@event4u/agent-config 2.26.0 → 3.1.0

package/scripts/ai-video/adapters/higgsfield.sh

@@ -9,7 +9,7 @@
 # Contract: scripts/ai-video/lib/adapter-contract.md
 # Provider: top-level <provider id="higgsfield" kind="video"> in
 # agents/.ai-video.xml. Preset → motion-choreographer profile mapping
-# is documented in agents/ai-video/prompts/motion-choreography.md
+# is documented in agents/reference/ai-video/prompts/motion-choreography.md
 # (Phase 6).
 #
 # Lifecycle: experimental — capability-discovery path conformant; no

package/scripts/ai-video/adapters/sora.sh

@@ -4,7 +4,7 @@
 # Capability: audio=native. Sora-class models produce muxed MP4 with
 # dialogue + ambient sound; we pass the audio block straight through.
 # Structural-prompt path informed by upstream `awesome-sora-prompts`
-# (attribution in agents/ai-video/prompts/cinematic-blueprint.md).
+# (attribution in agents/reference/ai-video/prompts/cinematic-blueprint.md).
 #
 # Contract: scripts/ai-video/lib/adapter-contract.md
 # Provider: top-level <provider id="sora" kind="video"> in

package/scripts/ai-video/test-pipeline.sh

@@ -1,6 +1,6 @@
 #!/usr/bin/env bash
 # test-pipeline.sh — offline smoke test for /video:* against
-# agents/ai-video/examples/banana-arc/. Dry-run only; no network.
+# agents/reference/ai-video/examples/banana-arc/. Dry-run only; no network.
 #
 # Asserts (per agents/roadmaps/ai-video-pipeline.md Phase 6 Step 3):
 #   1. parse-blueprint.sh output matches the committed expected.json
@@ -27,7 +27,7 @@ set -uo pipefail
 
 SCRIPT_DIR="$(cd "$(dirname "$0")" && pwd)"
 ROOT="$(cd "$SCRIPT_DIR/../.." && pwd)"
-PROJECT="$ROOT/agents/ai-video/examples/banana-arc"
+PROJECT="$ROOT/agents/reference/ai-video/examples/banana-arc"
 
 PASS=0
 FAIL=0

package/scripts/ai_council/_default_prices.py

@@ -1,15 +1,15 @@
 """Shipped baseline prices for the AI Council.
 
-This file is the bootstrap source for `agents/.agent-prices.md` when
-the runtime file is missing. It is also the network-fallback source for
-`scripts/update_prices.py` when the upstream feed (LiteLLM) is
-unreachable.
+This file is the bootstrap source for `agents/runtime/.agent-prices.md`
+when the runtime file is missing. It is also the network-fallback
+source for `scripts/update_prices.py` when the upstream feed (LiteLLM)
+is unreachable.
 
 Prices are USD per **1 000 000** tokens. Models are identified by the
 exact `model:` string the user puts into `.agent-settings.yml`.
 
 Numbers below are a hand-curated snapshot — they will drift. The
-runtime never reads them directly once `agents/.agent-prices.md`
+runtime never reads them directly once `agents/runtime/.agent-prices.md`
 exists; the weekly refresh and user edits are the live source of truth.
 """
 

package/scripts/ai_council/advisors.py

@@ -1,6 +1,6 @@
 """Thinking-style advisors — replace-mode call planning (Phase 6).
 
-When `agents/.ai-council.yml` enables an advisor (e.g. `contrarian`
+When `agents/settings/.ai-council.yml` enables an advisor (e.g. `contrarian`
 bound to `member: anthropic`), the orchestrator REPLACES the matching
 plain-member call with an advisor-persona call on the same provider.
 Same total call count as a plain run; bounded extra cost beyond the

