@event4u/agent-config 6.1.0 → 7.0.1

package/.claude-plugin/marketplace.json

@@ -5,8 +5,8 @@
     "email": "dev@event4u.app"
   },
   "metadata": {
-    "description": "Shared agent configuration \u2014 skills for AI coding tools (Claude Code, Augment, Cursor, Cline, Windsurf, Gemini CLI).",
-    "version": "6.1.0",
+    "description": "Shared agent configuration — skills for AI coding tools (Claude Code, Augment, Cursor, Cline, Windsurf, Gemini CLI).",
+    "version": "7.0.1",
     "keywords": [
       "agent-config",
       "skills",
@@ -26,7 +26,7 @@
   "plugins": [
     {
       "name": "agent-config",
-      "description": "Full skill catalog \u2014 writing, reviewing, managing, and analyzing agent content, plus stack-specific skills for Laravel, PHP, Docker, AWS, Playwright, and more.",
+      "description": "Full skill catalog — writing, reviewing, managing, and analyzing agent content, plus stack-specific skills for Laravel, PHP, Docker, AWS, Playwright, and more.",
       "keywords": [
         "skills",
         "rules",
@@ -56,7 +56,16 @@
         "./.claude-plugin/skills/analytics",
         "./.claude-plugin/skills/analytics-prune",
         "./.claude-plugin/skills/analytics-show",
+        "./.claude-plugin/skills/analyze",
+        "./.claude-plugin/skills/analyze-decision",
+        "./.claude-plugin/skills/analyze-incident",
+        "./.claude-plugin/skills/analyze-near-miss",
+        "./.claude-plugin/skills/analyze-postmortem",
+        "./.claude-plugin/skills/analyze-premortem",
         "./.claude-plugin/skills/analyze-reference-repo",
+        "./.claude-plugin/skills/brand-review",
+        "./.claude-plugin/skills/brand-tokens",
+        "./.claude-plugin/skills/brand-voice",
         "./.claude-plugin/skills/bug-fix",
         "./.claude-plugin/skills/bug-investigate",
         "./.claude-plugin/skills/challenge-me",
@@ -124,6 +133,7 @@
         "./.claude-plugin/skills/memory-mine-session",
         "./.claude-plugin/skills/memory-promote",
         "./.claude-plugin/skills/memory-propose",
+        "./.claude-plugin/skills/mission-upgrade",
         "./.claude-plugin/skills/mode",
         "./.claude-plugin/skills/module",
         "./.claude-plugin/skills/module-create",
@@ -159,6 +169,7 @@
         "./.claude-plugin/skills/roadmap",
         "./.claude-plugin/skills/roadmap-ai-council",
         "./.claude-plugin/skills/roadmap-create",
+        "./.claude-plugin/skills/roadmap-materialize",
         "./.claude-plugin/skills/roadmap-process-full",
         "./.claude-plugin/skills/roadmap-process-phase",
         "./.claude-plugin/skills/roadmap-process-step",
@@ -203,6 +214,7 @@
         "./dist/agent-src/skills/authz-review",
         "./dist/agent-src/skills/aws-infrastructure",
         "./dist/agent-src/skills/blade-ui",
+        "./dist/agent-src/skills/blameless-post-mortem",
         "./dist/agent-src/skills/blast-radius-analyzer",
         "./dist/agent-src/skills/bug-analyzer",
         "./dist/agent-src/skills/build-buy-partner",
@@ -236,6 +248,7 @@
         "./dist/agent-src/skills/dcf-modeling",
         "./dist/agent-src/skills/deal-qualification-meddic",
         "./dist/agent-src/skills/decision-record",
+        "./dist/agent-src/skills/decision-review",
         "./dist/agent-src/skills/deep-reading-analyst",
         "./dist/agent-src/skills/defense-in-depth",
         "./dist/agent-src/skills/dependency-upgrade",
@@ -250,6 +263,7 @@
         "./dist/agent-src/skills/docker",
         "./dist/agent-src/skills/editorial-calendar",
         "./dist/agent-src/skills/eloquent",
+        "./dist/agent-src/skills/emit-tickets",
         "./dist/agent-src/skills/error-handling-patterns",
         "./dist/agent-src/skills/estimate-ticket",
         "./dist/agent-src/skills/existing-ui-audit",
@@ -272,6 +286,18 @@
         "./dist/agent-src/skills/hiring-loop-design",
         "./dist/agent-src/skills/image-analyser",
         "./dist/agent-src/skills/image-creator",
+        "./dist/agent-src/skills/brand",
+        "./dist/agent-src/skills/brand-asset-generation",
+        "./dist/agent-src/skills/brand-audit",
+        "./dist/agent-src/skills/brand-identity",
+        "./dist/agent-src/skills/brand-strategy",
+        "./dist/agent-src/skills/brand-to-tokens",
+        "./dist/agent-src/skills/logo-generation",
+        "./dist/agent-src/skills/image-editing",
+        "./dist/agent-src/skills/image-generation",
+        "./dist/agent-src/skills/typography-system",
+        "./dist/agent-src/skills/iconography",
+        "./dist/agent-src/skills/image-provider-routing",
         "./dist/agent-src/skills/incident-commander",
         "./dist/agent-src/skills/jira-integration",
         "./dist/agent-src/skills/jobs-events",
@@ -336,6 +362,7 @@
         "./dist/agent-src/skills/po-discovery",
         "./dist/agent-src/skills/positioning-strategy",
         "./dist/agent-src/skills/prediction-pool-optimizer",
+        "./dist/agent-src/skills/premortem",
         "./dist/agent-src/skills/privacy-review",
         "./dist/agent-src/skills/project-analysis-core",
         "./dist/agent-src/skills/project-analysis-hypothesis-driven",
@@ -347,6 +374,7 @@
         "./dist/agent-src/skills/project-analysis-zend-laminas",
         "./dist/agent-src/skills/project-analyzer",
         "./dist/agent-src/skills/project-docs",
+        "./dist/agent-src/skills/prompt-engineering-image",
         "./dist/agent-src/skills/prompt-engineering-patterns",
         "./dist/agent-src/skills/prompt-optimizer",
         "./dist/agent-src/skills/prompt-validator",
@@ -369,6 +397,7 @@
         "./dist/agent-src/skills/risk-officer",
         "./dist/agent-src/skills/roadmap-management",
         "./dist/agent-src/skills/roadmap-writing",
+        "./dist/agent-src/skills/root-cause-frameworks",
         "./dist/agent-src/skills/rtk-output-filtering",
         "./dist/agent-src/skills/rule-refactor",
         "./dist/agent-src/skills/rule-writing",
@@ -386,6 +415,8 @@
         "./dist/agent-src/skills/skill-reviewer",
         "./dist/agent-src/skills/skill-writing",
         "./dist/agent-src/skills/song-to-script",
+        "./dist/agent-src/skills/source-discovery",
+        "./dist/agent-src/skills/standards-from-config",
         "./dist/agent-src/skills/sql-writing",
         "./dist/agent-src/skills/stakeholder-tradeoff",
         "./dist/agent-src/skills/subagent-orchestration",
@@ -410,6 +441,7 @@
         "./dist/agent-src/skills/using-git-worktrees",
         "./dist/agent-src/skills/validate-feature-fit",
         "./dist/agent-src/skills/verify-completion-evidence",
+        "./dist/agent-src/skills/verify-repair-loop",
         "./dist/agent-src/skills/video-director",
         "./dist/agent-src/skills/vision-articulation",
         "./dist/agent-src/skills/voc-extract",

