@event4u/agent-config 16.5.0 → 17.0.0

package/src/scripts/schemas/command.schema.json

@@ -1,7 +1,7 @@
 {
   "$schema": "http://json-schema.org/draft-07/schema#",
   "$id": "https://github.com/event4u-app/agent-config/scripts/schemas/command.schema.json",
-  "x-schemaVersion": "1.0.0",
+  "x-schemaVersion": "2.0.0",
   "title": "Command frontmatter",
   "$comment": "Source: agents/reference/docs/frontmatter-contract.md#commands. `description` is required at schema level because 66/67 commands declare it — the one exception is a known gap, not a supported shape.",
   "type": "object",
@@ -209,10 +209,10 @@
       "enum": ["lite", "medium", "high", "frontier", "inherit"],
       "description": "Vendor-neutral capability band the command needs (ADR-035, amended by ADR-232). Commands project as Claude skills, so frontier/high/medium/lite produce a native Claude `model:` when model.auto_switch=auto; the generator owns that mapping. inherit keeps the session model. `frontier` is the band above the strongest generally-recommended one - opt-in and expected to stay rare. Non-Claude agents are suggestion-only. No vendor model names here."
     },
-    "context": {
+    "context_window": {
       "type": "string",
       "enum": ["large"],
-      "description": "Optional orthogonal modifier (ADR-035): the command needs a large-context model regardless of reasoning tier. Sparse — most omit it. Metadata only; does not change the native Claude `model:`."
+      "description": "Optional orthogonal modifier (ADR-035; named `context_window` so it never collides with the host-owned `context` key): the command needs a large-context model regardless of reasoning tier. Sparse — most omit it. Metadata only; does not change the native Claude `model:`."
     },
     "suggestion": {
       "type": "object",

package/src/scripts/schemas/review-findings.schema.json

@@ -44,6 +44,14 @@
       ],
       "description": "How much INDEPENDENT evidence backs the verdict — deliberately orthogonal to how much effort the review spent. Collapsing the two is the mechanism by which a long, careful, single-model pass reads as acceptance: effort is visible in the artifact (finding count, detail, rationale) and independence is not, so a reader with only one axis substitutes the one they can see. A five-hour same-family review is `single-pass`; a terse two-family one is `independent`."
     },
+    "assurance_override": {
+      "type": "string",
+      "pattern": "^agents/evidence/owner-directives/[^/]+\\.md$",
+      "description": "Repo-relative path to a committed owner directive permitting this version to be cut although nothing reviewed it. Read by check_finding_dispositions.unreviewed_ledger_problem, which refuses an `assurance: unreviewed` ledger at an unreleased cut unless this field names a directive whose TEXT mentions the version — so the escape hatch leaves an artifact somebody signed. A PATH and never free text, deliberately: `no_findings_reason` is already free text and a non-empty one was all it took to cut 16.4.0 on a paragraph beginning \"NOT REVIEWED\". The `pattern` is what makes the path half checkable in the schema; whether the named file exists and names the version is conditional on both, which this repo's Draft-07 subset validator cannot express, so that half lives in the gate. ABSENT on every ordinary ledger: a reviewed release has nothing to override.",
+      "examples": [
+        "agents/evidence/owner-directives/2026-10-07-round-7a2e1c.md"
+      ]
+    },
     "reviewers": {
       "type": "array",
       "description": "The member names the independence verdict was derived from, recorded so the derivation is auditable rather than asserted. Provider names as `ai_council/config.ts::_VALID_PROVIDERS` spells them.",

