@event4u/agent-config 14.16.0 → 14.17.0

package/dist/discovery/discovery-manifest.json

@@ -360,7 +360,7 @@
     },
     {
       "category": "command",
-      "checksum": "sha256:566e4d523e131bdf5e0a28a5bf0c544805956c646b03d2a45a9061c8268d4d49",
+      "checksum": "sha256:acfd0bdc3251429e8f418b6d9f3e32a26ba85942266a2248c053288c34b4f429",
       "install": {
         "default": true,
         "removable": false
@@ -1057,12 +1057,12 @@
     },
     {
       "category": "command",
-      "checksum": "sha256:8cd5692abb4cbaec5526cc650ad88a7429a5dcf1c921e80974bf46e5227afc31",
+      "checksum": "sha256:598e0006286c50059835114af326c888669fadccc34218bd8aeb7bc60d319b9f",
       "install": {
         "default": true,
         "removable": false
       },
-      "intent": "Fix-workflow dispatcher — ci, pr-comments, pr-comments-loop, refs, seeder, portability, comments, quality",
+      "intent": "Fix-workflow dispatcher — ci, pr-comments, pr-comments-loop, refs, seeder, portability, comments, commit-messages, quality",
       "lifecycle": "active",
       "name": "fix",
       "pack": "engineering-base",
@@ -1079,6 +1079,7 @@
         "fix-seeder",
         "fix-portability",
         "fix-comments",
+        "fix-commit-messages",
         "fix-quality",
         "fix-route"
       ],
@@ -1118,6 +1119,31 @@
         "agent-config-maintainer"
       ]
     },
+    {
+      "category": "command",
+      "checksum": "sha256:f7bfaa1534906c98194154aad1f8ea6c0f0ade94a3e6da884b4669d7058b7443",
+      "install": {
+        "default": true,
+        "removable": false
+      },
+      "lifecycle": "active",
+      "name": "fix-commit-messages",
+      "pack": "engineering-base",
+      "packs": [
+        "meta"
+      ],
+      "path": "src/domains/engineering-base/fix/commit-messages/command.md",
+      "slug": "fix-commit-messages",
+      "trust": {
+        "confidence": "high",
+        "human_review_required": false,
+        "level": "core"
+      },
+      "visibility": "internal",
+      "workspaces": [
+        "agent-config-maintainer"
+      ]
+    },
     {
       "category": "command",
       "checksum": "sha256:380c991a9f4948ab9753e92fed18658db17b45893687164281205ae3885be34f",
@@ -5732,7 +5758,7 @@
     },
     {
       "category": "rule",
-      "checksum": "sha256:e78ad2e07a0c187fca461658b3d6a4d2c18bbf632e7075b2bceef64a462736fd",
+      "checksum": "sha256:7f012a7428d4c4d0412dbb853bb64421ffeb420173a92e23a386afa0d5b62b4e",
       "install": {
         "default": true,
         "removable": false
@@ -8577,7 +8603,7 @@
     },
     {
       "category": "skill",
-      "checksum": "sha256:baa93744948e26b3677cb77144d491070ea63bf495191c8e66db7a9d44a26970",
+      "checksum": "sha256:e58d69196c8e5c90fc9902a78a86fd3606284c6d471615fa9e69867efd13d004",
       "install": {
         "default": true,
         "removable": false
@@ -9281,7 +9307,7 @@
     },
     {
       "category": "skill",
-      "checksum": "sha256:9b25b8ff439cf3c9fd703d052f5f499a85dbf418110140a8d1d99720bb14594b",
+      "checksum": "sha256:42a56536667e2d98e94404905831a02accb86dfe5844dc9499fe4e2abb2fbb93",
       "install": {
         "default": true,
         "removable": false
@@ -14149,7 +14175,7 @@
     },
     {
       "category": "skill",
-      "checksum": "sha256:f3b517e7641304ddb59aa87f889d13174bc7459f53b6482f39f3c29e82c676b6",
+      "checksum": "sha256:04ca9b083907c4c44d3d73740a1e629d84ba3e689a9640250c93060b41646a7c",
       "install": {
         "default": true,
         "removable": false
@@ -14743,7 +14769,7 @@
     },
     {
       "category": "subagent",
-      "checksum": "sha256:d57dfc1457cf467402e4ee1187cd162cbb62ddecb35b101d6e1aae6e2f103baa",
+      "checksum": "sha256:b455bc3b2ee4e2adadd5ed9e9b781068aaafda014304bf91a5574d26d543683d",
       "install": {
         "default": false,
         "removable": true
@@ -14760,7 +14786,7 @@
       "workspaces": []
     }
   ],
-  "checksum": "sha256:dd8fabe64f8d77c0d267127d1797192fba713fa8498e4b5883701c84fff20e6e",
+  "checksum": "sha256:050eb71e8c64d4eae3c85c2691838794f9a436a1808835a8b388f2a3971250ac",
   "deprecations": [
     {
       "key": "tier",
@@ -14909,7 +14935,7 @@
       "reason": "scaffold template for ticket-bundle tickets (ADR-101); carries no runtime frontmatter — emit-tickets fills it in per ticket"
     }
   ],
-  "generated_at": "2026-09-04T03:43:39Z",
+  "generated_at": "2026-09-05T05:33:47Z",
   "packs": [
     {
       "artefact_count": 128,
@@ -15658,7 +15684,7 @@
     },
     {
       "always_on": true,
-      "artefact_count": 300,
+      "artefact_count": 301,
       "description": "Artefacts that maintain this package (agent-config itself).",
       "domain": "meta",
       "human_review_required": 0,
@@ -15674,7 +15700,7 @@
       "trust_level_default": "core",
       "trust_summary": {
         "advisory": 0,
-        "core": 298,
+        "core": 299,
         "experimental": 2,
         "professional": 0,
         "restricted": 0
@@ -15765,27 +15791,27 @@
   "scanner_version": "de0a22b4ac4c",
   "stats": {
     "by_category": {
-      "command": 202,
+      "command": 203,
       "rule": 120,
       "skill": 299,
       "subagent": 1,
       "template": 1
     },
     "by_lifecycle": {
-      "active": 605,
+      "active": 606,
       "archived": 0,
       "deprecated": 0,
       "experimental": 18
     },
     "by_trust_level": {
       "advisory": 8,
-      "core": 490,
+      "core": 491,
       "experimental": 23,
       "professional": 102,
       "restricted": 0
     },
     "documented_unassigned_count": 27,
-    "total_artefacts": 623,
+    "total_artefacts": 624,
     "unassigned_count": 0
   },
   "unassigned": [],