package/AGENTS.md

@@ -26,12 +26,13 @@ task ci                # full pipeline — green before PR
 - **Personas** — 11 review lenses (6 + 5): [`docs/personas.md`](docs/personas.md).
 - **Discovery** — workspaces / packs manifest: [`ADR-013`](docs/decisions/ADR-013-discovery-frontmatter-contract.md) + [`customization`](docs/customization.md#workspaces--packs-discovery).
 - **Root layout** — `src/` = source; root keeps workspace tooling per [`ADR-050`](docs/decisions/ADR-050-workspace-vs-package-root-boundary.md); toggle: `agents/.agent-tools.yml`.
+- **Security** — disclosure policy [`SECURITY.md`](SECURITY.md); attack surface [`docs/threat-model.md`](docs/threat-model.md).
 
-## Emergency triage — read this when nothing else is reachable
+## Emergency triage — when nothing else is reachable
 
-1. **What is this repo?** — `event4u/agent-config`, a governed skill / rule / command suite for AI coding tools (no app runtime).
-2. **What language?** — All `.md` is English; agents mirror the user's language at runtime.
-3. **Where do I edit?** — `src/` only. Never the generated trees.
-4. **Lint / test / sync entry point?** — `task ci` (full pipeline). Subsets: `task sync`, `task generate-tools`, `task lint-skills`, `task test`.
-5. **Where do the always-active rules live?** — `dist/agent-src/rules/` (kernel = 9 Iron-Law rules; tier-1 / 2 via `dist/router.json`).
-6. **CI checks?** — `task ci:required-checks` previews per [`branch-protection-policy.md`](docs/contracts/branch-protection-policy.md); merge floor [`ci-green-floor.md`](docs/contracts/ci-green-floor.md); release [`release-pr-gating.md`](docs/contracts/release-pr-gating.md).
+1. **What is this repo?** — `event4u/agent-config`: governed skill/rule/command suite for AI coding tools, no app runtime.
+2. **What language?** — `.md` is English; agents mirror the user's language at runtime.
+3. **Where do I edit?** — `src/` only, never the generated trees.
+4. **Lint / test / sync entry?** — `task ci` (full); subsets `task sync`, `task generate-tools`, `task lint-skills`, `task test`.
+5. **Where do the always-active rules live?** — `dist/agent-src/rules/` (kernel = 9 Iron-Law rules; tier-1/2 via `dist/router.json`).
+6. **CI checks?** — [`branch-protection-policy`](docs/contracts/branch-protection-policy.md), [`ci-green-floor`](docs/contracts/ci-green-floor.md), [`release-pr-gating`](docs/contracts/release-pr-gating.md).

package/CHANGELOG.md

@@ -932,124 +932,48 @@ our recommendation order, not its support status.
 > keeps the active era under the 250-line drift cap enforced by
 > `tests/test_changelog_eras.py`.
 
-# Era: 6.0.x — current
+# Era: pre-7.0.0 — archived
 
-> Started at `6.0.0`. Full entries live inline below.
-> The drift test caps this era at 250 lines of entry body; growth past
-> that forces a new era split (`# Era: 6.1.x`, etc.) — see
-> [`docs/contracts/CHANGELOG-conventions.md § Era splits`](docs/contracts/CHANGELOG-conventions.md).
+> All entries before `7.0.0` live in
+> [`docs/archive/CHANGELOG-pre-7.0.0.md`](docs/archive/CHANGELOG-pre-7.0.0.md).
+> The archive is read-only; git tags remain the canonical
+> source for what shipped. Splitting them out of the main file
+> keeps the active era under the 250-line drift cap enforced by
+> `tests/test_changelog_eras.py`.
 
-## [6.1.0](https://github.com/event4u-app/agent-config/compare/6.0.0...6.1.0) (2026-06-14)
+# Era: 7.0.x — current
 
-### Features
+> Started at `7.0.0`. Full entries live inline below.
+> The drift test caps this era at 250 lines of entry body; growth past
+> that forces a new era split (`# Era: 7.1.x`, etc.) — see
+> [`docs/contracts/CHANGELOG-conventions.md § Era splits`](docs/contracts/CHANGELOG-conventions.md).
 