package/scripts/ai_council/clients.py

@@ -324,7 +324,7 @@ class GeminiClient(ExternalAIClient):
         if api_key is None:
             raise RuntimeError(
                 "GeminiClient requires explicit api_key or injected client. "
-                "Use `api_key_ref: env:GEMINI_API_KEY` in agents/.ai-council.yml."
+                "Use `api_key_ref: env:GEMINI_API_KEY` in agents/settings/.ai-council.yml."
             )
         try:
             from google import genai  # type: ignore[import-not-found]
@@ -658,7 +658,7 @@ class CliClient(ExternalAIClient):
                 raise CliClientError(
                     f"{type(self).__name__}: binary {self.default_binary!r} "
                     f"not found on PATH. Install the provider CLI or set "
-                    f"`members.{self.name}.binary:` in agents/.ai-council.yml."
+                    f"`members.{self.name}.binary:` in agents/settings/.ai-council.yml."
                 )
             self.binary = resolved
 

package/scripts/ai_council/compile_corpus.py

@@ -2,9 +2,10 @@
 
 Step-10 — see ``agents/roadmaps/step-10-corpus-yaml-lockfile.md``.
 
-Markdown (`agents/low-impact-decisions.md`) stays the human-authored
-source-of-truth for PR review. This script reads it through the
-hardened :func:`scripts.ai_council.low_impact_corpus.parse_corpus_strict`
+Markdown (`agents/decisions/low-impact-decisions.md`) stays the
+human-authored source-of-truth for PR review. This script reads it
+through the hardened
+:func:`scripts.ai_council.low_impact_corpus.parse_corpus_strict`
 parser and writes a YAML lockfile that becomes the **runtime**
 source-of-truth. The pattern mirrors `.agent-src/` vs
 `.agent-src.uncompressed/`: human edits Markdown, `task consistency`
@@ -14,7 +15,7 @@ YAML schema (`schema_version: 1`)::
 
     schema_version: 1
     provenance:
-      source_path: agents/low-impact-decisions.md
+      source_path: agents/decisions/low-impact-decisions.md
       source_sha256: <hex>             # SHA-256 of the parsed Markdown bytes
       last_upstreamed: <40-hex sha>     # mirrored from the Markdown footer
     validated:
@@ -61,8 +62,8 @@ SCHEMA_VERSION = 1
 
 _LAST_UPSTREAMED_RE = re.compile(r"^last-upstreamed:\s*([0-9a-f]{40})\s*$", re.MULTILINE)
 
-_DEFAULT_SOURCE = Path("agents/low-impact-decisions.md")
-_DEFAULT_OUT = Path("agents/low-impact-decisions.lock.yaml")
+_DEFAULT_SOURCE = Path("agents/decisions/low-impact-decisions.md")
+_DEFAULT_OUT = Path("agents/decisions/low-impact-decisions.lock.yaml")
 
 
 def _entry_to_dict(entry: CorpusEntry) -> dict[str, Any]:
@@ -84,8 +85,8 @@ def _normalise_source_path(path: Path) -> str:
 
     Absolute paths inside the current working directory are stripped to
     their relative form so the committed lockfile carries
-    ``agents/low-impact-decisions.md`` regardless of how the compiler
-    was invoked (CLI default, absolute path from a test, etc.).
+    ``agents/decisions/low-impact-decisions.md`` regardless of how the
+    compiler was invoked (CLI default, absolute path from a test, etc.).
     """
     try:
         rel = path.resolve().relative_to(Path.cwd().resolve())

package/scripts/ai_council/config.py

@@ -1,6 +1,6 @@
 """Council configuration loader — single source of truth.
 
-Reads ``agents/.ai-council.yml`` per the contract in
+Reads ``agents/settings/.ai-council.yml`` per the contract in
 ``docs/contracts/ai-council-config.md``. Replaces the fragmented
 ``.agent-settings.yml`` ``ai_council`` block (Phase 0 migration).
 
@@ -49,7 +49,7 @@ _RAW_KEY_PREFIXES = ("sk-", "sk-ant-", "ya29.", "AIza", "xai-", "pplx-", "gsk_")
 
 
 class CouncilConfigError(RuntimeError):
-    """Raised when ``agents/.ai-council.yml`` violates the schema."""
+    """Raised when ``agents/settings/.ai-council.yml`` violates the schema."""
 
