@event4u/agent-config 2.26.0 → 3.0.0

package/.agent-src/rules/minimal-safe-diff.md

@@ -2,12 +2,24 @@
 type: "auto"
 tier: "2a"
 alwaysApply: false
-description: "When writing or reviewing a diff — the smallest change that solves the stated problem; no drive-by edits, opportunistic refactors, or reformatting"
+description: "Writing or reviewing a diff — smallest change that solves the problem; no drive-by edits, opportunistic refactors, or reformatting"
 source: package
 triggers:
   - intent: "writing a diff"
   - intent: "reviewing a diff"
   - keyword: "drive-by"
+workspaces:
+  - engineering
+packs:
+  - engineering-base
+lifecycle: active
+trust:
+  level: core
+  confidence: high
+  human_review_required: false
+install:
+  default: true
+  removable: false
 ---
 
 # Minimal Safe Diff

package/.agent-src/rules/missing-tool-handling.md

@@ -2,11 +2,23 @@
 type: auto
 tier: "2a"
 source: package
-description: "When a CLI tool needed for the task is not installed — ask before working around it; do NOT install silently"
+description: "CLI tool needed for the task is not installed — ask before working around it; do NOT install silently"
 triggers:
   - keyword: "command not found"
   - keyword: "not installed"
   - intent: "install tool"
+workspaces:
+  - agent-config-maintainer
+packs:
+  - meta
+lifecycle: active
+trust:
+  level: core
+  confidence: high
+  human_review_required: false
+install:
+  default: true
+  removable: false
 ---
 
 # Missing Tool Handling

package/.agent-src/rules/model-recommendation.md

@@ -1,7 +1,7 @@
 ---
 type: "auto"
 tier: "2a"
-description: "Starting a new task, switching task type, or invoking a command — detect complexity and recommend optimal model (Opus/Sonnet/GPT) before work"
+description: "Starting a task, switching type, or invoking a command — detect complexity, recommend optimal model (Opus/Sonnet/GPT)"
 source: package
 triggers:
   - phrase: "switch task"
@@ -9,6 +9,18 @@ triggers:
   - phrase: "which model"
 routes_to:
   - "command:set-cost-profile"
+workspaces:
+  - agent-config-maintainer
+packs:
+  - meta
+lifecycle: active
+trust:
+  level: core
+  confidence: high
+  human_review_required: false
+install:
+  default: true
+  removable: false
 ---
 
 # Model Recommendation

package/.agent-src/rules/no-attribution-footers.md

@@ -2,13 +2,25 @@
 type: "auto"
 tier: "3"
 alwaysApply: false
-description: "Generating PR/issue/comment/commit-message bodies — forbids 'Generated with', 'Co-authored by', or 'Pull Request opened by' attribution footers"
+description: "Generating PR/issue/comment/commit bodies — forbids 'Generated with', 'Co-authored by', 'Pull Request opened by' attribution footers"
 source: package
 triggers:
   - intent: "PR body"
   - intent: "commit message"
   - intent: "Jira comment"
   - keyword: "co-authored"
+workspaces:
+  - agent-config-maintainer
+packs:
+  - meta
+lifecycle: active
+trust:
+  level: core
+  confidence: high
+  human_review_required: false
+install:
+  default: true
+  removable: false
 ---
 
 # No Attribution Footers

package/.agent-src/rules/no-cheap-questions.md

@@ -4,6 +4,18 @@ tier: "3"
 description: "No cheap questions — never ask what context answers, never offer Iron-Law-violating options, never stage no-trade-off choices; mode-independent (off / auto / on)"
 alwaysApply: true
 source: package
+workspaces:
+  - agent-config-maintainer
+packs:
+  - meta
+lifecycle: active
+trust:
+  level: core
+  confidence: high
+  human_review_required: false
+install:
+  default: true
+  removable: false
 ---
 
