@event4u/agent-config 2.26.0 → 3.0.0

package/scripts/lint_discovery_vocabulary.py

@@ -0,0 +1,148 @@
+#!/usr/bin/env python3
+"""Vocabulary linter for `config/discovery/{workspaces,packs}.yml`.
+
+Source-of-truth check: the YAML files MUST mirror the closed vocabulary
+in `docs/decisions/ADR-013-discovery-frontmatter-contract.md` exactly.
+Cross-reference check: every default/optional pack id referenced from
+`workspaces.yml` MUST exist in `packs.yml`, and every workspace id in
+`packs.yml` MUST exist in `workspaces.yml`. Bidirectional integrity:
+every pack listed as a workspace's default/optional MUST list that
+workspace in its own `workspaces:` array (and vice versa).
+
+Non-overlap (ADR-010 alignment): no pack id may collide with a
+`cost_profile` value (minimal/balanced/full/custom) or a `profile.id`
+value (founder/developer/content_creator/agency/finance/ops).
+
+Cap: ≤ 150 LOC, stdlib + PyYAML. Exit 0 clean, 1 on failure.
+"""
+from __future__ import annotations
+
+import sys
+from pathlib import Path
+from typing import Any
+
+try:
+    import yaml
+except ImportError:  # pragma: no cover
+    print("ERROR: PyYAML required (pip install pyyaml)", file=sys.stderr)
+    sys.exit(2)
+
+REPO_ROOT = Path(__file__).resolve().parent.parent
+WORKSPACES_YML = REPO_ROOT / "config" / "discovery" / "workspaces.yml"
+PACKS_YML = REPO_ROOT / "config" / "discovery" / "packs.yml"
+
+# Frozen ADR-013 vocabularies. Amendments require an ADR-013 edit + this list.
+ADR_WORKSPACES: frozenset[str] = frozenset({
+    "engineering", "product", "finance", "founder", "gtm", "ops",
+    "small-business", "construction", "agent-config-maintainer",
+})
+ADR_PACKS: frozenset[str] = frozenset({
+    "engineering-base", "php", "laravel", "symfony", "javascript",
+    "typescript", "react", "nextjs", "python", "product-basic",
+    "product-discovery", "finance-basic", "finance-advanced",
+    "gtm-sales", "gtm-marketing", "ops-people", "founder-strategy", "small-business",
+    "construction", "ai-video", "meta",
+})
+
+# ADR-010 non-overlap reservations.
+COST_PROFILE_RESERVED: frozenset[str] = frozenset({
+    "minimal", "balanced", "full", "custom",
+})
+PROFILE_ID_RESERVED: frozenset[str] = frozenset({
+    "founder", "developer", "content_creator", "agency", "finance", "ops",
+})
+
+
+def _load(path: Path) -> list[dict[str, Any]]:
+    if not path.exists():
+        raise SystemExit(f"ERROR: missing {path.relative_to(REPO_ROOT)}")
+    data = yaml.safe_load(path.read_text(encoding="utf-8")) or []
+    if not isinstance(data, list):
+        raise SystemExit(f"ERROR: {path.relative_to(REPO_ROOT)} must be a YAML list")
+    return data
+
+
+def lint(quiet: bool) -> int:
+    errors: list[str] = []
+    workspaces = _load(WORKSPACES_YML)
+    packs = _load(PACKS_YML)
+
+    ws_ids = {entry.get("id") for entry in workspaces}
+    pack_ids = {entry.get("id") for entry in packs}
+
+    # 1. ADR frozen-set parity.
+    missing_ws = ADR_WORKSPACES - ws_ids
+    extra_ws = ws_ids - ADR_WORKSPACES
+    if missing_ws:
+        errors.append(f"workspaces.yml missing ADR-013 ids: {sorted(missing_ws)}")
+    if extra_ws:
+        errors.append(f"workspaces.yml has ids not in ADR-013: {sorted(extra_ws)}")
+    missing_p = ADR_PACKS - pack_ids
+    extra_p = pack_ids - ADR_PACKS
+    if missing_p:
+        errors.append(f"packs.yml missing ADR-013 ids: {sorted(missing_p)}")
+    if extra_p:
+        errors.append(f"packs.yml has ids not in ADR-013: {sorted(extra_p)}")
+
+    # 2. Cross-reference: workspace default/optional packs → pack ids.
+    for ws in workspaces:
+        wid = ws.get("id")
+        for key in ("default_packs", "optional_packs"):
+            for pid in ws.get(key, []) or []:
+                if pid not in pack_ids:
+                    errors.append(f"workspaces.yml '{wid}'.{key} → unknown pack '{pid}'")
+
+    # 3. Cross-reference: pack workspaces → workspace ids.
+    for pk in packs:
+        pid = pk.get("id")
+        for wid in pk.get("workspaces", []) or []:
+            if wid not in ws_ids:
+                errors.append(f"packs.yml '{pid}'.workspaces → unknown workspace '{wid}'")
+        for hint in pk.get("requires_hint", []) or []:
+            if hint not in pack_ids:
+                errors.append(f"packs.yml '{pid}'.requires_hint → unknown pack '{hint}'")
+
+    # 4. Bidirectional integrity (council HIGH fold-in).
+    pack_by_id = {pk.get("id"): pk for pk in packs}
+    ws_by_id = {ws.get("id"): ws for ws in workspaces}
+    for ws in workspaces:
+        wid = ws.get("id")
+        for key in ("default_packs", "optional_packs"):
+            for pid in ws.get(key, []) or []:
+                pk = pack_by_id.get(pid)
+                if pk and wid not in (pk.get("workspaces") or []):
+                    errors.append(
+                        f"bidir: workspace '{wid}'.{key} lists '{pid}' but "
+                        f"pack '{pid}'.workspaces does not list '{wid}'"
+                    )
+    for pk in packs:
+        pid = pk.get("id")
+        for wid in pk.get("workspaces", []) or []:
+            ws = ws_by_id.get(wid)
+            if ws:
+                listed = set(ws.get("default_packs") or []) | set(ws.get("optional_packs") or [])
+                if pid not in listed:
+                    errors.append(
+                        f"bidir: pack '{pid}'.workspaces lists '{wid}' but "
+                        f"workspace '{wid}' does not list '{pid}' in default/optional_packs"
+                    )
+
+    # 5. Non-overlap (ADR-010).
+    overlap_cost = pack_ids & COST_PROFILE_RESERVED
+    if overlap_cost:
+        errors.append(f"pack ids collide with cost_profile values: {sorted(overlap_cost)}")
+    overlap_profile = pack_ids & PROFILE_ID_RESERVED
+    if overlap_profile:
+        errors.append(f"pack ids collide with profile.id values: {sorted(overlap_profile)}")
+
+    if errors:
+        for e in errors:
+            print(f"❌ {e}", file=sys.stderr)
+        return 1
+    if not quiet:
+        print(f"✅ discovery vocabulary OK — {len(ws_ids)} workspaces · {len(pack_ids)} packs")
+    return 0
+
+
+if __name__ == "__main__":
+    sys.exit(lint(quiet="--quiet" in sys.argv))

