@event4u/agent-config 2.26.0 → 3.1.0

package/.agent-src/skills/token-optimizer/SKILL.md

@@ -7,6 +7,18 @@ execution:
   type: assisted
   handler: shell
   allowed_tools: []
+workspaces:
+  - agent-config-maintainer
+packs:
+  - meta
+lifecycle: active
+trust:
+  level: core
+  confidence: high
+  human_review_required: false
+install:
+  default: true
+  removable: false
 ---
 
 # Token Optimizer — decision tree + catalog

package/.agent-src/skills/traefik/SKILL.md

@@ -3,6 +3,18 @@ name: traefik
 description: "Use when setting up Traefik as a local reverse proxy — real domains on 127.0.0.1, trusted HTTPS via mkcert, automatic service discovery, and multi-project routing."
 source: package
 domain: devops
+workspaces:
+  - engineering
+packs:
+  - engineering-base
+lifecycle: active
+trust:
+  level: core
+  confidence: high
+  human_review_required: false
+install:
+  default: true
+  removable: false
 ---
 
 # Traefik Skill

package/.agent-src/skills/ui-component-architect/SKILL.md

@@ -5,6 +5,18 @@ personas:
   - frontend-engineer
 source: package
 domain: engineering
+workspaces:
+  - engineering
+packs:
+  - engineering-base
+lifecycle: active
+trust:
+  level: core
+  confidence: high
+  human_review_required: false
+install:
+  default: true
+  removable: false
 ---
 
 # ui-component-architect

package/.agent-src/skills/unit-economics-modeling/SKILL.md

@@ -7,8 +7,18 @@ source: package
 domain: product
 context_spine: [product, fiscal-period]
 recommended_for_user_types: [founder, finance]
-
-
+workspaces:
+  - finance
+packs:
+  - finance-basic
+lifecycle: active
+trust:
+  level: professional
+  confidence: high
+  human_review_required: false
+install:
+  default: true
+  removable: true
 ---
 
 # unit-economics-modeling

package/.agent-src/skills/universal-project-analysis/SKILL.md

@@ -3,6 +3,18 @@ name: universal-project-analysis
 description: "ONLY when user asks for deep multi-pass codebase audit — orchestrator routing to `project-analysis-core` + framework-specific `project-analysis-*`. Single-pass scan → `project-analyzer`."
 source: package
 domain: discovery
+workspaces:
+  - engineering
+packs:
+  - engineering-base
+lifecycle: active
+trust:
+  level: core
+  confidence: high
+  human_review_required: false
+install:
+  default: true
+  removable: false
 ---
 
 # universal-project-analysis

package/.agent-src/skills/upstream-contribute/SKILL.md

@@ -7,6 +7,18 @@ execution:
   type: assisted
   handler: internal
   allowed_tools: ["github"]
+workspaces:
+  - agent-config-maintainer
+packs:
+  - meta
+lifecycle: active
+trust:
+  level: core
+  confidence: high
+  human_review_required: false
+install:
+  default: true
+  removable: false
 ---
 
 # upstream-contribute

package/.agent-src/skills/using-git-worktrees/SKILL.md

@@ -3,6 +3,18 @@ name: using-git-worktrees
 description: "Use when starting parallel work in isolation from the current branch — spawn a git worktree with ignore-safety checks and a clean test baseline — even when the user says 'try this on the side'."
 source: package
 domain: process
+workspaces:
+  - engineering
+packs:
+  - engineering-base
+lifecycle: active
+trust:
+  level: core
+  confidence: high
+  human_review_required: false
+install:
+  default: true
+  removable: false
 ---
 
 # using-git-worktrees

package/.agent-src/skills/validate-feature-fit/SKILL.md

@@ -7,6 +7,18 @@ execution:
   type: assisted
   handler: internal
   allowed_tools: []
+workspaces:
+  - engineering
+packs:
+  - engineering-base
+lifecycle: active
+trust:
+  level: core
+  confidence: high
+  human_review_required: false
+install:
+  default: true
+  removable: false
 ---
 
 # Validate Feature Fit

package/.agent-src/skills/verify-completion-evidence/SKILL.md

@@ -3,6 +3,18 @@ name: verify-completion-evidence
 description: "Use when claiming 'done', suggesting a commit, push, or PR — runs the evidence gate so completion claims come from fresh output in this message, not memory or earlier runs."
 source: package
 domain: quality
+workspaces:
+  - engineering
+packs:
+  - engineering-base
+lifecycle: active
+trust:
+  level: core
+  confidence: high
+  human_review_required: false
+install:
+  default: true
+  removable: false
 ---
 