 # No Cheap Questions

package/.agent-src/rules/no-roadmap-references.md

@@ -1,14 +1,14 @@
 ---
 type: "auto"
 tier: "mechanical-already"
-description: "Linking transient files (agents/roadmaps/, agents/council-*/) from a stable artifact — both layers expire; promote findings"
+description: "Linking transient files (agents/roadmaps/, agents/runtime/council/*/) from a stable artifact — both layers expire; promote findings"
 alwaysApply: false
 source: package
 triggers:
   - path_prefix: "agents/roadmaps/"
-  - path_prefix: "agents/council-questions/"
-  - path_prefix: "agents/council-responses/"
-  - path_prefix: "agents/council-sessions/"
+  - path_prefix: "agents/runtime/council/questions/"
+  - path_prefix: "agents/runtime/council/responses/"
+  - path_prefix: "agents/runtime/council/sessions/"
   - intent: "link from stable artifact"
   - intent: "link to council artefact"
 routes_to:
@@ -17,13 +17,25 @@ validator_ignore:
   - type: "substring"
     pattern: ".agent-src.uncompressed/"
     reason: "Rule contrasts the authoring tree with transient layers."
+workspaces:
+  - agent-config-maintainer
+packs:
+  - meta
+lifecycle: active
+trust:
+  level: core
+  confidence: high
+  human_review_required: false
+install:
+  default: true
+  removable: false
 ---
 
 # No Transient References from Stable Artifacts
 
 Two transient layers under `agents/` outlive nothing: roadmaps in
 `agents/roadmaps/` are archived, skipped, or deleted as work
-completes; council artefacts in `agents/council-{questions,responses,
+completes; council artefacts in `agents/runtime/council/{questions,responses,
 sessions}/` are **gitignored, local-only, and auto-pruned** after
 `ai_council.session_retention_days` (default 7). Stable artifacts
 (rules, skills, commands, contexts, guidelines, AGENTS.md, README,
@@ -40,9 +52,9 @@ the consumer.
 
 ```
 NEVER LINK TO A SPECIFIC FILE IN agents/roadmaps/
-OR IN agents/council-{questions,responses,sessions}/
+OR IN agents/runtime/council/{questions,responses,sessions}/
 FROM A STABLE ARTIFACT.
-PROMOTE DURABLE CONCLUSIONS TO agents/contexts/ AND CITE THAT INSTEAD.
+PROMOTE DURABLE CONCLUSIONS TO agents/settings/contexts/ AND CITE THAT INSTEAD.
 INLINE COUNCIL CONVERGENCE WITH DATE + MEMBERS, NEVER THE PATH.
 ```
 
@@ -55,12 +67,12 @@ These paths must not appear inside a stable artifact:
 
 - `agents/roadmaps/<file>.md`, `agents/roadmaps/archive/<file>.md`,
   `agents/roadmaps/skipped/<file>.md`
-- `agents/council-questions/<file>.md`,
-  `agents/council-responses/<file>.json`,
-  `agents/council-sessions/<file>.json` or `<timestamp>/...`
+- `agents/runtime/council/questions/<file>.md`,
+  `agents/runtime/council/responses/<file>.json`,
+  `agents/runtime/council/sessions/<file>.json` or `<timestamp>/...`
 
 Stable artifact = any file under `.agent-src.uncompressed/{rules,
-skills,commands,contexts,templates,personas}/`, `agents/contexts/`,
+skills,commands,contexts,templates,personas}/`, `agents/settings/contexts/`,
 `docs/guidelines/`, `docs/contracts/`, `docs/architecture.md`,
 `docs/customization.md`, `docs/getting-started.md`, `docs/catalog.md`,
 `AGENTS.md`, `README.md`, `copilot-instructions.md`.
@@ -71,7 +83,7 @@ fail the build on any new violation.
 
 ## Allowed patterns
 
-- `agents/roadmaps/` and `agents/council-*/` as **directory** mentions
+- `agents/roadmaps/` and `agents/runtime/council/*/` as **directory** mentions
   (talking about the layer, not a specific file)
 - Roadmap → roadmap references (siblings within the transient layer)
 - The `ai-council` skill and `/council:*` commands documenting the
@@ -79,7 +91,7 @@ fail the build on any new violation.
 - Inline council convergence summary — e.g. *"Council
   (claude-sonnet-4-5 + gpt-4o, 2026-05-06) converged on …"* with
   date + members, no filepath
-- Council sessions, `agents/.agent-chat-history`, commit messages, PR
+- Council sessions, `agents/runtime/.agent-chat-history`, commit messages, PR
   descriptions — transient by construction, not part of the package
   surface
 
