adversarial-review",
         "./.claude/skills/agent-docs-writing",
@@ -32,6 +33,7 @@
         "./.claude/skills/api-design",
         "./.claude/skills/api-endpoint",
         "./.claude/skills/api-testing",
+        "./.claude/skills/architecture-review-lens",
         "./.claude/skills/artisan-commands",
         "./.claude/skills/async-python-patterns",
         "./.claude/skills/authz-review",
@@ -78,6 +80,7 @@
         "./.claude/skills/data-flow-mapper",
         "./.claude/skills/database",
         "./.claude/skills/dcf-modeling",
+        "./.claude/skills/decision-record",
         "./.claude/skills/deep-reading-analyst",
         "./.claude/skills/defense-in-depth",
         "./.claude/skills/dependency-upgrade",
@@ -112,6 +115,7 @@
         "./.claude/skills/fix-refs",
         "./.claude/skills/fix-seeder",
         "./.claude/skills/flux",
+        "./.claude/skills/form-handler",
         "./.claude/skills/funnel-analysis",
         "./.claude/skills/git-workflow",
         "./.claude/skills/github-ci",
@@ -119,6 +123,7 @@
         "./.claude/skills/grill-me",
         "./.claude/skills/guideline-writing",
         "./.claude/skills/implement-ticket",
+        "./.claude/skills/incident-commander",
         "./.claude/skills/jira-integration",
         "./.claude/skills/jira-ticket",
         "./.claude/skills/jobs-events",
@@ -143,6 +148,7 @@
         "./.claude/skills/learning-to-rule-or-skill",
         "./.claude/skills/lint-skills",
         "./.claude/skills/livewire",
+        "./.claude/skills/livewire-architect",
         "./.claude/skills/logging-monitoring",
         "./.claude/skills/markitdown",
         "./.claude/skills/mcp",
@@ -154,6 +160,7 @@
         "./.claude/skills/memory-promote",
         "./.claude/skills/memory-propose",
         "./.claude/skills/merge-conflicts",
+        "./.claude/skills/migration-architect",
         "./.claude/skills/migration-creator",
         "./.claude/skills/mobile-e2e-strategy",
         "./.claude/skills/mode",
@@ -184,7 +191,9 @@
         "./.claude/skills/php-coder",
         "./.claude/skills/php-debugging",
         "./.claude/skills/php-service",
+        "./.claude/skills/playwright-architect",
         "./.claude/skills/playwright-testing",
+        "./.claude/skills/po-discovery",
         "./.claude/skills/prepare-for-review",
         "./.claude/skills/project-analysis-core",
         "./.claude/skills/project-analysis-hypothesis-driven",
@@ -218,6 +227,7 @@
         "./.claude/skills/review-changes",
         "./.claude/skills/review-routing",
         "./.claude/skills/rice-prioritization",
+        "./.claude/skills/risk-officer",
         "./.claude/skills/roadmap",
         "./.claude/skills/roadmap-ai-council",
         "./.claude/skills/roadmap-create",
@@ -241,10 +251,13 @@
         "./.claude/skills/skill-reviewer",
         "./.claude/skills/skill-writing",
         "./.claude/skills/sql-writing",
+        "./.claude/skills/stakeholder-tradeoff",
         "./.claude/skills/subagent-orchestration",
         "./.claude/skills/sync-agent-settings",
         "./.claude/skills/sync-gitignore",
         "./.claude/skills/systematic-debugging",
+        "./.claude/skills/tailwind-engineer",
+        "./.claude/skills/tech-debt-tracker",
         "./.claude/skills/technical-specification",
         "./.claude/skills/terraform",
         "./.claude/skills/terragrunt",
@@ -258,6 +271,7 @@
         "./.claude/skills/threat-modeling",
         "./.claude/skills/token-optimizer",
         "./.claude/skills/traefik",
+        "./.claude/skills/ui-component-architect",
         "./.claude/skills/unit-economics-modeling",
         "./.claude/skills/universal-project-analysis",
         "./.claude/skills/update-form-request-messages",

package/AGENTS.md

@@ -21,6 +21,7 @@ task ci                # full pipeline — green before PR
 - **Multi-tool projection** — Augment, Claude Code, Cursor, Cline, Windsurf, Gemini CLI, Claude.ai bundle pipeline that ships from `.agent-src/` to consumer surfaces: [`docs/architecture.md`](docs/architecture.md#cloud-bundle-pipeline).
 - **Editing this repo** — Iron-Law rules (portability, source-of-truth, skill-quality) and the Thin-Root contract (caps · pointer-ratio · triage block) governing AGENTS.md: [`augment-portability`](.agent-src/rules/augment-portability.md), [`augment-source-of-truth`](.agent-src/rules/augment-source-of-truth.md), [`skill-quality`](.agent-src/rules/skill-quality.md), [`agents-md-thin-root`](.agent-src/skills/agents-md-thin-root/SKILL.md).
 - **Consumer story + architecture deep-dive** — what the package does for installers and how it ships: [`README.md`](README.md), [`docs/architecture.md`](docs/architecture.md).
+- **Personas** — 11 review-lens cast (6 core · 5 specialist), `personas:` vs `/mode` axes, citation map, override pattern: [`docs/personas.md`](docs/personas.md), schema [`docs/contracts/persona-schema.md`](docs/contracts/persona-schema.md).
 