 
 @dataclass(frozen=True)
@@ -380,7 +380,7 @@ class LowImpactConfig:
     for shadow-mode logging (Phase 10). At ``0.0`` shadow is off; at
     ``1.0`` every solo decision is also dispatched to the full
     council and the verdicts are compared in
-    ``agents/council-shadow-log.jsonl``. Must be in ``[0.0, 1.0]``.
+    ``agents/runtime/council/shadow-log.jsonl``. Must be in ``[0.0, 1.0]``.
 
     ``solo_confidence_floor`` is the auto-escalation threshold for
     solo-member responses (step-9 P13). When the dispatcher extracts

package/scripts/ai_council/events_log.py

@@ -1,7 +1,7 @@
 """Persistent council events log (step-8 phase 3).
 
 Single-function module that appends one JSON line per council event to
-``<project_root>/agents/council-events.log``. Schema v1 carries the
+``<project_root>/agents/runtime/council/events.log``. Schema v1 carries the
 minimum needed to answer the "why did the council skip / block this?"
 question at retro time without leaking prompt content.
 
@@ -9,7 +9,7 @@ Privacy floor:
     ``original_ask`` is never written verbatim — the caller passes the
     raw string, and :func:`append_event` writes ``sha256(value)[:12]``
     as ``original_ask_hash``. Mirrors the privacy floor in
-    ``agents/low-impact-decisions.md``.
+    ``agents/decisions/low-impact-decisions.md``.
 
 Kill-switch:
     ``AGENT_CONFIG_NO_EVENTS_LOG=1`` short-circuits :func:`append_event`
@@ -47,7 +47,11 @@ _KILL_SWITCH_ENV = "AGENT_CONFIG_NO_EVENTS_LOG"
 #: above ``scripts/ai_council/``). Callers can override via
 #: ``log_path=`` for tests.
 _DEFAULT_LOG_PATH = (
-    Path(__file__).resolve().parents[2] / "agents" / "council-events.log"
+    Path(__file__).resolve().parents[2]
+    / "agents"
+    / "runtime"
+    / "council"
+    / "events.log"
 )
 
 
@@ -83,7 +87,7 @@ def append_event(
             pass through verbatim — callers should not abuse this for
             free-form payloads (privacy floor).
         log_path: Override for tests. Defaults to
-            ``<project_root>/agents/council-events.log``.
+            ``<project_root>/agents/runtime/council/events.log``.
 
     Returns:
         ``True`` when a line was written; ``False`` when the kill-switch

package/scripts/ai_council/low_impact_corpus.py

@@ -1,4 +1,4 @@
-"""Hardened parser for ``agents/low-impact-decisions.md`` (step-9 P4).
+"""Hardened parser for ``agents/decisions/low-impact-decisions.md`` (step-9 P4).
 
 Replaces the silent-skip behaviour of the inline regex in
 ``necessity.load_validated_phrases`` with a typed-error contract.

package/scripts/ai_council/low_impact_intake.py

@@ -1,4 +1,4 @@
-"""Intake trigger + dedup for `agents/low-impact-decisions.md` (Phase 12).
+"""Intake trigger + dedup for `agents/decisions/low-impact-decisions.md` (Phase 12).
 
 User signals "leichte Frage" / "low-impact question" / equivalents
 (see :data:`TRIGGER_PHRASES`); the host agent collects the

package/scripts/ai_council/one_off_archive/2026-05/_one_off_budget_v2_audit.py

@@ -2,7 +2,7 @@
 
 Phase 4 of road-to-context-layer-maturity selected two 4d-trim paths
 (`direct-answers`, `no-cheap-questions`) from a fixed option set
-documented in agents/contexts/budget-v2-matrix.md and shipped them.
+documented in agents/settings/contexts/budget-v2-matrix.md and shipped them.
 Exit-gate actuals (run 2026-05-04): total 44,928 / 49,000 chars
 (91.7 %, 4,072 chars headroom) — ≥ 4,000 headroom goal hit. Top-3
 sum unchanged. Safety-floor rules untouched.
@@ -39,7 +39,7 @@ from scripts.ai_council.session import SessionManifest, save as save_session
 REPO_ROOT = Path(__file__).resolve().parents[4]
 ARTEFACTS = [
     REPO_ROOT / "docs/contracts/load-context-budget-model.md",
-    REPO_ROOT / "agents/contexts/budget-v2-matrix.md",
+    REPO_ROOT / "agents/settings/contexts/budget-v2-matrix.md",
     REPO_ROOT / ".agent-src.uncompressed/rules/direct-answers.md",
     REPO_ROOT / ".agent-src.uncompressed/rules/no-cheap-questions.md",
 ]

package/scripts/ai_council/one_off_archive/2026-05/_one_off_structural_optimization.py

@@ -1,7 +1,7 @@
 """One-off council run for road-to-structural-optimization.md.
 