@@ -94,8 +106,8 @@ pragma.
 
 | Source                                         | Target                                           | Why                                                                                  |
 | ---------------------------------------------- | ------------------------------------------------ | ------------------------------------------------------------------------------------ |
-| `agents/contexts/evaluation-*.md`              | `agents/council-questions/*.md`                  | Question file is a frozen function-parameter / spend-gate input, not documentation. |
-| `docs/contracts/*.md`                          | `agents/council-sessions/*/synthesis.md`         | Synthesis is the audit-trail receipt; contract inlines the decision body itself.    |
+| `agents/settings/contexts/evaluation-*.md`              | `agents/runtime/council/questions/*.md`                  | Question file is a frozen function-parameter / spend-gate input, not documentation. |
+| `docs/contracts/*.md`                          | `agents/runtime/council/sessions/*/synthesis.md`         | Synthesis is the audit-trail receipt; contract inlines the decision body itself.    |
 
 Driven by the 2026-05-14 P3.4 council round (claude-sonnet-4-5 +
 gpt-4o, converged on rule refactor over escape-hatch overuse). Any
@@ -108,7 +120,7 @@ When a stable artifact needs to cite a transient finding:
 
 1. Identify the durable conclusion — decision, contract, lesson,
    mechanic.
-2. Promote it to a context file under `agents/contexts/` (ADR,
+2. Promote it to a context file under `agents/settings/contexts/` (ADR,
    mechanics doc, locked decision). The roadmap or council session
    can then point at the context, not the other way around.
 3. Reference the context from the stable artifact.

package/.agent-src/rules/non-destructive-by-default.md

@@ -6,6 +6,18 @@ alwaysApply: true
 source: package
 load_context:
   - ../contexts/authority/destructive-mechanics.md
+workspaces:
+  - engineering
+packs:
+  - engineering-base
+lifecycle: active
+trust:
+  level: core
+  confidence: high
+  human_review_required: false
+install:
+  default: true
+  removable: false
 ---
 
 # Non-Destructive by Default

package/.agent-src/rules/onboarding-gate.md

@@ -1,19 +1,32 @@
 ---
 type: "auto"
 tier: "1"
-description: "First turn of a conversation on a project — check onboarding.onboarded in .agent-settings.yml; when false, prompt to run /onboard before any request"
+description: "First turn — if onboarding.onboarded is false in .agent-settings.yml, instruct dev to run `agent-config setup` before any request"
 source: package
 triggers:
   - phrase: "first turn"
   - keyword: "onboarding"
   - path_prefix: ".agent-settings.yml"
-routes_to:
-  - "command:onboard"
+workspaces:
+  - agent-config-maintainer
+packs:
+  - meta
+lifecycle: active
+trust:
+  level: core
+  confidence: high
+  human_review_required: false
+install:
+  default: true
+  removable: false
 ---
 
 # Onboarding Gate
 
-**Iron Law.** First turn of a project: if `onboarding.onboarded` is false, prompt `/onboard` before executing any other request.
+**Iron Law.** First turn of project: if `onboarding.onboarded` is false in `.agent-settings.yml`, instruct dev to run `agent-config setup` in terminal before any other request. Wizard writes `onboarding.onboarded: true` on `Finish` → rule silenced after.
 
-Body migrated to `command:onboard` (per P4 of `road-to-kernel-and-router.md`).
-Trigger-set above activates this routing under the `balanced` and `full` profiles.
+`agent-config setup` boots local TypeScript server (Fastify on `127.0.0.1`), opens browser wizard at `/#/wizard`. No chat-side skill — legacy `/onboard` and its `onboard:finish` bridge have been retired; browser wizard is sole onboarding surface.
+
+Cloud surfaces without settings file stay inert: rule does not fire when `.agent-settings.yml` absent → headless / read-only contexts (Cloudflare MCP, doc preview, CI) never see prompt.
+
+Trigger-set above activates routing under `balanced` and `full` profiles.

