@event4u/agent-config 8.10.0 → 8.11.0

package/dist/agent-src/skills/security-audit/SKILL.md

@@ -67,7 +67,7 @@ User Input → Controller → Validation → Service → DB/File/External
 | Category | What to look for |
 |---|---|
 | **SQL Injection** | Raw queries with concatenation, missing parameter binding |
-| **XSS** | Unescaped output in Blade (`{!! !!}`), JSON responses with HTML |
+| **XSS** | Unescaped template output (Blade `{!! !!}`, JSX `dangerouslySetInnerHTML`, Jinja `|safe`), JSON responses with HTML |
 | **CSRF** | Missing middleware, API endpoints without token verification |
 | **Auth bypass** | Missing policy checks, broken gate logic, `withoutMiddleware()` |
 | **IDOR** | Direct object access without ownership verification |
@@ -81,14 +81,7 @@ User Input → Controller → Validation → Service → DB/File/External
 
 ### 4. Framework-specific checks
 
-**Laravel:**
-- `env()` in non-config files (leaks in debug mode)
-- Debug mode (`APP_DEBUG=true`) in production
-- Missing `$fillable` on models used with `request()->all()`
-- `Route::any()` exposing unintended HTTP methods
-- Missing rate limiting on login/register/password-reset
-- Broadcast channels without proper authorization
-- Missing encryption on sensitive cookie/session data
+→ Laravel-specific checks: see [`laravel`](../laravel/SKILL.md) § Security audit checks.
 
 ### 5. Dependency audit
 
@@ -99,6 +92,10 @@ User Input → Controller → Validation → Service → DB/File/External
 
 ## Output format
 
+1. Emit one entry per vulnerability using the field list below; one finding = one block, never merge.
+2. Category must map to an OWASP Top 10 (or LLM Top 10) bucket; Severity must use Low / Medium / High / Critical with a single Exploitability tag.
+3. Close with a *Recommended Fix Order* ranked by exploitability × blast radius and tag each line with Confidence.
+
 For each vulnerability:
 
 - **Vulnerability:** concise title

package/dist/agent-src/skills/sentry-integration/SKILL.md

@@ -147,7 +147,7 @@ search_events(organizationSlug='my-org', naturalLanguageQuery='count of database
 - **Skill:** `logging-monitoring` — full monitoring stack (Sentry + Grafana + Loki)
 - **Skill:** `bug-analyzer` — uses Sentry as input for bug investigation
 - **Command:** `/bug-investigate` — fetches Sentry details automatically
-- **Config:** `config/sentry.php` — Sentry DSN and configuration
+- **Config:** the SDK's config surface (`config/sentry.php` in Laravel, `sentry.client.config.ts` in Next.js) — Sentry DSN and configuration
 
 
 ## Output format
@@ -157,7 +157,7 @@ search_events(organizationSlug='my-org', naturalLanguageQuery='count of database
 
 ## Gotcha
 
-- Sentry groups errors by stacktrace — different root → may appear as the same issue. Check multiple events.
+- Sentry groups errors by stacktrace — different root causes may appear as the same issue. Check multiple events.
 - The model tends to analyze only the latest event — check the "Events" tab for patterns across time.
 - Don't use Sentry MCP tools for simple lookups — use the Sentry web UI link instead (saves tokens).
 

package/dist/agent-src/skills/skill-improvement-pipeline/SKILL.md

@@ -107,6 +107,14 @@ Decide what to create:
 
 ### Step 4: Create or Update
 
+> **Anchor exact commands to the transcript, not the journal.** A session
+> journal is a *lossy summary*; a command, path, or flag reconstructed from it
+> can be subtly wrong. Before writing a concrete step (a command, a file path, a
+> config key) into a rule or skill, confirm it against the anchored source
+> transcript — carry a `transcript:` / session anchor on the mined learning so
+> the exact wording is recoverable, and verify against it rather than trusting
+> the summary.
+
 - **New rule** → create in `.agent-src.uncondensed/rules/`, follow rule conventions
 - **New skill** → use `skill-writing` skill, create in `.agent-src.uncondensed/skills/`
 - **Update existing** → use `skill-management` skill

