@event4u/agent-config 2.26.0 → 3.1.0

package/.agent-src/skills/runway-cognition/SKILL.md

@@ -7,8 +7,18 @@ source: package
 domain: process
 context_spine: [org-stage, fiscal-period, product]
 recommended_for_user_types: [founder, finance]
-
-
+workspaces:
+  - finance
+packs:
+  - finance-basic
+lifecycle: active
+trust:
+  level: professional
+  confidence: high
+  human_review_required: false
+install:
+  default: true
+  removable: true
 ---
 
 # runway-cognition

package/.agent-src/skills/scenario-modeling/SKILL.md

@@ -7,8 +7,18 @@ source: package
 domain: process
 context_spine: [org-stage, fiscal-period, product]
 recommended_for_user_types: [founder, finance]
-
-
+workspaces:
+  - finance
+packs:
+  - finance-advanced
+lifecycle: active
+trust:
+  level: core
+  confidence: high
+  human_review_required: false
+install:
+  default: false
+  removable: true
 ---
 
 # scenario-modeling

package/.agent-src/skills/scene-expander/SKILL.md

@@ -5,6 +5,18 @@ personas:
   - hollywood-director
 source: package
 domain: product
+workspaces:
+  - small-business
+packs:
+  - ai-video
+lifecycle: experimental
+trust:
+  level: experimental
+  confidence: high
+  human_review_required: false
+install:
+  default: false
+  removable: true
 ---
 
 # scene-expander
@@ -44,7 +56,7 @@ Do NOT use when:
    (live-action with VFX) → `hollywood-director`; record VFX intent
    in ENVIRONMENT.
 3. Check for an existing `character.json` lock under
-   `agents/ai-video/<project>/characters/`.
+   `agents/reference/ai-video/<project>/characters/`.
 
 ### Step 1: Emit the 12 blocks
 
@@ -127,11 +139,11 @@ Any "no" → revise that block.
 
 The 12-block Cinematic Scene Blueprint is the policy choke point — every downstream skill (`motion-choreographer`, `video-director`) inherits whatever the blueprint encodes. Before emitting:
 
-- [`agents/policies/media/likeness.md`](../../../agents/policies/media/likeness.md) — when the SUBJECT block names or visually identifies a real person.
-- [`agents/policies/media/public-figures.md`](../../../agents/policies/media/public-figures.md) — when the SUBJECT block is a recognised public figure.
-- [`agents/policies/media/brand-impersonation.md`](../../../agents/policies/media/brand-impersonation.md) — when STYLE / ENVIRONMENT references a recognised brand's visual identity.
-- [`agents/policies/media/style.md`](../../../agents/policies/media/style.md) — when STYLE anchors to a named living artist or studio as the primary signature.
-- [`agents/policies/media/disclosure.md`](../../../agents/policies/media/disclosure.md) — every distributed blueprint output carries the AI-generation disclosure downstream.
+- [`agents/settings/policies/media/likeness.md`](../../../agents/settings/policies/media/likeness.md) — when the SUBJECT block names or visually identifies a real person.
+- [`agents/settings/policies/media/public-figures.md`](../../../agents/settings/policies/media/public-figures.md) — when the SUBJECT block is a recognised public figure.
+- [`agents/settings/policies/media/brand-impersonation.md`](../../../agents/settings/policies/media/brand-impersonation.md) — when STYLE / ENVIRONMENT references a recognised brand's visual identity.
+- [`agents/settings/policies/media/style.md`](../../../agents/settings/policies/media/style.md) — when STYLE anchors to a named living artist or studio as the primary signature.
+- [`agents/settings/policies/media/disclosure.md`](../../../agents/settings/policies/media/disclosure.md) — every distributed blueprint output carries the AI-generation disclosure downstream.
 