package/src/scripts/schemas/skill.schema.json

@@ -1,7 +1,7 @@
 {
   "$schema": "http://json-schema.org/draft-07/schema#",
   "$id": "https://github.com/event4u-app/agent-config/scripts/schemas/skill.schema.json",
-  "x-schemaVersion": "1.1.1",
+  "x-schemaVersion": "2.1.0",
   "title": "Skill frontmatter",
   "$comment": "Source: agents/reference/docs/frontmatter-contract.md#skills. Keep in sync with inventory_frontmatter.py and the linter's lint_skill().",
   "type": "object",
@@ -199,12 +199,12 @@
     "refresh_trigger": {
       "type": "string",
       "minLength": 1,
-      "description": "Event that mandates a rewrite of this skill (e.g. upstream major rewrite, dispatch table reshape, SHA pin invalidation). Required when `external_source` is set."
+      "description": "Event that mandates a rewrite of this skill (e.g. upstream major rewrite, dispatch table reshape, SHA pin invalidation). Required when `external_source` is set - and no script evaluates it: measured 2026-10-14, zero skills set `external_source`, three carry this key, and nothing outside this schema names it. It records an author intent for a reader; it triggers nothing."
     },
     "sunset_criterion": {
       "type": "string",
       "minLength": 1,
-      "description": "Conditions under which the skill should be archived and replaced with a 50-line pointer (e.g. all referenced modules adopted as project-local guidelines, dispatch logic moved to a project-native router). Required when `external_source` is set."
+      "description": "Conditions under which the skill should be archived and replaced with a 50-line pointer (e.g. all referenced modules adopted as project-local guidelines, dispatch logic moved to a project-native router). Required when `external_source` is set - and no script evaluates it: see `refresh_trigger` above. It records an author intent for a reader; it triggers nothing."
     },
     "model_tier": {
       "type": "string",
@@ -217,12 +217,12 @@
       ],
       "description": "Vendor-neutral capability band the skill needs (ADR-035, amended by ADR-232). frontier/high/medium/lite project to a native Claude `model:` when model.auto_switch=auto; the generator owns that mapping exclusively. inherit keeps the session model. `frontier` means reasoning capability above the strongest generally-recommended band - opt-in and expected to stay rare, so work that genuinely needs it says so instead of inheriting it silently. Non-Claude agents are suggestion-only - the model-recommendation rule names the tier and the agent resolves its own model. No vendor model names here."
     },
-    "context": {
+    "context_window": {
       "type": "string",
       "enum": [
         "large"
       ],
-      "description": "Optional orthogonal modifier (ADR-035): the skill needs a large-context model regardless of reasoning tier (e.g. summarising a 500-page log). Sparse — most skills omit it. Metadata only; does not change the native Claude `model:` (the tier owns the model choice)."
+      "description": "Optional orthogonal modifier (ADR-035; named `context_window` so it never collides with the host-owned `context` key): the skill needs a large-context model regardless of reasoning tier (e.g. summarising a 500-page log). Sparse — most skills omit it. Metadata only; does not change the native Claude `model:` (the tier owns the model choice)."
     },
     "effort": {
       "type": "string",
@@ -254,12 +254,13 @@
           "channel-stage",
           "funnel-stage",
           "customer-segment",
+          "brand-voice",
           "fiscal-period",
           "org-stage",
           "regulatory-regime"
         ]
       },
-      "description": "Senior-skill opt-in for the context spine. Declares which slots under agents/context-spine/ the skill expects to read. Cross-wing slots (product, team, repo) are locked at 3 by council Q1 (KEEP-3); wing-scoped slots follow the per-wing ADR track in docs/contracts/context-spine.md § 5. Wing-3 (channel-stage, funnel-stage, customer-segment) authorized by docs/contracts/adr-gtm-context-spine.md; Wing-4 (fiscal-period, org-stage, regulatory-regime) authorized by docs/contracts/adr-wing4-context-spine.md."
+      "description": "Senior-skill opt-in for the context spine. Declares which slots under agents/context-spine/ the skill expects to read. Cross-wing slots (product, team, repo) are locked at 3 by council Q1 (KEEP-3); wing-scoped slots follow the per-wing ADR track in docs/contracts/context-spine.md § 5. Wing-3 (channel-stage, funnel-stage, customer-segment) authorized by docs/contracts/adr-gtm-context-spine.md, brand-voice by docs/contracts/adr-gtm-context-spine-brand-voice.md; Wing-4 (fiscal-period, org-stage, regulatory-regime) authorized by docs/contracts/adr-wing4-context-spine.md."
     },
     "recommended_for_user_types": {
       "type": "array",

