@event4u/agent-config 2.26.0 → 3.1.0

package/.agent-src/skills/agents-md-thin-root/SKILL.md

@@ -7,15 +7,29 @@ execution:
   type: assisted
   handler: internal
   allowed_tools: []
+workspaces:
+  - agent-config-maintainer
+packs:
+  - meta
+lifecycle: active
+trust:
+  level: core
+  confidence: high
+  human_review_required: false
+install:
+  default: true
+  removable: false
 ---
 
+<!-- cloud_safe: noop -->
+
 # agents-md-thin-root
 
 ## When to use
 
 Use when:
 - Editing `AGENTS.md` at the package root.
-- Editing `.agent-src.uncompressed/templates/AGENTS.md` (consumer-shipped template).
+- Editing `packages/core/.agent-src.uncompressed/templates/AGENTS.md` (consumer-shipped template).
 - Reviewing a PR that changes either file.
 - Running `/optimize/agents`.
 - A budget meter (`scripts/measure_augment_budget.py`) flags the package-root AGENTS.md as the dominant cost.
@@ -23,8 +37,8 @@ Use when:
 ## Do NOT
 
 - Edit `.github/copilot-instructions.md` with this skill (use `copilot-agents-optimization` instead).
-- Edit other `.md` files under `.augment/`, `.agent-src.uncompressed/`, or `agents/` with this skill.
-- Add a section to AGENTS.md without first checking whether an outboard target already exists in `agents/contexts/` or `docs/contracts/`.
+- Edit other `.md` files under `.augment/`, `packages/*/.agent-src.uncompressed/`, or `agents/` with this skill.
+- Add a section to AGENTS.md without first checking whether an outboard target already exists in `agents/settings/contexts/` or `docs/contracts/`.
 - Replace prose with a bare link `[label](path)` — every pointer needs a *why*-clause ≥ 60 chars or it does not count toward the 40 % ratio.
 - Reuse the package-root anatomy in the consumer template — caps and target paths differ.
 
@@ -41,7 +55,7 @@ Every entry describes **what** the project does or **where** to learn more — n
 | File | FAIL above | WARN above | Target |
 |---|---|---|---|
 | `AGENTS.md` (package root) | 3,000 chars | 2,800 chars | ≤ 2,800 |
-| `.agent-src.uncompressed/templates/AGENTS.md` (consumer) | 2,500 chars | 2,300 chars | ≤ 2,300 |
+| `packages/core/.agent-src.uncompressed/templates/AGENTS.md` (consumer) | 2,500 chars | 2,300 chars | ≤ 2,300 |
 
 Char-count is raw file size (`wc -c`), frontmatter included. Enforcement: `scripts/lint_agents_md.py` (Phase 7), wired into the package's CI pipeline via the `lint-agents-md` task. WARN is a soft signal in CI; FAIL blocks merge.
 
@@ -79,7 +93,7 @@ Every substantive pointer specifies, on the same line or the immediately followi
 
 ## The contract — emergency-triage block
 
-Every Thin-Root AGENTS.md MUST contain an **Emergency Triage** section verbatim from `.agent-src.uncompressed/contexts/contracts/emergency-triage-block.md` (Phase 6.4 will create that file as the canonical source). The block lists the five questions a host agent answers from the root file alone when network / tool access is degraded:
+Every Thin-Root AGENTS.md MUST contain an **Emergency Triage** section verbatim from `packages/core/.agent-src.uncompressed/contexts/contracts/emergency-triage-block.md` (Phase 6.4 will create that file as the canonical source). The block lists the five questions a host agent answers from the root file alone when network / tool access is degraded:
 
 1. What is this repository?
 2. What language(s) does this repository accept?
@@ -93,22 +107,22 @@ Each answer must fit on one line. The block exists so the root never silently de
 
