@event4u/agent-config 6.1.0 → 7.0.1

package/dist/agent-src/commands/review-changes.md

@@ -146,6 +146,13 @@ Produce one combined report:
   ask before fixing 🟡 findings, report 🟢 as suggestions
 - If all five returned `apply` → the diff is ready; report and stop
 
+**Opt-in (never auto-on):** when the `revise` findings are *test-driven*
+(failing checks, not subjective craft) and you want bounded auto-repair before
+re-review, hand off to
+[`verify-repair-loop`](../skills/verify-repair-loop/SKILL.md) — a
+generate→run→revise→re-run loop gated by a numeric threshold, then a judge
+confirms. Surface as a single follow-up line; do not auto-invoke.
+
 ### 7. Quality tools (verbosity-gated)
 
 Per `verbosity.routine_confirmations` (default `false`):
@@ -201,6 +208,7 @@ Per `verbosity.routine_confirmations` (default `false`):
 - [`/prepare-for-review`](prepare-for-review.md) — updates `main` and merges the full base-branch chain into the target branch (used by step 1)
 - [`subagent-orchestration`](../skills/subagent-orchestration/SKILL.md) — dispatch and model-pairing rules
 - [`/do-and-judge`](do-and-judge.md) — implementer + judge loop for a single change
+- [`verify-repair-loop`](../skills/verify-repair-loop/SKILL.md) — opt-in test-verdict-gated iterate-to-green loop (step 6 hand-off); judge confirms after the numeric gate
 - [`/judge`](judge.md) — standalone judge, no review-changes dispatch
 - [`code-review`](../skills/code-review/SKILL.md) — human-oriented review patterns (tone, feedback handling)
 - [`role-contracts`](../docs/guidelines/agent-infra/role-contracts.md#reviewer) — Reviewer mode output contract (Summary / Risks / Findings / Required actions / Verdict)

package/dist/agent-src/commands/roadmap/materialize.md

@@ -0,0 +1,73 @@
+---
+model_tier: high
+name: roadmap-materialize
+pack: product-basic
+tier: 2
+visibility: internal
+cluster: roadmap
+sub: materialize
+skills: [emit-tickets]
+description: Materialise a roadmap into a self-contained, importable ticket bundle under agents/tickets/
+suggestion:
+  eligible: true
+  trigger_description: "turn this roadmap into tickets, materialise the roadmap, mach Tickets aus der Roadmap"
+  trigger_context: "an existing agents/roadmaps/*.md the user wants decomposed into build-ready tickets"
+workspaces:
+  - agent-config-maintainer
+packs:
+  - meta
+---
+
+# /roadmap materialize
+
+## Instructions
+
+A thin wrapper that delegates to the [`emit-tickets`](../../../skills/emit-tickets/SKILL.md)
+skill. This command **orchestrates**; the skill owns the procedure.
+
+### 1. Resolve the roadmap
+
+Accept a roadmap path argument (`/roadmap:materialize agents/roadmaps/{roadmap}.md`)
+or, with no argument, ask which roadmap to materialise. The roadmap must already
+exist (authored via `/roadmap:create` + `roadmap-writing`); this command does
+**not** author roadmaps.
+
+### 2. Run the skill
+
+Invoke [`emit-tickets`](../../../skills/emit-tickets/SKILL.md). It reads the
+roadmap, writes one ticket per materialisable step into
+`agents/tickets/{slug}/`, sets each ticket's `model_tier`, writes `manifest.yml`
+(acyclic dependency graph + empty `linear_state`), writes
+`<!-- ticket: T-NNN -->` markers back into the roadmap, and regenerates
+`agents/tickets/_registry.yml`. Format contract:
+[`ticket-bundle-format`](../../../../docs/contracts/ticket-bundle-format.md).
+
+### 3. Gate on buildability
+
+Run the build-readiness lint before handing back:
+
+```bash
+python3 src/scripts/lint_ticket_buildable.py
+```
+
+A `lite` ticket that fails the self-containedness floor is rejected or escalated
+to `medium` — never shipped under-specified.
+
+### 4. Hand back — HARD STOP
+
+```
+BUNDLE MATERIALISED → STOP. NEVER AUTO-CREATE TRACKER ISSUES OR EXECUTE.
+MATERIALISE = ARTIFACT ONLY. PASTE/MCP/BUILD NEED A FRESH USER VERB.
+```
+
+Emit a single hand-back line citing the bundle path + the ticket count. The user
+pastes a ticket into Linear/Jira (or creates it via MCP), or runs a per-ticket build
+(`/implement-ticket <bundle>/T-NNN.md`) on a later turn, explicitly.
+
+### Rules
+
+- **Do NOT author the roadmap** — this consumes an existing one.
+- **Do NOT auto-create tracker issues** — paste/MCP is a separate user-invoked step (ADR-102, no API export).
+- **Do NOT commit or push.**
+- Bundle is the source of truth; the tracker is a projection
+  ([`ticket-bundle-format`](../../../../docs/contracts/ticket-bundle-format.md)).