package/.agent-src/rules/package-ci-checks.md

@@ -9,6 +9,18 @@ triggers:
   - phrase: "before pr"
 routes_to:
   - "skill:lint-skills"
+workspaces:
+  - agent-config-maintainer
+packs:
+  - meta
+lifecycle: active
+trust:
+  level: core
+  confidence: high
+  human_review_required: false
+install:
+  default: true
+  removable: false
 ---
 
 # Package Ci Checks

package/.agent-src/rules/persona-governance.md

@@ -1,7 +1,7 @@
 ---
 type: "auto"
 tier: "2a"
-description: "When creating, editing, or proposing personas — enforce per-domain cap (≤ 2 specialists), ≥ 1 skill citation, and the deprecation path"
+description: "Creating/editing/proposing personas — enforce per-domain cap (≤ 2 specialists), ≥ 1 skill citation, deprecation path"
 source: package
 triggers:
   - path_prefix: ".agent-src.uncompressed/personas/"
@@ -24,6 +24,18 @@ validator_ignore:
   - type: "substring"
     pattern: ".agent-src.uncompressed/"
     reason: "Rule documents the persona authoring tree (.agent-src.uncompressed/personas/) as the deprecation-path operand."
+workspaces:
+  - agent-config-maintainer
+packs:
+  - meta
+lifecycle: active
+trust:
+  level: core
+  confidence: high
+  human_review_required: false
+install:
+  default: true
+  removable: false
 ---
 
 # Persona Governance

package/.agent-src/rules/php-coding.md

@@ -1,7 +1,7 @@
 ---
 type: "auto"
 tier: "3"
-description: "Writing or reviewing PHP code — strict types, naming, comparisons, early returns, Eloquent conventions"
+description: "Writing/reviewing PHP — strict types, naming, comparisons, early returns, Eloquent conventions"
 source: package
 triggers:
   - file_pattern: "*.php"
@@ -9,6 +9,18 @@ triggers:
   - keyword: "ecs"
 routes_to:
   - "guideline:php/php-coding-patterns"
+workspaces:
+  - engineering
+packs:
+  - php
+lifecycle: active
+trust:
+  level: professional
+  confidence: high
+  human_review_required: false
+install:
+  default: false
+  removable: true
 ---
 
 # Php Coding

package/.agent-src/rules/preservation-guard.md

@@ -2,7 +2,7 @@
 type: "auto"
 tier: "2b"
 alwaysApply: false
-description: "When merging, refactoring, compressing, or restructuring skills, rules, commands, or guidelines — prevent quality loss"
+description: "Merging/refactoring/compressing skills, rules, commands, or guidelines — prevent quality loss"
 source: package
 triggers:
   - intent: "merge skill"
@@ -13,6 +13,18 @@ validator_ignore:
   - type: "substring"
     pattern: ".agent-src.uncompressed/"
     reason: "Rule references the authoring tree as the operand of compression/preservation."
+workspaces:
+  - agent-config-maintainer
+packs:
+  - meta
+lifecycle: active
+trust:
+  level: core
+  confidence: high
+  human_review_required: false
+install:
+  default: true
+  removable: false
 ---
 
 # Preservation Guard

package/.agent-src/rules/provider-lifecycle-discipline.md

@@ -1,7 +1,7 @@
 ---
 type: "auto"
 tier: "2a"
-description: "When editing an AI video/image/audio adapter — declare lifecycle tier (experimental | stable | deprecated | community); never default to non-stable"
+description: "Editing an AI video/image/audio adapter — declare lifecycle tier (experimental | stable | deprecated | community); never default to non-stable"
 source: package
 triggers:
   - keyword: "/video:"
@@ -22,6 +22,18 @@ applies_to_user_types:
   - "creator"
   - "developer"
   - "maintainer"
+workspaces:
+  - agent-config-maintainer
+packs:
+  - meta
+lifecycle: active
+trust:
+  level: core
+  confidence: high
+  human_review_required: false
+install:
+  default: true
+  removable: false
 ---
 
