@event4u/agent-config 2.25.0 → 3.0.0

package/.agent-src/rules/roadmap-progress-sync.md

@@ -1,12 +1,27 @@
 ---
 type: "auto"
 tier: "1"
-description: "Any roadmap touch (file move, checkbox flip, phase change) regens dashboard same response; archive at 0 open. Autonomous runs flip checkboxes inline"
+description: "Any roadmap touch (file move, checkbox flip, phase change) regens dashboard same response; archive at 0 open"
 source: package
 triggers:
   - path_prefix: "agents/roadmaps/"
+  - command: "/roadmap:process-step"
+  - command: "/roadmap:process-phase"
+  - command: "/roadmap:process-full"
 routes_to:
   - "guideline:agent-infra/roadmap-progress-mechanics"
+workspaces:
+  - agent-config-maintainer
+packs:
+  - meta
+lifecycle: active
+trust:
+  level: core
+  confidence: high
+  human_review_required: false
+install:
+  default: true
+  removable: false
 ---
 
 # Roadmap Progress Sync
@@ -31,6 +46,8 @@ IS A RULE VIOLATION, NOT AN OVERSIGHT.
 
 `/roadmap:process-step`, `/roadmap:process-phase`, `/roadmap:process-full`, and any other multi-step autonomous run flip the box for step N **before** moving on to step N+1. The checkbox itself is the real-time monitor — the markdown file is the source of truth, the dashboard is a derived view.
 
+`command:` triggers in this rule's frontmatter load it the moment any `/roadmap:process-*` command fires and keep it loaded for the whole run — independent of whether the agent is editing files under `agents/roadmaps/`. The loop carries its own deterministic flip-guard at [`roadmap-process-loop § 5b`](../contexts/execution/roadmap-process-loop.md#5b-flip-guard--deterministic) — defense-in-depth, not a substitute for the inline flip.
+
 **Step counts as done** when its code/doc change is written and saved AND the verification cited in the step has passed (fresh output in this reply or an earlier one).
 
 **In-progress marker.** When a step takes more than one reply, mark it `[~]` the moment work starts — the user sees one row move `[ ] → [~] → [x]` instead of silent rows. `[~]` stays open for `count_open` but advances the phase percentage.

package/.agent-src/rules/role-mode-adherence.md

@@ -1,13 +1,25 @@
 ---
 type: "auto"
 tier: "2a"
-description: "When roles.active_role is set in .agent-settings.yml — closing outputs must match the mode's contract and emit the structured mode marker"
+description: "When roles.active_role is set — closing outputs must match mode contract and emit structured mode marker"
 alwaysApply: false
 source: package
 triggers:
   - keyword: "active_role"
   - keyword: "role-mode"
   - intent: "mode marker"
+workspaces:
+  - agent-config-maintainer
+packs:
+  - meta
+lifecycle: active
+trust:
+  level: core
+  confidence: high
+  human_review_required: false
+install:
+  default: true
+  removable: false
 ---
 
 # Role Mode Adherence

package/.agent-src/rules/rule-type-governance.md

@@ -1,12 +1,24 @@
 ---
 type: "auto"
 tier: "2a"
-description: "Creating or editing rules, or auditing rule types — decides when a rule should be always vs auto"
+description: "Creating/editing rules, or auditing rule types — decides when a rule should be always vs auto"
 source: package
 triggers:
   - path_prefix: ".agent-src.uncompressed/rules/"
 routes_to:
   - "guideline:agent-infra/rule-type-governance"
+workspaces:
+  - agent-config-maintainer
+packs:
+  - meta
+lifecycle: active
+trust:
+  level: core
+  confidence: high
+  human_review_required: false
+install:
+  default: true
+  removable: false
 ---
 
 # Rule Type Governance

package/.agent-src/rules/runtime-safety.md

@@ -2,12 +2,24 @@
 type: auto
 tier: "2b"
 source: package
-description: "When a skill declares execution metadata — enforce safety constraints for assisted and automated execution types"
+description: "Skill declares execution metadata — enforce safety constraints for assisted/automated execution types"
 triggers:
   - keyword: "execution"
   - keyword: "automated"
   - keyword: "assisted"
   - keyword: "handler"
+workspaces:
+  - agent-config-maintainer
+packs:
+  - meta
+lifecycle: active
+trust:
+  level: core
+  confidence: high
+  human_review_required: false
+install:
+  default: true
+  removable: false
 ---
 