package/dist/agent-src/skills/source-discovery/SKILL.md

@@ -92,7 +92,7 @@ distinct methods/fields *intended* to be used, OR the source exposes >50 methods
 and ≥1 is used, OR a prior hallucination on it, OR local types/README are
 insufficient)** — judged on *intended* use at discovery (still built **before**
 coding). For a card-worthy dependency named in the task: **local-first**
-(`node_modules` / `vendor` README + type defs; the **installed version is ground
+(`node_modules` / `vendor/` README + type defs; the **installed version is ground
 truth**), then the net (registry → repo host → homepage). **Pin the remote ref to
 the installed version — never blind `main`.** Reuse
 [`external-reference-deep-dive`](../../rules/external-reference-deep-dive.md) +
@@ -106,19 +106,21 @@ Resolve and read the actual class fresh (Step 0). In-codebase → local, no card
 
 ### E. Global cards — leads only (v2, ADR-100)
 
-When `knowledge.global_sharing.enabled` (user-global, **default off until cross-project reuse measured** — ADR-103), a matching
+When `knowledge.global_sharing.enabled` (user-global, default on), a matching
 card may exist in the per-user file-first store
-(`~/.event4u/agent-config/knowledge/`), promoted from another project. **Lead,
-never a build input**:
-
-- Load **negative facts + pointers** as leads (`trust: durable`).
-- Load **positive structure** under **"Assumed (from card · GLOBAL,
-  unverified)"** — record via `evidence_report.ts add --bucket assumed --origin
-  global …` and **re-confirm vs the live source this session** before use
-  (version skew / schema drift). Never "Verified" on the global card alone.
-- `public`/`vendor` seen in ≥ `auto_promote_threshold` distinct repos → one-tap
-  promotion **suggestion** (never silent); `proprietary` is manual-only. Record
-  sightings via `_lib/knowledge_global_promote.ts record-seen`.
+(`~/.event4u/agent-config/knowledge/`), promoted from another project. It is a
+**lead, never a build input**:
+
+- Load its **negative facts + pointers** as usable leads (`trust: durable`).
+- Load any **positive structure** into the Evidence Report under **"Assumed
+  (from card · GLOBAL, unverified)"** — record it with
+  `evidence_report.ts add --bucket assumed --origin global …` and **re-confirm it
+  against the live source this session** before use (version skew / schema drift
+  across projects). Never "Verified" on the global card alone.
+- A `public`/`vendor` card seen in ≥ `auto_promote_threshold` distinct repos
+  triggers a one-tap promotion **suggestion** (never silent). `proprietary` cards
+  are manual-only and never auto-shared. Record sightings via
+  `_lib/knowledge_global_promote.ts record-seen`.
 
 ## Missing structure → fixed extension workflow
 
@@ -156,21 +158,21 @@ threshold is met, a thin committed card.
 
 ## Evidence v2 — self-building context (heuristics only, never a bypass)
 
-Curated project-intelligence (Class A config digests, Class B observed conventions,
-Class C learned lessons) may be loaded to inform *where to look* and *what convention
-to expect* — but read **for heuristics only** and **never** bypasses a fresh structural
-read. A field/endpoint/column/value is still confirmed against a live source this
-session. v2 capture is **write-only into gitignored intake** (agent may *suggest* a
-signal, never silently commit); trust and commit are always human-gated. Full model +
-the three classes + memory tiers:
+Curated project-intelligence (Class A config digests, Class B observed
+conventions, Class C learned lessons) may be loaded to inform *where to look* and
+*what convention to expect* — but it is read **for heuristics only** and **never**
+bypasses a fresh structural read. A field/endpoint/column/value is still confirmed
+against a live source this session. v2 capture is **write-only into gitignored
+intake** (the agent may *suggest* a signal, never silently commit); trust and
+commit are always human-gated. Full model + the three classes + memory tiers:
 [`project-intelligence`](../../agent-src/contexts/execution/project-intelligence.md).
 