package/dist/discovery/discovery-manifest.json.sha256

@@ -1 +1 @@
-39bbab4136c262fec6b632f6019ca5269b010e6a49c660c6325014a2e72e304f  discovery-manifest.json
+b6d912c7a07017329d09d59c8a57ec9facf284dee72f6cf0b1d5c05c88ac8c9f  discovery-manifest.json

package/dist/discovery/discovery-manifest.summary.md

@@ -1,8 +1,8 @@
 # Discovery Manifest — Summary
 
-- Generated: `2026-09-04T03:43:39Z`
+- Generated: `2026-09-05T05:33:47Z`
 - Scanner: `de0a22b4ac4c`
-- Artefacts: **623**
+- Artefacts: **624**
 - Unassigned: **0**
 
 ## `engineering` — Engineering
@@ -106,7 +106,7 @@
 
 | Pack | Artefacts |
 |---|---|
-| `meta` — Meta | 300 |
+| `meta` — Meta | 301 |
 | `memory` — Memory | 9 |
 | `analytics` — Analytics | 4 |
 | `product-reasoning` — Product Reasoning | 11 |

package/dist/discovery/dormancy-report.md

@@ -1,6 +1,6 @@
 # Discovery — Dormancy Report
 
-- Generated: `2026-09-04T03:43:39Z`
+- Generated: `2026-09-05T05:33:47Z`
 - Window: **6 months** without a commit
 