 1. **Measure baseline.** `wc -c AGENTS.md` and `python3 scripts/measure_augment_budget.py`. Record current char-count and the gap to 2,200 / 2,500.
 2. **Inventory sections.** List every `## ` heading and its char-count. Mark each as `keep-inline` (Iron-Law-adjacent, ≤ 200 chars, no good outboard target) or `outboard-candidate` (longer-form prose, table-only sections, narrative).
-3. **Identify outboard targets.** For each `outboard-candidate`, name the destination — `.agent-src.uncompressed/contexts/`, `docs/contracts/`, an existing rule body, an existing skill body. Never invent a new top-level directory.
+3. **Identify outboard targets.** For each `outboard-candidate`, name the destination — `packages/core/.agent-src.uncompressed/contexts/`, `docs/contracts/`, an existing rule body, an existing skill body. Never invent a new top-level directory.
 4. **Move content; insert pointer.** Cut the section into the target file. Replace it in AGENTS.md with a single substantive pointer per anatomy above. Verify the *why*-clause length.
 5. **Re-measure.** `wc -c AGENTS.md` again. If above 2,200, repeat steps 2–4 on the next-largest section. Above 2,500 = must outboard further before commit.
 6. **Validate pointer ratio.** Count non-blank lines and substantive-pointer lines. Ratio < 0.40 = collapse decorative or boilerplate lines into a single pointer or remove.
-7. **Verify emergency-triage block.** Diff the in-file block against `.agent-src.uncompressed/contexts/contracts/emergency-triage-block.md`. Drift = revert to canonical.
+7. **Verify emergency-triage block.** Diff the in-file block against `packages/core/.agent-src.uncompressed/contexts/contracts/emergency-triage-block.md`. Drift = revert to canonical.
 8. **Run lints.** `task lint-agents-md && task check-refs && task lint-skills`. All green before commit.
 
 ## Procedure — apply Thin-Root to consumer template
 
-Same procedure, applied to `.agent-src.uncompressed/templates/AGENTS.md`. Hard cap shifts to 2,000 / 1,700. The consumer template intentionally lacks the package-self-references — its pointers target files that exist in the **consumer's** repo (`.augment/skills/`, `agents/contexts/`, ...), not this package's authoring tree.
+Same procedure, applied to `packages/core/.agent-src.uncompressed/templates/AGENTS.md`. Hard cap shifts to 2,000 / 1,700. The consumer template intentionally lacks the package-self-references — its pointers target files that exist in the **consumer's** repo (`.augment/skills/`, `agents/settings/contexts/`, ...), not this package's authoring tree.
 
 ## Gotchas
 
-- **Outboarding to a new top-level dir.** Inventing `agents/explainers/` or `docs/notes/` for the moved content silently widens the contract surface. Outboard only into `.agent-src.uncompressed/contexts/`, `docs/contracts/`, an existing rule body, or an existing skill body.
+- **Outboarding to a new top-level dir.** Inventing `agents/explainers/` or `docs/notes/` for the moved content silently widens the contract surface. Outboard only into `packages/core/.agent-src.uncompressed/contexts/`, `docs/contracts/`, an existing rule body, or an existing skill body.
 - **Pointer-ratio inflation by decoration.** Adding boilerplate "Browse all skills" / "See also" links to lift the ratio above 40 % defeats the purpose. The lint counts only substantive pointers (with a *why*-clause ≥ 60 chars); decorative links get filtered out and the ratio drops back below threshold.
-- **Emergency-triage drift.** Editing the in-file emergency-triage block instead of the canonical `.agent-src.uncompressed/contexts/contracts/emergency-triage-block.md` causes the package-root and consumer-template versions to diverge silently. Always edit the canonical file and let the lint diff pull both back in sync.
+- **Emergency-triage drift.** Editing the in-file emergency-triage block instead of the canonical `packages/core/.agent-src.uncompressed/contexts/contracts/emergency-triage-block.md` causes the package-root and consumer-template versions to diverge silently. Always edit the canonical file and let the lint diff pull both back in sync.
 - **Cap inversion under WARN.** A 2,250-char AGENTS.md (above 2,200 WARN, below 2,500 FAIL) is a yellow signal not a green one — every additional sentence raises the probability of the next FAIL. Treat WARN as the spend boundary, not a buffer.
 - **Char-count includes frontmatter.** `wc -c` counts every byte including the YAML preamble, blank lines, and the trailing newline. Stripping a section to "look smaller" without re-running `wc -c` understates the true budget impact.
 - **Path enumeration.** A run of three or more bare `` `path/to/dir/` `` bullets without *why*-clauses is the classic re-bloat pattern. The lint emits a WARN at ≥ 3 such lines. Collapse them into one capability-style pointer — see the recipe in [`agents-md-anatomy § Iron Law`](../../contexts/contracts/agents-md-anatomy.md#iron-law--capabilities-over-structure).
@@ -124,6 +138,10 @@ When invoked as a planning step, produce:
 4. Specific outboarding edits as a numbered diff plan.
 5. The four lint commands the agent must run before claiming completion.
 