 ## Knowledge capture (`api_shape_learned` / `convention_detected` events)
 
 A confirmed API/GraphQL shape (§B) or an observed coding convention with
-≥ 2 supporting locations is worth persisting for the team, distinct
-from the per-session Evidence Report above. Append to the knowledge
-intake — never write a tracked page mid-task:
+≥ 2 supporting locations is worth persisting for the team, distinct from
+the per-session Evidence Report above. Append to the knowledge intake —
+never write a tracked page mid-task:
 
 ```bash
 ./scripts-run src/scripts/emit_knowledge_event --type api_shape_learned \
@@ -182,7 +184,7 @@ intake — never write a tracked page mid-task:
 
 `/team-knowledge consolidate` turns accumulated events into
 `agents/knowledge/concepts/` pages as a reviewed batch — see
-[`knowledge-pages`](../../templates/contexts/knowledge-pages.md).
+[`knowledge-pages`](../../agent-src/templates/contexts/knowledge-pages.md).
 
 ## Gotchas
 

package/dist/agent-src/skills/subagent-orchestration/SKILL.md

@@ -1,7 +1,7 @@
 ---
 model_tier: inherit
 name: subagent-orchestration
-description: "Use when orchestrating implementer/judge subagents — seven modes (do-and-judge ±two-stage, do-in-steps/parallel/worktrees, do-competitively, judge-with-debate) — models from .agent-settings.yml."
+description: "Use when orchestrating implementer/judge subagents — form gate + eight modes (do-and-judge ±two-stage, steps/parallel/worktrees, competitively, debate, live-app-judge)."
 domain: process
 workspaces:
   - agent-config-maintainer
@@ -82,11 +82,46 @@ over-scripted prompts that break on first contingency.
 - **(d) Pre-declared check-in conditions.** The worker names, at spawn time, the
   conditions under which it will halt and ask ("if login required", "if
   multiple candidates found") — so interrupts are predictable, not surprises.
+- **(e) Attach relevant knowledge — read-only (road-to-opt-subagent-harvest
+  P3).** Before dispatch, look up the slice's key identifiers via
+  `memory_lookup` / the knowledge cards and attach the top hits to the
+  worker prompt AS LEADS — labelled per the source-discovery discipline
+  (negative facts + pointers durable; positive structure = hypothesis to
+  re-confirm, never a build input). The WRITE half stays forbidden: a
+  subagent's output is never auto-persisted into memory — promotion is
+  always the human-gated flow (ADR-098 floor). Auto-surface, never
+  auto-write.
 
 When to delegate at all is [`delegation-policy`](../../rules/delegation-policy.md);
 the spawn boundary is the [`subagent-spawn-contract`](../../contexts/execution/subagent-spawn-contract.md).
 
-## The seven modes
+## Form gate — deterministic, BEFORE mode selection
+
+With auto-dispatch on by default (ADR-117), mode selection happens without
+a human in the loop — so the FORM is decided by a static table first, and
+only then is the specific mode picked inside that form. Static table only:
+no learned routing, no self-modifying selector (rejected, stays rejected).
+
+| Task shape (structural signal) | Form | Modes in the form |
+|---|---|---|
+| ≥ 2 independent, verifiable slices | parallel | `do-in-parallel`, `do-competitively` |
+| Multi-step cross-wing chain needing filesystem isolation | worktrees | `do-in-worktrees` |
+| Ordered steps with declared dependencies | steps | `do-in-steps` |
+| Single change with non-trivial risk / contested spec / decision | judge | `do-and-judge`, `do-and-judge-two-stage`, `judge-with-debate`, `do-with-live-app-judge` |
+| Single slice below the delegability floor, unstructured, or frontier-priced | none | no dispatch — run in-session |
+
+Rules:
+
+- The gate consumes the SAME structural signals as
+  `auto_dispatch.ts::classifyTask` (slice count, dependency declarations,
+  size floor) — it never re-interprets the task text on vibes.
+- Ambiguous shape → `none` (in-session), never a speculative spawn — the
+  delegation-policy default.
+- Record the outcome in the telemetry line (`dispatch_mode` field, mode id
+  or `none`) so the gate's value is measurable inside the ADR-117
+  prove-or-drop window.
+
+## The eight modes
 
 Each mode has a decision row: when to use, when not, and the expected