package/dist/agent-src/commands/skill/preview.md

@@ -40,7 +40,7 @@ argument. Missing name → print usage and stop.
 ### 2. Run the previewer
 
 ```bash
-python3 scripts/skill_preview.py <name>
+./scripts-run src/scripts/skill_preview <name>
 ```
 
 Add `--technical` for the raw frontmatter + numbered step list; default is the

package/dist/agent-src/commands/skills/discover.md

@@ -43,7 +43,7 @@ neither resolves, it prints the available roles and stops — do not guess.
 ### 2. Run the recommender
 
 ```bash
-python3 scripts/skill_discovery.py --role <role>
+./scripts-run src/scripts/skill_discovery --role <role>
 ```
 
 Optional flags: `--format json` (machine-readable), `--limit N` (results per

package/dist/agent-src/commands/threat-model.md

@@ -79,7 +79,7 @@ Produce one combined report with these sections, in order:
 5. **Required controls** — the minimum set of validations, authorization
    checks, logging, and negative tests that must exist before the change ships
 6. **Open questions** — anything the skills flagged as uncertain and the user
-   must answer before impl starts
+   must answer before implementation starts
 
 ### 5. Decide next step
 
@@ -91,7 +91,7 @@ After the report, ask:
 > 3. Stop here — threat model is the deliverable, no implementation yet
 ```
 
-- On **1**: hand off to the impl flow (e.g., `feature-plan`,
+- On **1**: hand off to the implementation flow (e.g., `feature-plan`,
   `bug-fix`, or direct edit) with the required-controls list pinned
 - On **2**: re-gather context and re-dispatch
 - On **3**: save the report as the deliverable, stop
@@ -114,7 +114,7 @@ After the report, ask:
 - NEVER merge `threat-modeling` and `authz-review` outputs into a single
   block — each skill owns its format
 - NEVER write production code in the same turn as this command — the
-  deliverable is the report; impl is a separate step
+  deliverable is the report; implementation is a separate step
 - NEVER mark the change "safe" if any 🔴 abuse case has no control
 
 ## See also
@@ -124,4 +124,4 @@ After the report, ask:
 - [`data-flow-mapper`](../skills/data-flow-mapper/SKILL.md) — trace specific data through the change
 - [`blast-radius-analyzer`](../skills/blast-radius-analyzer/SKILL.md) — enumerate affected call sites
 - [`security-sensitive-stop`](../rules/security-sensitive-stop.md) — the trigger rule
-- [`minimal-safe-diff`](../rules/minimal-safe-diff.md) — keep the impl scoped
+- [`minimal-safe-diff`](../rules/minimal-safe-diff.md) — keep the implementation scoped

package/dist/agent-src/commands/upstream-contribute.md

@@ -126,9 +126,9 @@ Frontmatter must have `source: package`.
 ### 6. Run quality gates
 