 # verify-completion-evidence

package/.agent-src/skills/video-director/SKILL.md

@@ -5,6 +5,18 @@ personas:
   - hollywood-director
 source: package
 domain: product
+workspaces:
+  - small-business
+packs:
+  - ai-video
+lifecycle: experimental
+trust:
+  level: experimental
+  confidence: high
+  human_review_required: false
+install:
+  default: false
+  removable: true
 ---
 
 # video-director
@@ -37,7 +49,7 @@ Do NOT use when:
 ### Step 0: Inspect
 
 1. Confirm the input is a live-action / photoreal beat (not animation).
-2. If a `character.json` exists under `agents/ai-video/<project>/characters/`,
+2. If a `character.json` exists under `agents/reference/ai-video/<project>/characters/`,
    read the identity tokens — they are reused verbatim.
 3. Read the scene's intent in one sentence — what is the camera
    witnessing, and why now?
@@ -116,11 +128,11 @@ Any "no" → revise that block before handing off.
 
 11-block cinematic prompt is live-action shape — real-person + brand-impersonation risks highest in cluster. Before emitting:
 
-- [`agents/policies/media/likeness.md`](../../../agents/policies/media/likeness.md) — prompt names / visually identifies real person on camera.
-- [`agents/policies/media/public-figures.md`](../../../agents/policies/media/public-figures.md) — subject is recognised public figure.
-- [`agents/policies/media/brand-impersonation.md`](../../../agents/policies/media/brand-impersonation.md) — prompt copies journalism / broadcaster / regulated-industry visual identity.
-- [`agents/policies/media/style.md`](../../../agents/policies/media/style.md) — LIGHT / LENS anchored to named living cinematographer's signature.
-- [`agents/policies/media/disclosure.md`](../../../agents/policies/media/disclosure.md) — every distributed live-action AI clip carries non-removable AI-generation disclosure.
+- [`agents/settings/policies/media/likeness.md`](../../../agents/settings/policies/media/likeness.md) — prompt names / visually identifies real person on camera.
+- [`agents/settings/policies/media/public-figures.md`](../../../agents/settings/policies/media/public-figures.md) — subject is recognised public figure.
+- [`agents/settings/policies/media/brand-impersonation.md`](../../../agents/settings/policies/media/brand-impersonation.md) — prompt copies journalism / broadcaster / regulated-industry visual identity.
+- [`agents/settings/policies/media/style.md`](../../../agents/settings/policies/media/style.md) — LIGHT / LENS anchored to named living cinematographer's signature.
+- [`agents/settings/policies/media/disclosure.md`](../../../agents/settings/policies/media/disclosure.md) — every distributed live-action AI clip carries non-removable AI-generation disclosure.
 
 Refuse-and-surface at directorial layer; live-action realism amplifies every downstream policy gap.
 

package/.agent-src/skills/vision-articulation/SKILL.md

@@ -6,6 +6,18 @@ tier: senior
 source: package
 domain: process
 context_spine: [org-stage, product, customer-segment]
+workspaces:
+  - founder
+packs:
+  - founder-strategy
+lifecycle: active
+trust:
+  level: core
+  confidence: high
+  human_review_required: false
+install:
+  default: true
+  removable: true
 ---
 
 # vision-articulation

package/.agent-src/skills/voc-extract/SKILL.md

@@ -7,8 +7,18 @@ source: package
 domain: product
 context_spine: [product]
 recommended_for_user_types: [gtm, creator]
-
-
+workspaces:
+  - product
+packs:
+  - product-discovery
+lifecycle: active
+trust:
+  level: professional
+  confidence: high
+  human_review_required: false
+install:
+  default: false
+  removable: true
 ---
 
 # voc-extract

package/.agent-src/skills/voice-and-tone-design/SKILL.md

@@ -7,8 +7,18 @@ source: package
 domain: product
 context_spine: [product, customer-segment]
 recommended_for_user_types: [creator, consultant, gtm]
-
-
+workspaces:
+  - gtm
+packs:
+  - gtm-marketing
+lifecycle: active
+trust:
+  level: professional
+  confidence: high
+  human_review_required: false
+install:
+  default: true
+  removable: true
 ---
 
 # voice-and-tone-design

package/.agent-src/templates/agent-settings.md

@@ -127,7 +127,7 @@ eloquent:
 