 # Provider Lifecycle Discipline
@@ -55,7 +67,7 @@ This rule routes the agent to [`docs/contracts/provider-lifecycle.md`](../docs/c
 - Running `/video:scene` against the `<default-video-provider>` without reading the lifecycle tag first → violation.
 - Picking a `community` provider because it was named in the prompt, without surfacing the tier → violation.
 - Editing an adapter and leaving its header `Lifecycle:` comment out of sync with `agents/.ai-video.xml.example` → violation (CI does not catch this; the agent must).
-- Auto-promoting an adapter from `experimental` to `stable` because "dry-run worked" → violation. Promotion requires a maintainer-captured real-API smoke trace under `agents/ai-video/smoke-traces/`.
+- Auto-promoting an adapter from `experimental` to `stable` because "dry-run worked" → violation. Promotion requires a maintainer-captured real-API smoke trace under `agents/reference/ai-video/smoke-traces/`.
 
 ## Day-one state
 

package/.agent-src/rules/reviewer-awareness.md

@@ -1,7 +1,7 @@
 ---
 type: "auto"
 tier: "2a"
-description: "When suggesting reviewers or flagging risk hotspots — anchor in paths/risk + ownership-map + bug-patterns; medium/high needs primary + secondary"
+description: "Suggesting reviewers or flagging risk hotspots — anchor in paths/risk + ownership-map + bug-patterns; medium/high needs primary + secondary"
 source: package
 triggers:
   - keyword: "reviewer"
@@ -10,6 +10,18 @@ triggers:
   - phrase: "ownership map"
 routes_to:
   - "skill:review-routing"
+workspaces:
+  - agent-config-maintainer
+packs:
+  - meta
+lifecycle: active
+trust:
+  level: core
+  confidence: high
+  human_review_required: false
+install:
+  default: true
+  removable: false
 ---
 
 # Reviewer Awareness

package/.agent-src/rules/roadmap-ci-steps-policy.md

@@ -1,7 +1,7 @@
 ---
 type: "auto"
 tier: "2a"
-description: "When authoring or executing roadmaps — forbid task ci / make test / npm run check steps when quality.local_auto_run is false; skip inline at execution"
+description: "Authoring or executing roadmaps — forbid task ci / make test / npm run check steps when quality.local_auto_run is false; skip inline"
 source: package
 triggers:
   - path_prefix: "agents/roadmaps/"
@@ -25,6 +25,18 @@ validator_ignore:
   - type: "substring"
     pattern: ".agent-settings.yml"
     reason: "Rule reads quality.local_auto_run from .agent-settings.yml; naming the file is the contract."
+workspaces:
+  - agent-config-maintainer
+packs:
+  - meta
+lifecycle: active
+trust:
+  level: core
+  confidence: high
+  human_review_required: false
+install:
+  default: true
+  removable: false
 ---
 
 # Roadmap CI-Steps Policy

package/.agent-src/rules/roadmap-progress-sync.md

@@ -1,12 +1,27 @@
 ---
 type: "auto"
 tier: "1"
-description: "Any roadmap touch (file move, checkbox flip, phase change) regens dashboard same response; archive at 0 open. Autonomous runs flip checkboxes inline"
+description: "Any roadmap touch (file move, checkbox flip, phase change) regens dashboard same response; archive at 0 open"
 source: package
 triggers:
   - path_prefix: "agents/roadmaps/"
+  - command: "/roadmap:process-step"
+  - command: "/roadmap:process-phase"
+  - command: "/roadmap:process-full"
 routes_to:
   - "guideline:agent-infra/roadmap-progress-mechanics"
+workspaces:
+  - agent-config-maintainer
+packs:
+  - meta
+lifecycle: active
+trust:
+  level: core
+  confidence: high
+  human_review_required: false
+install:
+  default: true
+  removable: false
 ---
 
 # Roadmap Progress Sync
@@ -31,6 +46,8 @@ IS A RULE VIOLATION, NOT AN OVERSIGHT.
 
 `/roadmap:process-step`, `/roadmap:process-phase`, `/roadmap:process-full`, and any other multi-step autonomous run flip the box for step N **before** moving on to step N+1. The checkbox itself is the real-time monitor — the markdown file is the source of truth, the dashboard is a derived view.
 