+## Cloud Behavior
+
+Inert on cloud surfaces. The skill governs the package-root `AGENTS.md` and the consumer-shipped template — both authoring artifacts inside this repository. Cloud agents working on consumer projects never edit those files directly; their copy is delivered by the package install pipeline and refreshed by the package sync pipeline. The Thin-Root contract therefore has no cloud-side procedure to execute, which is why this skill is marked `cloud_safe: noop`.
+
 ## See also
 
 - [`agents-md-anatomy`](../../contexts/contracts/agents-md-anatomy.md) — Capabilities-over-Structure Iron Law, multi-tool symlink strategy, monorepo per-package layout, refactor recipe, full gotcha catalog.

package/.agent-src/skills/ai-council/SKILL.md

@@ -4,6 +4,18 @@ description: "Use when polling external AIs (OpenAI, Anthropic) outside the host
 source: package
 domain: process
 meta_skill: true
+workspaces:
+  - agent-config-maintainer
+packs:
+  - meta
+lifecycle: active
+trust:
+  level: core
+  confidence: high
+  human_review_required: false
+install:
+  default: true
+  removable: false
 ---
 
 <!-- cloud_safe: degrade -->
@@ -351,9 +363,9 @@ Three directories, three modes:
 
 | Mode | Path | Format |
 |---|---|---|
-| **Topic-anchored question** (paired with a roadmap or ADR) | `agents/council-questions/<topic-slug>.md` | Markdown |
-| **Topic-anchored response** (paired with the question above) | `agents/council-responses/<topic-slug>.json` | JSON from `council:run --output` |
-| **Ad-hoc session** (no durable artefact yet) | `agents/council-sessions/<UTC-timestamp>.json` | JSON from `council:run --output` |
+| **Topic-anchored question** (paired with a roadmap or ADR) | `agents/runtime/council/questions/<topic-slug>.md` | Markdown |
+| **Topic-anchored response** (paired with the question above) | `agents/runtime/council/responses/<topic-slug>.json` | JSON from `council:run --output` |
+| **Ad-hoc session** (no durable artefact yet) | `agents/runtime/council/sessions/<UTC-timestamp>.json` | JSON from `council:run --output` |
 
 `<topic-slug>` is kebab-case and **must match** the corresponding
 roadmap / ADR slug if one exists (e.g. `path-fixes` mirrors the
@@ -361,10 +373,11 @@ matching `road-to-<topic-slug>` roadmap under `agents/roadmaps/`).
 
 ### Forbidden
 
-- Files at `agents/` root (e.g. `agents/council-question-foo.md`).
+- Files at `agents/` root (e.g. `agents/runtime/council/question-foo.md`).
 - Dot-prefix scratch (e.g. `agents/.council-question-foo.md`).
 - Any other directory below `agents/` (e.g. `agents/scratch/`,
-  `agents/tmp/`).
+  `agents/evidence/notes/`). Operator scratch belongs under
+  `agents/runtime/tmp/` (gitignored).
 - Cross-references from any artefact to specific council files —
   see [`no-roadmap-references`](../../rules/no-roadmap-references.md)
   (council clause). Inline the convergence summary instead, with
@@ -432,10 +445,10 @@ Input modes (`prompt` / `roadmap` / `diff` / `files`) inherit the
 