 Refuse-and-surface at the blueprint layer; do not push policy questions down to the adapter.
 

package/.agent-src/skills/script-writing/SKILL.md

@@ -3,6 +3,18 @@ name: script-writing
 description: "Use when adding or editing any script under `scripts/` — `--quiet` flag, `_lib/script_output` helpers, silent Taskfile wiring, Iron-Law carve-outs — even when you just say 'add a check script for X'."
 source: package
 domain: process
+workspaces:
+  - agent-config-maintainer
+packs:
+  - meta
+lifecycle: active
+trust:
+  level: core
+  confidence: high
+  human_review_required: false
+install:
+  default: true
+  removable: false
 ---
 
 <!-- cloud_safe: degrade -->
@@ -20,7 +32,7 @@ Do NOT use this skill when:
 
 * The content is a one-off / archival under `scripts/ai_council/one_off_archive/` — those carry an `_one_off_` prefix and are exempt from the verbosity convention
 * The content is a shell entrypoint with secret prompts (install-keys, release confirms) → see § 3 Iron-Law carve-outs
-* The content is a `.mjs` / Node script under `scripts/cost/` — different runtime; convention covered in `agents/contexts/cost-tracking.md`
+* The content is a `.mjs` / Node script under `scripts/cost/` — different runtime; convention covered in `agents/settings/contexts/cost-tracking.md`
 
 ## Script vs other writers — critical test
 

package/.agent-src/skills/secrets-management/SKILL.md

@@ -7,8 +7,18 @@ status: active
 refresh_trigger: "A cited provider deprecates an auth method, OR External Secrets Operator ships a major version with breaking CRD changes, OR ≥30% of cited scanner tools change their gate semantics."
 sunset_criterion: "When provider docs (Vault, AWS Secrets Manager, Azure Key Vault, GCP Secret Manager) all converge on a single rotation + scanning standard AND consumer projects no longer cite this skill in PR reviews for two consecutive review cycles."
 recommended_for_user_types: [ops, developer]
-
-
+workspaces:
+  - engineering
+packs:
+  - engineering-base
+lifecycle: active
+trust:
+  level: core
+  confidence: high
+  human_review_required: false
+install:
+  default: true
+  removable: false
 ---
 
 # secrets-management
@@ -142,5 +152,5 @@ Telemetry / APM     → strip from request/response captures; allowlist headers.
   - External Secrets Operator: https://external-secrets.io/
   - GitHub secret scanning: https://docs.github.com/en/code-security/secret-scanning · gitleaks: https://github.com/gitleaks/gitleaks · TruffleHog: https://github.com/trufflesecurity/trufflehog
 - Cross-linked: [`aws-infrastructure`](../aws-infrastructure/SKILL.md), [`security-audit`](../security-audit/SKILL.md), [`threat-modeling`](../threat-modeling/SKILL.md), [`security`](../security/SKILL.md).
-- Provenance registry: `agents/contexts/skills-provenance.yml` (entry: `secrets-management`).
+- Provenance registry: `agents/settings/contexts/skills-provenance.yml` (entry: `secrets-management`).
 - Iron-Law floor: `verify-before-complete`, `skill-quality`, `non-destructive-by-default`.

package/.agent-src/skills/security/SKILL.md

@@ -3,6 +3,18 @@ name: security
 description: "Use when applying security best practices — authentication, authorization, CSRF protection, input sanitization, rate limiting, or secure coding — stack-agnostic."
 source: package
 domain: quality
+workspaces:
+  - engineering
+packs:
+  - engineering-base
+lifecycle: active
+trust:
+  level: core
+  confidence: high
+  human_review_required: false
+install:
+  default: true
+  removable: false
 ---
 
 # security

package/.agent-src/skills/security-audit/SKILL.md

@@ -3,6 +3,18 @@ name: security-audit
 description: "ONLY when user explicitly requests: security audit, vulnerability scan, or penetration test review. NOT for regular feature work."
 source: package
 domain: quality
+workspaces:
+  - engineering
+packs:
+  - engineering-base
+lifecycle: active
+trust:
+  level: core
+  confidence: high
+  human_review_required: false
+install:
+  default: true
+  removable: false
 ---
 