 ```bash
-python3 scripts/skill_linter.py --all           # 0 FAIL required
-python3 scripts/check_condensation.py            # No 🔴 errors for this file
-python3 scripts/condense.py --generate-tools    # Regenerate symlinks
+./scripts-run src/scripts/skill_linter --all           # 0 FAIL required
+./scripts-run src/scripts/check_condensation            # No 🔴 errors for this file
+./scripts-run src/scripts/condense --generate-tools    # Regenerate symlinks
 bash scripts/condense.sh --check                # dist/agent-src/ in sync with source
 bash scripts/condense.sh --check-hashes         # All hashes match
 ```

package/dist/agent-src/commands/video/from-script.md

@@ -57,7 +57,7 @@ call has happened yet.
 
 ### 2. Load config + resolve providers
 
-Source `scripts/ai-video/lib/load-config.sh`. Resolve image / video
+Source `scripts/media/lib/load-config.sh`. Resolve image / video
 provider in this order: command flag → `agents/.ai-video.xml` default
 → fail with the available-providers list.
 
@@ -156,4 +156,4 @@ cost (commit) or summed modeled `cost_estimate` labeled *modeled*
 - [`/video:scene`](scene.md) — single-scene iteration
 - [`/video:storyboard`](storyboard.md) — image-only contact sheet
 - [`/video:stitch`](stitch.md) — re-stitch after operator edits
-- [`scripts/ai-video/lib/adapter-contract.md`](../../../scripts/ai-video/lib/adapter-contract.md)
+- [`scripts/media/lib/adapter-contract.md`](../../../scripts/media/lib/adapter-contract.md)

package/dist/agent-src/commands/video/from-song.md

@@ -81,7 +81,7 @@ absent from `dist/agent-src/personas/` or `dist/agent-src/skills/`. No network
 call has happened yet.
 
 Then confirm the **runtime helper scripts** exist and are executable —
-`scripts/ai-video/lib/probe-audio.sh`, `scripts/ai-video/lib/load-config.sh`,
+`scripts/ai-video/lib/probe-audio.sh`, `scripts/media/lib/load-config.sh`,
 `scripts/ai-video/stitch.sh` — so a missing script fails here (with the
 path), not mid-run at Step 2/9.
 
@@ -156,7 +156,7 @@ if they really mean it; the guard never silently proceeds.
 
 ### 4. Load config + resolve providers
 
-Source `scripts/ai-video/lib/load-config.sh`. Resolve image / video
+Source `scripts/media/lib/load-config.sh`. Resolve image / video
 provider: command flag → `agents/.ai-video.xml` default → fail with the
 available-providers list. A **malformed XML** or a default/flag naming a
 provider with no `scripts/ai-video/adapters/<id>.sh` → fail fast here
@@ -488,4 +488,4 @@ labeled *modeled* (preview). No commit. No push.
 - [`/video:stitch`](stitch.md) — re-stitch after operator edits
 - [`song-to-script`](../../skills/song-to-script/SKILL.md) — audio →
   timed scene script
-- [`scripts/ai-video/lib/adapter-contract.md`](../../../scripts/ai-video/lib/adapter-contract.md)
+- [`scripts/media/lib/adapter-contract.md`](../../../scripts/media/lib/adapter-contract.md)

package/dist/agent-src/commands/video/scene.md

@@ -53,7 +53,7 @@ scripts/ai-video/lib/validate-deps.sh .agent-src.uncondensed/commands/video/scen
 
 ### 2. Load config + resolve providers
 
-Source `scripts/ai-video/lib/load-config.sh`. Resolve image / video
+Source `scripts/media/lib/load-config.sh`. Resolve image / video
 provider: flag → `agents/.ai-video.xml` default → fail with the
 available-providers list.
 

package/dist/agent-src/commands/video/storyboard.md

@@ -42,7 +42,7 @@ scripts/ai-video/lib/validate-deps.sh .agent-src.uncondensed/commands/video/stor
 
 ### 2. Load config + resolve image provider
 
-Source `scripts/ai-video/lib/load-config.sh`. Resolve image provider:
+Source `scripts/media/lib/load-config.sh`. Resolve image provider:
 `--image-provider` flag → `agents/.ai-video.xml` default → fail. Reject
 `--video-provider` (this command produces no clips).
 

package/dist/agent-src/commands/video.md