 **Source citations:**
 * Template shape — Round 2 council verdict
-  (`agents/council-sessions/2026-05-14-ai-council-redesign/round-1.md`,
+  (`agents/runtime/council/sessions/2026-05-14-ai-council-redesign/round-1.md`,
   Opus's lens-adaptive synthesis proposal).
 * Decision/creative split — Round 4 Q4 verdict
-  (`agents/council-sessions/2026-05-14-ai-council-redesign/round-3-responses.json`).
+  (`agents/runtime/council/sessions/2026-05-14-ai-council-redesign/round-3-responses.json`).
   R4 reframed `optimize` as creative because perf trade-offs resist
   pre-templated shape — Performance-wins / Trade-offs /
   Implementation-order is too rigid for the variety of optimize-lens
@@ -540,7 +553,7 @@ per-invocation caps from `ai_council.cost_budget`:
   if the callback returns False or is absent, tags the member
   `daily_budget_exceeded` instead of `cost_budget_exceeded`.
 
-Prices come from `agents/.agent-prices.md` (gitignored, refreshed weekly).
+Prices come from `agents/runtime/.agent-prices.md` (gitignored, refreshed weekly).
 The pricing module bootstraps it from `_default_prices.py` on first
 use and flags it stale when older than the most recent Monday 00:00
 UTC.
@@ -611,7 +624,7 @@ member can refine, agree, or push back on the previous critique
 without seeing which provider produced which point.
 
 The default round count comes from `defaults.min_rounds` in
-`agents/.ai-council.yml` (default `2` so members critique each other
+`agents/settings/.ai-council.yml` (default `2` so members critique each other
 at least once before convergence). The host agent does **not** ask
 "how many rounds?" when the requested count is `<= min_rounds` —
 the settings owner already made that decision. Ask only when a
@@ -703,7 +716,7 @@ between every round so the user can stop the spend at any point.
 | Cost gate | After every round the CLI prints `Spent so far: $X · Next round: ~$Y · Cap: $Z`. `n` exits cleanly with partial results; `y` continues. |
 | Hard cap | If the projected next-round cost would breach `max_total_usd`, `run_debate()` raises `DebateCapExceeded` and the CLI exits with the partial transcript. No silent overrun. |
 | `--continue-as-debate` | Seeds round 1 from an existing `/council default` (or analysis lens) session. No round-1 API calls are billed; round 2+ run normally. Member list must match. |
-| Session files | One file per round under `agents/council-sessions/<slug>/debate-round-NN.md`. |
+| Session files | One file per round under `agents/runtime/council/sessions/<slug>/debate-round-NN.md`. |
 | Anonymisation | Identical to `rounds:N`. The continue-as-debate path also anonymises the seeded round-1 responses when building the round-2 prompt. |
 
 Use this when the artefact is genuinely contentious and the user
@@ -720,7 +733,7 @@ blind spots before synthesis. Inspired by Andrej Karpathy's "ask the
 strongest models to review each other anonymously" pattern; see his
 [talks / threads on inter-model critique](https://karpathy.ai/) and the
 internal verdict in
-`agents/council-sessions/2026-05-14-ai-council-redesign/round-2.md`
+`agents/runtime/council/sessions/2026-05-14-ai-council-redesign/round-2.md`
 (R2 split: one approve-as-flag, one reject-as-default → opt-in only).
 
 Pipeline order when every feature is active:
@@ -733,7 +746,7 @@ Activation — two equivalent paths:
 
 * CLI: `--peer-review` on `council:estimate` or `council:run`.
 * Config: `ai_council.peer_review.enabled: true` in
-  `agents/.ai-council.yml`. Default is `false`.
+  `agents/settings/.ai-council.yml`. Default is `false`.
 