 # Runtime Safety

package/.agent-src/rules/scope-control.md

@@ -7,6 +7,18 @@ source: package
 load_context:
   - ../contexts/authority/scope-mechanics.md
   - ../contexts/authority/kernel-rule-edits.md
+workspaces:
+  - engineering
+packs:
+  - engineering-base
+lifecycle: active
+trust:
+  level: core
+  confidence: high
+  human_review_required: false
+install:
+  default: true
+  removable: false
 ---
 
 # Scope Control

package/.agent-src/rules/security-sensitive-stop.md

@@ -2,7 +2,7 @@
 type: "auto"
 tier: "2a"
 alwaysApply: false
-description: "Security-sensitive paths — auth, billing, tenant boundaries, secrets, uploads, integrations, webhooks, public endpoints — threat-model BEFORE editing"
+description: "Security-sensitive paths — auth, billing, tenants, secrets, uploads, webhooks, public endpoints — threat-model BEFORE editing"
 source: package
 triggers:
   - keyword: "auth"
@@ -10,6 +10,18 @@ triggers:
   - keyword: "tenant"
   - keyword: "secret"
   - keyword: "webhook"
+workspaces:
+  - engineering
+packs:
+  - engineering-base
+lifecycle: active
+trust:
+  level: core
+  confidence: high
+  human_review_required: false
+install:
+  default: true
+  removable: false
 ---
 
 # Security-Sensitive Stop Rule

package/.agent-src/rules/size-enforcement.md

@@ -9,6 +9,18 @@ triggers:
   - intent: "create skill"
   - intent: "create command"
   - intent: "create guideline"
+workspaces:
+  - agent-config-maintainer
+packs:
+  - meta
+lifecycle: active
+trust:
+  level: core
+  confidence: high
+  human_review_required: false
+install:
+  default: true
+  removable: false
 ---
 
 # size-enforcement

package/.agent-src/rules/skill-improvement-trigger.md

@@ -1,7 +1,7 @@
 ---
 type: "auto"
 tier: "2a"
-description: "After completing a meaningful task — trigger post-task learning capture if pipelines.skill_improvement is enabled"
+description: "After a meaningful task — trigger post-task learning capture if pipelines.skill_improvement is enabled"
 source: package
 triggers:
   - phrase: "after completing"
@@ -9,6 +9,18 @@ triggers:
   - keyword: "pipeline"
 routes_to:
   - "skill:skill-improvement-pipeline"
+workspaces:
+  - agent-config-maintainer
+packs:
+  - meta
+lifecycle: active
+trust:
+  level: core
+  confidence: high
+  human_review_required: false
+install:
+  default: true
+  removable: false
 ---
 
 # Skill Improvement Trigger

package/.agent-src/rules/skill-quality.md

@@ -1,12 +1,24 @@
 ---
 type: "auto"
 tier: "mechanical-already"
-description: "Creating, editing, or reviewing skills — minimum quality standard, every skill must be executable, validated, and self-contained"
+description: "Creating/editing/reviewing skills — minimum quality standard; every skill executable, validated, self-contained"
 source: package
 triggers:
   - path_prefix: ".agent-src.uncompressed/skills/"
 routes_to:
   - "guideline:agent-infra/skill-quality-checklist"
+workspaces:
+  - agent-config-maintainer
+packs:
+  - meta
+lifecycle: active
+trust:
+  level: core
+  confidence: high
+  human_review_required: false
+install:
+  default: true
+  removable: false
 ---
 
 # Skill Quality

package/.agent-src/rules/slash-command-routing-policy.md

@@ -1,7 +1,7 @@
 ---
 type: "auto"
 tier: "1"
-description: "When user types a slash command like /create-pr, /commit, or pastes command file content"
+description: "User types a slash command like /create-pr, /commit, or pastes command file content"
 source: package
 triggers:
   - keyword: "/create-pr"
@@ -10,6 +10,18 @@ triggers:
   - phrase: "slash command"
 routes_to:
   - "skill:command-routing"
+workspaces:
+  - agent-config-maintainer
+packs:
+  - meta
+lifecycle: active
+trust:
+  level: core
+  confidence: high
+  human_review_required: false
+install:
+  default: true
+  removable: false
 ---
 