@@ -24,7 +24,7 @@ video creation. Reads provider keys + defaults from
 [`agents/.ai-video.xml`](../../agents/templates/.ai-video.xml.example) (gitignored
 real file; example shipped). Every subcommand is **dry-run by default**;
 network calls require explicit per-turn confirmation per the adapter
-contract under [`scripts/ai-video/lib/adapter-contract.md`](../../scripts/ai-video/lib/adapter-contract.md).
+contract under [`scripts/media/lib/adapter-contract.md`](../../scripts/media/lib/adapter-contract.md).
 
 ## Sub-commands
 
@@ -71,5 +71,5 @@ contract under [`scripts/ai-video/lib/adapter-contract.md`](../../scripts/ai-vid
 
 ## See also
 
-- [`scripts/ai-video/lib/adapter-contract.md`](../../scripts/ai-video/lib/adapter-contract.md) — provider adapter v1 contract
-- [`docs/contracts/command-clusters.md`](../../docs/contracts/command-clusters.md) — `video` cluster registration
+- [`scripts/media/lib/adapter-contract.md`](../../scripts/media/lib/adapter-contract.md) — provider adapter v1 contract
+- [`docs/contracts/command-clusters.md`](../docs/contracts/command-clusters.md) — `video` cluster registration

package/dist/agent-src/contexts/communication/rules-auto/source-of-truth-mechanics.md

@@ -66,9 +66,9 @@ disable-model-invocation: true
 **Creating a new command:**
 
 1. Create `src/agent-src/commands/{name}.md` (use template)
-2. Run `python3 src/scripts/skill_linter.py` — must be 0 FAIL
+2. Run `./scripts-run src/scripts/skill_linter` — must be 0 FAIL
 3. Condense via `/condense`, which writes to `dist/agent-src/commands/`
-4. Run `python3 src/scripts/condense.py --generate-tools` — creates Claude symlink automatically
+4. Run `./scripts-run src/scripts/condense --generate-tools` — creates Claude symlink automatically
 
 **Never** create `.claude/skills/{name}/SKILL.md` manually for commands — always use the symlink workflow.
 
@@ -92,7 +92,7 @@ Commands have `disable-model-invocation: true` in their frontmatter.
 | Edit existing file | Edit in `src/`, condense to `dist/agent-src/` |
 | Create new `.md` | Create in `src/`, condense to `dist/agent-src/` |
 | Create new non-`.md` | Create in `src/`, run `bash src/scripts/condense.sh --sync` |
-| Create new command | Create in `src/agent-src/commands/`, sync, `python3 src/scripts/condense.py --generate-tools` |
+| Create new command | Create in `src/agent-src/commands/`, sync, `./scripts-run src/scripts/condense --generate-tools` |
 | Delete a file | Delete from `src/` and `dist/agent-src/` |
 | Check what needs condensation | `bash src/scripts/condense.sh --changed` |
 | Mark file as condensed | `bash src/scripts/condense.sh --mark-done {path}` |

package/dist/agent-src/contexts/communication/rules-auto/user-interaction-mechanics.md

@@ -82,7 +82,7 @@ position or framing:
    underneath.
 
 Mechanical backstop:
-`python3 scripts/check_reply_consistency.py --stdin < draft.md`
+`./scripts-run src/scripts/check_reply_consistency --stdin < draft.md`
 (non-zero exit on any rule above). Self-scan is the primary gate;
 the script is the deterministic safety net for ambiguous cases.
 

package/dist/agent-src/contexts/execution/evidence-discipline.md

@@ -0,0 +1,153 @@
+# Evidence Discipline — Report format, provenance, enforcement reality
+
+Canonical definitional spine for evidence-first structure discipline. Loaded by
+[`source-discovery`](../../rules/source-discovery-gate.md) rule and skill. Skill
+holds the *procedure*; this file holds the *definitions* every later phase, the
+linter, and ADRs refer back to.
+
+## The invariant
+
+```
+NO STRUCTURAL CLAIM WITHOUT EVIDENCE FROM A REAL SOURCE.
+EVERY FIELD, ENDPOINT, COLUMN, AND VALUE TRACES TO file:line · SDL · migration · probe.
+LOCAL BEFORE REMOTE. REAL SOURCE BEFORE GUESSING.
+```
+
+Product is a **discipline**, not a knowledge database. A card is only an optional