 Mechanics:
 
@@ -777,7 +790,7 @@ swaps.
 | **Outsider** | `openai` | naive-but-sharp questions, beginner's-mind probes |
 | **Executor** | `anthropic` | what ships this quarter, what blocks delivery |
 
-Activation — edit `agents/.ai-council.yml` and flip the advisor's
+Activation — edit `agents/settings/.ai-council.yml` and flip the advisor's
 `enabled: true`. Optional `model: <name>` overrides the bound
 member's default model. An advisor referencing a disabled member
 fails closed at config load — never silently skipped.
@@ -861,7 +874,7 @@ for its own answer.
 ### Session artefact
 
 Every fast-path attempt appends one line to
-`agents/council-sessions/<date>-<slug>/low-impact-resolutions.md`:
+`agents/runtime/council/sessions/<date>-<slug>/low-impact-resolutions.md`:
 
 ```
 2025-05-14T10:00:00Z | resolved | members=2/2 | members(anthropic, openai) cost=$0.0034 | Q=Service vs Repository for this read path?
@@ -875,7 +888,7 @@ headers around canonical lines.
 Re-projection of session log → summary block:
 
 ```
-$ council replay agents/council-sessions/2025-05-14-foo/responses.json --low-impact-stats
+$ council replay agents/runtime/council/sessions/2025-05-14-foo/responses.json --low-impact-stats
 # Low-impact fast-path · session summary
 
 - attempts: 4

package/.agent-src/skills/analysis-autonomous-mode/SKILL.md

@@ -3,6 +3,18 @@ name: analysis-autonomous-mode
 description: "ONLY when user explicitly requests autonomous analysis, deep investigation, multi-step research, or 'dig into this end-to-end without asking me each step' — NOT for normal feature work."
 source: package
 domain: discovery
+workspaces:
+  - agent-config-maintainer
+packs:
+  - meta
+lifecycle: active
+trust:
+  level: core
+  confidence: high
+  human_review_required: false
+install:
+  default: true
+  removable: false
 ---
 
 # analysis-autonomous-mode

package/.agent-src/skills/analysis-skill-router/SKILL.md

@@ -3,6 +3,18 @@ name: analysis-skill-router
 description: "Use when picking which analysis or project-analysis-* skill fits a request — routes by scope, framework, and symptom — even if the user just says 'analyze this' or 'dig into the codebase'."
 source: package
 domain: discovery
+workspaces:
+  - agent-config-maintainer
+packs:
+  - meta
+lifecycle: active
+trust:
+  level: core
+  confidence: high
+  human_review_required: false
+install:
+  default: true
+  removable: false
 ---
 
 # analysis-skill-router

package/.agent-src/skills/api-design/SKILL.md

@@ -6,8 +6,18 @@ personas:
 source: package
 domain: engineering
 recommended_for_user_types: [developer, founder]
-
-
+workspaces:
+  - engineering
+packs:
+  - engineering-base
+lifecycle: active
+trust:
+  level: core
+  confidence: high
+  human_review_required: false
+install:
+  default: true
+  removable: false
 ---
 
 # api-design
@@ -22,7 +32,7 @@ Do NOT use when:
 
 ## Procedure: Design an API
 
-1. **Gather context** — read `agents/contexts/api-versioning.md`, `agents/docs/api-resources.md`, `agents/docs/query-filter.md`, `agents/docs/controller.md`, and guideline `php/api-design.md`.
+1. **Gather context** — read `agents/settings/contexts/api-versioning.md`, `agents/reference/docs/api-resources.md`, `agents/reference/docs/query-filter.md`, `agents/reference/docs/controller.md`, and guideline `php/api-design.md`.
 2. **Identify the resource** — determine the domain entity, its attributes, and relationships. Check existing models and resources for field naming patterns.
 3. **Define endpoints** — list each endpoint with HTTP method, URL path, request body, query parameters, and response structure. Follow existing route file patterns.
 4. **Decide versioning** — determine whether this extends the current version or requires a new version (see decision table below).

package/.agent-src/skills/api-endpoint/SKILL.md

@@ -3,6 +3,18 @@ name: api-endpoint
 description: "Use when creating an API endpoint or HTTP route handler — detects the project stack and routes to the matching carve-out (laravel-api-endpoint, nextjs-patterns, symfony-workflow)."
 source: package
 domain: engineering
+workspaces:
+  - engineering
+packs:
+  - engineering-base
+lifecycle: active
+trust:
+  level: core
+  confidence: high
+  human_review_required: false
+install:
+  default: true
+  removable: false
 ---
 