 ## Emergency triage — read this when nothing else is reachable
 

package/CHANGELOG.md

@@ -318,6 +318,47 @@ our recommendation order, not its support status.
   users" tension without removing any path that an existing user
   might rely on.
 
+## [1.34.0](https://github.com/event4u-app/agent-config/compare/1.33.0...1.34.0) (2026-05-10)
+
+### Features
+
+* **skills:** block D — eval gate runner + ADR-006 pilot pass (D5) ([afbc4fb](https://github.com/event4u-app/agent-config/commit/afbc4fb6c23949df56376e40b3f0bdda12ee70b5))
+* **skills:** block D — discovery story trio score/audit/suggest (D2-D4) ([f79ff00](https://github.com/event4u-app/agent-config/commit/f79ff005555d84ca84aa5bda8dc4370547a135e9))
+* **skills:** block D — lint_skill_tools meta-linter + CI gate (D1) ([eff36a6](https://github.com/event4u-app/agent-config/commit/eff36a6a254dda61e8639c5d2a6782c0144ebb6c))
+* **skills:** block F UI engineers — tailwind, a11y, form-handler (F2, F3, F6) ([fb6c20a](https://github.com/event4u-app/agent-config/commit/fb6c20a6cbe2e4b6c7dc2f64ab8cad837a3a985a))
+* **skills:** block F UI architects — livewire, playwright, ui-component (F1, F4, F5) ([eeb0eaa](https://github.com/event4u-app/agent-config/commit/eeb0eaaebaf70d7efaba28057f70342745cd623d))
+* **skills:** block C architecture-review-lens — 5th judge in /review-changes (C8) ([197de6b](https://github.com/event4u-app/agent-config/commit/197de6b9687ee69803f53e13bdb9528aa95f4123))
+* **skills:** block C ops/risk — risk-officer, incident-commander, migration-architect (C2, C5, C6) ([24252f6](https://github.com/event4u-app/agent-config/commit/24252f6d754e4b5cdc9a98fd7afc2eaee225d4fb))
+* **skills:** block C product/discovery — po-discovery, decision-record, stakeholder-tradeoff, tech-debt-tracker (C1, C3, C4, C7) ([01a2725](https://github.com/event4u-app/agent-config/commit/01a27256ef175f4f25cde50f1d7b8a3d079855d3))
+* **personas:** discovery surface + public catalog (A5, A6) ([d905639](https://github.com/event4u-app/agent-config/commit/d9056397f4ce687aad65a8fdb75c100ef1d90c01))
+* **orchestration:** subagent mode 7 — do-in-worktrees competitive (A7) ([fa01033](https://github.com/event4u-app/agent-config/commit/fa0103303eaca0db1722a167e788c3a11b2f7ca7))
+* **skills:** cite specialist personas from 9 existing skills (A4) ([d123ac6](https://github.com/event4u-app/agent-config/commit/d123ac6608cf96e0971b3c71e06723e50a6f19fe))
+* **personas:** add 4 specialist personas + qa migration (A3) ([ec19dc5](https://github.com/event4u-app/agent-config/commit/ec19dc579cf69879c5fe339eb6f3d7eee6cf314d))
+* **personas:** lock specialist schema + extend linter (A1, A2) ([79a9ea2](https://github.com/event4u-app/agent-config/commit/79a9ea21202ded3ba848b1e18bf041fecef127c3))
+* **skills:** block B — lock 6-domain taxonomy + back-fill 153 skills ([dfc70fd](https://github.com/event4u-app/agent-config/commit/dfc70fdf8bf97ec30d53a3c81d0b5c4bb61291a9))
+
+### Bug Fixes
+
+* **test:** disable retention pruning in council save() artefact test ([e04de7d](https://github.com/event4u-app/agent-config/commit/e04de7d037e3dbfe7a96cf05369d6940e27298b0))
+* **refs:** post-archive ref fixes for road-to-better-skills + ADR-006 council carve-out ([b8922b7](https://github.com/event4u-app/agent-config/commit/b8922b736d40e370e1eef67500d752a028d7b1bf))
+
+### Chores
+
+* **skills:** clear missing_inspect_step + weak_output_format on Block-C/F skills ([07a72b3](https://github.com/event4u-app/agent-config/commit/07a72b3f91792e99c3acb7e3448f31b7cff7df0a))
+* **hooks:** gate command-count drift in pre-push ([7b0ff9e](https://github.com/event4u-app/agent-config/commit/7b0ff9e175bb59a9c4ca404f9b4b62149e2e8008))
+* **roadmap:** close road-to-better-skills-and-profiles (Block D pass, B4 deferred) ([f5d7170](https://github.com/event4u-app/agent-config/commit/f5d7170a8c5947be273089839f99aab6dc56a693))
+* **matrix:** regenerate file-ownership-matrix for block F skills ([83ad6a7](https://github.com/event4u-app/agent-config/commit/83ad6a777469ca0efe2da01a4d0173181356bbf1))
+* **catalog:** regenerate index + catalog for block F ([bd57d56](https://github.com/event4u-app/agent-config/commit/bd57d56d9226d2a60658dbac2b8d4b82bf48b519))
+* **sync:** refresh compression-hashes + marketplace for block F ([b45b8a9](https://github.com/event4u-app/agent-config/commit/b45b8a9cef1e74e1ee88f164f5f0cc6e92565fbc))
+* **roadmap:** close block F — flip F1-F6 + F marker to done ([e4bd5cc](https://github.com/event4u-app/agent-config/commit/e4bd5cca56e2f30234bc7833ce3650ccbe1634d8))
+* **roadmap:** flip Block C marker to done — 8 skills + 5th judge integrated ([cfd3ede](https://github.com/event4u-app/agent-config/commit/cfd3ede2cf3846570e410209df1ae18b96db2d18))
+* **matrix:** regenerate file-ownership-matrix for Block C skills ([ad89c8f](https://github.com/event4u-app/agent-config/commit/ad89c8fbb50c7bfa7b7031a21e522d5dd582c2a8))
+* **catalog:** regenerate index + catalog for Block C skills ([cfe94a5](https://github.com/event4u-app/agent-config/commit/cfe94a54d1ec448eabc4afa0810beb81e52471f0))
+* **sync:** refresh compression-hashes for review-changes after Block C ([c56dbe2](https://github.com/event4u-app/agent-config/commit/c56dbe25085255a2fb8b5cd85f75d8e471792137))
+* **roadmap:** close block C — flip C1-C8 to done, refresh counts ([954a2fd](https://github.com/event4u-app/agent-config/commit/954a2fd6205e493efd22619c73f8ff7f30b9121b))
+
+Tests: 2606 (+46 since 1.33.0)
+
 ## [1.33.0](https://github.com/event4u-app/agent-config/compare/1.32.0...1.33.0) (2026-05-09)
 