+`command:` triggers in this rule's frontmatter load it the moment any `/roadmap:process-*` command fires and keep it loaded for the whole run — independent of whether the agent is editing files under `agents/roadmaps/`. The loop carries its own deterministic flip-guard at [`roadmap-process-loop § 5b`](../contexts/execution/roadmap-process-loop.md#5b-flip-guard--deterministic) — defense-in-depth, not a substitute for the inline flip.
+
 **Step counts as done** when its code/doc change is written and saved AND the verification cited in the step has passed (fresh output in this reply or an earlier one).
 
 **In-progress marker.** When a step takes more than one reply, mark it `[~]` the moment work starts — the user sees one row move `[ ] → [~] → [x]` instead of silent rows. `[~]` stays open for `count_open` but advances the phase percentage.

package/.agent-src/rules/role-mode-adherence.md

@@ -1,13 +1,25 @@
 ---
 type: "auto"
 tier: "2a"
-description: "When roles.active_role is set in .agent-settings.yml — closing outputs must match the mode's contract and emit the structured mode marker"
+description: "When roles.active_role is set — closing outputs must match mode contract and emit structured mode marker"
 alwaysApply: false
 source: package
 triggers:
   - keyword: "active_role"
   - keyword: "role-mode"
   - intent: "mode marker"
+workspaces:
+  - agent-config-maintainer
+packs:
+  - meta
+lifecycle: active
+trust:
+  level: core
+  confidence: high
+  human_review_required: false
+install:
+  default: true
+  removable: false
 ---
 
 # Role Mode Adherence

package/.agent-src/rules/rule-type-governance.md

@@ -1,12 +1,24 @@
 ---
 type: "auto"
 tier: "2a"
-description: "Creating or editing rules, or auditing rule types — decides when a rule should be always vs auto"
+description: "Creating/editing rules, or auditing rule types — decides when a rule should be always vs auto"
 source: package
 triggers:
   - path_prefix: ".agent-src.uncompressed/rules/"
 routes_to:
   - "guideline:agent-infra/rule-type-governance"
+workspaces:
+  - agent-config-maintainer
+packs:
+  - meta
+lifecycle: active
+trust:
+  level: core
+  confidence: high
+  human_review_required: false
+install:
+  default: true
+  removable: false
 ---
 
 # Rule Type Governance

package/.agent-src/rules/runtime-safety.md

@@ -2,12 +2,24 @@
 type: auto
 tier: "2b"
 source: package
-description: "When a skill declares execution metadata — enforce safety constraints for assisted and automated execution types"
+description: "Skill declares execution metadata — enforce safety constraints for assisted/automated execution types"
 triggers:
   - keyword: "execution"
   - keyword: "automated"
   - keyword: "assisted"
   - keyword: "handler"
+workspaces:
+  - agent-config-maintainer
+packs:
+  - meta
+lifecycle: active
+trust:
+  level: core
+  confidence: high
+  human_review_required: false
+install:
+  default: true
+  removable: false
 ---
 
 # Runtime Safety

package/.agent-src/rules/scope-control.md

@@ -7,6 +7,18 @@ source: package
 load_context:
   - ../contexts/authority/scope-mechanics.md
   - ../contexts/authority/kernel-rule-edits.md
+workspaces:
+  - engineering
+packs:
+  - engineering-base
+lifecycle: active
+trust:
+  level: core
+  confidence: high
+  human_review_required: false
+install:
+  default: true
+  removable: false
 ---
 
 # Scope Control

package/.agent-src/rules/security-sensitive-stop.md

@@ -2,7 +2,7 @@
 type: "auto"
 tier: "2a"
 alwaysApply: false
-description: "Security-sensitive paths — auth, billing, tenant boundaries, secrets, uploads, integrations, webhooks, public endpoints — threat-model BEFORE editing"
+description: "Security-sensitive paths — auth, billing, tenants, secrets, uploads, webhooks, public endpoints — threat-model BEFORE editing"
 source: package
 triggers:
   - keyword: "auth"
@@ -10,6 +10,18 @@ triggers:
   - keyword: "tenant"
   - keyword: "secret"
   - keyword: "webhook"
+workspaces:
+  - engineering
+packs:
+  - engineering-base
+lifecycle: active
+trust:
+  level: core
+  confidence: high
+  human_review_required: false
+install:
+  default: true
+  removable: false
 ---
 
 # Security-Sensitive Stop Rule