-* **rules:** Iron Law — never drop inherited/shared-branch commits without asking ([e03dc18](https://github.com/event4u-app/agent-config/commit/e03dc18300a2ef032d508062be032267a1f1f844))
-* **workspace:** plain-language host-decision explainability + employee-mode gate (6.0.0 P5) ([f485476](https://github.com/event4u-app/agent-config/commit/f485476050d3d7660aa3aaeacc54438e5eee44a9))
-* **governance:** workspace boundary contract + import-edge drift linter (6.0.0 P4) ([943eb29](https://github.com/event4u-app/agent-config/commit/943eb29747eb3dca0988317e2a526cd38d12f06c))
-* **install:** preview-only dry-run for the upgrade-cleanup reaper (6.0.0 P2) ([4caa802](https://github.com/event4u-app/agent-config/commit/4caa802b1fd1bbf1beda71e5ad553000e7b7f2bf))
-* **create-pr:** run the PR-gate archival sweep before opening the PR ([bdd645b](https://github.com/event4u-app/agent-config/commit/bdd645b3bcc7443c00df653d8f53982417d0ca3e))
-* **roadmaps:** deterministic PR-gate archival sweep ([10643ca](https://github.com/event4u-app/agent-config/commit/10643ca9f5ff56ff02f376531e5c8c07998aa08d))
-* **memory:** remove agent-memory Layer 2; file-first memory only ([c8903c6](https://github.com/event4u-app/agent-config/commit/c8903c6f3a5502434b29c1b55535a9ebc3c55ac4))
-* **bench:** v2 pilot run + honest-null report; spawn stratified follow-up (Phase 4-6) ([5b7f7bd](https://github.com/event4u-app/agent-config/commit/5b7f7bd1112462f83ca42ef6509f4871cdba7ebe))
-* **bench:** v2 dual-axis scorer + runner + paired stats (Phase 2-3) ([ae25ee2](https://github.com/event4u-app/agent-config/commit/ae25ee2c7a8b0fe6325a0c886911a8c48c7546d5))
-* **bench:** v2 discipline-axis corpus + fixtures (Phase 0-1) ([1371dd0](https://github.com/event4u-app/agent-config/commit/1371dd05096c38c7f28f0c4a55b1daf2bb230500))
-* **bench:** wrapper-lift A/B benchmark — model-pin, budget-cap, error-aware ([a09238a](https://github.com/event4u-app/agent-config/commit/a09238ad0455baaf6f68016a195ad54725acd3a3))
-* **reasoning:** add model-agnostic Reasoning Discipline Protocol (RDP) ([b4b5bec](https://github.com/event4u-app/agent-config/commit/b4b5bec18f58630add4e7802c9e32b46b88f3084))
-* **security:** Phase 3 consumer audit + runtime injection hook + review skill ([23efe50](https://github.com/event4u-app/agent-config/commit/23efe5001104c1fd7056f7b2216fc4583f7f29f3))
-* **security:** Phase 2 injection-aware authoring rules ([eb41da9](https://github.com/event4u-app/agent-config/commit/eb41da9c7a1e3140d1efad760bd06e0bd53cb513))
-* **security:** Phase 1 self-audit corpus linters + containment convention ([f678aba](https://github.com/event4u-app/agent-config/commit/f678abab7b521f389e16abb837594b3d23a38d5f))
-* **ai-council:** resolve config user-global-first ([9177b52](https://github.com/event4u-app/agent-config/commit/9177b52a99842b3adffc21b325b39610ef520c6d))
-* **ci:** guard against re-introducing external-source references ([88d35d9](https://github.com/event4u-app/agent-config/commit/88d35d913f5afec7db33f5817229b366cac7256f))
-* **doctor:** add read-only stale-orphans health check ([48e6118](https://github.com/event4u-app/agent-config/commit/48e6118eab2e39fbfa1884a9f6defb1c8719a2ba))
-* **packs:** split meta into capability-scoped packs ([b363839](https://github.com/event4u-app/agent-config/commit/b3638393a6c67ecaac41ae19df89b2ed0b03154b))
-* **commands:** add first-class visibility frontmatter field ([db4d88d](https://github.com/event4u-app/agent-config/commit/db4d88dcf41629f27973624d6476f935be32e2c9))
+## [7.0.1](https://github.com/event4u-app/agent-config/compare/7.0.0...7.0.1) (2026-06-22)
 