 # api-endpoint

package/.agent-src/skills/api-testing/SKILL.md

@@ -3,6 +3,18 @@ name: api-testing
 description: "Use when writing API endpoint tests — integration tests, contract validation, response assertions, mocked external services — even when the user says 'test this route' without naming API testing."
 source: package
 domain: quality
+workspaces:
+  - engineering
+packs:
+  - engineering-base
+lifecycle: active
+trust:
+  level: core
+  confidence: high
+  human_review_required: false
+install:
+  default: true
+  removable: false
 ---
 
 # api-testing

package/.agent-src/skills/architecture-review-lens/SKILL.md

@@ -6,6 +6,18 @@ personas:
   - senior-engineer
 source: package
 domain: quality
+workspaces:
+  - engineering
+packs:
+  - engineering-base
+lifecycle: active
+trust:
+  level: core
+  confidence: high
+  human_review_required: false
+install:
+  default: true
+  removable: false
 ---
 
 # architecture-review-lens

package/.agent-src/skills/artisan-commands/SKILL.md

@@ -3,6 +3,18 @@ name: artisan-commands
 description: "Use when creating or modifying Artisan commands. Covers clear signatures, safe execution flow, helpful output, and project conventions for console tooling."
 source: package
 domain: engineering
+workspaces:
+  - engineering
+packs:
+  - laravel
+lifecycle: active
+trust:
+  level: professional
+  confidence: high
+  human_review_required: false
+install:
+  default: false
+  removable: true
 ---
 
 # artisan-commands

package/.agent-src/skills/async-python-patterns/SKILL.md

@@ -6,6 +6,18 @@ domain: engineering
 status: active
 refresh_trigger: "Python ships a new structured-concurrency primitive (post-TaskGroup), OR ≥30% of cited upstream cookbook examples become deprecated, OR the cited libraries (aiohttp, httpx, anyio, trio) cut a major version with breaking async surface changes."
 sunset_criterion: "When `https://docs.python.org/3/library/asyncio.html` ships an in-tree decision framework AND consumer projects no longer cite this skill in PR reviews for two consecutive review cycles."
+workspaces:
+  - engineering
+packs:
+  - python
+lifecycle: experimental
+trust:
+  level: professional
+  confidence: high
+  human_review_required: false
+install:
+  default: false
+  removable: true
 ---
 
 # async-python-patterns
@@ -144,5 +156,5 @@ A single blocking call (sync I/O, time.sleep, CPU-heavy parse, large JSON load)
   - Async HTTP: https://www.python-httpx.org/async/ · https://docs.aiohttp.org/en/stable/
   - Async DB: https://magicstack.github.io/asyncpg/ · https://aiosqlite.omnilib.dev/
 - Cross-linked: [`error-handling-patterns`](../error-handling-patterns/SKILL.md), [`mcp-builder`](../mcp-builder/SKILL.md), [`api-design`](../api-design/SKILL.md), [`performance`](../performance/SKILL.md).
-- Provenance registry: `agents/contexts/skills-provenance.yml` (entry: `async-python-patterns`).
+- Provenance registry: `agents/settings/contexts/skills-provenance.yml` (entry: `async-python-patterns`).
 - Iron-Law floor: `verify-before-complete`, `skill-quality`, `non-destructive-by-default`.

package/.agent-src/skills/authz-review/SKILL.md

@@ -7,8 +7,18 @@ personas:
 source: package
 domain: quality
 recommended_for_user_types: [developer, ops]
-
-
+workspaces:
+  - engineering
+packs:
+  - engineering-base
+lifecycle: active
+trust:
+  level: core
+  confidence: high
+  human_review_required: false
+install:
+  default: true
+  removable: false
 ---
 
 # authz-review

package/.agent-src/skills/aws-infrastructure/SKILL.md

@@ -3,6 +3,18 @@ name: aws-infrastructure
 description: "Use when working with AWS resources — ECS Fargate, ECR, EFS, Secrets Manager, gomplate templates, multi-env deployments — even when the user says 'deploy to staging' without naming AWS."
 source: package
 domain: devops
+workspaces:
+  - engineering
+packs:
+  - engineering-base
+lifecycle: active
+trust:
+  level: core
+  confidence: high
+  human_review_required: false
+install:
+  default: true
+  removable: false
 ---
 