package/scripts/lint_explain_trace.py

@@ -0,0 +1,80 @@
+#!/usr/bin/env python3
+"""Lint an ExplainTrace v1 JSON payload against the schema.
+
+Reads a JSON file (or stdin via ``--stdin``) and validates it against
+``docs/contracts/explain-trace.schema.json``. Exit 0 on success,
+1 on validation failure, 2 on invocation error (missing schema, bad
+JSON). Used by Phase 4 unit tests; called from the
+``lint-explain-trace`` Taskfile target.
+"""
+from __future__ import annotations
+
+import argparse
+import json
+import sys
+from pathlib import Path
+
+import jsonschema
+
+
+def _repo_root() -> Path:
+    return Path(__file__).resolve().parent.parent
+
+
+def _load_schema() -> dict:
+    schema_path = _repo_root() / "docs" / "contracts" / "explain-trace.schema.json"
+    if not schema_path.exists():
+        print(f"❌  explain-trace schema not found at {schema_path}", file=sys.stderr)
+        raise SystemExit(2)
+    with schema_path.open("r", encoding="utf-8") as fh:
+        return json.load(fh)
+
+
+def _read_payload(path: str | None, *, from_stdin: bool) -> object:
+    if from_stdin:
+        try:
+            return json.load(sys.stdin)
+        except json.JSONDecodeError as exc:
+            print(f"❌  stdin is not valid JSON: {exc}", file=sys.stderr)
+            raise SystemExit(2) from exc
+    if path is None:
+        print("❌  pass a JSON file path or --stdin", file=sys.stderr)
+        raise SystemExit(2)
+    p = Path(path)
+    if not p.exists():
+        print(f"❌  trace file not found: {p}", file=sys.stderr)
+        raise SystemExit(2)
+    try:
+        with p.open("r", encoding="utf-8") as fh:
+            return json.load(fh)
+    except json.JSONDecodeError as exc:
+        print(f"❌  {p} is not valid JSON: {exc}", file=sys.stderr)
+        raise SystemExit(2) from exc
+
+
+def main(argv: list[str] | None = None) -> int:
+    parser = argparse.ArgumentParser(
+        prog="lint_explain_trace",
+        description="Validate an ExplainTrace v1 JSON payload against the schema.",
+    )
+    parser.add_argument("path", nargs="?", default=None, help="Path to a JSON trace file.")
+    parser.add_argument("--stdin", action="store_true", help="Read the trace from stdin.")
+    opts = parser.parse_args(argv)
+
+    schema = _load_schema()
+    jsonschema.Draft202012Validator.check_schema(schema)
+    payload = _read_payload(opts.path, from_stdin=opts.stdin)
+
+    validator = jsonschema.Draft202012Validator(schema)
+    errors = sorted(validator.iter_errors(payload), key=lambda e: list(e.absolute_path))
+    if errors:
+        for err in errors:
+            loc = "/".join(str(p) for p in err.absolute_path) or "<root>"
+            print(f"❌  {loc}: {err.message}", file=sys.stderr)
+        return 1
+    print("✅  explain-trace OK")
+    return 0
+
+
+if __name__ == "__main__":  # pragma: no cover
+    raise SystemExit(main())