+cache for *expensive* evidence — never a source of truth, never a build input.
+
+## Evidence Report — discovery output
+
+Gitignored session scratchpad (`agents/memory/knowledge/session/`, overwritten each
+task), produced **before** the plan, soft-capped to ~10–20 decision-relevant facts.
+Three buckets:
+
+- **Verified** — confirmed **this session** against a real source, **or** durable
+  committed-card content (negative facts + pointers, pointer-CI green). Nothing else qualifies.
+- **Assumed (from card)** — positive structural claims from a committed card but
+  **not** confirmed this session; explicitly a hypothesis. A card's positive structure
+  is **never** "Verified", even with a green pointer (R4 P1).
+- **Gaps** — missing evidence the decision needs (negative facts in the making).
+
+Feeds the plan. Not a forensic log, not hard enforcement. Produce cheaply via
+`evidence_report.py` so it never gets skipped.
+
+## Provenance and freshness
+
+- Every item carries `observed_at`, `source`, `version` where one exists. Card
+  **positive-structure lines** carry **per-line** `observed_at` / `source_version` (R4 P5).
+- **Within a session:** read is fresh until file's **mtime** changes.
+- **Invalidate all session reads when `git rev-parse HEAD` changes** — new HEAD means
+  tree may have moved.
+- **Fail-fast mid git-op:** if rebase/merge/cherry-pick is in progress
+  (`.git/MERGE_HEAD`, `.git/CHERRY_PICK_HEAD`, or `.git/rebase-merge`/`rebase-apply`
+  present), do **not** read an intermediate tree — stop and surface it (R4 P6,
+  hole-3). *(`.git/REBASE_HEAD` excluded — lingers as stale ref after completed
+  rebase, not a live-op marker.)* `evidence_report.py git-state` is the
+  deterministic check.
+- **Across sessions:** always re-read. No file hashing, no content-hash theater.
+
+## Two-file split
+
+| File | Home | Tracked? | Holds |
+|---|---|---|---|
+| **Ephemeral session cache** | `agents/memory/knowledge/session/` | gitignored | Evidence Report + raw probe/introspection dumps + absence-search log |
+| **Committed card** | `agents/knowledge/<source>.md` | tracked | thin distillation: `trust: durable` negative facts + pointers; positive structure as per-line last-verified hypothesis |
+
+Committed card extends `context-document` mechanism (a specialized context type)
+— **not** a second knowledge system.
+
+## DB-not-in-codebase boundary (R4 P2)
+
+- **In-codebase** = schema defined by repo migrations / models / ORM / app code —
+  **including** schemaless stores the app controls (Mongoose, Prisma, Firestore
+  rules). → always **local, read fresh, no card**.
+- **DB-not-in-codebase** = no repo migrations/models/app-code define the schema
+  **and** app does not control it (vendor SaaS, partner, legacy DB). → may be
+  **card-worthy** (remote evidence).
+
+## Negative facts (R4 P4)
+
+A negative fact is a **current-state fact** — "searched X, did not find Y" — not a
+card-worthiness *decision* (belongs in notes/ADR, never an anti-hallucination card).
+Write a negative-fact card **only after search is exhausted across all relevant
+sources**, logging `searched` *and* `not_searched`, attach a `revalidate_if` trigger.
+
+## Card-worthiness threshold (R3 F-3, R4 P2/P7)
+
+Card-worthy = **(external package / remote API / DB-not-in-codebase)** AND **(≥3
+distinct methods/fields *intended* to be used OR source exposes >50 methods and ≥1
+is used OR prior hallucination OR local types/README insufficient)**. Judged on
+**intended** use at discovery. Cross-feature duplication check flags structure
+discovered in >1 session without a card as "should-have-been-card-worthy".
+
+## L0–L4 — descriptive, not prescriptive
+
+L0–L4 are human shorthand for discovery depth; documentation only. **Same** evidence