 ### Features

package/README.md

@@ -7,7 +7,7 @@ Give your AI agents an audit-disciplined orchestration contract — testing, Git
 > Your agent picks up the project's stack, runs tests, prepares PRs, fixes CI — and follows your team's coding standards while doing it. Stack-aware skill sets ship for PHP (Laravel · Symfony · Zend/Laminas), JavaScript (Next.js · React · Node), and cross-stack concerns (API · testing · security · observability).
 
 <p align="center">
-  <strong>153 Skills</strong> · <strong>60 Rules</strong> · <strong>103 Commands</strong> · <strong>68 Guidelines</strong> · <strong>8 AI Tools</strong>
+  <strong>167 Skills</strong> · <strong>60 Rules</strong> · <strong>103 Commands</strong> · <strong>68 Guidelines</strong> · <strong>8 AI Tools</strong>
 </p>
 
 ---
@@ -368,7 +368,7 @@ Every developer gets the same behavior. No per-user setup needed.
 native slash-commands)
 
 > **What this means in practice:** Augment Code and Claude Code get the full
-> package (rules + 153 skills + 103 native commands). Cursor, Cline, Windsurf,
+> package (rules + 167 skills + 103 native commands). Cursor, Cline, Windsurf,
 > Gemini CLI, and GitHub Copilot only get the **rules** natively; skills and
 > commands are available to them as documentation the agent can read, not as
 > first-class features.

package/docs/architecture.md

@@ -96,7 +96,7 @@ fails on any source-side violation, without producing artifacts.
 
 | Layer | Count | Purpose |
 |---|---|---|
-| **Skills** | 153 | On-demand expertise — stack analysis (Laravel · Symfony · Zend / Laminas · Next.js · React · Node), testing, Docker, API design, security, observability, … |
+| **Skills** | 167 | On-demand expertise — stack analysis (Laravel · Symfony · Zend / Laminas · Next.js · React · Node), testing, Docker, API design, security, observability, … |
 | **Rules** | 60 | Always-active constraints — coding standards, scope control, verification, language-and-tone, agent-authority |
 | **Commands** | 103 | Slash-command workflows — `/commit`, `/create-pr`, `/fix ci`, `/optimize skills`, `/feature plan`, `/work`, `/implement-ticket`, `/compress`, … |
 | **Guidelines** | 68 | Reference material cited by skills — PHP patterns, Eloquent, Playwright, agent-infra, … |

package/docs/catalog.md

@@ -1,16 +1,17 @@
 # agent-config — Public Catalog
 
-Consumer-facing catalog of all **381 public artefacts** shipped by
+Consumer-facing catalog of all **395 public artefacts** shipped by
 this package. Internal package-maintenance rules and deprecation shims
 are excluded.
 