package/scripts/lint_framework_leakage_allowlist.json

@@ -1,38 +1,29 @@
 {
   "version": 1,
-  "_doc": "Each entry: { file: relative path from repo root, lines: [int,...] | \"*\" for whole file, reason: short justification }. Use sparingly \u2014 first ask whether the file should be neutralized instead.",
+  "_doc": "Each entry: { file: relative path from repo root, lines: [int,...] | \"*\" for whole file, reason: short justification }. Use sparingly — first ask whether the file should be neutralized instead.",
   "entries": [
     {
       "file": ".agent-src.uncompressed/skills/using-git-worktrees/SKILL.md",
       "lines": [
-        130,
-        131,
-        132,
-        152
+        142,
+        143,
+        144,
+        164
       ],
       "reason": "Multi-stack package-manager comparison table"
     },
     {
       "file": ".agent-src.uncompressed/skills/refine-prompt/SKILL.md",
       "lines": [
-        88,
-        90,
-        92,
-        137,
-        180,
-        269
+        100,
+        102,
+        104,
+        149,
+        192,
+        281
       ],
       "reason": "Project-detection enumeration listing all supported stacks"
     },
-    {
-      "file": ".agent-src.uncompressed/commands/onboard.md",
-      "lines": [
-        220,
-        221,
-        224
-      ],
-      "reason": "Stack-detection enumeration in onboard flow"
-    },
     {
       "file": ".agent-src.uncompressed/commands/analyze-reference-repo.md",
       "lines": [
@@ -43,12 +34,12 @@
     {
       "file": ".agent-src.uncompressed/commands/optimize/augmentignore.md",
       "lines": "*",
-      "reason": "Per-stack augmentignore rules \u2014 by definition stack-aware"
+      "reason": "Per-stack augmentignore rules — by definition stack-aware"
     },
     {
       "file": ".agent-src.uncompressed/commands/optimize/rtk.md",
       "lines": "*",
-      "reason": "Per-tool rtk filter detection \u2014 by definition tool-aware"
+      "reason": "Per-tool rtk filter detection — by definition tool-aware"
     },
     {
       "file": ".agent-src.uncompressed/rules/framework-neutrality-in-generic-skills.md",
@@ -68,94 +59,94 @@
     {
       "file": ".agent-src.uncompressed/rules/architecture.md",
       "lines": [
-        19,
-        20,
-        26,
-        27,
-        62
+        31,
+        32,
+        38,
+        39,
+        74
       ],
       "reason": "Stack-routing pointers and cross-stack enumeration of validation/handler primitives"
     },
     {
       "file": ".agent-src.uncompressed/skills/api-endpoint/SKILL.md",
       "lines": [
-        41,
-        58
+        53,
+        70
       ],
       "reason": "Cross-stack validation primitive enumeration and pointer to laravel-api-endpoint carve-out"
     },
     {
       "file": ".agent-src.uncompressed/skills/code-review/SKILL.md",
       "lines": [
-        40,
-        41,
-        42,
-        49,
-        62,
-        63,
+        52,
+        53,
+        54,
+        61,
         74,
-        83,
-        85,
-        87,
-        219
+        75,
+        86,
+        95,
+        97,
+        99,
+        231
       ],
       "reason": "Cross-stack code-review checklist enumerates handler shape, validation, authz, ORM, escaping per framework"
     },
     {
       "file": ".agent-src.uncompressed/skills/security/SKILL.md",
       "lines": [
-        16,
-        23,
-        27,
         28,
-        37,
-        41,
-        48,
-        58,
-        76
+        35,
+        39,
+        40,
+        49,
+        53,
+        60,
+        70,
+        88
       ],
       "reason": "Cross-stack security review enumerates auth primitives (Policies, voters, guards, middleware) and config paths"
     },
     {
       "file": ".agent-src.uncompressed/skills/verify-completion-evidence/SKILL.md",
       "lines": [
-        53,
-        54,
-        55,
-        100,
-        177
+        65,
+        66,
+        67,
+        112,
+        189
       ],
       "reason": "Evidence-mapping table enumerates the type-checker / linter / refactor tool per stack including PHPStan, Rector, ECS"
     },
     {
       "file": ".agent-src.uncompressed/commands/tests/execute.md",
       "lines": "*",
-      "reason": "Multi-stack test runner dispatch (Pest/PHPUnit/Jest/pytest/cargo-test) \u2014 enumerates per-stack commands by design"