 Invokes the council in `design` mode with Anthropic + OpenAI members.
-Saves the session under agents/contexts/ai-council-sessions/.
+Saves the session under agents/settings/contexts/ai-council-sessions/.
 
 Invocation:
     .venv/bin/python -m scripts.ai_council._one_off_structural_optimization

package/scripts/ai_council/one_off_archive/2026-05/_one_off_tier_retrofit.py

@@ -1,7 +1,7 @@
 #!/usr/bin/env python3
 """One-off — tier-bulk-retrofit (Phase 2.1 + 2.2 of road-to-feedback-consolidation).
 
-Parses agents/contexts/rule-trigger-matrix.md, emits tmp/tier-classification.md,
+Parses agents/settings/contexts/rule-trigger-matrix.md, emits tmp/tier-classification.md,
 and inserts a `tier:` frontmatter key into every rule under
 .agent-src.uncompressed/rules/. Idempotent — re-runs are a no-op when a rule
 already declares the same tier value.
@@ -62,11 +62,11 @@ def write_spreadsheet(classifications: dict[str, tuple[str, str]]) -> None:
     lines = [
         "# Tier classification — Phase 2.1 of road-to-feedback-consolidation",
         "",
-        "Source: `agents/contexts/rule-trigger-matrix.md` (manual classifications",
+        "Source: `agents/settings/contexts/rule-trigger-matrix.md` (manual classifications",
         "in `scripts/build_rule_trigger_matrix.py`'s `CLASSIFICATION` table).",
         "Generated by `scripts/_one_off/2026-05/_one_off_tier-retrofit.py`.",
         "",
-        "Tier rubric: see `agents/contexts/hardening-pattern.md`.",
+        "Tier rubric: see `agents/settings/contexts/hardening-pattern.md`.",
         "",
         f"Total: {len(classifications)} rules.",
         "",

package/scripts/ai_council/pricing.py

@@ -1,19 +1,19 @@
 """Runtime pricing layer for the AI Council.
 
-Reads `agents/.agent-prices.md` from the repo root, parses YAML
+Reads `agents/runtime/.agent-prices.md` from the repo root, parses YAML
 frontmatter and the Markdown table, and exposes:
 
-- `load_prices()`           — parse `agents/.agent-prices.md` (bootstraps if missing)
+- `load_prices()`           — parse `agents/runtime/.agent-prices.md` (bootstraps if missing)
 - `estimate_input_tokens()` — chars / 4 heuristic
 - `estimate_cost()`         — input + output USD for a single member
 - `is_stale()`              — True if `last_updated` is older than the
                               most recent UTC Monday 00:00
-- `bootstrap_from_defaults()` — write a fresh `agents/.agent-prices.md`
+- `bootstrap_from_defaults()` — write a fresh `agents/runtime/.agent-prices.md`
                               from `_default_prices.DEFAULT_PRICES`
 
 The orchestrator never reads `_default_prices` directly. It always
 goes through `load_prices()` so user edits to
-`agents/.agent-prices.md` win.
+`agents/runtime/.agent-prices.md` win.
 """
 
 from __future__ import annotations
@@ -25,7 +25,7 @@ from pathlib import Path
 from scripts.ai_council._default_prices import DEFAULT_PRICES, LAST_UPDATED, as_rows
 
 REPO_ROOT = Path(__file__).resolve().parents[2]
-PRICES_FILE = REPO_ROOT / "agents" / ".agent-prices.md"
+PRICES_FILE = REPO_ROOT / "agents" / "runtime" / ".agent-prices.md"
 