 > **Regenerate:** `python3 scripts/generate_index.py`
 > Auto-generated — do not edit manually.
 
-## Skills (153)
+## Skills (167)
 
 | kind | name | extra | description |
 |---|---|---|---|
+| skill | [`accessibility-auditor`](../.agent-src/skills/accessibility-auditor/SKILL.md) |  | Use when reviewing UI for accessibility — WCAG 2.2 AA, keyboard nav, focus, ARIA, contrast, screen-reader semantics — even on 'is this a11y-OK?' or 'mach das barrierefrei'. |
 | skill | [`adr-create`](../.agent-src/skills/adr-create/SKILL.md) |  | Use when capturing an architectural decision — naming the file, picking the next ADR number, filling Status / Context / Decision / Consequences, and regenerating the index — even without saying 'ADR'. |
 | skill | [`adversarial-review`](../.agent-src/skills/adversarial-review/SKILL.md) |  | ONLY when user explicitly requests adversarial review, devil's advocate analysis, stress-testing a plan, or 'poke holes in this' — NOT for regular code review or design feedback. |
 | skill | [`agent-docs-writing`](../.agent-src/skills/agent-docs-writing/SKILL.md) |  | Use when reading, creating, or updating agent documentation, module docs, roadmaps, or AGENTS.md. Understands the full .augment/, agents/, and copilot-instructions structure. |
@@ -21,6 +22,7 @@ are excluded.
 | skill | [`api-design`](../.agent-src/skills/api-design/SKILL.md) |  | Use when designing APIs, planning endpoints, REST conventions, versioning, or deprecation — even when the user just says 'expose this as an endpoint' without naming API design. |
 | skill | [`api-endpoint`](../.agent-src/skills/api-endpoint/SKILL.md) |  | Use when the user says "create endpoint", "new API route", or "add controller". Creates a complete endpoint with Controller, FormRequest, Resource, route, and OpenAPI docs. |
 | skill | [`api-testing`](../.agent-src/skills/api-testing/SKILL.md) |  | Use when writing API endpoint tests — integration tests, contract validation, response assertions, mocked external services — even when the user says 'test this route' without naming API testing. |
+| skill | [`architecture-review-lens`](../.agent-src/skills/architecture-review-lens/SKILL.md) |  | Use when a diff may break system boundaries, dependency direction, or cross-service contracts — fifth judge dispatched by /review-changes alongside the four standard judges. |
 | skill | [`artisan-commands`](../.agent-src/skills/artisan-commands/SKILL.md) |  | Use when creating or modifying Artisan commands. Covers clear signatures, safe execution flow, helpful output, and project conventions for console tooling. |
 | skill | [`async-python-patterns`](../.agent-src/skills/async-python-patterns/SKILL.md) |  | Use when writing Python asyncio code — picking between gather / TaskGroup / wait, structured concurrency, timeouts, cancellation, sync-bridging — decision framework only, cookbook externalized. |
 | skill | [`authz-review`](../.agent-src/skills/authz-review/SKILL.md) |  | Use when reviewing authorization end-to-end — route → gate → policy → query scope → response filter — before changes to permissions, tenants, ownership, or admin flows. |
@@ -43,6 +45,7 @@ are excluded.
 | skill | [`data-flow-mapper`](../.agent-src/skills/data-flow-mapper/SKILL.md) |  | Use BEFORE editing code that touches user data — traces the value from entry → validation → transformation → storage → egress, every hop cited with file:line. |
 | skill | [`database`](../.agent-src/skills/database/SKILL.md) |  | Use when working with database architecture, MariaDB/MySQL tuning, indexing strategies, slow queries, or multi-connection patterns — even when the user just says 'this query is slow'. |
 | skill | [`dcf-modeling`](../.agent-src/skills/dcf-modeling/SKILL.md) |  | Wing-4 valuation cognition for a CFO / finance-partner. Use when a deal, internal investment, or board ask names DCF, intrinsic value, WACC, terminal value, or 'what's it worth on a 5-year hold'. |
+| skill | [`decision-record`](../.agent-src/skills/decision-record/SKILL.md) |  | Use when locking a trade-off, structuring an ADR draft, or wiring supersession chains — frames options · trade-offs · consequences before the file is written by `adr-create`. |
 | skill | [`deep-reading-analyst`](../.agent-src/skills/deep-reading-analyst/SKILL.md) |  | Deep analysis of articles/long-form via thinking frameworks (SCQA, mental models, inversion) — 'analyze article', 'deep dive', 'extract insights', URL/text wanting depth not summary. |
 | skill | [`defense-in-depth`](../.agent-src/skills/defense-in-depth/SKILL.md) |  | Use when validation needs entry, business-logic, environment, and instrumentation guards so a bad value cannot reach the failure point — turns a local bug fix into a structural one. |