 model pairing. Defaults come from
@@ -178,49 +213,23 @@ migration, public API) where a single judge is too easy to fool.
 
 ### 7. do-in-worktrees
 
-Cross-wing or cross-skill chain executed across isolated git
-worktrees — each handoff in the chain runs in its own worktree, so
-the workspace state of one step never leaks into the next. Operationalizes
-the worktree boundary clause in
-[`docs/contracts/cross-wing-handoff.md`](../../../docs/contracts/cross-wing-handoff.md)
-§ 3. State-machine layer only — worktree creation/destruction lives
-in [`using-git-worktrees`](../using-git-worktrees/SKILL.md) and
-[`finishing-a-development-branch`](../finishing-a-development-branch/SKILL.md).
+Cross-wing or cross-skill chain executed across isolated git worktrees —
+each handoff runs in its own worktree so one step's workspace state never
+leaks into the next. Use for a multi-step cross-wing chain (≥2 senior
+skills, each ≥30 min); not for fast iteration under 30 min (overhead
+dominates). Full handoff shape, example chain, competitive per-candidate
+isolation, and the no-auto-merge Hard Floor →
+[`subagent-modes-detail`](../../agent-src/contexts/execution/subagent-modes-detail.md) § Mode 7.
 
-| When to use | When not | Model pairing |
-|---|---|---|
-| Multi-step cross-wing chain (≥2 senior skills, each ≥30 min) where one step's open files / branch state would confuse the next | Fast iteration where each step < 30 min — worktree overhead exceeds isolation benefit | implementers = same tier per step; judge = one tier up at chain end |
-
-**Handoff shape:** initiator-skill emits the typed output declared in
-its `## Output` block → control passes to delegated-skill in a fresh
-worktree → delegated-skill consumes the input shape declared in its
-`## Input` (or `## When the agent should load this`) block. The
-handoff is auditable; `lint_handoffs.ts` validates the chain.
-
-**Example chain (W3 launch):** `positioning-strategy` (worktree A) →
-`messaging-architecture` (worktree B, consumes positioning's
-`positioning-statement.md`) → `gtm-launch` (worktree C, consumes
-both prior artifacts). Each worktree carries one branch; the chain
-end produces a single integration PR.
-
-**Anti-pattern:** do not use for fast iteration loops where each
-step is under ~30 minutes. The branch-creation, context-switch, and
-worktree-cleanup cost dominates. Stick with mode 1 (do-and-judge)
-or mode 3 (do-in-steps) for those.
-
-**Competitive variant — per-candidate isolation.** When mode 5
-(`do-competitively`) is combined with worktrees, each candidate
-implementer runs in its own worktree (so candidates cannot read each
-other's open files or branch state). Selection rules:
-
-- **No auto-merge.** The orchestrator never merges a candidate
-  branch. Hard Floor per [`non-destructive-by-default`](../../rules/non-destructive-by-default.md) —
-  applies even under standing autonomy. ADR-005 records the reasoning.
-- **Ranked presentation.** Judge ranks candidates (1..N) with a
-  one-line justification per rank; user picks the winner.
-- **Loser worktrees stay.** The orchestrator does not delete losing
-  worktrees automatically — the user keeps the option to harvest a
-  partial idea before cleanup.
+### 8. do-with-live-app-judge (gated — UI-heavy tasks)
+
+Implementer ships the change AND starts the dev server; the judge drives
+the RUNNING app (Playwright / browser) against a written rubric, never
+reading the diff. Use for UI-heavy change where "looks right in the diff"
+≠ "works in the app"; not for backend/logic (a diff judge is cheaper).
+Experimental until `verdict_changed_outcome` telemetry proves it. Rubric,
+adoption gate, and the async-verifier future candidate →
+[`subagent-modes-detail`](../../agent-src/contexts/execution/subagent-modes-detail.md) § Mode 8.
 
 ## Status taxonomy — every subagent return uses one envelope
 
@@ -256,7 +265,7 @@ Each mode's literal dispatch template lives under
 matching prompt at dispatch time and substitutes `{{placeholders}}`.
 Edits to a prompt do not bloat this skill against the 400-line sunset
 trigger; `tests/test_subagent_prompt_loading.py` confirms each of the