 # Heuristic: 1 token ≈ 4 characters of English text. OpenAI's tiktoken
 # is more accurate but pulls in a heavy dep we explicitly avoid.
@@ -116,14 +116,15 @@ def is_stale(table: PriceTable, now: _dt.datetime | None = None) -> bool:
 
 
 def load_prices(path: Path = PRICES_FILE) -> PriceTable:
-    """Parse `agents/.agent-prices.md`; bootstrap from defaults if missing."""
+    """Parse `agents/runtime/.agent-prices.md`; bootstrap from defaults if missing."""
     if not path.exists():
         bootstrap_from_defaults(path)
     return _parse(path.read_text(encoding="utf-8"))
 
 
 def bootstrap_from_defaults(path: Path = PRICES_FILE) -> None:
-    """Write a fresh `agents/.agent-prices.md` from `_default_prices.py`."""
+    """Write a fresh `agents/runtime/.agent-prices.md` from `_default_prices.py`."""
+    path.parent.mkdir(parents=True, exist_ok=True)
     rows = as_rows()
     body = _render_markdown(LAST_UPDATED, "shipped-default", rows)
     path.write_text(body, encoding="utf-8")

package/scripts/ai_council/probation_gate.py

@@ -1,4 +1,4 @@
-"""Probation promote-and-prune for ``agents/low-impact-decisions.md``.
+"""Probation promote-and-prune for ``agents/decisions/low-impact-decisions.md``.
 
 Phase 12 § Step 3. Runs at council startup AND after every intake
 append. Idempotent — a second run on an unchanged corpus is a no-op.

package/scripts/ai_council/redact_low_impact_entry.py

@@ -1,4 +1,4 @@
-"""Privacy floor for `agents/low-impact-decisions.md` (Phase 12).
+"""Privacy floor for `agents/decisions/low-impact-decisions.md` (Phase 12).
 
 Non-bypassable redactor invoked on intake (write-side) AND on
 upstream (`/learn-low-impact`, leave-the-repo side). Both gates call

package/scripts/ai_council/session.py

@@ -1,7 +1,7 @@
 """Session persistence for council consultations (D2).
 
 Every `/council` call that completes (success or partial) writes an
-audit artefact under `agents/council-sessions/<UTC-timestamp>/`:
+audit artefact under `agents/runtime/council/sessions/<UTC-timestamp>/`:
 
 - `manifest.json` — input mode, members, token + USD totals, original
   ask, neutrality preamble fingerprint.
@@ -15,7 +15,7 @@ Hard rules:
   swallowed; the council is text-only and the report is the contract.
 - Never writes secrets. The bundle has already been redacted by
   `bundler.py` before the orchestrator receives it.
-- Never writes outside `agents/council-sessions/`. Path traversal in
+- Never writes outside `agents/runtime/council/sessions/`. Path traversal in
   the timestamp is impossible (we generate it from `datetime.utcnow`).
 """
 
@@ -34,9 +34,9 @@ from scripts.ai_council.clients import CouncilResponse
 from scripts.ai_council.orchestrator import render
 
 REPO_ROOT = Path(__file__).resolve().parents[2]
-SESSIONS_DIR = REPO_ROOT / "agents" / "council-sessions"
-QUESTIONS_DIR = REPO_ROOT / "agents" / "council-questions"
-RESPONSES_DIR = REPO_ROOT / "agents" / "council-responses"
+SESSIONS_DIR = REPO_ROOT / "agents" / "runtime" / "council" / "sessions"
+QUESTIONS_DIR = REPO_ROOT / "agents" / "runtime" / "council" / "questions"
+RESPONSES_DIR = REPO_ROOT / "agents" / "runtime" / "council" / "responses"
 SETTINGS_FILE = REPO_ROOT / ".agent-settings.yml"
 
 # Default retention for all council artefacts (questions, responses,
@@ -190,9 +190,9 @@ def prune_old_artifacts(
 ) -> list[Path]:
     """Delete files and timestamp-less directories older than `retention_days`.
 