 # --- Chat history (crash recovery) ---
 #
-# Persistent JSONL log at agents/.agent-chat-history (project root, git-ignored).
+# Persistent JSONL log at agents/runtime/.agent-chat-history (git-ignored under /agents/runtime/).
 # Keeps a durable record of the conversation so a crashed or switched
 # agent session can be resumed. See scripts/chat_history.py for the API.
 #
@@ -152,7 +152,7 @@ chat_history:
 # (scripts/work_engine/). Hooks observe, validate, or persist around the
 # six CLI events (before_load, after_load, before_dispatch,
 # after_dispatch, before_save, after_save) and the dispatcher events
-# (before_step, after_step, on_halt). See agents/contexts/
+# (before_step, after_step, on_halt). See agents/settings/contexts/
 # work-engine-hooks.md for the full lifecycle and registration contract.
 #
 # Default-off by construction: when the `hooks:` block is absent the
@@ -182,7 +182,7 @@ hooks:
   # routing drift.
   directive_set_guard: true
 
-  # Chat-history hooks — populate agents/.agent-chat-history structurally from
+  # Chat-history hooks — populate agents/runtime/.agent-chat-history structurally from
   # the engine. Gated by BOTH this block AND the global
   # chat_history.enabled above; either off → no chat-history hook
   # registers. Keep both on for the HOOK path; flip either off to fall
@@ -450,12 +450,12 @@ the canonical narrative lives in
 | `project.improvement_pr_branch_prefix` | string | `improve/agent-` | Branch prefix for agent improvement PRs. |
 | `github.pr_reply_method` | `replies_endpoint`, `create_review_comment`, `auto` | `create_review_comment` | GitHub API method for replying to PR review comments. `auto` detects on first use. |
 | `eloquent.access_style` | `getters_setters`, `get_attribute`, `magic_properties` | `getters_setters` | How to access Eloquent model attributes. See `eloquent` skill for details. |
-| `chat_history.enabled` | `true`, `false` | `true` | Persist chat events to `agents/.agent-chat-history` (JSONL) for crash recovery. |
+| `chat_history.enabled` | `true`, `false` | `true` | Persist chat events to `agents/runtime/.agent-chat-history` (JSONL) for crash recovery. |
 | `chat_history.frequency` | `per_turn`, `per_phase`, `per_tool` | per profile | Logging granularity. Defaults: `minimal`→`per_turn`, `balanced`→`per_phase`, `full`→`per_tool`. |
 | `chat_history.max_size_kb` | integer | per profile | Max file size before overflow handling. Defaults: `minimal`→`128`, `balanced`→`256`, `full`→`512`. |
 | `chat_history.on_overflow` | `rotate`, `compress` | per profile | On overflow: `rotate` drops oldest entries; `compress` marks the file for summarization on the next turn. Defaults: `minimal`/`balanced`→`rotate`, `full`→`compress`. |
 | `chat_history.text_limits.{user,agent,tool,phase}` | integer (chars) | `user=0`, `agent=5000`, `tool=200`, `phase=200` | Per-entry-type text-length cap. `0` = verbatim, no slice. `N > 0` = collapse whitespace, slice to N chars, append `" … [+K chars]"` so the log self-reports truncation. Defaults match `DEFAULT_TEXT_LIMITS` in `scripts/chat_history.py`. |
-| `hooks.enabled` | `true`, `false` | `false` | Master switch for the work-engine hook layer. When `false` (default) the registry stays empty and golden replay is byte-stable. See [`agents/contexts/work-engine-hooks.md`](../../../agents/contexts/work-engine-hooks.md). |
+| `hooks.enabled` | `true`, `false` | `false` | Master switch for the work-engine hook layer. When `false` (default) the registry stays empty and golden replay is byte-stable. See [`agents/settings/contexts/work-engine-hooks.md`](../../../agents/settings/contexts/work-engine-hooks.md). |
 | `hooks.trace` | `true`, `false` | `false` | Emit per-event trace lines on stderr. Useful for debugging; off by default because it is noisy. |
 | `hooks.halt_surface_audit` | `true`, `false` | `true` | Defense-in-depth check that every halt surfaced by the dispatcher carries the expected shape. Cheap. |
 | `hooks.state_shape_validation` | `true`, `false` | `true` | Re-run the state schema validator on `AFTER_LOAD` and `BEFORE_SAVE`. Cheap, catches drift. |

package/.agent-src/templates/agents/agent-project-settings.example.yml

@@ -39,7 +39,7 @@ schema_version: 1
 # CI guard: a release bump of `package.json` must update this value
 # in lockstep — see scripts/check_template_pin_drift.py (road-to-
 # portable-runtime-and-update-check P3.3).
-agent_config_version: "2.25.0"
+agent_config_version: "3.0.0"
 
 # --- Project identity ---
 project:

package/.agent-src/templates/agents/memory/ownership.example.yml

@@ -61,7 +61,7 @@ entries:
     rotation_policy: >
       Infra changes require two platform-team reviews in business
       hours. After-hours hotfixes follow the break-glass policy in
-      `agents/contexts/deployment-order.md`.
+      `agents/settings/contexts/deployment-order.md`.
 