 # security-audit

package/.agent-src/skills/sentry-integration/SKILL.md

@@ -3,6 +3,18 @@ name: sentry-integration
 description: "Use when the user shares a Sentry URL, says "check Sentry", or wants to investigate production errors. Uses Sentry MCP tools for deep analysis."
 source: package
 domain: devops
+workspaces:
+  - engineering
+packs:
+  - engineering-base
+lifecycle: active
+trust:
+  level: core
+  confidence: high
+  human_review_required: false
+install:
+  default: true
+  removable: false
 ---
 
 # Sentry Skill

package/.agent-src/skills/sequential-thinking/SKILL.md

@@ -3,6 +3,18 @@ name: sequential-thinking
 description: "ONLY when user explicitly requests: step-by-step reasoning, structured problem decomposition, or iterative analysis. NOT for regular coding tasks."
 source: package
 domain: process
+workspaces:
+  - agent-config-maintainer
+packs:
+  - meta
+lifecycle: active
+trust:
+  level: core
+  confidence: high
+  human_review_required: false
+install:
+  default: true
+  removable: false
 ---
 
 # sequential-thinking

package/.agent-src/skills/skill-improvement-pipeline/SKILL.md

@@ -7,6 +7,18 @@ execution:
   type: assisted
   handler: internal
   allowed_tools: []
+workspaces:
+  - agent-config-maintainer
+packs:
+  - meta
+lifecycle: active
+trust:
+  level: core
+  confidence: high
+  human_review_required: false
+install:
+  default: true
+  removable: false
 ---
 
 # skill-improvement-pipeline

package/.agent-src/skills/skill-management/SKILL.md

@@ -7,6 +7,18 @@ execution:
   type: assisted
   handler: internal
   allowed_tools: []
+workspaces:
+  - agent-config-maintainer
+packs:
+  - meta
+lifecycle: active
+trust:
+  level: core
+  confidence: high
+  human_review_required: false
+install:
+  default: true
+  removable: false
 ---
 
 # skill-management

package/.agent-src/skills/skill-reviewer/SKILL.md

@@ -7,6 +7,18 @@ execution:
   type: assisted
   handler: internal
   allowed_tools: []
+workspaces:
+  - agent-config-maintainer
+packs:
+  - meta
+lifecycle: active
+trust:
+  level: core
+  confidence: high
+  human_review_required: false
+install:
+  default: true
+  removable: false
 ---
 
 # Skill Reviewer

package/.agent-src/skills/skill-writing/SKILL.md

@@ -4,6 +4,18 @@ description: "Use when deciding 'should this be a skill or a rule?', creating/im
 source: project
 domain: process
 meta_skill: true
+workspaces:
+  - agent-config-maintainer
+packs:
+  - meta
+lifecycle: active
+trust:
+  level: core
+  confidence: high
+  human_review_required: false
+install:
+  default: true
+  removable: false
 ---
 
 # skill-writing

package/.agent-src/skills/sql-writing/SKILL.md

@@ -3,6 +3,18 @@ name: sql-writing
 description: "Use when writing raw SQL — MariaDB/MySQL syntax, parameterization, raw migrations, seeders with `DB::statement` — even when the user just pastes a query and asks 'why is this slow' without naming SQL."
 source: package
 domain: engineering
+workspaces:
+  - engineering
+packs:
+  - engineering-base
+lifecycle: active
+trust:
+  level: core
+  confidence: high
+  human_review_required: false
+install:
+  default: true
+  removable: false
 ---
 
 # sql

package/.agent-src/skills/stakeholder-tradeoff/SKILL.md

@@ -10,6 +10,18 @@ personas:
   - product-owner
   - stakeholder
   - critical-challenger
+workspaces:
+  - product
+packs:
+  - product-basic
+lifecycle: active
+trust:
+  level: professional
+  confidence: high
+  human_review_required: false
+install:
+  default: true
+  removable: true
 ---
 