package/src/scripts/schemas/subagent.schema.json

@@ -14,7 +14,8 @@
     "trust",
     "lifecycle",
     "discovery",
-    "source"
+    "source",
+    "reuse"
   ],
   "properties": {
     "schema_version": {
@@ -49,7 +50,7 @@
       "uniqueItems": true,
       "items": {
         "type": "string",
-        "pattern": "^(Read|Write|Edit|Grep|Glob|Bash|WebFetch|WebSearch|NotebookEdit)(\\([^()]+\\))?$"
+        "pattern": "^(Read|Write|Edit|Grep|Glob|Bash|WebFetch|WebSearch|NotebookEdit|SendMessage)(\\([^()]+\\))?$"
       },
       "description": "A tool grant: one of the Claude Code tool names, optionally scoped — `Bash(npm test:*)` grants one command family where a bare `Bash` grants a shell. The base name stays closed, so a typo still fails CI rather than producing broken `.claude/agents/` YAML in the user's IDE; only the optional `(...)` suffix is new. Prefer the narrowest grant the task actually needs, per tool-safety Least Agency.",
       "$comment": "Was a bare enum, which made the scoped-grant syntax `tool-safety` prescribes literally inexpressible here — a schema forbidding what the rule asks for. skill.schema.json's allowed_tools permits that syntax by validating nothing at all; this pattern permits it while keeping the base-name guarantee that made the enum worth having."
@@ -108,6 +109,36 @@
       "type": "string",
       "enum": ["package", "project"],
       "default": "package"
+    },
+    "reuse": {
+      "type": "string",
+      "enum": ["continuity", "never"],
+      "description": "Freshness class, declared rather than inferred. `continuity` lets a finished worker be re-tasked when every condition in `_lib/worker_reuse.ts` holds; `never` means every dispatch is fresh — required of every judge, reviewer and validator (judge Iron Law). Read off the source definition; never projected, because the host has no per-definition reuse key.",
+      "$comment": "road-to-a-cold-start-paid-once Phase 2 (steps 2.2, 2.4)."
+    },
+    "omit_project_instructions": {
+      "type": "boolean",
+      "description": "Skip the project instruction hierarchy for this worker. Projects to the host's skip flag; ships unset on every definition until step 2.5's net-delta reading and its kernel-and-constraints fixture both hold."
+    },
+    "preload_skills": {
+      "type": "array",
+      "uniqueItems": true,
+      "items": { "type": "string", "pattern": "^[a-z][a-z0-9-]*$" },
+      "description": "Skills whose full body the host injects at every cold start. Each one is paid per spawn, so add one only on a paired measurement showing the worker needs it on almost every run."
+    },
+    "max_turns": {
+      "type": "integer",
+      "minimum": 1,
+      "description": "Upper bound on agentic turns per run. Projects to the host's turn cap."
+    },
+    "background": {
+      "type": "boolean",
+      "description": "Run the worker in the background by default. Projects to the host's background flag."
+    },
+    "cache_ttl": {
+      "type": "string",
+      "enum": ["5m", "1h"],
+      "description": "Prompt-cache TTL the worker's reuse decision reads as condition (b). Ships unset (host default) on every definition — decision D7: a one-hour write is spend, taken only on a measured re-task gap distribution. Not projected: the host's TTL knob is a settings value, not a per-definition key."
     }
   }
 }

package/src/scripts/score_skill_selection.ts

@@ -43,12 +43,15 @@ import { fileURLToPath, pathToFileURL } from 'node:url';
 import { parse as parseYaml } from 'yaml';
 
 import { SRC_SKILLS } from './_lib/agent_src.js';
+import { OUT_JSON as CLUSTERS_OUT_JSON } from './skill_collision_clusters.js';
 
 const _HERE = fileURLToPath(import.meta.url);
 // src/scripts/score_skill_selection.ts → parents[2] is the repo root.
 const REPO_ROOT = path.resolve(path.dirname(_HERE), '..', '..');
 const FIXTURES = path.join(REPO_ROOT, 'tests', 'fixtures', 'skill_selection', 'fixtures.yml');
-const CLUSTERS = path.join(REPO_ROOT, 'agents', 'reports', 'skill-collision-clusters.json');
+// Read from the producer's own constant: this was a second hand-written copy
+// (`agents/reports/`) that nothing writes, so `--baseline` crashed on every machine.
+export const CLUSTERS_JSON_PATH = CLUSTERS_OUT_JSON;
 const SKILLS_DIR = SRC_SKILLS();
 const DEFAULT_OUT = path.join(REPO_ROOT, 'agents', 'reports', 'skill-selection-accuracy.json');
 
@@ -287,7 +290,7 @@ export function main(argv: string[] | null = null): number {
     }
     const fixturesDoc = _yamlSafeLoad(_readText(FIXTURES)) as { fixtures: Fixture[] };
     const fixtures = fixturesDoc.fixtures;
-    const clustersDoc = JSON.parse(_readText(CLUSTERS)) as { clusters: Cluster[] };
+    const clustersDoc = JSON.parse(_readText(CLUSTERS_JSON_PATH)) as { clusters: Cluster[] };
     const clusters = clustersDoc.clusters;
     const skills = loadSkills();
     let preds: Record<string, string>;

package/src/scripts/second_brain_retrieval.ts

@@ -1,4 +1,5 @@
 #!/usr/bin/env tsx
+// egress-content: fixed-corpus — sends the seeded retrieval corpus (retrieval-corpus.yml) and entries retrieved from it, never session content
 /**
  * Second-brain RETRIEVAL-PRECISION follow-up
  * (road-to-second-brain-retrieval-precision).

package/src/scripts/second_brain_run.ts

@@ -1,4 +1,5 @@
 #!/usr/bin/env tsx
+// egress-content: fixed-corpus — sends the deterministic recall corpus of Phase 1, never session content
 /**
  * Second-brain paired measurement — substrate on vs off vs placebo
  * (road-to-second-brain-delta-proof Phase 2).