 ### Bug Fixes
 
-* **refs:** mark the RDP-contract acceptance criterion as a forward-ref ([c7cee96](https://github.com/event4u-app/agent-config/commit/c7cee966495a5c96932c9f2b71ab72aae517623f))
-* **memory:** mine-session description ≤200 chars + command-count floor ([f368e06](https://github.com/event4u-app/agent-config/commit/f368e0667980e3f3a03233e8152fd23daaa8bc5d))
-* **bench:** lint-bench-ab validates the v2 docs/benchmark.md sections ([41d552b](https://github.com/event4u-app/agent-config/commit/41d552bd3a162577be3a898fca9123cce87b38b9))
-* **server:** mirror reasoning.* in settings schema (template parity + diff) ([5f77256](https://github.com/event4u-app/agent-config/commit/5f77256da1ecbfa03f3aa1261f23ec940991c2bc))
-* **reasoning:** skill-lint senior sections + valid rule tier (2b) ([7f3e278](https://github.com/event4u-app/agent-config/commit/7f3e2789ab483b6938a39aac303f1fbe2f35792e))
-* **security:** refresh threat-model command effective-hash ([5505b57](https://github.com/event4u-app/agent-config/commit/5505b57fa6e4e4bf02e2891f49a30e6dc9128da1))
-* **security:** tighten security-sensitive-stop — clear long_rule lint regression ([d528126](https://github.com/event4u-app/agent-config/commit/d528126120bf51335267bdde66793343ec376c87))
-* **security:** list agent-security-review + security-audit-config in marketplace.json ([f432a62](https://github.com/event4u-app/agent-config/commit/f432a62d42fab5fc6707b166e869ca8cc2d5d866))
-* **security:** CI — portability reword + settings-schema parity for injection_scan ([fa78a58](https://github.com/event4u-app/agent-config/commit/fa78a589101fd41984d85496666f2fd618e49a1f))
-* **cli:** preflight dependency guard with an actionable message ([ce58c76](https://github.com/event4u-app/agent-config/commit/ce58c7683541a3bc22852186a9764be127f87e4b))
-* **repo:** untrack stray node_modules symlink, ignore symlink form ([67cc9e6](https://github.com/event4u-app/agent-config/commit/67cc9e61deb241aa23e9affaa5adc1fd92d99f14))
-* **refs:** exempt gitignored agents/.harvest-local in check_references ([0d0b170](https://github.com/event4u-app/agent-config/commit/0d0b1702c27c06e96d486211f639148f7ed0628e))
-* **refs:** mark gitignored harvest-local ref in security-pillar roadmap ([3abf215](https://github.com/event4u-app/agent-config/commit/3abf215692cf49ac190248c0007668b5a7b1e1f0))
-* **ci:** guard against empty (0-byte) roadmap files ([5115865](https://github.com/event4u-app/agent-config/commit/511586591171735437bba8cdb106094628a3d611))
-* **roadmaps:** restore competitive-borrow v6 work, drop empty reaping stub ([9fceeb7](https://github.com/event4u-app/agent-config/commit/9fceeb7fc9585965f44e25543a9699d0ff8ee519))
-* **ai-council:** align user-global config path with the setup wizard ([54de5a8](https://github.com/event4u-app/agent-config/commit/54de5a853c271311d79b2b436dd3fa58fa25eb69))
-* **rule:** drop non-portable task-invocations from source-confidentiality backstop ([57e6f7f](https://github.com/event4u-app/agent-config/commit/57e6f7fe5199cc5192ead2a1468ad7d04dd5d5bc))
-* **install:** always-run tag sweep so reaping catches pre-inventory orphans ([91e5418](https://github.com/event4u-app/agent-config/commit/91e541852c30899cb84dd2070f705dfe7947d350))
-* **discovery:** register visibility + new capability packs in schema/vocab ([1fcc72b](https://github.com/event4u-app/agent-config/commit/1fcc72b08fbd13f85c01d3df7fbc98790395ac91))
+* **release:** measure accumulated era body in the split gate ([3837048](https://github.com/event4u-app/agent-config/commit/3837048138e5e5d8cfa024ab80df4882d8ecc736))
+* **changelog:** exempt newest release from era drift cap; split 7.0.0 into its own era ([0dfa3a2](https://github.com/event4u-app/agent-config/commit/0dfa3a23fe44f8eb4e664d78173d294c7c4848c3))
+* **install:** resolve package version by upward walk so global install stops refusing ([977bdc3](https://github.com/event4u-app/agent-config/commit/977bdc359fe8954592f81649b23ea4a00f157b74))
 
-### Documentation
+## [7.0.0](https://github.com/event4u-app/agent-config/compare/6.1.0...7.0.0) (2026-06-21)
 