 > Dormancy triggers **review, never auto-deprecation**

package/dist/discovery/orphan-report.md

@@ -1,6 +1,6 @@
 # Discovery — Orphan Report
 
-- Generated: `2026-09-04T03:43:39Z`
+- Generated: `2026-09-05T05:33:47Z`
 - Orphan artefacts: **0**
 
 > An orphan is an artefact whose declared pack has no other members.

package/dist/discovery/packs.json

@@ -1,6 +1,6 @@
 {
-  "checksum": "sha256:dd8fabe64f8d77c0d267127d1797192fba713fa8498e4b5883701c84fff20e6e",
-  "generated_at": "2026-09-04T03:43:39Z",
+  "checksum": "sha256:050eb71e8c64d4eae3c85c2691838794f9a436a1808835a8b388f2a3971250ac",
+  "generated_at": "2026-09-05T05:33:47Z",
   "packs": [
     {
       "always_on": false,
@@ -1367,7 +1367,7 @@
     },
     {
       "always_on": true,
-      "artefact_count": 300,
+      "artefact_count": 301,
       "artefacts": [
         "src/agent-src/templates/agents/proposal.example.md",
         "src/domains/ai-video/image/analyse/command.md",
@@ -1396,6 +1396,7 @@
         "src/domains/engineering-base/fix/ci/command.md",
         "src/domains/engineering-base/fix/command.md",
         "src/domains/engineering-base/fix/comments/command.md",
+        "src/domains/engineering-base/fix/commit-messages/command.md",
         "src/domains/engineering-base/fix/portability/command.md",
         "src/domains/engineering-base/fix/pr-comments-loop/command.md",
         "src/domains/engineering-base/fix/pr-comments/command.md",
@@ -1671,14 +1672,14 @@
         "src/skills/verify-repair-loop/SKILL.md"
       ],
       "by_lifecycle": {
-        "active": 299,
+        "active": 300,
         "archived": 0,
         "deprecated": 0,
         "experimental": 1
       },
       "by_trust_level": {
         "advisory": 0,
-        "core": 298,
+        "core": 299,
         "experimental": 2,
         "professional": 0,
         "restricted": 0

package/dist/discovery/trust-report.md

@@ -1,6 +1,6 @@
 # Discovery — Trust Report
 
-- Generated: `2026-09-04T03:43:39Z`
+- Generated: `2026-09-05T05:33:47Z`
 - Workspaces tracked: **10**
 - Human-review-required artefacts: **3**
 
@@ -8,7 +8,7 @@
 
 | Workspace | core | professional | experimental | advisory | restricted |
 |---|---|---|---|---|---|
-| `agent-config-maintainer` | 330 | 0 | 3 | 0 | 0 |
+| `agent-config-maintainer` | 331 | 0 | 3 | 0 | 0 |
 | `construction` | 27 | 0 | 0 | 0 | 0 |
 | `engineering` | 201 | 62 | 4 | 0 | 0 |
 | `finance` | 30 | 4 | 0 | 1 | 0 |