+rules apply at every tier — no enforced state machine, no per-tier relaxation.
+
+## Honest enforcement reality
+
+```
+THE SELF-LOG IS INSTRUMENTATION, NOT ENFORCEMENT.
+A MODEL THAT INVENTS A FIELD CAN ALSO WRITE A FALSE "VERIFIED".
+THE TEETH ARE POINTER-CI (DETERMINISTIC) + THE ANTI-HALLUCINATION EVAL (EMPIRICAL).
+```
+
+- **Instrumentation (soft):** Evidence Report and any `card_claims` self-log. Useful
+  signal; never oversold as a guarantee.
+- **Teeth (hard):** pointer-resolution CI (path exists / URL 200, strict-mode
+  content-compare) + multi-evidence git-ancestry consistency check +
+  per-surface anti-hallucination eval with variance baseline.
+
+## Global layer (v2 — cross-project card sharing, ADR-100)
+
+An *expensive* (remote) card may be promoted from project-local `agents/knowledge/`
+to per-user **file-first** global store at `~/.event4u/agent-config/knowledge/`
+(no daemon / DB / vector index / decay — 2026-06-14 Layer-2 sunset's core preserved).
+**Storage, not governed** like a committed card: unversioned, a cache, never a source
+of truth. Gated by `knowledge.global_sharing` setting (**default OFF until
+cross-project reuse is measured across ≥ 2 real projects** — ADR-103 amends ADR-100
+Phase 0; `enabled: false` fully no-ops the layer — v1 unaffected; operator opts in
+explicitly; default flips back only on positive reuse signal).
+
+- **Global card is a distillation, not a copy.** `trust: durable` core is
+  **negative facts + pointers**; positive structure is explicit per-line
+  **hypothesis** — never copied as build input.
+- **Leads-only consumption.** Global card enters Evidence Report as **"Assumed (from
+  card · GLOBAL, unverified)"** — positive structure must be re-confirmed against
+  live source *this session*. Negative facts + pointers are usable as leads.
+  Global-sourced positive structure is **never** "Verified".
+- **Origin-tier scoping is the privacy floor.** `public` auto-shareable; `vendor`
+  shareable **post-redaction**; `proprietary` **manual-only, default-off regardless
+  of `enabled`** — no client-A schema leaks into client-B.
+- **Redaction on write.** Promotion runs the `low-impact-corpus-privacy-floor` +
+  `source-confidentiality` pattern set and **halts** on any hit — never
+  silent-shares, never auto-rewrites.
+- **Promotion is hybrid.** Card seen in ≥`auto_promote_threshold` distinct repos
+  triggers a one-tap **suggestion**; never a silent write.
+
+## Evidence v2 rollback target (Phase 0)
+
+Evidence v2 (self-building project context — Class A config-pointers, Class B
+observed conventions, Class C learned lessons) is an **additive** layer. Rollback
+target is fixed and measurable:
+
+```
+v2 ROLLBACK = DISABLE ALL CURATED ACCUMULATED CONTEXT EXCEPT CLASS-A CONFIG-POINTERS.
+THE MEASURABLE BASELINE TO REVERT TO IS v1 DISCIPLINE WITH NO ACCUMULATED CONTEXT.
+```
+
+Class A (config-derived pointers) is deterministic, drift-proof, no accumulation
+risk → survives rollback. Class B/C are accumulation layers; if v2 eval shows
+accumulated context raises error rate or cost is disproportionate, those layers are
+disabled and agent runs v1 alone — acceptable outcome. "Self-improving" is a
+hypothesis, not a law; rollback target makes the hypothesis falsifiable.
+
+## See also
+
+- [`project-intelligence`](project-intelligence.md) — Evidence v2: self-building context (A/B/C classes, memory tiers, the v1↔v2 isolation contract).
+- [`source-discovery`](../../rules/source-discovery-gate.md) — the obligation surface.
+- [`source-discovery`](../../skills/source-discovery/SKILL.md) — the procedure.
+- [`think-before-action`](../../rules/think-before-action.md) — minimum read set + verification matrix.
+- [`context-document`](../../skills/context-document/SKILL.md) — the card's parent mechanism.