 # stakeholder-tradeoff

package/.agent-src/skills/subagent-orchestration/SKILL.md

@@ -3,6 +3,18 @@ name: subagent-orchestration
 description: "Use when orchestrating implementer/judge subagents — seven modes (do-and-judge ±two-stage, do-in-steps/parallel/worktrees, do-competitively, judge-with-debate) — models from .agent-settings.yml."
 source: package
 domain: process
+workspaces:
+  - agent-config-maintainer
+packs:
+  - meta
+lifecycle: active
+trust:
+  level: core
+  confidence: high
+  human_review_required: false
+install:
+  default: true
+  removable: false
 ---
 
 # subagent-orchestration
@@ -56,7 +68,7 @@ model pairing. Defaults come from
 Descriptive, not enforced. Documents the **expected agent-to-agent
 communication topology** so consumers can predict latency, failure
 modes, and where consensus is required. Cited from
-[`external-findings.md § 2`](../../../agents/council-sessions/audit-2026-05-14-north-star/external-findings.md) <!-- council-ref-allowed: ADR decision trace for topology anti-drift defaults -->
+[`external-findings.md § 2`](../../../agents/runtime/council/sessions/audit-2026-05-14-north-star/external-findings.md) <!-- council-ref-allowed: ADR decision trace for topology anti-drift defaults -->
 row 7 (Ruflo's `hierarchical, 6–8 agents, raft consensus` anti-drift
 default).
 

package/.agent-src/skills/symfony-workflow/SKILL.md

@@ -3,6 +3,18 @@ name: symfony-workflow
 description: "Writes Symfony PHP — DI container, bundles, Doctrine, Messenger, Security voters, console commands. For Laravel / Eloquent / Artisan use `laravel`. For framework-free PHP use `php-coder`."
 source: package
 domain: engineering
+workspaces:
+  - engineering
+packs:
+  - symfony
+lifecycle: active
+trust:
+  level: professional
+  confidence: high
+  human_review_required: false
+install:
+  default: false
+  removable: true
 ---
 
 # symfony-workflow

package/.agent-src/skills/systematic-debugging/SKILL.md

@@ -4,6 +4,18 @@ description: "Use when hitting a bug, test failure, crash, or unexpected behavio
 source: package
 domain: discovery
 council_depth: deep
+workspaces:
+  - engineering
+packs:
+  - engineering-base
+lifecycle: active
+trust:
+  level: core
+  confidence: high
+  human_review_required: false
+install:
+  default: true
+  removable: false
 ---
 
 # systematic-debugging
@@ -158,6 +170,40 @@ If you have tried **three** fixes and the bug is still present:
   design that keeps producing this class of bug?
 * Surface the question to the user. Do not attempt fix #4 silently.
 
+## Debug micro-loop — one test, one fix, one re-run
+
+Tactical complement to the 6-phase loop, for failing test suites,
+broken builds, and regressions. Each lap completes in **one turn**.
+Pairs with [`context-hygiene § Read-Loop Detection`](../../rules/context-hygiene.md#read-loop-detection--the-15--25-rule)
+— if you catch yourself reading-without-acting, run this loop.
+
+1. **Pick ONE failing test.** Run it isolated:
+   `npx vitest run path/to/single.test.ts`,
+   `pytest tests/x.py::test_y`, `phpunit --filter test_y`. Full suite
+   between laps is forbidden — it drowns the signal.
+2. **Read the assertion, not the file.** `expected X to be Y` names
+   the gap. Hypothesis comes from the error, not a hunch.
+3. **Source first, test second.** Shape mismatch → read the producer
+   (route, function, component) **once**, then align the test (or fix
+   the producer if it's the regression — Phase 2 decides which).
+4. **Use git as a diagnostic.** Regression in code that worked →
+   `git log --oneline -- <file>` → `git show <sha> -- <file>`. The
+   before/after diff names the dropped logic faster than re-reading.
+5. **One edit, then re-run the same single test.** Green → next
+   failing test. Red → step 2 with the new assertion. **Never** edit
+   two unrelated things before re-running.
+6. **Full suite at the end, not between laps.** It is the gate, not
+   the feedback loop.
+
+**Anti-patterns this loop prevents:**
+
+* Editing source to make tests pass when the test was wrong (or
+  vice versa) — step 3 forces "read producer first".
+* Drowning in full-suite output every lap — step 1 pins one file.
+* Three reads in a row without a fix — step 5 forces an edit per lap.
+* Guessing at mock / payload shape — step 3 forces reading the route
+  handler or component the mock substitutes for.
+
 ## Gathering evidence — cheap tools first
 