-* **domain-watch:** capture deferred heavyweight tracks in one watch-note (6.0.0 P6) ([e212e1f](https://github.com/event4u-app/agent-config/commit/e212e1fcebed5d61c63d0719deb485787aca6fde))
-* **changelog:** add 6.0.0 release overview + breaking-changes section (6.0.0 P3) ([fdb4b63](https://github.com/event4u-app/agent-config/commit/fdb4b63cd495489341215430ae12a9866cb8503b))
-* fix stale source-of-truth paths and drop above-fold jargon (6.0.0 P1) ([9ee9870](https://github.com/event4u-app/agent-config/commit/9ee98708e1fdcf612848b393aace48b33a548e99))
-* **roadmaps:** add capability-discoverability follow-up from fable-feedback-3 ([a658c2f](https://github.com/event4u-app/agent-config/commit/a658c2f9c338182d1db2db503ab8ce6aa9c1f42f))
-* **model-recommendation:** add orchestrator→subagent model-routing guidance ([669f83d](https://github.com/event4u-app/agent-config/commit/669f83de5b2e6de590d87f7a093eb098bcf8a086))
-* **roadmaps:** add RDP discoverability roadmap ([c65e1b2](https://github.com/event4u-app/agent-config/commit/c65e1b2648af8bfd2a39a6c6dc74124cfc67101b))
-* **roadmaps:** revise discipline-axis pilot for weak-host-first methodology ([9ccb816](https://github.com/event4u-app/agent-config/commit/9ccb816b1fe449cb537567696487c09a4ea2ee8e))
-* **rules:** replace Merge-gated with PR-gate in roadmap-progress-sync ([c140687](https://github.com/event4u-app/agent-config/commit/c1406876e880babd70a178bb958af89f31c49eec))
-* **roadmaps:** memory-layer-cleanup removal + consolidation plans ([254758f](https://github.com/event4u-app/agent-config/commit/254758f1a24d7898b5828a3396d20b7498370d08))
-* **roadmap:** check-refs:skip discipline-axis bench (external repo citations) ([13c5fdb](https://github.com/event4u-app/agent-config/commit/13c5fdb04016c40488140f59688e9db88eee0d9d))
-* **roadmaps:** agent-memory removal + memory-pipeline consolidation plans ([6fbf6a6](https://github.com/event4u-app/agent-config/commit/6fbf6a6d33571839f8c85b276a8728ff62c606c7))
-* **roadmaps:** 3-condition value bench (v1) + discipline-axis bench (v2) ([f5a89c6](https://github.com/event4u-app/agent-config/commit/f5a89c69e60c345dbb655f3b0dab294d2b56669a))
-* **roadmaps:** RDP eval+promotion follow-up; archive frontier-reasoning parent ([417223b](https://github.com/event4u-app/agent-config/commit/417223bce4a4d04404512cfa804ad872dd11324c))
-* **roadmap:** security pillar — supply-chain integrity + injection-aware authoring ([c15ef6a](https://github.com/event4u-app/agent-config/commit/c15ef6adc17226513660b324b7960dc80125bbf3))
-* **roadmap:** fill in road-to-6.0.0-final-readiness ([46ba5a0](https://github.com/event4u-app/agent-config/commit/46ba5a002fb300afbce43e56b92a945bd0957dec))
-* **roadmap:** add image/brand/typography + greenfield-scaffold roadmaps ([f615452](https://github.com/event4u-app/agent-config/commit/f6154528a7b1ba34fb5543c91ac2c905999d2e8c))
-* **ai-council:** repoint config references to the user-global path ([1307f80](https://github.com/event4u-app/agent-config/commit/1307f804b2c1cc4a2b9a3d2ad1b829f2a7108619))
-* **ai-council:** document user-global config location (ADR-093) ([c501e55](https://github.com/event4u-app/agent-config/commit/c501e557fdb94d7214555a3b53042a275b2dc923))
-* **roadmap:** competitive-borrow plan (source-anonymous) ([9e3c692](https://github.com/event4u-app/agent-config/commit/9e3c692745170ad62b0f67d40afa8aad751e34dd))
-* **roadmap:** close metadata-leanness, spawn tier-removal follow-up ([93d5361](https://github.com/event4u-app/agent-config/commit/93d5361d05d5ddef944d4931c6260e69464d8270))
-* **adr:** ADR-092 defer command tier-alias removal (forcing-function) ([71d2630](https://github.com/event4u-app/agent-config/commit/71d26300d14c9b894dfef19ed6a6b3c996f5895f))
-* **roadmap:** metadata & command-surface leanness plan + evidence ([b31d106](https://github.com/event4u-app/agent-config/commit/b31d1061f5816eb3a8aadd4bd154e76ee00d089a))
-* **roadmap:** archive completed reaping-orphans fix plan ([c1ed447](https://github.com/event4u-app/agent-config/commit/c1ed4478f14c634c5fde5dbed224f72ae2c6eedb))
-* record evidence-gated decisions, archive residuals roadmap ([3657e12](https://github.com/event4u-app/agent-config/commit/3657e12fbcacb4740b4d1d84309d7dea28cd3c58))
-
-### Refactoring
-
-* **ai-council:** relocate config out of the repo to user-global ([17fb14a](https://github.com/event4u-app/agent-config/commit/17fb14a03736cb14f2f56861f194e5bfc00e80b9))
-* **commands:** fold fix:pr-bot/developer-comments into fix:pr-comments ([4c1c1c8](https://github.com/event4u-app/agent-config/commit/4c1c1c8795d422e1ba8d5ae77409f43f3b8fb2e5))
-