package/dist/discovery/workspaces.json

@@ -1,6 +1,6 @@
 {
-  "checksum": "sha256:dd8fabe64f8d77c0d267127d1797192fba713fa8498e4b5883701c84fff20e6e",
-  "generated_at": "2026-09-04T03:43:39Z",
+  "checksum": "sha256:050eb71e8c64d4eae3c85c2691838794f9a436a1808835a8b388f2a3971250ac",
+  "generated_at": "2026-09-05T05:33:47Z",
   "scanner_version": "de0a22b4ac4c",
   "workspaces": [
     {
@@ -648,7 +648,7 @@
       ]
     },
     {
-      "artefact_count": 324,
+      "artefact_count": 325,
       "default_packs": [
         "meta",
         "memory",
@@ -661,7 +661,7 @@
       "optional_packs": [],
       "packs": [
         {
-          "artefact_count": 300,
+          "artefact_count": 301,
           "artefacts": [
             "src/agent-src/templates/agents/proposal.example.md",
             "src/domains/ai-video/image/analyse/command.md",
@@ -690,6 +690,7 @@
             "src/domains/engineering-base/fix/ci/command.md",
             "src/domains/engineering-base/fix/command.md",
             "src/domains/engineering-base/fix/comments/command.md",
+            "src/domains/engineering-base/fix/commit-messages/command.md",
             "src/domains/engineering-base/fix/portability/command.md",
             "src/domains/engineering-base/fix/pr-comments-loop/command.md",
             "src/domains/engineering-base/fix/pr-comments/command.md",

package/dist/mcp/registry-manifest.json

@@ -1,15 +1,15 @@
 {
   "discovery": {
-    "artefact_count": 623,
+    "artefact_count": 624,
     "scanner_version": "de0a22b4ac4c"
   },
-  "generated_at": "2026-09-04",
+  "generated_at": "2026-09-05",
   "package": {
     "description": "Governed skills, rules and commands for AI coding tools (Claude Code, Cursor, Windsurf, Copilot) \u2014 every claim machine-checked, including the counts in these badges.",
     "homepage": "https://event4u-app.github.io/agent-config",
     "name": "@event4u/agent-config",
     "repository": "https://github.com/event4u-app/agent-config",
-    "version": "14.16.0"
+    "version": "14.17.0"
   },
   "registries": [
     {

package/dist/mcp/server.json

@@ -9,12 +9,12 @@
       "transport": {
         "type": "stdio"
       },
-      "version": "14.16.0"
+      "version": "14.17.0"
     }
   ],
   "repository": {
     "source": "github",
     "url": "https://github.com/event4u-app/agent-config"
   },
-  "version": "14.16.0"
+  "version": "14.17.0"
 }

package/package.json

@@ -1,7 +1,7 @@
 {
     "name": "@event4u/agent-config",
     "mcpName": "io.github.event4u-app/agent-config",
-    "version": "14.16.0",
+    "version": "14.17.0",
     "description": "Governed skills, rules and commands for AI coding tools (Claude Code, Cursor, Windsurf, Copilot) — every claim machine-checked, including the counts in these badges.",
     "license": "MIT",
     "private": false,

package/src/config/web-launch-readiness.json

@@ -165,7 +165,7 @@
     "rule": "The external corpus is a STUDY OBJECT and a per-defect harvest source. Its rule set is not imported. Rules enter ONE AT A TIME, each against a named defect, each carrying its own remediation and verification.",
     "why": "An imported rule set arrives with its authors' assumptions about site type, jurisdiction and stack, and none of those is checked on arrival. The failure is silent: the skill grows to N checks, each individually plausible, and the conditional axis this file exists to enforce is the first thing a bulk import flattens. One-at-a-time keeps the axis honest because every entry has to answer `applies_to` before it lands.",
     "ceiling": 50,
-    "ceiling_enforced_by": "tests/scripts/web_launch_readiness_config.test.ts asserts checks.length < 50. Currently 7."
+    "ceiling_enforced_by": "tests/scripts/web_launch_readiness_config.test.ts asserts checks.length < 50. The live count is NOT retyped here: a number a human retypes on every ledger edit drifts, and this field had said 7 while `checks` held 9. Read `checks.length`; the ceiling is the only number this row owns."
   },
   "regions": {
     "_comment": "Region axis (road-to-web-launch-readiness 2.3). LEGAL-ROW CONTRACT: any row here or in `checks` whose `why` names a statute MUST carry `authority` (the citation and where it can be read) and `review_by` (the ISO date it must be re-read by); `authority` and `review_by` travel together, so a citation moved out of prose into `authority` stays dated; and a lapsed `review_by` FAILS the loader rather than warning, because a date nothing reads is a comment. Enforced by legalRowViolations() in src/scripts/check_web_launch_readiness.ts, which loadConfig() calls before returning. Separate from site_types because it answers a different question: site_types decides WHETHER a check applies, regions decides HOW SEVERELY. A DE-targeted site owes an Impressum and a Datenschutzerklaerung by law -- the citations sit in the escalation's `authority` field, dated, rather than in prose, which is what the `ddg-citation-authority` decision of 2026-09-03 settled -- so `required-legal-pages` is critical there and situational elsewhere -- the same check, a different tier. Modelled as a tier ESCALATION rather than as a second applies_to list, because a legal page is not more or less applicable in Germany, it is more or less optional.",