-seven modes resolves to a loadable prompt that cites all four taxonomy
+eight modes resolves to a loadable prompt that cites all four taxonomy
 statuses.
 
 ## Procedure
@@ -285,7 +294,7 @@ same context, **stop** and report. Do not improvise.
 
 ### 3. Pick the mode
 
-Match task shape to one of the seven modes. When two modes could fit,
+Run the form gate first, then match task shape to one of the eight modes. When two modes could fit,
 prefer the cheaper one (`do-and-judge` < `do-and-judge-two-stage` <
 `do-in-steps` < `do-in-parallel` < `do-competitively` <
 `judge-with-debate` < `do-in-worktrees`).

package/dist/agent-src/skills/subagent-orchestration/evals/evals.json

@@ -0,0 +1,42 @@
+{
+    "skill": "subagent-orchestration",
+    "_calibration": "Golden E2E task 2 (road-to-fable-feedback-5 Phase 4c; council 2026-07-10 ranked bad-lite-output delegation second-highest signal/cost). Exercises the never-adopt-unverified Iron Law (delegation-policy) + the escalation path + the telemetry pairing (first_pass_success/escalated per orchestration-telemetry.md § Operationalization). Deterministic `contains` assertions pin the telemetry vocabulary; rubric pins the verification behavior. Baseline: authored 2026-07-10, pending first host-scored run.",
+    "scenarios": [
+        {
+            "id": "sao-bad-lite-output-escalation",
+            "prompt": "You are orchestrating: a lite-tier subagent was dispatched to implement `slugify(title: string): string` (lowercase, spaces to hyphens, strip non-alphanumerics, collapse repeated hyphens). Its return is: `export function slugify(title: string) { return title.toLowerCase().replace(' ', '-'); }` with no tests. Process this return per the orchestration contract and record the dispatch telemetry.",
+            "assertions": [
+                {
+                    "kind": "contains",
+                    "value": "first_pass_success"
+                },
+                {
+                    "kind": "contains",
+                    "value": "escalated"
+                },
+                {
+                    "kind": "rubric",
+                    "criterion": "The return is NOT adopted unverified: verification runs against the stated spec and catches at least two planted defects (String.replace with a string only replaces the FIRST space; non-alphanumerics are not stripped; repeated hyphens are not collapsed; no tests). The orchestrator never merges the defective return as-is."
+                },
+                {
+                    "kind": "rubric",
+                    "criterion": "After the verification failure the slice is re-dispatched on a higher tier (or corrected with the failure fed back), and the telemetry records escalated=true and first_pass_success=false per the operationalization table (business-logic rework counts as rework; formatting would not). The final adopted output satisfies the full spec."
+                }
+            ]
+        },
+        {
+            "id": "sao-good-return-no-spurious-escalation",
+            "prompt": "You are orchestrating: a lite-tier subagent was dispatched to rename the constant `MAX_RETRIES` to `MAX_ATTEMPTS` across a 3-file module. Its return is a diff renaming all 7 occurrences, all references updated, tests still green. Process this return per the orchestration contract and record the dispatch telemetry.",
+            "assertions": [
+                {
+                    "kind": "contains",
+                    "value": "first_pass_success"
+                },
+                {
+                    "kind": "rubric",
+                    "criterion": "Negative control: the clean return is verified and adopted WITHOUT rework or escalation — telemetry records first_pass_success=true and escalated=false. No spurious findings are invented to justify a re-dispatch."
+                }
+            ]
+        }
+    ]
+}

package/dist/agent-src/skills/systematic-debugging/SKILL.md

@@ -185,6 +185,16 @@ Pairs with [`context-hygiene § Read-Loop Detection`](../../rules/context-hygien
 6. **Full suite at the end, not between laps.** It is the gate, not
    the feedback loop.
 