-### Tests
-
-* lower command-surface floor to 148 after fix:pr-* fold ([2b5e9ef](https://github.com/event4u-app/agent-config/commit/2b5e9ef7f6a8160aac6d2d26bb2876d7d8ed1427))
-* **install:** lock the reaping-gap class against regression ([d7ca6d0](https://github.com/event4u-app/agent-config/commit/d7ca6d0f967672d02d0b367fcfa408f6d675a220))
+> Large catch-up release. The full per-commit entry (BREAKING CHANGES,
+> Features, Fixes, …) is archived in
+> [`docs/archive/CHANGELOG-7.0.0.md`](docs/archive/CHANGELOG-7.0.0.md) to keep
+> the active `7.0.x` era under the 250-line drift cap. Git tag `7.0.0`
+> remains the canonical record of what shipped.
 
-### CI
+### Highlights
 
-* **skill-lint:** also enforce rule tiers + guard the CI wiring ([6cde280](https://github.com/event4u-app/agent-config/commit/6cde2809c5ace248807236dee9634a590955795d))
-* **skill-lint:** run lint-command-tiers on every PR ([2e123c6](https://github.com/event4u-app/agent-config/commit/2e123c696a6bf2047cbc4473a9555c51b8f33da8))
-
-### Chores
-
-* **roadmaps:** complete + archive road-to-6.0.0-final-readiness (6.0.0) ([652294a](https://github.com/event4u-app/agent-config/commit/652294ad01ad48a2875ebd75953b82d06c350e56))
-* **roadmaps:** archive completed memory-layer-cleanup roadmaps ([9380482](https://github.com/event4u-app/agent-config/commit/9380482cf512c73f0783ff7a2270793d5dca8b95))
-* **memory:** regenerate pack manifest for shortened mine-session description ([14cec0e](https://github.com/event4u-app/agent-config/commit/14cec0ed0c6de254639e3727d7ad1f3a3147902e))
-* **memory:** regenerate projections, catalogs, and dashboard ([78cc1a1](https://github.com/event4u-app/agent-config/commit/78cc1a1180f6eced4c60e0c408da1103d0621ab0))
-* **roadmaps:** regenerate progress dashboard ([d0d2757](https://github.com/event4u-app/agent-config/commit/d0d2757e93026fab6f995732a130f126371e7978))
-* **security:** archive road-to-security-pillar (Phases 1-3 shipped) ([ad5f552](https://github.com/event4u-app/agent-config/commit/ad5f55204bae429b960db40976c3dc40ea759f97))
-* **security:** bump command-count messaging 148→149 (new /security-audit-config) ([5f5b79a](https://github.com/event4u-app/agent-config/commit/5f5b79a1d741b1565cfbc0aaf8c74aa43165fd0b))
-* **security:** regenerate dist, router, counts, pack manifests ([84ff0fc](https://github.com/event4u-app/agent-config/commit/84ff0fcd1216fbbd05a3a340148f681b95c2d4a8))
-* add uncomitted roadmaps ([699c2c5](https://github.com/event4u-app/agent-config/commit/699c2c5e8a70453a46b9c70e68ba621f96a5f64c))
-* **condense:** reconcile stale condensation hashes ([d9ac27e](https://github.com/event4u-app/agent-config/commit/d9ac27e232cc60dba941f75632dde9a5bbd2c4db))
-* add uncomitted roadmaps ([28ff06c](https://github.com/event4u-app/agent-config/commit/28ff06ce3741db46a5d39e1bc0a2a698d3a94c1f))
-* **rules:** track anonymized harvest roadmaps; harden source-confidentiality ([bc77fb9](https://github.com/event4u-app/agent-config/commit/bc77fb93476c8045cd227f94ad09b0f1f3cebbdd))
-* sync stale condensation for work / agents-init / agents-optimize ([0f816ca](https://github.com/event4u-app/agent-config/commit/0f816cae017824af718cd750457bfc1476252927))
-* sync command-count messaging to 148 after fix:pr-* removal ([94097ce](https://github.com/event4u-app/agent-config/commit/94097ce0bee1739d2f54688705b1aaf78a73cee4))
-* sync stale condensation hashes for unchanged command files ([a32da9a](https://github.com/event4u-app/agent-config/commit/a32da9a5c4199d1148549f63bf7c0012496cd2b6))
-* remove external-source references from the tracked tree ([3248611](https://github.com/event4u-app/agent-config/commit/3248611a8ae2e7d0574ba8e121f85077faae9f69))
-* **commands:** backfill visibility + re-tag pack across command sources ([d08f5b6](https://github.com/event4u-app/agent-config/commit/d08f5b6550735db22f4f855f155d2fd91a8dc047))
-* **changelog:** split era 5.9.x → pre-6.0.0 ([c442750](https://github.com/event4u-app/agent-config/commit/c44275053c07352402e162d6accbe67f6d380010))
-
-Tests: 6068
+* **py2ts:** Python → TypeScript re-platform completed — all `src/` `.py`
+  twins removed (Hard Floor); CLI, release, roadmap, and golden-transcript
+  tooling ported to TS + vitest.
+* **install:** versioned install-layout ABI; core-vs-lab surface tiers with a
+  boundary guard; layout migration + core-only deploy wired into the installer.
+* **brand / eval / ai-image:** `/brand:` command cluster shipped; eval
+  freshness lints made blocking; image-adapter cost + freshness caveats added.
+* **BREAKING:** `build_ticket_export.py` removed — no API export (ADR-102).
 