 # aws-infrastructure

package/.agent-src/skills/blade-ui/SKILL.md

@@ -3,6 +3,18 @@ name: blade-ui
 description: "Use when the project's frontend stack is Blade — dispatched by `directives/ui/{apply,review,polish}.py`. Covers views, components, partials, layouts, and view logic."
 source: package
 domain: engineering
+workspaces:
+  - engineering
+packs:
+  - laravel
+lifecycle: active
+trust:
+  level: professional
+  confidence: high
+  human_review_required: false
+install:
+  default: false
+  removable: true
 ---
 
 # blade-ui

package/.agent-src/skills/blast-radius-analyzer/SKILL.md

@@ -5,6 +5,18 @@ personas:
   - backend-architect
 source: package
 domain: discovery
+workspaces:
+  - engineering
+packs:
+  - engineering-base
+lifecycle: active
+trust:
+  level: core
+  confidence: high
+  human_review_required: false
+install:
+  default: true
+  removable: false
 ---
 
 # blast-radius-analyzer

package/.agent-src/skills/bug-analyzer/SKILL.md

@@ -4,6 +4,18 @@ description: "Use when the user shares a Sentry error, Jira bug ticket, or error
 source: package
 domain: discovery
 council_depth: deep
+workspaces:
+  - engineering
+packs:
+  - engineering-base
+lifecycle: active
+trust:
+  level: core
+  confidence: high
+  human_review_required: false
+install:
+  default: true
+  removable: false
 ---
 
 # bug-analyzer
@@ -84,7 +96,7 @@ Gather all available evidence before forming any hypothesis:
 - **Stacktrace** → start from top frame (crash site), trace down to entry point.
 - Use `codebase-retrieval` to find the relevant code.
 - Read each file in the call chain to understand the data flow.
-- Check existing context docs (`agents/contexts/`) for the affected area.
+- Check existing context docs (`agents/settings/contexts/`) for the affected area.
 - **Consult engineering memory.** Via
   [`memory-access`](../../../docs/guidelines/agent-infra/memory-access.md) call
   `retrieve(types=["historical-patterns", "incident-learnings"],
@@ -201,7 +213,7 @@ For each bug found: **Bug** → **Location** → **Severity** → **Root Cause**
 
 Read `AGENTS.md` and `./agents/` for project-specific architecture, business rules, and domain docs.
 Detect the project from the repo name (see `rules/architecture.md`).
-Check for existing contexts in `agents/contexts/` or module `agents/contexts/`.
+Check for existing contexts in `agents/settings/contexts/` or module `agents/settings/contexts/`.
 
 
 ## Adversarial review

package/.agent-src/skills/build-buy-partner/SKILL.md

@@ -6,6 +6,18 @@ tier: senior
 source: package
 domain: process
 context_spine: [org-stage, product, customer-segment]
+workspaces:
+  - founder
+packs:
+  - founder-strategy
+lifecycle: active
+trust:
+  level: core
+  confidence: high
+  human_review_required: false
+install:
+  default: true
+  removable: true
 ---
 
 # build-buy-partner

package/.agent-src/skills/canvas-design/SKILL.md

@@ -3,6 +3,18 @@ name: canvas-design
 description: "Use when creating static visual art — posters, marketing visuals, brand assets, PDF/PNG design pieces — even if the user just says 'design a poster' or 'mach uns ein Visual'."
 source: package
 domain: product
+workspaces:
+  - small-business
+packs:
+  - ai-video
+lifecycle: experimental
+trust:
+  level: experimental
+  confidence: high
+  human_review_required: false
+install:
+  default: false
+  removable: true
 ---
 
 # canvas-design

package/.agent-src/skills/character-consistency/SKILL.md

@@ -5,12 +5,24 @@ personas:
   - hollywood-director
 source: package
 domain: product
+workspaces:
+  - small-business
+packs:
+  - ai-video
+lifecycle: experimental
+trust:
+  level: experimental
+  confidence: high
+  human_review_required: false
+install:
+  default: false
+  removable: true
 ---
 