 # --- How to add an entry ---
 #

package/.agent-src/templates/agents/proposal.example.md

@@ -21,6 +21,18 @@ target_artifact: ""                # .agent-src/<type>/<name>.md (for upstream s
 author: ""                         # name or team slug
 created: 2026-01-01                # ISO date
 last_updated: 2026-01-01
+workspaces:
+  - agent-config-maintainer
+packs:
+  - meta
+lifecycle: active
+trust:
+  level: core
+  confidence: high
+  human_review_required: false
+install:
+  default: true
+  removable: false
 ---
 
 # Proposal: <short title>

package/.agent-src/templates/command.md

@@ -35,7 +35,7 @@ suggestion:
   - suggestion: REQUIRED — drives the in-host command suggester
     - eligible: true  → set trigger_description + trigger_context
     - eligible: false → set rationale (why never auto-suggested)
-    See agents/contexts/command-suggestion-eligibility.md for guidance.
+    See agents/settings/contexts/command-suggestion-eligibility.md for guidance.
   - council_depth: optional — only `deep` is accepted. **Omit the key
     for default depth** (`standard` is the implicit default and is
     rejected by the schema — every frontmatter byte counts). Set `deep`

package/.agent-src/templates/contexts/auth-model.md

@@ -2,7 +2,7 @@
 
 <!--
   Template shipped by event4u/agent-config.
-  Copy to `agents/contexts/auth-model.md` in the consumer project and
+  Copy to `agents/settings/contexts/auth-model.md` in the consumer project and
   fill in. This file is consumed by the Waves 2-3 security skills (see
   `road-to-defensive-agent.md`) — an agent asked to review auth logic
   starts by reading this.
@@ -53,7 +53,7 @@
 
 ## See also
 
-- `agents/contexts/tenant-boundaries.md` — tenancy scope, multi-tenant
+- `agents/settings/contexts/tenant-boundaries.md` — tenancy scope, multi-tenant
   rules that sit on top of the role model
 - `../../../docs/guidelines/agent-infra/*` — reviewer skills that read this
   file

package/.agent-src/templates/contexts/data-sensitivity.md

@@ -2,7 +2,7 @@
 
 <!--
   Template shipped by event4u/agent-config.
-  Copy to `agents/contexts/data-sensitivity.md` in the consumer project
+  Copy to `agents/settings/contexts/data-sensitivity.md` in the consumer project
   and fill in. This is the canonical reference for what data leaves the
   system (logs, error reports, analytics, third-party APIs) and what
   MUST be masked.
@@ -56,5 +56,5 @@
 
 ## See also
 
-- `agents/contexts/auth-model.md` — who can see what
-- `agents/contexts/observability.md` — how logs are routed
+- `agents/settings/contexts/auth-model.md` — who can see what
+- `agents/settings/contexts/observability.md` — how logs are routed

package/.agent-src/templates/contexts/deployment-order.md

@@ -2,7 +2,7 @@
 
 <!--
   Template shipped by event4u/agent-config.
-  Copy to `agents/contexts/deployment-order.md` in the consumer project
+  Copy to `agents/settings/contexts/deployment-order.md` in the consumer project
   and fill in. Required reading for any change involving schema
   migrations, feature flags, or multi-service deploys. Without this,
   "breaking change" reviews are guesswork.
@@ -68,5 +68,5 @@
 
 ## See also
 
-- `agents/contexts/observability.md` — what to watch during a deploy
+- `agents/settings/contexts/observability.md` — what to watch during a deploy
 - `.augment/skills/migration-safety/SKILL.md` <!-- if installed --> — reviewer

package/.agent-src/templates/contexts/observability.md

@@ -2,7 +2,7 @@
 
 <!--
   Template shipped by event4u/agent-config.
-  Copy to `agents/contexts/observability.md` in the consumer project and
+  Copy to `agents/settings/contexts/observability.md` in the consumer project and
   fill in. A reviewer reads this before approving changes to loggers,
   error handlers, metrics, or alert rules.
 