 # Era: pre-4.0.0 — archived
 

package/CONTRIBUTING.md

@@ -79,7 +79,7 @@ Helper commands:
 task sync             # src/ → dist/agent-src/, then project → .augment/
 task generate-tools   # Regenerate .claude/, .cursor/, .clinerules/, .windsurfrules
 task test             # pytest tests/ + installer integration tests
-task lint-skills      # python3 scripts/skill_linter.py --all
+task lint-skills      # ./scripts-run src/scripts/skill_linter --all
 ```
 
 ## Branches, commits, and PRs

package/README.md

@@ -1,6 +1,6 @@
 <p align="center"><a href="https://event4u.app"><img alt="event4u Agent Config" src=".github/assets/banner.png"></a></p>
 
-# Agent Config — Universal AI Agent OS
+# Agent Config — Governed skills, rules & work journeys for AI coding agents
 
 [![Smoke](https://github.com/event4u-app/agent-config/actions/workflows/smoke.yml/badge.svg)](https://github.com/event4u-app/agent-config/actions/workflows/smoke.yml) [![Public install smoke (3 OS × 2 Node)](https://github.com/event4u-app/agent-config/actions/workflows/smoke-public-install.yml/badge.svg)](https://github.com/event4u-app/agent-config/actions/workflows/smoke-public-install.yml) [![npm](https://img.shields.io/npm/v/@event4u/agent-config?style=flat-square&label=npm&color=orange)](https://www.npmjs.com/package/@event4u/agent-config) [![agent-config MCP server](https://glama.ai/mcp/servers/event4u-app/agent-config/badges/score.svg)](https://glama.ai/mcp/servers/event4u-app/agent-config)
 
@@ -8,6 +8,16 @@
 
 Six role-shaped entry paths, one shared **skills + rules + commands** layer that turns any host agent (Claude Code, Augment, Cursor, Copilot, Windsurf) into a reliable team member — without locking you to a single model or vendor.
 
+### What's different
+
+Three things this package ships that a README scan slides right past:
+
+- **Surgical uninstall** — removes only its own keys from a shared host config (matched by JSON-pointer + SHA-256), never a neighbour tool's entries.
+- **Pack-scoped install** — writes the active pack only, not a 500-artefact dump.
+- **Portability guard** — works in any project; source confidentiality is CI-enforced.
+
+See exactly [what works on which host](docs/capability-matrix.md), or jump to [things you can do in a minute](docs/cookbook.md).
+
 ### Pick your profile — six entry paths
 
 `agent-config setup` writes `profile.id` to `.agent-settings.yml`; each
@@ -76,7 +86,7 @@ is platform operation, not a user-work flow.)
 <details>
 <summary><b>Catalog at a glance</b> — raw artefact counts (maintainer reference)</summary>
 
-[![Skills](https://img.shields.io/badge/Skills-230-orange?style=flat-square)](dist/agent-src/skills/) [![Rules](https://img.shields.io/badge/Rules-83-orange?style=flat-square)](dist/agent-src/rules/) [![Commands](https://img.shields.io/badge/Commands-147-orange?style=flat-square)](dist/agent-src/commands/) [![Guidelines](https://img.shields.io/badge/Guidelines-81-orange?style=flat-square)](docs/guidelines/) [![Personas](https://img.shields.io/badge/Personas-24-orange?style=flat-square)](dist/agent-src/personas/) [![Advisors](https://img.shields.io/badge/Advisors-5-orange?style=flat-square)](dist/agent-src/personas/advisors/)
+[![Skills](https://img.shields.io/badge/Skills-251-orange?style=flat-square)](dist/agent-src/skills/) [![Rules](https://img.shields.io/badge/Rules-88-orange?style=flat-square)](dist/agent-src/rules/) [![Commands](https://img.shields.io/badge/Commands-161-orange?style=flat-square)](dist/agent-src/commands/) [![Guidelines](https://img.shields.io/badge/Guidelines-82-orange?style=flat-square)](docs/guidelines/) [![Personas](https://img.shields.io/badge/Personas-26-orange?style=flat-square)](dist/agent-src/personas/) [![Advisors](https://img.shields.io/badge/Advisors-5-orange?style=flat-square)](dist/agent-src/personas/advisors/)
 
 The headline is the **experience** (profile + packs), not the raw counts. Full catalog: [`docs/catalog.md`](docs/catalog.md).
 </details>
@@ -88,7 +98,7 @@ your stack, and you ship work end-to-end. New install? Start with the
 [Quickstart](#quickstart). Already installed? [Supported tools](#supported-tools)
 shows the wired AIs; [`docs/featured-commands.md`](docs/featured-commands.md)
 lists the end-to-end workflows (`/implement-ticket`, `/work`,
-`/commit`, `/create-pr`). Deeper tour: [2-minute demo](#2-minute-demo--implement-ticket).
+`/commit`, `/pr:create`). Deeper tour: [2-minute demo](#2-minute-demo--implement-ticket).
 
 **Install scope.** Pick **one** scope per machine — project-local (default, recommended for application repos) or user-global (recommended for tooling repos / dotfiles). The installer refuses a second, conflicting scope via the `scope_guard` pre-flight. Details: [`docs/contracts/install-scopes.md`](docs/contracts/install-scopes.md). Cleanup when needed: `bash scripts/cleanup_other_scope.sh --confirm`.
 
@@ -108,6 +118,8 @@ Working on the package itself? [Development](#development) covers the
 opt-in measurement loop. Source-of-truth tree is
 `src/` (`src/skills`, `src/rules`, `src/agent-src/`); never hand-edit `.augment/` or `dist/agent-src/`.
 
+**Security.** Disclosure policy: [`SECURITY.md`](SECURITY.md). Threat model: [`docs/threat-model.md`](docs/threat-model.md).
+
 ---
 
 ## Quickstart
@@ -198,7 +210,7 @@ refine → memory → analyze → plan → implement → test → verify → rep
 - **Implements** under `minimal-safe-diff` + `scope-control` — no drive-by edits.
 - **Tests** (targeted first, full suite on success).
 - **Reviews** the diff through four judges (bugs, security, tests, code quality).
-- **Reports** changes, verdicts, follow-ups — then stops. `/commit` and `/create-pr` are suggestions, never auto-run.
+- **Reports** changes, verdicts, follow-ups — then stops. `/commit` and `/pr:create` are suggestions, never auto-run.
 
 Any ambiguity halts the flow with numbered options — never a silent guess. Persona comes from `.agent-settings.yml` (`roles.active_role`): `senior-engineer` (default), `qa`, or `advisory` (plan-only).
 
@@ -288,16 +300,6 @@ The Hard Floor on organization-mode features (SSO, central policy, OAuth connect
 
 > *The 9.3/10 feedback round (2026-05-25) re-asked for OAuth knowledge connectors, IAM / org governance, and organization-shared memory. Each is a stable cancellation row in [`team-deployment-posture`](docs/deploy/team-deployment-posture.md) under the same three release gates — recruited team customer · funded audit · maintainer ADR.*
 
-### Optional: persistent agent memory
-
-[`@event4u/agent-memory`](https://www.npmjs.com/package/@event4u/agent-memory) — MCP-based backend for cross-session learnings. **Strictly optional**; without it, skills fall back to file-based memory under `agents/memory/`.
-
-```bash
-npm install --save-dev @event4u/agent-memory
-```
-
-→ [Memory contract](docs/contracts/agent-memory-contract.md) · [Built-in MCP server](docs/mcp-server.md) (experimental)
-
 ---
 
 ## Harness expectations
@@ -405,7 +407,7 @@ When a prompt matches a command's purpose ("setze ticket ABC-123 um" → `/imple
 | [**Migration**](docs/MIGRATION.md) | Per-version upgrade steps |
 | [**Showcase**](docs/showcase.md) | More examples & expected behavior |
 
-Browse content: [all 147 commands](dist/agent-src/commands/) · [skills catalog](docs/skills-catalog.md) · [full catalog](docs/catalog.md) · [`llms.txt`](llms.txt).
+Browse content: [all 161 commands](dist/agent-src/commands/) · [skills catalog](docs/skills-catalog.md) · [full catalog](docs/catalog.md) · [`llms.txt`](llms.txt).
 
 ---
 

package/dist/agent-src/commands/agent-status.md

@@ -70,10 +70,10 @@ implementation: [`scripts/cost/track.mjs`](../../scripts/cost/track.mjs).
 
 Run two read-only Python helpers (stdlib-only, no-op safe if JSONL missing):
 
-- `python3 scripts/telegraph_stats.py --format json` — per-session +
+- `./scripts-run src/scripts/telegraph_stats --format json` — per-session +
   per-conversation + lifetime telegraph delta. Honors suspended
   multiplier (see [`docs/contracts/telegraph-telemetry.md`](../docs/contracts/telegraph-telemetry.md)) — delta reads `0` while suspended; display version + ACTIVE/SUSPENDED state regardless.
-- `python3 scripts/cost_by_conversation.py --format json` — per-conversation
+- `./scripts-run src/scripts/cost_by_conversation --format json` — per-conversation
   total cost + model breakdown for current conversation, sourced
   from same `agents/cost-tracking/sessions.jsonl` ledger.
 

package/dist/agent-src/commands/agents/audit.md

@@ -89,7 +89,7 @@ Surface candidates with explicit justification. Never auto-apply.
 Run the linter and inspect output:
 
 ```bash
-python3 scripts/lint_agents_md.py
+./scripts-run src/scripts/lint_agents_md
 wc -c AGENTS.md
 ```
 
@@ -105,7 +105,7 @@ Failures route to `/agents optimize` — this command does **not** edit.
 ### 5. Check docs sync + stale references
 
 ```bash
-python3 scripts/check_references.py
+./scripts-run src/scripts/check_references
 ```
 
 Confirm counts/lists in `.augment/contexts/augment-infrastructure.md` and
@@ -114,7 +114,7 @@ Confirm counts/lists in `.augment/contexts/augment-infrastructure.md` and
 ### 6. Run skill linter
 
 ```bash
-python3 scripts/skill_linter.py --all --pairs --duplicates 2>&1 | grep "Summary:"
+./scripts-run src/scripts/skill_linter --all --pairs --duplicates 2>&1 | grep "Summary:"
 ```
 
 Report FAIL/WARN counts. Don't fix here — delegate to `skill-reviewer` or

package/dist/agent-src/commands/agents/init.md

@@ -157,7 +157,7 @@ module-aware skills (road-to-configurable-modules Phase B). Skips
 silently when the helper finds no candidates.
 