+      "reason": "Multi-stack test runner dispatch (Pest/PHPUnit/Jest/pytest/cargo-test) — enumerates per-stack commands by design"
     },
     {
       "file": ".agent-src.uncompressed/commands/tests/create.md",
       "lines": "*",
-      "reason": "Multi-stack test framework selection \u2014 enumerates Pest/PHPUnit/Jest/pytest options by design"
+      "reason": "Multi-stack test framework selection — enumerates Pest/PHPUnit/Jest/pytest options by design"
     },
     {
       "file": ".agent-src.uncompressed/commands/module/explore.md",
       "lines": "*",
-      "reason": "Multi-stack module detection (Laravel HMVC / Symfony bundles / DDD-lite) \u2014 enumerates per-stack patterns by design"
+      "reason": "Multi-stack module detection (Laravel HMVC / Symfony bundles / DDD-lite) — enumerates per-stack patterns by design"
     },
     {
       "file": ".agent-src.uncompressed/commands/package-test.md",
       "lines": "*",
-      "reason": "Multi-stack package linking (composer/npm/pip/cargo/go) \u2014 declared in skills frontmatter"
+      "reason": "Multi-stack package linking (composer/npm/pip/cargo/go) — declared in skills frontmatter"
     },
     {
       "file": ".agent-src.uncompressed/commands/package-reset.md",
       "lines": "*",
-      "reason": "Multi-stack package reset (composer/npm) \u2014 declared in skills frontmatter"
+      "reason": "Multi-stack package reset (composer/npm) — declared in skills frontmatter"
     },
     {
       "file": ".agent-src.uncompressed/skills/dependency-upgrade/SKILL.md",
       "lines": "*",
-      "reason": "Multi-stack dependency upgrade examples (composer/npm/pip) \u2014 declared stack-agnostic in description"
+      "reason": "Multi-stack dependency upgrade examples (composer/npm/pip) — declared stack-agnostic in description"
     },
     {
       "file": ".agent-src.uncompressed/skills/fe-design/SKILL.md",
@@ -175,7 +166,7 @@
     {
       "file": ".agent-src.uncompressed/commands/project-analyze.md",
       "lines": "*",
-      "reason": "Stack-detection templates show per-framework default outputs (Laravel/Standalone PHP/etc.) \u2014 multi-stack by design"
+      "reason": "Stack-detection templates show per-framework default outputs (Laravel/Standalone PHP/etc.) — multi-stack by design"
     },
     {
       "file": ".agent-src.uncompressed/commands/commit.md",
@@ -185,7 +176,7 @@
     {
       "file": ".agent-src.uncompressed/skills/test-driven-development/SKILL.md",
       "lines": "*",
-      "reason": "Multi-stack TDD examples \u2014 PHP/Pest and TypeScript/Jest sections both present"
+      "reason": "Multi-stack TDD examples — PHP/Pest and TypeScript/Jest sections both present"
     },
     {
       "file": ".agent-src.uncompressed/skills/context-authoring/SKILL.md",
@@ -220,7 +211,7 @@
     {
       "file": ".agent-src.uncompressed/skills/systematic-debugging/SKILL.md",
       "lines": "*",
-      "reason": "Debugging examples drawn from PHP project; the procedure is stack-agnostic (reproduce \u2192 isolate \u2192 hypothesize \u2192 verify)"
+      "reason": "Debugging examples drawn from PHP project; the procedure is stack-agnostic (reproduce → isolate → hypothesize → verify)"
     },
     {
       "file": ".agent-src.uncompressed/skills/testing-anti-patterns/SKILL.md",
@@ -325,7 +316,7 @@
     {
       "file": ".agent-src.uncompressed/commands/quality-fix.md",
       "lines": "*",
-      "reason": "Quality-fix dispatches per stack (PHPStan/ECS/Rector for PHP, tsc/biome for JS) \u2014 multi-stack by design"
+      "reason": "Quality-fix dispatches per stack (PHPStan/ECS/Rector for PHP, tsc/biome for JS) — multi-stack by design"
     },
     {
       "file": ".agent-src.uncompressed/commands/roadmap/create.md",
@@ -471,6 +462,16 @@
       "file": ".agent-src.uncompressed/commands/upstream-contribute.md",
       "lines": "*",
       "reason": "Upstream-contribute examples drawn from this package's own Laravel-tooling contributions"
+    },
+    {
+      "file": ".agent-src.uncompressed/skills/code-review/SKILL.md",
+      "lines": [235],
+      "reason": "Multi-stack formatter enumeration (ECS, Prettier, Ruff, gofmt) — comparative example, no project mandate"
+    },
+    {
+      "file": ".agent-src.uncompressed/rules/architecture.md",
+      "lines": [80],
+      "reason": "Multi-framework module-system enumeration (Laravel, Turborepo, NestJS, Go) — comparative example, no project mandate"
     }
   ]
 }