 | skill | [`dependency-upgrade`](../.agent-src/skills/dependency-upgrade/SKILL.md) |  | Use when upgrading dependencies — "update Laravel", "bump PHP version", or "upgrade packages". Covers changelog review, breaking change detection, and verification. |
@@ -61,11 +64,13 @@ are excluded.
 | skill | [`file-editor`](../.agent-src/skills/file-editor/SKILL.md) |  | Use when opening edited files in the user's IDE. Reads settings from .agent-settings.yml to determine IDE and whether auto-open is enabled. |
 | skill | [`finishing-a-development-branch`](../.agent-src/skills/finishing-a-development-branch/SKILL.md) |  | Use when the feature is implementation-complete and the next step is 'ship it' — verifies, cleans up, and routes to merge/PR/park/discard — even when the user just says 'I'm done, what now?'. |
 | skill | [`flux`](../.agent-src/skills/flux/SKILL.md) |  | Use when the project uses `livewire/flux` — dispatched by `directives/ui/{apply,review,polish}.py`. Covers Flux components, slots, variants, and form primitives. |
+| skill | [`form-handler`](../.agent-src/skills/form-handler/SKILL.md) |  | Use when designing or reviewing a form — validation timing, error display, submission lifecycle, optimistic UI, dirty/pristine state, idempotency — even on 'why does submit double-fire?'. |
 | skill | [`funnel-analysis`](../.agent-src/skills/funnel-analysis/SKILL.md) |  | Use when diagnosing where a SaaS or product funnel leaks — visitor → signup → activation → paid → retained — channel-agnostic, conversion-rate-driven. |
 | skill | [`git-workflow`](../.agent-src/skills/git-workflow/SKILL.md) |  | Use when working with Git — branch naming, commit messages, PR creation, rebasing, or the code review process — even when the user says 'push this' or 'merge the branch' without naming Git. |
 | skill | [`github-ci`](../.agent-src/skills/github-ci/SKILL.md) |  | Use when working with GitHub Actions — workflow YAML, quality gates, test matrices, deployment triggers, reusable workflows — even when the user just says 'my CI is failing' or 'add a check'. |
 | skill | [`grafana`](../.agent-src/skills/grafana/SKILL.md) |  | Use when working with Grafana — dashboards, Loki LogQL queries, alerting rules, monitoring panels — even when the user just says 'build me a dashboard' or 'query the logs' without naming Grafana. |
 | skill | [`guideline-writing`](../.agent-src/skills/guideline-writing/SKILL.md) |  | Use when creating or editing a guideline in docs/guidelines/ — reference material cited by skills, no auto-triggers — even when the user just says 'write up our naming conventions'. |
+| skill | [`incident-commander`](../.agent-src/skills/incident-commander/SKILL.md) |  | Use during or right after an incident — frames severity, sets comms cadence, drafts the post-mortem skeleton — even when the user just says 'production is down' or 'wir haben einen Vorfall'. |
 | skill | [`jira-integration`](../.agent-src/skills/jira-integration/SKILL.md) |  | Use when the user says "check Jira", "create ticket", "update issue", or needs JQL queries, ticket transitions, or branch-to-ticket linking. |
 | skill | [`jobs-events`](../.agent-src/skills/jobs-events/SKILL.md) |  | Use when creating Laravel jobs, queued workflows, events, or listeners. Covers clear responsibilities, safe serialization, and retry/failure handling. |
 | skill | [`judge-bug-hunter`](../.agent-src/skills/judge-bug-hunter/SKILL.md) |  | Use when a diff needs correctness review — null-safety, edge cases, off-by-one, races, error handling — dispatched by /review-changes, /do-and-judge, /judge, even without 'judge'. |
@@ -85,12 +90,14 @@ are excluded.
 | skill | [`learning-to-rule-or-skill`](../.agent-src/skills/learning-to-rule-or-skill/SKILL.md) |  | Use when a repeated learning, mistake, or successful pattern should be turned into a new rule or skill. Also use after completing a task to capture learnings from the work. |
 | skill | [`lint-skills`](../.agent-src/skills/lint-skills/SKILL.md) |  | Use when running the package's skill linter against all skills and rules to validate frontmatter, required sections, and execution metadata. |
 | skill | [`livewire`](../.agent-src/skills/livewire/SKILL.md) |  | Use when the project's frontend stack is Livewire — dispatched by `directives/ui/{apply,review,polish}.py`. Covers reactive state, events, lifecycle hooks, and component/view separation. |