-    mtime-based — used for `agents/council-questions/`,
-    `agents/council-responses/`, and root-level files in
-    `agents/council-sessions/` that don't match the
+    mtime-based — used for `agents/runtime/council/questions/`,
+    `agents/runtime/council/responses/`, and root-level files in
+    `agents/runtime/council/sessions/` that don't match the
     timestamp-subdir convention handled by `prune_old_sessions`.
 
     Walks the directory non-recursively. For files: deletes when
@@ -255,9 +255,9 @@ def prune_all_council_artifacts(
     """
     root = repo_root or REPO_ROOT
     days = _load_retention_days() if retention_days is None else retention_days
-    sessions = root / "agents" / "council-sessions"
-    questions = root / "agents" / "council-questions"
-    responses = root / "agents" / "council-responses"
+    sessions = root / "agents" / "runtime" / "council" / "sessions"
+    questions = root / "agents" / "runtime" / "council" / "questions"
+    responses = root / "agents" / "runtime" / "council" / "responses"
     return {
         "sessions": (
             prune_old_sessions(sessions, days, now=now)
@@ -285,8 +285,8 @@ def save(
 
     `retention_days` controls auto-pruning of older council artefacts
     after the new one is written — sibling sessions plus, when
-    `sessions_dir` is not overridden, files in `council-questions/`
-    and `council-responses/`. `None` reads the value
+    `sessions_dir` is not overridden, files in `runtime/council/questions/`
+    and `runtime/council/responses/`. `None` reads the value
     from `.agent-settings.yml` (`ai_council.session_retention_days`,
     default `7`); `0` disables pruning.
 

package/scripts/ai_council/shadow_dispatch.py

@@ -3,7 +3,7 @@
 When ``low_impact.dispatch: single`` is active, a Bernoulli-sampled subset
 of decisions is shadowed through the full council so disagreement between
 the solo verdict and the council verdict can be measured. The shadow log
-lives at ``agents/council-shadow-log.jsonl`` and is subject to the same
+lives at ``agents/runtime/council/shadow-log.jsonl`` and is subject to the same
 privacy floor as the low-impact corpus: redactor-refused entries are
 dropped, not softened.
 
@@ -23,7 +23,7 @@ from typing import Iterable
 
 from scripts.ai_council.bundler import redact
 
-SHADOW_LOG_PATH = Path("agents/council-shadow-log.jsonl")
+SHADOW_LOG_PATH = Path("agents/runtime/council/shadow-log.jsonl")
 