 # Slash Command Routing Policy

package/.agent-src/rules/symfony-routing.md

@@ -1,7 +1,7 @@
 ---
 type: "auto"
 tier: "3"
-description: "Writing or reviewing Symfony code — DI, bundles, Doctrine, Messenger, Security voters, console commands — route to the symfony-workflow skill"
+description: "Writing/reviewing Symfony — DI, bundles, Doctrine, Messenger, Security voters, console commands — route to symfony-workflow"
 source: package
 triggers:
   - keyword: "symfony"
@@ -10,6 +10,18 @@ triggers:
   - keyword: "messenger"
 routes_to:
   - "skill:symfony-workflow"
+workspaces:
+  - engineering
+packs:
+  - symfony
+lifecycle: active
+trust:
+  level: professional
+  confidence: high
+  human_review_required: false
+install:
+  default: false
+  removable: true
 ---
 
 # Symfony Routing

package/.agent-src/rules/think-before-action.md

@@ -1,7 +1,7 @@
 ---
 type: "auto"
 tier: "2b"
-description: "Before coding, modifying, or debugging — analyze first, verify with real tools, never guess or trial-and-error"
+description: "Before coding/modifying/debugging — analyze first, verify with real tools, never guess or trial-and-error"
 alwaysApply: false
 source: package
 load_context:
@@ -10,6 +10,18 @@ triggers:
   - intent: "before coding"
   - intent: "before debugging"
   - intent: "before modifying"
+workspaces:
+  - engineering
+packs:
+  - engineering-base
+lifecycle: active
+trust:
+  level: core
+  confidence: high
+  human_review_required: false
+install:
+  default: true
+  removable: false
 ---
 
 # think-before-action

package/.agent-src/rules/token-efficiency.md

@@ -1,7 +1,7 @@
 ---
 type: "auto"
 tier: "2a"
-description: "When running CLI tools, fetching logs, or producing replies — redirect verbose output, minimize tool calls, keep replies concise"
+description: "Running CLI tools, fetching logs, or producing replies — redirect verbose output, minimize tool calls, keep replies concise"
 alwaysApply: false
 source: package
 load_context:
@@ -10,6 +10,18 @@ triggers:
   - intent: "verbose CLI output"
   - intent: "fetching logs"
   - keyword: "minimize tool calls"
+workspaces:
+  - agent-config-maintainer
+packs:
+  - meta
+lifecycle: active
+trust:
+  level: core
+  confidence: high
+  human_review_required: false
+install:
+  default: true
+  removable: false
 ---
 
 # Token Efficiency

package/.agent-src/rules/token-optimizer-maintenance.md

@@ -16,6 +16,18 @@ validator_ignore:
   - type: "substring"
     pattern: ".agent-src.uncompressed/"
     reason: "Rule lists the authoring-tree paths that must stay in sync with the catalog."
+workspaces:
+  - agent-config-maintainer
+packs:
+  - meta
+lifecycle: active
+trust:
+  level: core
+  confidence: high
+  human_review_required: false
+install:
+  default: true
+  removable: false
 ---
 
 # Token Optimizer Maintenance

package/.agent-src/rules/tool-safety.md

@@ -2,11 +2,23 @@
 type: auto
 tier: "2b"
 source: package
-description: "When a skill uses external tools — enforce allowlist, deny-by-default, and no hidden credential patterns"
+description: "Skill uses external tools — enforce allowlist, deny-by-default, no hidden credential patterns"
 triggers:
   - keyword: "allowed_tools"
   - keyword: "tool registry"
   - intent: "external API"
+workspaces:
+  - agent-config-maintainer
+packs:
+  - meta
+lifecycle: active
+trust:
+  level: core
+  confidence: high
+  human_review_required: false
+install:
+  default: true
+  removable: false
 ---
 
 # Tool Safety

package/.agent-src/rules/ui-audit-gate.md

@@ -2,7 +2,7 @@
 type: "auto"
 tier: "2b"
 alwaysApply: false
-description: "Writing or editing UI — components, screens, partials, layouts, design tokens — require existing-ui-audit findings before non-trivial UI change"
+description: "Writing/editing UI — components, screens, layouts, design tokens — require existing-ui-audit findings first"
 source: package
 triggers:
   - path_prefix: "resources/views/"
@@ -11,6 +11,18 @@ triggers:
   - keyword: "design token"
 routes_to:
   - "skill:existing-ui-audit"
+workspaces:
+  - agent-config-maintainer
+packs:
+  - meta
+lifecycle: active
+trust:
+  level: core
+  confidence: high
+  human_review_required: false
+install:
+  default: true
+  removable: false
 ---
 