+| skill | [`livewire-architect`](../.agent-src/skills/livewire-architect/SKILL.md) |  | Use when shaping a Livewire component before code — full-page vs partial, parent/child split, event flow, state-vs-props boundary, hydration cost — even on 'add this Livewire component'. |
 | skill | [`logging-monitoring`](../.agent-src/skills/logging-monitoring/SKILL.md) |  | Use when working with logging or monitoring — Sentry error tracking, Grafana/Loki log aggregation, structured logging channels, or monitoring helpers. |
 | skill | [`markitdown`](../.agent-src/skills/markitdown/SKILL.md) |  | Use when converting PDF, DOCX, XLSX, PPTX, EPUB, images, or audio to Markdown for LLM ingestion via the upstream markitdown-mcp server — 'extract this PDF', 'OCR this image', 'transcribe this audio'. |
 | skill | [`mcp`](../.agent-src/skills/mcp/SKILL.md) |  | Use when working with MCP (Model Context Protocol) servers — their tools, capabilities, and best practices for effective agent workflows. |
 | skill | [`mcp-builder`](../.agent-src/skills/mcp-builder/SKILL.md) |  | Use when building an MCP server in Python (FastMCP) or Node/TypeScript (MCP SDK) — agent-centric tool design, input schemas, error handling, and the 10-question evaluation harness. |
 | skill | [`md-language-check`](../.agent-src/skills/md-language-check/SKILL.md) |  | Use BEFORE saving any .md under .augment/, .agent-src*/, or agents/ — scans umlauts, German function words, and quoted German phrases outside DE:/EN: anchor blocks. Hard gate per language-and-tone. |
 | skill | [`merge-conflicts`](../.agent-src/skills/merge-conflicts/SKILL.md) |  | Use when the user has merge conflicts or says "resolve conflicts". Understands conflict markers, resolution strategies, and verification workflow. |
+| skill | [`migration-architect`](../.agent-src/skills/migration-architect/SKILL.md) |  | Use when shaping a non-trivial migration — rollout phases, dual-write windows, cutover sequencing, deprecation cycles — hands off to `migration-creator` for DDL once locked. |
 | skill | [`migration-creator`](../.agent-src/skills/migration-creator/SKILL.md) |  | Use when the user says "create migration", "add column", or "new table". Creates migrations with correct table prefixes, column naming, and multi-tenant awareness. |
 | skill | [`mobile-e2e-strategy`](../.agent-src/skills/mobile-e2e-strategy/SKILL.md) |  | Use when picking a mobile E2E framework — Detox / Appium / Maestro / XCUITest / Espresso — or planning iOS Simulator / Android Emulator coverage in CI for RN, Expo, or native apps. |
 | skill | [`module-management`](../.agent-src/skills/module-management/SKILL.md) |  | Use when the user says "create module", "explore module", or works within app/Modules/. Understands module structure, auto-loading, route registration, and namespace conventions. |
@@ -105,7 +112,9 @@ are excluded.
 | skill | [`php-coder`](../.agent-src/skills/php-coder/SKILL.md) |  | Writes or edits PHP code — controllers, classes, type hints, SOLID refactors, modern idioms — even without naming PHP. NOT for writing tests (use pest-testing) or explaining PHP concepts. |
 | skill | [`php-debugging`](../.agent-src/skills/php-debugging/SKILL.md) |  | Use when debugging PHP with Xdebug — breakpoints, step-through, dual-container setup, IDE configuration, header-based routing — even when the user just says 'why does this blow up on request X'. |
 | skill | [`php-service`](../.agent-src/skills/php-service/SKILL.md) |  | Use when the user says 'create service', 'new service class', or needs a PHP service following SOLID principles with proper DI and repository usage. |
+| skill | [`playwright-architect`](../.agent-src/skills/playwright-architect/SKILL.md) |  | Use when shaping a Playwright suite — locator strategy, Page Object boundaries, fixture composition, flake-prevention architecture, CI-vs-local split — even on 'design our E2E tests'. |
 | skill | [`playwright-testing`](../.agent-src/skills/playwright-testing/SKILL.md) |  | Use when writing Playwright E2E tests — browser automation, visual regression testing, Page Objects, fixtures, and reliable test patterns. |
+| skill | [`po-discovery`](../.agent-src/skills/po-discovery/SKILL.md) |  | Use when shaping a fuzzy product ask into a refined backlog item — problem framing, user-story rewrite, AC tightening — even if the user just says 'help me write this ticket'. |
 | skill | [`project-analysis-core`](../.agent-src/skills/project-analysis-core/SKILL.md) |  | Use for the universal deep-analysis workflow: project discovery, version resolution, docs loading, architecture mapping, execution flow, and package research. |