 SLO_THRESHOLD_WARN = 0.05
 SLO_THRESHOLD_BREACH = 0.08

package/scripts/annotate_discovery.py

@@ -0,0 +1,149 @@
+#!/usr/bin/env python3
+"""R3 Phase 4 mass-annotator — discovery frontmatter helper.
+
+Walks a list of artefacts in `.agent-src.uncompressed/` and:
+  1. Inserts the 5 ADR-013 frontmatter keys (workspaces, packs, lifecycle,
+     trust, install) before the closing `---`, deterministically.
+  2. Mirrors the new keys into the matching `.agent-src/` counterpart so
+     the compressed projection stays consistent (body preserved).
+  3. Refreshes `.compression-hashes.json` for each touched source path so
+     `task check-compression` stays green.
+
+Idempotent: re-runs leave already-annotated files untouched.
+
+Mapping table (`PACK_MAP`) is the council-locked authority. See
+`agents/runtime/council/responses/r3-phase-4-7-execution.md`.
+"""
+from __future__ import annotations
+
+import argparse
+import hashlib
+import json
+import re
+import sys
+from pathlib import Path
+
+ROOT = Path(__file__).resolve().parents[1]
+SRC = ROOT / ".agent-src.uncompressed"
+DST = ROOT / ".agent-src"
+HASH_FILE = ROOT / ".compression-hashes.json"
+
+# Pack → (workspace_id, trust_level, default_install, removable, lifecycle).
+PACK_DEFAULTS: dict[str, tuple[str, str, bool, bool, str]] = {
+    "engineering-base":  ("engineering",              "core",         True,  False, "active"),
+    "php":               ("engineering",              "professional", False, True,  "active"),
+    "laravel":           ("engineering",              "professional", False, True,  "active"),
+    "symfony":           ("engineering",              "professional", False, True,  "active"),
+    "javascript":        ("engineering",              "professional", False, True,  "active"),
+    "typescript":        ("engineering",              "professional", False, True,  "active"),
+    "react":             ("engineering",              "professional", False, True,  "active"),
+    "nextjs":            ("engineering",              "professional", False, True,  "active"),
+    "python":            ("engineering",              "professional", False, True,  "active"),
+    "product-basic":     ("product",                  "professional", True,  True,  "active"),
+    "product-discovery": ("product",                  "professional", False, True,  "active"),
+    "finance-basic":     ("finance",                  "professional", True,  True,  "active"),
+    "finance-advanced":  ("finance",                  "core",         False, True,  "active"),
+    "gtm-sales":         ("gtm",                      "professional", True,  True,  "active"),
+    "gtm-marketing":     ("gtm",                      "professional", True,  True,  "active"),
+    "ops-people":        ("ops",                      "professional", True,  True,  "active"),
+    "founder-strategy":  ("founder",                  "core",         True,  True,  "active"),
+    "small-business":    ("small-business",           "professional", True,  True,  "active"),
+    "construction":      ("construction",             "professional", True,  True,  "active"),
+    "ai-video":          ("small-business",           "experimental", False, True,  "experimental"),
+    "meta":              ("agent-config-maintainer",  "core",         True,  False, "active"),
+}
+
+_FM_RE = re.compile(r"^(---\n)(.*?)(\n---\n)", re.DOTALL)
+# Detect any of the 5 new keys at top-level to make the writer idempotent.
+_HAS_NEW_KEYS_RE = re.compile(r"^(workspaces|packs|lifecycle|trust|install):", re.MULTILINE)
+
+
+def _render_block(pack: str) -> str:
+    ws, level, default, removable, lifecycle = PACK_DEFAULTS[pack]
+    return (
+        f"workspaces:\n"
+        f"  - {ws}\n"
+        f"packs:\n"
+        f"  - {pack}\n"
+        f"lifecycle: {lifecycle}\n"
+        f"trust:\n"
+        f"  level: {level}\n"
+        f"  confidence: high\n"
+        f"  human_review_required: false\n"
+        f"install:\n"
+        f"  default: {'true' if default else 'false'}\n"
+        f"  removable: {'true' if removable else 'false'}"
+    )
+
+
+def _annotate(path: Path, pack: str) -> bool:
+    text = path.read_text(encoding="utf-8")
+    m = _FM_RE.match(text)
+    if not m:
+        print(f"  skip (no frontmatter): {path.relative_to(ROOT)}", file=sys.stderr)
+        return False
+    body_fm = m.group(2)
+    if _HAS_NEW_KEYS_RE.search(body_fm):
+        return False  # idempotent
+    block = _render_block(pack)
+    new_fm = body_fm.rstrip() + "\n" + block
+    new_text = m.group(1) + new_fm + m.group(3) + text[m.end():]
+    path.write_text(new_text, encoding="utf-8")
+    return True
+
+
+def _mirror_to_compressed(rel: Path, pack: str) -> None:
+    src = SRC / rel
+    dst = DST / rel
+    if not dst.exists():
+        return  # no compressed counterpart yet (e.g. new file)
+    text = dst.read_text(encoding="utf-8")
+    m = _FM_RE.match(text)
+    if not m:
+        return
+    body_fm = m.group(2)
+    if _HAS_NEW_KEYS_RE.search(body_fm):
+        return
+    block = _render_block(pack)
+    new_fm = body_fm.rstrip() + "\n" + block
+    new_text = m.group(1) + new_fm + m.group(3) + text[m.end():]
+    dst.write_text(new_text, encoding="utf-8")
+
+
+def _refresh_hash(rel: Path, hashes: dict) -> None:
+    src = SRC / rel
+    key = rel.as_posix()
+    hashes[key] = hashlib.sha256(src.read_bytes()).hexdigest()
+
+
+def main(argv: list[str] | None = None) -> int:
+    ap = argparse.ArgumentParser(description=__doc__.splitlines()[0])
+    ap.add_argument("--pack", required=True, choices=sorted(PACK_DEFAULTS))
+    ap.add_argument("paths", nargs="+", help="repo-relative paths under .agent-src.uncompressed/")
+    args = ap.parse_args(argv)
+
+    hashes: dict = json.loads(HASH_FILE.read_text()) if HASH_FILE.exists() else {}
+    changed = 0
+    for raw in args.paths:
+        p = Path(raw)
+        if p.is_absolute():
+            p = p.relative_to(ROOT)
+        if not p.is_relative_to(Path(".agent-src.uncompressed")):
+            print(f"  skip (not under .agent-src.uncompressed/): {p}", file=sys.stderr)
+            continue
+        rel = p.relative_to(".agent-src.uncompressed")
+        src_file = SRC / rel
+        if not src_file.is_file():
+            print(f"  skip (missing): {p}", file=sys.stderr)
+            continue
+        if _annotate(src_file, args.pack):
+            changed += 1
+        _mirror_to_compressed(rel, args.pack)
+        _refresh_hash(rel, hashes)
+    HASH_FILE.write_text(json.dumps(hashes, indent=2, sort_keys=True) + "\n", encoding="utf-8")
+    print(f"annotated {changed} files with pack={args.pack}")
+    return 0
+
+
+if __name__ == "__main__":
+    sys.exit(main())