@@ -59,6 +59,6 @@
 
 ## See also
 
-- `agents/contexts/data-sensitivity.md` — what must NOT appear in logs
+- `agents/settings/contexts/data-sensitivity.md` — what must NOT appear in logs
   or error reports
-- `agents/contexts/deployment-order.md` — what to watch during a deploy
+- `agents/settings/contexts/deployment-order.md` — what to watch during a deploy

package/.agent-src/templates/contexts/tenant-boundaries.md

@@ -2,7 +2,7 @@
 
 <!--
   Template shipped by event4u/agent-config.
-  Copy to `agents/contexts/tenant-boundaries.md` in the consumer project
+  Copy to `agents/settings/contexts/tenant-boundaries.md` in the consumer project
   and fill in. Required reading for any review that touches data access,
   queries, or public endpoints in a multi-tenant system.
 
@@ -64,5 +64,5 @@
 
 ## See also
 
-- `agents/contexts/auth-model.md` — roles that sit on top of tenants
-- `agents/contexts/data-sensitivity.md` — tenant-scoped vs. shared data
+- `agents/settings/contexts/auth-model.md` — roles that sit on top of tenants
+- `agents/settings/contexts/data-sensitivity.md` — tenant-scoped vs. shared data

package/.agent-src/templates/contexts.md

@@ -1,6 +1,6 @@
 # Context Template
 
-Templates for context documents stored in `agents/contexts/` or `app/Modules/{Module}/agents/contexts/`.
+Templates for context documents stored in `agents/settings/contexts/` or `app/Modules/{Module}/agents/settings/contexts/`.
 
 A **context document** captures the architectural understanding of a codebase area — its structure,
 key classes, patterns, dependencies, and conventions. It's a snapshot of knowledge that helps

package/.agent-src/templates/hooks/pre-commit-frontmatter

@@ -0,0 +1,66 @@
+#!/usr/bin/env bash
+# Pre-commit hook: artefact frontmatter lint (event4u/agent-config, ADR-013)
+#
+# Aborts the commit when any staged .md file under
+# `.agent-src.uncompressed/` violates the per-artefact frontmatter
+# contract (workspaces / packs / lifecycle / trust / install). Exits
+# silently when no such files are staged — zero overhead on unrelated
+# commits.
+#
+# To run manually:
+#   ./agent-config hooks:install-frontmatter
+#   python3 scripts/lint_artefact_frontmatter.py
+#
+# To uninstall:
+#   rm .git/hooks/pre-commit
+set -e
+
+# Only act on commits that touch the source-of-truth artefact tree
+# (or the linter / vocabulary that govern it).
+staged="$(git diff --cached --name-only --diff-filter=ACMR 2>/dev/null || true)"
+case "$staged" in
+  *.agent-src.uncompressed/*.md*|*config/discovery/*.yml*|*scripts/lint_artefact_frontmatter.py*)
+    : ;;
+  *)
+    exit 0 ;;
+esac
+
+# Resolve the linter — prefer the consumer-shipped path, fall back to
+# the source-of-truth copy when run from inside the package itself.
+script=""
+for cand in \
+  ".augment/scripts/lint_artefact_frontmatter.py" \
+  ".agent-src/scripts/lint_artefact_frontmatter.py" \
+  "scripts/lint_artefact_frontmatter.py"; do
+  if [ -f "$cand" ]; then
+    script="$cand"
+    break
+  fi
+done
+
+if [ -z "$script" ]; then
+  echo "⚠️  pre-commit-frontmatter: lint_artefact_frontmatter.py not found." >&2
+  echo "    Run \`task install\` (or \`./agent-config install\`) and retry." >&2
+  echo "    Skipping check — letting commit through." >&2
+  exit 0
+fi
+
+if ! python3 "$script" --quiet >/dev/null 2>&1; then
+  echo "❌  Artefact frontmatter lint failed (ADR-013 contract violation)." >&2
+  echo "" >&2
+  echo "    Re-run for details:" >&2
+  echo "      python3 $script" >&2
+  echo "      task lint-artefact-frontmatter" >&2
+  echo "" >&2
+  echo "    Common fixes:" >&2
+  echo "      • Add missing workspaces/packs/lifecycle/trust/install keys." >&2
+  echo "      • Pick values from config/discovery/{workspaces,packs}.yml." >&2
+  echo "      • For scaffolds, add the path to" >&2
+  echo "        config/discovery/unassigned-artefacts.yml with a reason." >&2
+  echo "" >&2
+  echo "    To bypass once (NOT recommended):" >&2
+  echo "      git commit --no-verify" >&2
+  exit 1
+fi
+
+exit 0