 | skill | [`project-analysis-hypothesis-driven`](../.agent-src/skills/project-analysis-hypothesis-driven/SKILL.md) |  | Use when a bug has multiple plausible causes across layers — competing hypotheses, validation loops, evidence-based conclusions — even when the user just says 'why is this happening?'. |
 | skill | [`project-analysis-laravel`](../.agent-src/skills/project-analysis-laravel/SKILL.md) |  | Use for deep Laravel project analysis: boot flow, request lifecycle, container usage, Eloquent/data flow, async systems, and Laravel-specific failure patterns. |
@@ -131,6 +140,7 @@ are excluded.
 | skill | [`requesting-code-review`](../.agent-src/skills/requesting-code-review/SKILL.md) |  | Use when asking for a review or creating a PR — self-review first, frame the right context, test plan included — even when the user just says 'open a PR' or 'ready to merge'. |
 | skill | [`review-routing`](../.agent-src/skills/review-routing/SKILL.md) |  | Use when preparing a PR description, suggesting reviewers, or flagging risk — produces owner-mapped roles plus historical bug-pattern matches from project-local YAML. |
 | skill | [`rice-prioritization`](../.agent-src/skills/rice-prioritization/SKILL.md) |  | Use when ranking competing initiatives for a roadmap, breaking a tie between two features, or auditing a backlog for hidden low-value work via Reach × Impact × Confidence ÷ Effort. |
+| skill | [`risk-officer`](../.agent-src/skills/risk-officer/SKILL.md) |  | Use when surfacing and prioritising risk before commit — blast-radius framing, mitigations, residual-risk verdict — even if the user just says 'what could go wrong here?'. |
 | skill | [`roadmap-management`](../.agent-src/skills/roadmap-management/SKILL.md) |  | Use when the user says "create roadmap", "show roadmap", or "execute roadmap". Creates, reads, and manages roadmap files with phase tracking. |
 | skill | [`roadmap-writing`](../.agent-src/skills/roadmap-writing/SKILL.md) |  | Use when authoring or rewriting a roadmap in agents/roadmaps/ — phase prose, goal sentence, acceptance criteria, council notes — even when the user just says 'write a plan for X' or 'draft a roadmap'. |
 | skill | [`rtk-output-filtering`](../.agent-src/skills/rtk-output-filtering/SKILL.md) |  | Use when running verbose CLI commands — wraps them with rtk (Rust Token Killer) for 60-90% token savings. Covers installation, configuration, and usage patterns. |
@@ -146,8 +156,11 @@ are excluded.
 | skill | [`skill-reviewer`](../.agent-src/skills/skill-reviewer/SKILL.md) |  | Use when reviewing, auditing, or optimizing skills — validates against the 7 Skill Killers checklist and produces fix recommendations. |
 | skill | [`skill-writing`](../.agent-src/skills/skill-writing/SKILL.md) |  | Use when deciding 'should this be a skill or a rule?', creating/improving/reviewing agent skills, SKILL.md frontmatter, or procedure sections — even without saying 'skill-writing'. |
 | skill | [`sql-writing`](../.agent-src/skills/sql-writing/SKILL.md) |  | Use when writing raw SQL — MariaDB/MySQL syntax, parameterization, raw migrations, seeders with `DB::statement` — even when the user just pastes a query and asks 'why is this slow' without naming SQL. |
+| skill | [`stakeholder-tradeoff`](../.agent-src/skills/stakeholder-tradeoff/SKILL.md) |  | Use when stakeholders pull a decision in different directions — frames each lens, builds a trade-off matrix, surfaces the cost of every choice — even if the user just says 'PO and ops disagree'. |
 | skill | [`subagent-orchestration`](../.agent-src/skills/subagent-orchestration/SKILL.md) |  | Use when orchestrating implementer/judge subagents — seven modes (do-and-judge ±two-stage, do-in-steps/parallel/worktrees, do-competitively, judge-with-debate) — models from .agent-settings.yml. |
 | skill | [`systematic-debugging`](../.agent-src/skills/systematic-debugging/SKILL.md) |  | Use when hitting a bug, test failure, crash, or unexpected behavior — enforces reproduce → isolate → hypothesize → verify before any fix — even when the user just says 'this is broken' or 'quick fix'. |
+| skill | [`tailwind-engineer`](../.agent-src/skills/tailwind-engineer/SKILL.md) |  | Use when writing or reviewing Tailwind CSS — utility-first, design-token discipline, no inline-style drift, responsive variants, dark mode — even on 'style this' or 'mach das hübsch'. |
+| skill | [`tech-debt-tracker`](../.agent-src/skills/tech-debt-tracker/SKILL.md) |  | Use when surfacing tech debt as trackable items — interest-vs-principal framing, prioritisation by carrying cost, repayment plan — even if the user just says 'this codebase is a mess'. |