package/scripts/audit_adr_coverage.py

@@ -27,7 +27,7 @@ AREAS: dict[str, dict[str, str]] = {
                 "scope":    "Budget ladder, hard-stop hook, cost reporting and dashboards."},
     "caveman": {"contract": "compression-default-kill-criterion.md",
                 "scope":    "Caveman-speak compression, decompression, reversibility guards."},
-    "schema":  {"contract": "agents/docs/frontmatter-contract.md",
+    "schema":  {"contract": "agents/reference/docs/frontmatter-contract.md",
                 "scope":    "Frontmatter schemas, v2 rigor, lint behaviour for skills / rules / commands."},
     "router":  {"contract": "rule-router.md",
                 "scope":    "router.json shape, tier semantics, dispatch precedence."},

package/scripts/audit_auto_rules.py

@@ -6,8 +6,8 @@ Walk `.agent-src.uncompressed/rules/*.md`, collect per-rule frontmatter
 (`description`, `triggers`, `routes_to`, `tier`), measure body and
 registry-stub costs, and emit:
 
-- `agents/reports/auto-rules-audit.json` — deterministic, machine-readable.
-- `agents/reports/auto-rules-audit.md`   — ranked summary for review.
+- `agents/runtime/reports/auto-rules-audit.json` — deterministic, machine-readable.
+- `agents/runtime/reports/auto-rules-audit.md`   — ranked summary for review.
 
 The registry-stub cost mirrors `scripts/measure_augment_budget.py`'s
 accounting model: only the stub line is injected into the Augment

package/scripts/audit_cloud_compatibility.py

@@ -208,7 +208,7 @@ def scan() -> list[dict]:
 
 
 # step-9 P11 · U3 — Iron-Law bypass scan. Any Python module that loads
-# `agents/.ai-council.yml` directly (yaml.safe_load / open + parse) instead
+# `agents/settings/.ai-council.yml` directly (yaml.safe_load / open + parse) instead
 # of going through `scripts.ai_council.config.load_council_config` skips the
 # `_reject_top_level_locked_dispatch` gate and is a potential Iron-Law
 # bypass. The scan is intentionally over-broad — false positives are

package/scripts/audit_command_surface.py

@@ -8,8 +8,8 @@ signal from git history (commands not touched in 90+ days are
 candidates for retirement).
 
 Output:
-  - ``agents/reports/command-surface.json`` (machine-readable)
-  - ``agents/reports/command-surface.md`` (human-readable)
+  - ``agents/runtime/reports/command-surface.json`` (machine-readable)
+  - ``agents/runtime/reports/command-surface.md`` (human-readable)
 
 Context: ``agents/roadmaps/step-2-feedback-followup.md`` Phase 1 —
 GPT's PR-#148 "108 commands" cognitive-load warning needs empirical