 # character-consistency
 
 > Lock a character's visual identity into
-> `agents/ai-video/<project>/characters/<id>.json` so every scene
+> `agents/reference/ai-video/<project>/characters/<id>.json` so every scene
 > reuses the **exact same tokens** verbatim. Downstream skills
 > ([`video-director`](../video-director/SKILL.md),
 > [`pixar-storyteller`](../pixar-storyteller/SKILL.md),
@@ -37,7 +49,7 @@ Do NOT use when:
 
 ### Step 0: Inspect
 
-1. Check `agents/ai-video/<project>/characters/` — if a lock already
+1. Check `agents/reference/ai-video/<project>/characters/` — if a lock already
    exists for this id, **read it, do not redraft**. Edits require an
    explicit revision note (Phase 6 visual regression must rerun).
 2. Confirm the character will appear in ≥ 2 scenes; one-shot → skip.
@@ -45,7 +57,7 @@ Do NOT use when:
 ### Step 1: Draft identity tokens
 
 Emit a JSON file at
-`agents/ai-video/<project>/characters/<character-id>.json` with the
+`agents/reference/ai-video/<project>/characters/<character-id>.json` with the
 following fields. Every field is mandatory; missing field → fail
 the lock.
 
@@ -70,7 +82,7 @@ the lock.
 
 1. After the first scene renders, copy the highest-quality frame
    showing the character full-face and full-body to
-   `agents/ai-video/<project>/characters/<id>.ref.png`.
+   `agents/reference/ai-video/<project>/characters/<id>.ref.png`.
 2. Update `reference_frame` in the JSON to point at it.
 3. Phase 6 visual regression compares every subsequent scene's
    character frame against this reference (ImageMagick `compare`
@@ -86,11 +98,11 @@ the lock.
 
 ## Output format
 
-1. **`agents/ai-video/<project>/characters/<id>.json`** — locked
+1. **`agents/reference/ai-video/<project>/characters/<id>.json`** — locked
    identity tokens, schema above.
-2. **`agents/ai-video/<project>/characters/<id>.ref.png`** —
+2. **`agents/reference/ai-video/<project>/characters/<id>.ref.png`** —
    reference frame (added after first render).
-3. **`agents/ai-video/<project>/characters/CHANGELOG.md`** — one
+3. **`agents/reference/ai-video/<project>/characters/CHANGELOG.md`** — one
    line per revision: `v<n> · YYYY-MM-DD · reason · scenes-to-rerun`.
 
 ## Gotcha
@@ -122,10 +134,10 @@ the lock.
 
 When a character lock would identify or render a real person, consult before emitting the JSON:
 
-- [`agents/policies/media/likeness.md`](../../../agents/policies/media/likeness.md) — real-person identity tokens require a cited likeness release.
-- [`agents/policies/media/public-figures.md`](../../../agents/policies/media/public-figures.md) — recognised public figures carry the harder gate (publicity rights + transformative-intent).
-- [`agents/policies/media/voice-cloning.md`](../../../agents/policies/media/voice-cloning.md) — when `voice_note` references a real person's voice.
-- [`agents/policies/media/disclosure.md`](../../../agents/policies/media/disclosure.md) — outputs carrying a real-person lock require the non-removable AI-generation disclosure downstream.
+- [`agents/settings/policies/media/likeness.md`](../../../agents/settings/policies/media/likeness.md) — real-person identity tokens require a cited likeness release.
+- [`agents/settings/policies/media/public-figures.md`](../../../agents/settings/policies/media/public-figures.md) — recognised public figures carry the harder gate (publicity rights + transformative-intent).
+- [`agents/settings/policies/media/voice-cloning.md`](../../../agents/settings/policies/media/voice-cloning.md) — when `voice_note` references a real person's voice.
+- [`agents/settings/policies/media/disclosure.md`](../../../agents/settings/policies/media/disclosure.md) — outputs carrying a real-person lock require the non-removable AI-generation disclosure downstream.
 
 Refuse-and-surface the file path; do not silently sanitise the prompt.