 | skill | [`technical-specification`](../.agent-src/skills/technical-specification/SKILL.md) |  | Use when the user says "write a spec", "create RFC", "write a PRD", or "document this decision". Writes technical specifications, PRDs, RFCs, and ADRs with clear structure. |
 | skill | [`terraform`](../.agent-src/skills/terraform/SKILL.md) |  | Use when writing Terraform — AWS modules, resources, variables, outputs, remote state — even when the user just says 'provision this infra' or 'add an S3 bucket' without naming Terraform. |
 | skill | [`terragrunt`](../.agent-src/skills/terragrunt/SKILL.md) |  | Use when working with Terragrunt — DRY multi-env configs, module dependencies, remote state orchestration — even when the user just says 'deploy this to staging and prod' without naming Terragrunt. |
@@ -157,6 +170,7 @@ are excluded.
 | skill | [`threat-modeling`](../.agent-src/skills/threat-modeling/SKILL.md) |  | Use when adding auth, webhooks, uploads, queues, secrets, tenant boundaries, or public endpoints — produces trust boundaries + abuse cases mapped to files, BEFORE implementation. |
 | skill | [`token-optimizer`](../.agent-src/skills/token-optimizer/SKILL.md) |  | Use BEFORE any verbose CLI run, large file read, doc conversion, or near-context handoff — single decision tree keyed by intent that cites the canonical token-saving asset. Consult before the action. |
 | skill | [`traefik`](../.agent-src/skills/traefik/SKILL.md) |  | Use when setting up Traefik as a local reverse proxy — real domains on 127.0.0.1, trusted HTTPS via mkcert, automatic service discovery, and multi-project routing. |
+| skill | [`ui-component-architect`](../.agent-src/skills/ui-component-architect/SKILL.md) |  | Use when shaping a UI component tree — composition vs inheritance, slot patterns, prop API design, controlled vs uncontrolled, polymorphic — even on 'split this component'. |
 | skill | [`unit-economics-modeling`](../.agent-src/skills/unit-economics-modeling/SKILL.md) |  | Use when modeling CAC, LTV, gross-margin payback, or contribution margin per customer — for SaaS, marketplace, or transactional businesses. |
 | skill | [`universal-project-analysis`](../.agent-src/skills/universal-project-analysis/SKILL.md) |  | ONLY when user explicitly requests: full project analysis, deep codebase audit, or comprehensive architecture review. Routes to core and framework-specific analysis skills. |
 | skill | [`upstream-contribute`](../.agent-src/skills/upstream-contribute/SKILL.md) |  | Use when a learning, new skill, rule improvement, or bug fix from a consumer project should be contributed back to the shared agent-config package. |
@@ -315,7 +329,7 @@ are excluded.
 | command | [`research:deep`](../.agent-src/commands/research/deep.md) | cluster: research | Read `outline.yaml`, research each item in batches, write per-item JSON validated against the project-local research-schema. No Python runtime, no `~/.claude/` paths. |
 | command | [`research:report`](../.agent-src/commands/research/report.md) | cluster: research | Summarise per-item JSON results from `/research:deep` into `report.md`. Agent renders directly + emits an optional `jq` template for deterministic regeneration. No Python runtime. |
 | command | [`research`](../.agent-src/commands/research.md) | cluster: research | Preliminary research scaffolder — pick objects, define fields, emit `outline.yaml` + `fields.yaml` for downstream deep research. Use for surveys, benchmarks, tech selection, competitive scans. |
-| command | [`review-changes`](../.agent-src/commands/review-changes.md) |  | Self-review local changes before creating a PR — dispatches to four specialized judges (bug, security, tests, quality) and consolidates verdicts |
+| command | [`review-changes`](../.agent-src/commands/review-changes.md) |  | Self-review local changes before creating a PR — dispatches to five specialized judges (bug, security, tests, quality, architecture) and consolidates verdicts |
 | command | [`review-routing`](../.agent-src/commands/review-routing.md) |  | Compute reviewer roles and matched historical bug patterns for the current diff, using project-local ownership-map.yml and historical-bug-patterns.yml |
 | command | [`roadmap:ai-council`](../.agent-src/commands/roadmap/ai-council.md) | cluster: roadmap | Challenge a roadmap with the AI council (deep tier) and refactor from convergence findings. Wraps `/council default` pinned to `--input-mode roadmap --depth deep`; patches surface as numbered options. |
 | command | [`roadmap:create`](../.agent-src/commands/roadmap/create.md) | cluster: roadmap | Interactively create a new roadmap file in agents/roadmaps/ |