package/src/scripts/_cli/explain_last/index.ts

@@ -144,7 +144,7 @@ export function build_trace(
         inputs: _inputs.build(project_root),
         route: _route.build(project_root, state),
         council: _council.build(project_root, state_file),
-        memory: _memory.build(project_root, state),
+        memory: _memory.build(state),
         pack: _inputs.build_pack(project_root),
         assumptions: _assumptions.build(state),
         halt: _halt.build(state),

package/src/scripts/_cli/explain_last/memory.ts

@@ -2,20 +2,20 @@
  * Resolve the `memory` why-slot for the trace.
  *
  * Ported from the retired Python `src/scripts/_cli/explain_last/memory.py` (ADR-200).
- * Behaviour pins the historical contract exactly — same two sources, same
- * coercion order, same `float()` semantics, same `None`-on-empty branch.
- * No behaviour changes.
+ * The coercion order, the `float()` semantics and the `None`-on-empty branch
+ * still pin that historical contract. The second source the port carried — a
+ * sidecar whose only documented producer was the Layer-2 memory-MCP
+ * integration — does not, because
+ * `docs/decisions/ADR-094-agent-memory-layer-removal.md` removed that layer
+ * and rejected leaving its surfaces inert. Nothing in the tree ever wrote it.
  *
- * Two sources are consulted:
+ * One source is consulted:
  *
  * - `state.memory[]` — the work-engine writes per-run memory hits here
  *   during the `memory` step. Each entry carries `{entry_id, hit_score,
  *   used_in}` already shaped to the trace contract.
- * - `<root>/.agent-memory/hits.jsonl` — optional sidecar produced by the
- *   memory-MCP integration. Filtered to entries tagged with the run id
- *   when present.
  *
- * Returns `null` when neither source produced a non-empty list (the schema
+ * Returns `null` when that source produced no non-empty list (the schema
  * accepts a null memory slot so the renderer can drop the section cleanly).
  *
  * Parity note (ADR-200): Python's `hit_score = float(...)` always yields a
@@ -23,9 +23,6 @@
  * The twin carries it as a `PyFloat` marker so the downstream JSON
  * serializer (and the section renderer's `:.2f`) stays byte-identical.
  */
-import * as fs from 'node:fs';
-import * as path from 'node:path';
-
 import { scrub_string } from './scrubber.js';
 
 /**
@@ -37,8 +34,6 @@ export class PyFloat {
     constructor(readonly value: number) {}
 }
 
-const MEMORY_SIDECAR = path.join('.agent-memory', 'hits.jsonl');
-
 /** Python truthiness (empty string / 0 / null / empty container falsy). */
 function _pyTruthy(value: unknown): boolean {
     if (value === null || value === undefined) {
@@ -132,100 +127,9 @@ function _from_state(state: Record<string, unknown>): Record<string, unknown>[]
     return entries;
 }
 
-/**
- * Python `str.splitlines()` (no args). Splits on the Python line-boundary
- * set (`\n \r \r\n \v \f \x1c \x1d \x1e \x85 
 