 | What you need | Tool |
@@ -240,6 +286,13 @@ When reporting debug findings to the user:
 * A green test run after changes, without having first seen it red
 * "This looks similar to bug X, so it's the same fix"
 * Suppressing a log, warning, or exception instead of tracing its source
+* **Three consecutive read-only turns** (only `view` / `grep` /
+  `git log` / `codebase-retrieval`, no edits, no test runs) — trips the
+  Read-Loop Detection 15-minute warning. See
+  [`context-hygiene § Read-Loop Detection`](../../rules/context-hygiene.md#read-loop-detection--the-15--25-rule)
+  and run the Debug micro-loop instead: one failing test → read the
+  assertion → read the producer once → one edit → re-run that single
+  test.
 
 ## Do NOT
 

package/.agent-src/skills/tailwind-engineer/SKILL.md

@@ -5,6 +5,18 @@ personas:
   - frontend-engineer
 source: package
 domain: engineering
+workspaces:
+  - engineering
+packs:
+  - engineering-base
+lifecycle: active
+trust:
+  level: core
+  confidence: high
+  human_review_required: false
+install:
+  default: true
+  removable: false
 ---
 
 # tailwind-engineer

package/.agent-src/skills/tech-debt-tracker/SKILL.md

@@ -8,8 +8,18 @@ personas:
 source: package
 domain: process
 recommended_for_user_types: [developer, founder]
-
-
+workspaces:
+  - engineering
+packs:
+  - engineering-base
+lifecycle: active
+trust:
+  level: core
+  confidence: high
+  human_review_required: false
+install:
+  default: true
+  removable: false
 ---
 
 # tech-debt-tracker

package/.agent-src/skills/technical-specification/SKILL.md

@@ -4,6 +4,18 @@ description: "Use when the user says "write a spec", "create RFC", "write a PRD"
 source: package
 domain: product
 council_depth: deep
+workspaces:
+  - product
+packs:
+  - product-basic
+lifecycle: active
+trust:
+  level: professional
+  confidence: high
+  human_review_required: false
+install:
+  default: true
+  removable: true
 ---
 
 # technical-specification

package/.agent-src/skills/terraform/SKILL.md

@@ -3,6 +3,18 @@ name: terraform
 description: "Use when writing Terraform — AWS modules, resources, variables, outputs, remote state — even when the user just says 'provision this infra' or 'add an S3 bucket' without naming Terraform."
 source: package
 domain: devops
+workspaces:
+  - engineering
+packs:
+  - engineering-base
+lifecycle: active
+trust:
+  level: core
+  confidence: high
+  human_review_required: false
+install:
+  default: true
+  removable: false
 ---
 
 # terraform

package/.agent-src/skills/terragrunt/SKILL.md

@@ -3,6 +3,18 @@ name: terragrunt
 description: "Use when working with Terragrunt — DRY multi-env configs, module dependencies, remote state orchestration — even when the user just says 'deploy this to staging and prod' without naming Terragrunt."
 source: package
 domain: devops
+workspaces:
+  - engineering
+packs:
+  - engineering-base
+lifecycle: active
+trust:
+  level: core
+  confidence: high
+  human_review_required: false
+install:
+  default: true
+  removable: false
 ---
 