 # UI Audit Gate

package/.agent-src/rules/upstream-proposal.md

@@ -1,7 +1,7 @@
 ---
 type: "auto"
 tier: "2a"
-description: "After creating or significantly improving a skill, rule, guideline, or command — ask if it should be contributed upstream to the shared package"
+description: "After creating or improving a skill/rule/guideline/command — ask if it should be contributed upstream to the shared package"
 source: package
 triggers:
   - phrase: "after creating"
@@ -9,6 +9,18 @@ triggers:
   - keyword: "upstream"
 routes_to:
   - "skill:upstream-contribute"
+workspaces:
+  - agent-config-maintainer
+packs:
+  - meta
+lifecycle: active
+trust:
+  level: core
+  confidence: high
+  human_review_required: false
+install:
+  default: true
+  removable: false
 ---
 
 # Upstream Proposal

package/.agent-src/rules/user-interaction.md

@@ -1,7 +1,7 @@
 ---
 type: "auto"
 tier: "3"
-description: "Asking the user a question, presenting options, or summarizing progress — numbered-options Iron Law, single-recommendation rule, progress indicators"
+description: "Asking a question, presenting options, summarizing progress — numbered-options Iron Law, single-recommendation rule, progress indicators"
 alwaysApply: false
 source: package
 load_context:
@@ -10,6 +10,18 @@ triggers:
   - intent: "ask user a question"
   - intent: "numbered options"
   - intent: "summarizing progress"
+workspaces:
+  - agent-config-maintainer
+packs:
+  - meta
+lifecycle: active
+trust:
+  level: core
+  confidence: high
+  human_review_required: false
+install:
+  default: true
+  removable: false
 ---
 
 # User Interaction

package/.agent-src/rules/user-interrupt-priority.md

@@ -0,0 +1,58 @@
+---
+type: "always"
+tier: "1"
+description: "User interrupts override the current task — STOP, complete new task in full, then ASK before resuming; never silently return to prior work"
+alwaysApply: true
+source: package
+load_context:
+  - ../contexts/execution/interrupt-examples.md
+workspaces:
+  - agent-config-maintainer
+packs:
+  - meta
+lifecycle: active
+trust:
+  level: core
+  confidence: high
+  human_review_required: false
+install:
+  default: true
+  removable: false
+---
+
+# User-Interrupt Priority
+
+A new instruction mid-flight is **not** a continuation. Examples and failure modes: [`contexts/execution/interrupt-examples.md`](../contexts/execution/interrupt-examples.md).
+
+## The Iron Law
+
+```
+NEW TASK FROM USER MID-FLIGHT → STOP CURRENT TASK.
+COMPLETE NEW TASK IN FULL.
+THEN ASK BEFORE RESUMING THE OLD TASK.
+NEVER SILENTLY RESUME.
+```
+
+Holds regardless of `personal.autonomy`, a standing autonomy directive, or roadmap authorization. Autonomy narrows trivial workflow questions — it does not authorize ignoring a fresh instruction.
+
+## Classify every user turn
+
+| Bucket | Signal | Action |
+|---|---|---|
+| **Continuation** | Same deliverable + target + success criterion. "weiter", "next step". | Keep working. |
+| **Clarification** | Question / correction about the current task. No new deliverable. | Answer, then continue. |
+| **Interrupt** | Different deliverable, target, or success criterion. Meta-tasks ("audit", "stop and analyze") count. | STOP. Run new task. ASK before resume. |
+
+In doubt → treat as interrupt. Cost of a spurious ask is one turn; cost of silent-resume is the rest of the unwanted work.
+
+## Stop-ask-resume protocol
+
+1. **STOP** — abandon the current tool plan. No "one more check" unless the new instruction says so.
+2. **EXECUTE** the new task in full. All other rules (Hard Floor, scope, autonomy) apply.
+3. **ASK** when done — name the interrupted task and request a resume decision:
+
+```
+Done with <new task>. Resume <interrupted task name>? (yes / no / different)
+```
+
+Only resume on `yes` or a restatement. "and then continue with X" = explicit resume authorization; no re-ask.