`) and emits no
- * trailing empty element when the string ends on a break.
- */
-function _splitlines(s: string): string[] {
-    if (s === '') {
-        return [];
-    }
-    const breaks = new Set([
-        '\n', '\r', '\v', '\f',
-        '\x1c', '\x1d', '\x1e', '\x85',
-        '
', '
',
-    ]);
-    const out: string[] = [];
-    let cur = '';
-    for (let i = 0; i < s.length; i += 1) {
-        const ch = s[i] as string;
-        if (ch === '\r' && s[i + 1] === '\n') {
-            out.push(cur);
-            cur = '';
-            i += 1;
-            continue;
-        }
-        if (breaks.has(ch)) {
-            out.push(cur);
-            cur = '';
-            continue;
-        }
-        cur += ch;
-    }
-    if (cur !== '') {
-        out.push(cur);
-    }
-    return out;
-}
-
-function _from_sidecar(project_root: string, run_id: string | null): Record<string, unknown>[] {
-    const p = path.join(project_root, MEMORY_SIDECAR);
-    if (!fs.existsSync(p)) {
-        return [];
-    }
-    const entries: Record<string, unknown>[] = [];
-    let content: string;
-    try {
-        content = fs.readFileSync(p, 'utf-8');
-    } catch {
-        return [];
-    }
-    for (let line of _splitlines(content)) {
-        line = line.trim();
-        if (!line) {
-            continue;
-        }
-        let raw: unknown;
-        try {
-            raw = JSON.parse(line);
-        } catch {
-            continue; // json.JSONDecodeError → skip line
-        }
-        if (typeof raw !== 'object' || raw === null || Array.isArray(raw)) {
-            continue;
-        }
-        const rawDict = raw as Record<string, unknown>;
-        // if run_id and raw.get("run_id") not in (None, run_id): continue
-        if (run_id) {
-            const got = rawDict.run_id ?? null;
-            if (got !== null && got !== run_id) {
-                continue;
-            }
-        }
-        const entry = _coerce_entry(rawDict);
-        if (entry !== null) {
-            entries.push(entry);
-        }
-    }
-    return entries;
-}
-
 export function build(
-    project_root: string,
     state: Record<string, unknown>,
 ): Record<string, unknown>[] | null {
-    // run_id = (state.get("input") or {}).get("data", {}).get("id")
-    const input = _pyTruthy(state.input) ? (state.input as Record<string, unknown>) : {};
-    const dataRaw = 'data' in input ? input.data : {};
-    const data =
-        typeof dataRaw === 'object' && dataRaw !== null && !Array.isArray(dataRaw)
-            ? (dataRaw as Record<string, unknown>)
-            : {};
-    const run_id = data.id;
     const entries = _from_state(state);
-    entries.push(
-        ..._from_sidecar(project_root, typeof run_id === 'string' ? run_id : null),
-    );
     return entries.length > 0 ? entries : null;
 }

package/src/scripts/check_artefact_count_messaging.ts

@@ -288,6 +288,15 @@ export function anchor_coverage_gaps(root: string = ROOT): CoverageGap[] {
             const allowed = ANCHOR_KINDS[kind] ?? [kind];
             for (let i = 0; i < lines.length; i++) {
                 const line = lines[i]!;
+                // The dated-measurement marker is honoured HERE too, and it was
+                // not. `scan_text` skipped a marked line while this pass still
+                // demanded an anchor for it, so a figure the gate's own charter
+                // excludes — a point-in-time measurement, not a live total —
+                // could be silenced on value and never on coverage. An anchor is
+                // exactly the wrong repair for that line: `update_counts` would
+                // rewrite a recorded measurement to today's number, which is the
+                // falsification the marker's own docstring forbids.
+                if (line.includes(DATED_MEASUREMENT_MARKER)) continue;
                 const re = new RegExp(pattern.source, pattern.flags);
                 if (!re.test(line)) continue;
                 const anchored = anchors.some(