 # terragrunt

package/.agent-src/skills/test-driven-development/SKILL.md

@@ -3,6 +3,18 @@ name: test-driven-development
 description: "Use when implementing a feature, fixing a bug, or refactoring — write a failing test first, then the code — even if the user just says 'add this function' or 'fix this bug'."
 source: package
 domain: quality
+workspaces:
+  - engineering
+packs:
+  - engineering-base
+lifecycle: active
+trust:
+  level: core
+  confidence: high
+  human_review_required: false
+install:
+  default: true
+  removable: false
 ---
 
 # test-driven-development

package/.agent-src/skills/test-performance/SKILL.md

@@ -4,6 +4,18 @@ description: "Use when optimizing test suite performance — database setup, see
 source: package
 domain: quality
 framework: laravel
+workspaces:
+  - engineering
+packs:
+  - engineering-base
+lifecycle: active
+trust:
+  level: core
+  confidence: high
+  human_review_required: false
+install:
+  default: true
+  removable: false
 ---
 
 # test-performance
@@ -150,7 +162,7 @@ Replace dynamic `getPdo()` probing with explicit config:
 
 ## Related project docs
 
-- `agents/docs/seeders.md` — seeder conventions (if exists)
+- `agents/reference/docs/seeders.md` — seeder conventions (if exists)
 
 ## Output format
 

package/.agent-src/skills/testing-anti-patterns/SKILL.md

@@ -3,6 +3,18 @@ name: testing-anti-patterns
 description: "Use BEFORE writing or changing tests, adding mocks, or putting test-only methods on production classes — five Iron Laws and gates against mocking-the-mock, production pollution, silent partial mocks."
 source: package
 domain: quality
+workspaces:
+  - engineering
+packs:
+  - engineering-base
+lifecycle: active
+trust:
+  level: core
+  confidence: high
+  human_review_required: false
+install:
+  default: true
+  removable: false
 ---
 
 # testing-anti-patterns
@@ -156,5 +168,5 @@ Gate: a feature is not complete until a failing-then-passing test cycle ran for
 
 - Adopted from: `Microck/ordinary-claude-skills@8f5c83174f7aa683b4ddc7433150471983b93131:skills_all/testing-anti-patterns/SKILL.md` (MIT, © 2025 Microck).
 - Cross-linked: [`pest-testing`](../pest-testing/SKILL.md), [`test-driven-development`](../test-driven-development/SKILL.md), [`judge-test-coverage`](../judge-test-coverage/SKILL.md).
-- Provenance registry: `agents/contexts/skills-provenance.yml` (entry: `testing-anti-patterns`).
+- Provenance registry: `agents/settings/contexts/skills-provenance.yml` (entry: `testing-anti-patterns`).
 - Iron-Law floor: `verify-before-complete`, `skill-quality`.

package/.agent-src/skills/threat-modeling/SKILL.md

@@ -6,6 +6,18 @@ personas:
 source: package
 domain: quality
 council_depth: deep
+workspaces:
+  - engineering
+packs:
+  - engineering-base
+lifecycle: active
+trust:
+  level: core
+  confidence: high
+  human_review_required: false
+install:
+  default: true
+  removable: false
 ---
 
 # threat-modeling

package/.agent-src/skills/throughput-vs-morale-tradeoff/SKILL.md

@@ -6,6 +6,18 @@ tier: senior
 source: package
 domain: process
 context_spine: [org-stage, product, customer-segment]
+workspaces:
+  - ops
+packs:
+  - ops-people
+lifecycle: active
+trust:
+  level: professional
+  confidence: high
+  human_review_required: false
+install:
+  default: true
+  removable: true
 ---
 
 # throughput-vs-morale-tradeoff