package/.agent-src/rules/verify-before-complete.md

@@ -6,6 +6,18 @@ alwaysApply: true
 source: package
 load_context:
   - ../contexts/execution/verification-mechanics.md
+workspaces:
+  - engineering
+packs:
+  - engineering-base
+lifecycle: active
+trust:
+  level: core
+  confidence: high
+  human_review_required: false
+install:
+  default: true
+  removable: false
 ---
 
 # Verify Before Completion
@@ -22,7 +34,7 @@ If you haven't run the verification command **in this message**, you cannot clai
 
 Before claiming ANY work is complete:
 
-1. **IDENTIFY** — What command proves this claim? (tests, PHPStan, build, etc.)
+1. **IDENTIFY** — What command proves this claim? (tests, type-checker, linter, build — whichever the project actually runs)
 2. **RUN** — Execute the full command (fresh, complete, not cached)
 3. **READ** — Full output, check exit code, count failures
 4. **VERIFY** — Does the output actually confirm the claim?
@@ -43,7 +55,7 @@ Skip any step = the claim is unverified.
 - Expressing satisfaction before running verification
 - About to commit/push without running tests + quality
 - Trusting a previous run from earlier in the conversation
-- Relying on partial verification (ran tests but not PHPStan)
+- Relying on partial verification (ran tests but skipped the type-checker / linter)
 - ANY wording implying success without fresh evidence
 
 ## Verification commands
@@ -64,3 +76,12 @@ all live in
 The Iron Law and the Gate above are the obligation surface; the
 mechanics context is the lookup material the agent pulls when the
 gate fires.
+
+## Examples
+
+Pattern Memory — wrong / right / why demos for the Iron Law and the
+red-flags list:
+[`verify-before-complete-demos`](../docs/guidelines/agent-infra/verify-before-complete-demos.md)
+(hedged claims, trusting earlier runs, partial-verification creep).
+Outcome baseline locked at
+[`tests/golden/outcomes/verify_before_complete.json`](../../tests/golden/outcomes/verify_before_complete.json).

package/.agent-src/skills/accessibility-auditor/SKILL.md

@@ -5,6 +5,18 @@ personas:
   - frontend-engineer
 source: package
 domain: quality
+workspaces:
+  - engineering
+packs:
+  - engineering-base
+lifecycle: active
+trust:
+  level: core
+  confidence: high
+  human_review_required: false
+install:
+  default: true
+  removable: false
 ---
 
 # accessibility-auditor

package/.agent-src/skills/activation-design/SKILL.md

@@ -6,6 +6,18 @@ tier: senior
 source: package
 domain: product
 context_spine: [product, customer-segment, funnel-stage]
+workspaces:
+  - product
+packs:
+  - product-discovery
+lifecycle: active
+trust:
+  level: professional
+  confidence: high
+  human_review_required: false
+install:
+  default: false
+  removable: true
 ---
 
 # activation-design

package/.agent-src/skills/adr-create/SKILL.md

@@ -11,6 +11,18 @@ execution:
   command:
     - python3
     - scripts/adr/regenerate_index.py
+workspaces:
+  - agent-config-maintainer
+packs:
+  - meta
+lifecycle: active
+trust:
+  level: core
+  confidence: high
+  human_review_required: false
+install:
+  default: true
+  removable: false
 ---
 
 # adr-create

package/.agent-src/skills/adversarial-review/SKILL.md

@@ -6,6 +6,18 @@ personas:
 source: package
 domain: quality
 council_depth: deep
+workspaces:
+  - engineering
+packs:
+  - engineering-base
+lifecycle: active
+trust:
+  level: core
+  confidence: high
+  human_review_required: false
+install:
+  default: true
+  removable: false
 ---
 
 # Adversarial Review
@@ -104,7 +116,7 @@ Only surface trade-offs or concerns that need the user's input.
 - **feature-planning** — adversarial review after Understanding Lock, before presenting the plan.
 - **bug-analyzer** — review the proposed fix before implementing.
 - **code-review** — self-review before creating a PR.
-- **migration-creator** — review migration for data safety.
+- **laravel-migration** (or framework-native equivalent) — review migration for data safety.
 - **api-design** — review API design for consistency and breaking changes.
 - **security** — review security-sensitive changes for attack surface.