package/scripts/lint_ghostwriter_source.py

@@ -7,7 +7,7 @@ Two storage tiers exist (see docs/contracts/ghostwriter-schema.md):
     fictional fixtures ONLY (`fictional: true`). Every file stem must
     be on scripts/ghostwriter_fixture_allowlist.txt. `aliases:` is
     forbidden here (consumer-only feature).
-  * agents/ghostwriter/                    — consumer real-person
+  * agents/reference/ghostwriter/                    — consumer real-person
     profiles. Gitignored. Must NOT carry `fictional: true`. Optional
     `aliases:` list validated per § Aliases storage rules.
 

package/scripts/lint_load_context.py

@@ -3,7 +3,7 @@
 
 Validates per docs/contracts/load-context-schema.md:
   - Paths exist and are .md
-  - Allowed roots only (.agent-src*/contexts/, agents/contexts/)
+  - Allowed roots only (.agent-src*/contexts/, agents/settings/contexts/)
   - No public→project-local leak (warn)
   - No circular refs across lazy + eager edges
   - Combined char-budget for eager edges (rule + eager targets ≤ cap)
@@ -32,7 +32,7 @@ SCAN_DIRS = [
 ALLOWED_PREFIXES = (
     "contexts/",                               # logical name (canonical — P1.1 / P5.3)
     ".agent-src/contexts/",                    # projected (defensive — only seen in compressed inputs)
-    "agents/contexts/",                        # project-local
+    "agents/settings/contexts/",                        # project-local
 )
 
 # `.agent-src.uncompressed/contexts/` was the legacy fully-qualified form
@@ -48,7 +48,7 @@ LEGACY_PREFIX = ".agent-src.uncompressed/contexts/"
 SOURCE_ROOT = ROOT / ".agent-src.uncompressed"
 
 PUBLIC_RULE_PREFIX = ".agent-src.uncompressed/rules/"
-PROJECT_LOCAL_PREFIX = "agents/contexts/"
+PROJECT_LOCAL_PREFIX = "agents/settings/contexts/"
 
 
 def resolve_entry(entry: str) -> Path:

package/scripts/lint_mcp_registry_manifest.py

@@ -0,0 +1,69 @@
+#!/usr/bin/env python3
+"""Lint `dist/mcp/registry-manifest.json` against its JSON Schema.
+
+Asserts:
+  * file exists
+  * validates against `docs/contracts/mcp-registry-manifest.schema.json`
+  * `dist/mcp/awesome-mcp-servers.row.md` is non-empty and parses as a
+    single Markdown table row (one `|`-delimited line)
+  * `dist/mcp/mcp-cloudflare-catalogue.json` is valid JSON
+
+Exits 0 on success, 1 on any failure. `--quiet` suppresses the OK line.
+
+Roadmap: agents/roadmaps/strategic-visibility-mcp-topics-positioning.md Phase 2 exit gate.
+"""
+from __future__ import annotations
+
+import argparse
+import json
+import sys
+from pathlib import Path
+
+import jsonschema
+
+ROOT = Path(__file__).resolve().parents[1]
+SCHEMA = ROOT / "docs" / "contracts" / "mcp-registry-manifest.schema.json"
+MANIFEST = ROOT / "dist" / "mcp" / "registry-manifest.json"
+ROW_MD = ROOT / "dist" / "mcp" / "awesome-mcp-servers.row.md"
+CF_JSON = ROOT / "dist" / "mcp" / "mcp-cloudflare-catalogue.json"
+
+
+def _fail(msg: str) -> int:
+    print(f"\u274c  {msg}", file=sys.stderr)
+    return 1
+
+
+def main() -> int:
+    ap = argparse.ArgumentParser(description=__doc__.splitlines()[0])
+    ap.add_argument("--quiet", action="store_true")
+    args = ap.parse_args()
+
+    for p in (SCHEMA, MANIFEST, ROW_MD, CF_JSON):
+        if not p.exists():
+            return _fail(f"missing: {p.relative_to(ROOT)}")
+
+    schema = json.loads(SCHEMA.read_text(encoding="utf-8"))
+    manifest = json.loads(MANIFEST.read_text(encoding="utf-8"))
+    try:
+        jsonschema.Draft202012Validator(schema).validate(manifest)
+    except jsonschema.ValidationError as e:
+        return _fail(f"schema validation: {e.message} at {list(e.absolute_path)}")
+
+    row = ROW_MD.read_text(encoding="utf-8").strip()
+    if not row:
+        return _fail("awesome-mcp-servers.row.md is empty")
+    if row.count("\n") != 0 or row.count("|") < 4:
+        return _fail("awesome-mcp-servers.row.md must be a single `|`-delimited row")
+
+    try:
+        json.loads(CF_JSON.read_text(encoding="utf-8"))
+    except json.JSONDecodeError as e:
+        return _fail(f"mcp-cloudflare-catalogue.json: {e}")
+
+    if not args.quiet:
+        print(f"\u2705  mcp registry manifest OK ({len(manifest['registries'])} registries)")
+    return 0
+
+
+if __name__ == "__main__":
+    raise SystemExit(main())

package/scripts/lint_media_policy_linkage.py

@@ -1,18 +1,18 @@
 #!/usr/bin/env python3
 """Lint structural reachability of media governance policies.
 
-Every policy file under `agents/policies/media/` (except README) must
+Every policy file under `agents/settings/policies/media/` (except README) must
 be linked from at least one of:
 
   * a skill SKILL.md (any .agent-src.uncompressed/skills/*/SKILL.md
     or .claude/skills/*/SKILL.md),
   * a routing rule under .agent-src.uncompressed/rules/, or
-  * a sibling policy file under agents/policies/media/.
+  * a sibling policy file under agents/settings/policies/media/.
 
 A policy that no surface references is a silent policy and a silent
 policy is a failed policy. This is the CI-side reachability guarantee
 the agent-in-the-loop enforcement model rests on (see
-agents/policies/media/README.md § Enforcement model).
+agents/settings/policies/media/README.md § Enforcement model).
 
 Exit codes:
   0  all policies linked
@@ -66,7 +66,7 @@ def collect_scan_files() -> list[Path]:
 def referrers_for(policy: Path, scan_files: list[Path]) -> list[Path]:
     """Return files that reference `policy` by its repo-relative name
     or basename. We accept both the full path token
-    (`agents/policies/media/likeness.md`) and the bare basename
+    (`agents/settings/policies/media/likeness.md`) and the bare basename
     (`likeness.md`) inside a markdown link, because sibling policies
     link via relative `[likeness.md](likeness.md)` form.
     """
@@ -91,7 +91,7 @@ def referrers_for(policy: Path, scan_files: list[Path]) -> list[Path]:
 def main() -> int:
     if not POLICY_DIR.exists():
         emit(
-            "media-policy-linkage: agents/policies/media/ missing — "
+            "media-policy-linkage: agents/settings/policies/media/ missing — "
             "nothing to lint."
         )
         return 0
@@ -99,7 +99,7 @@ def main() -> int:
     policies = collect_policies()
     if not policies:
         emit(
-            "media-policy-linkage: agents/policies/media/ has no policy "
+            "media-policy-linkage: agents/settings/policies/media/ has no policy "
             "files — nothing to lint."
         )
         return 0