 ```bash
-python3 scripts/propose_modules_config.py --json
+./scripts-run src/scripts/propose_modules_config --json
 ```
 
 If the JSON `candidates` array is non-empty, render the proposed

package/dist/agent-src/commands/agents/optimize.md

@@ -63,8 +63,8 @@ ask:
 ```bash
 target="<path-to-AGENTS.md>"
 wc -c "$target"
-python3 scripts/lint_agents_md.py 2>&1 | grep -A1 "$target" || \
-  python3 scripts/lint_agents_md.py
+./scripts-run src/scripts/lint_agents_md 2>&1 | grep -A1 "$target" || \
+  ./scripts-run src/scripts/lint_agents_md
 ```
 
 Record: total chars, gap to FAIL/WARN cap, pointer-ratio output,
@@ -151,8 +151,8 @@ as a finding in the step-7 numbered options instead of editing here.
 ### 9. Verify before claiming done
 
 ```bash
-python3 scripts/lint_agents_md.py
-python3 scripts/check_references.py
+./scripts-run src/scripts/lint_agents_md
+./scripts-run src/scripts/check_references
 ```
 
 Both green = the refactor is finished. Surface fresh output in the

package/dist/agent-src/commands/analyze/decision.md

@@ -0,0 +1,108 @@
+---
+model_tier: inherit
+name: analyze-decision
+pack: analysis-workbench
+tier: 2
+visibility: internal
+cluster: analyze
+sub: decision
+skills: [decision-review]
+description: Audit a past architectural decision — restate what was chosen and why, compare original assumptions against reality now, produce a verdict (still valid / needs amendment / superseded).
+suggestion:
+  eligible: true
+  trigger_description: "decision review, ADR review, did this hold up, rückblick Architektur, past decision"
+  trigger_context: "user wants to audit a past architectural decision or ADR for continued validity"
+workspaces:
+  - engineering
+packs:
+  - analysis-workbench
+---
+
+# /analyze:decision
+
+Past-decision audit sub-command in the `/analyze` cluster.
+Loads and runs the
+[`decision-review`](../../../../skills/decision-review/SKILL.md) skill.
+
+## Instructions
+
+### 1. Identify the decision
+
+Ask the user (in their language) for:
+
+- The ADR identifier (e.g. `ADR-042`) or informal name.
+- The path to the ADR file, or the slug to look up in `docs/decisions/`
+  or `docs/adrs/`.
+
+If the user names the decision informally, check the index before
+reading the full file.
+
+### 2. Run the decision-review skill
+
+Delegate to
+[`decision-review`](../../../../skills/decision-review/SKILL.md) verbatim:
+
+1. **Locate and read the full ADR** before proceeding.
+2. **Restate** — chosen option, context then, assumptions, alternatives
+   rejected.
+3. **Compare to reality now** — for each assumption: held / broke /
+   unknown, with evidence. List new information not available at
+   decision time.
+4. **Verdict** — one of three:
+   - *Still valid* — document the validation date.
+   - *Needs amendment* — core decision stands; recommend specific
+     amendment.
+   - *Superseded* — name the successor option; recommend
+     `decision-record` + `adr-create` as the forward path.
+
+Hindsight discipline: judge each assumption against the information
+available at the time it was made, not against the outcome alone.
+
+### 3. Memory write-back (dedup-first)
+
+Before drafting a new candidate, call `retrieve()` over the same
+key-space (decision area, affected paths) per
+[`analysis-memory-loop.md § 2`](../../../../docs/contracts/analysis-memory-loop.md):
+
+- **Match found** → propose a `frequency` / `supersedes` update.
+- **No match** → draft a new `historical-patterns` candidate:
+
+```jsonc
+{
+  "type":              "historical-patterns",
+  "summary":           "<one-line pattern: what held or broke>",
+  "evidence_paths":    ["docs/decisions/ADR-NNN-<slug>.md"],
+  "decision_surface":  ["<area1>", "<area2>"],
+  "last_validated":    "<today-YYYY-MM-DD>",
+  "review_after_days": 90,
+  "applicable_scope":  "project"
+}
+```
+
+Surface the candidate and ask:
+
+> 1. Propose this candidate to `/memory propose` (recommended)
+> 2. Refine before proposing — suggest changes
+> 3. Skip memory candidate for now
+
+**Empfehlung:** 1
+
+If the candidate fails the admission gate (< 2 distinct evidence paths
+AND < 3 future decisions in `decision_surface`), surface the gap and
+suggest deferring or strengthening evidence before proposing.
+
+### Rules
+
+- Do NOT commit, push, or open a PR.
+- Do NOT auto-promote — `/memory propose` is the intake.
+- Do NOT re-litigate a decision confirmed still valid — acknowledge it,
+  note the validation date, stop.
+- Do NOT issue a "superseded" verdict without naming the successor
+  option and recommending the forward path to `decision-record` +
+  `adr-create`.
+
+## See also
+
+- [`decision-review`](../../../../skills/decision-review/SKILL.md)
+- [`analysis-memory-loop.md`](../../../../docs/contracts/analysis-memory-loop.md)
+- [`/analyze`](../command.md) — cluster orchestrator