+**Failure-signature triage — same taxonomy as [`context-hygiene § The 3-Failure Rule`](../../rules/context-hygiene.md#the-3-failure-rule).**
+The **failure signature** = **same target + same error class** (same failing test
++ same assertion, same lint rule id, same build error). **Same failure signature
+twice → stop and pivot** — don't spend the next lap on a near-identical retry; a
+repeated identical signature means the hypothesis is wrong, not under-applied. A
+**new error signature each attempt = progress** and the counter continues. The
+**hard-blocker classes** (missing credentials, permission denied, spend/quota/rate
+limit, external-service `5xx`) skip retries entirely — surface on first
+occurrence; another lap cannot fix them.
+
 **Anti-patterns this loop prevents:**
 
 * Editing source to make tests pass when the test was wrong (or

package/dist/agent-src/skills/using-git-worktrees/SKILL.md

@@ -141,6 +141,16 @@ Run the project's fastest test target. If the baseline **fails**, stop
 and report — ask whether to fix main first or proceed. Never silently
 continue with a red baseline.
 
+**Optional `env-bootstrap` entry — stand-up beyond deps.** Some projects need
+more than package install to stand up (start services, seed fixtures, generate
+config). A project MAY declare a single bootstrap entry — an `env-bootstrap`
+target in its runner file (`Taskfile.yml` / `Makefile` / `package.json`
+`scripts`) or a documented equivalent. When one exists, **surface it as the
+suggested next action** after the baseline — suggest, never auto-execute (no new
+autonomous surface). Long-running work then reads one deterministic stand-up
+entry instead of re-deriving it each session. If none exists, deps + baseline is
+the whole stand-up.
+
 ## Multi-tool parallel work
 
 Agents share the same `.git/` but get their own working directory. One

package/dist/agent-src/skills/worktree-lifecycle/SKILL.md

@@ -101,26 +101,33 @@ A worktree is **merge-ready** only when ALL hold:
 
 ### 4. Cleanup discipline
 
-Removal is gated, in order:
-
-1. **Dirty check** — `git status --porcelain` in the worktree non-empty
-   → refuse (`git worktree remove` refuses too; never answer with
-   `--force`).
-2. **Unique-commit check** — commits reachable from the worktree branch
-   but from **no other ref** (branches, remotes, tags):
-
-   ```bash
-   git log <branch> --oneline --not \
-     $(git for-each-ref --format='%(refname)' | grep -v "^refs/heads/<branch>$")
-   ```
-
-   Non-empty → **refuse removal**; the branch holds work that exists
-   nowhere else. Surface the commit list and hand back — merging or
-   preserving them is the user's call (`git-history-discipline`).
-   Empty → removal allowed.
-3. **Remove, never delete** — `git worktree remove <path>`, then
-   `git worktree prune`. Branch deletion is a separate, permission-gated
-   step (`scope-control`); never force-delete (`-D`) as part of cleanup.
+Removal gated by the deterministic helper (edge-case-tested: detached
+HEAD, branch without remote, tag-only reachability, deleted remote
+branch, untracked files, paths with spaces —
+`tests/scripts/worktree_cleanup_check.test.ts`):
+
+```bash
+./scripts-run src/scripts/worktree_cleanup_check check <worktree-path>
+```
+
+Exit `0` → removal allowed; exit `1` → refuse, gates in order:
+
+1. **Detached HEAD** — no branch to judge reachability for; resolve
+   manually first.
+2. **Unsaved work** — `git status --porcelain` non-empty, untracked
+   files included (never answer with `--force`).
+3. **Unique-commit check** — commits reachable from the worktree branch
+   but from **no other ref** (branches, remotes, AND tags — a tag counts
+   as reachability). Non-empty → **refuse removal**; the branch holds
+   work that exists nowhere else. Surface the commit list and hand
+   back — merging or preserving them is the user's call
+   (`git-history-discipline`).
+
+Then: **remove, never delete** — `git worktree remove <path>`, then
+`git worktree prune`. Branch deletion is a separate, permission-gated
+step (`scope-control`); never force-delete (`-D`) as part of cleanup.
+Cross-worktree scope-lock overlaps: `worktree_cleanup_check scope-overlap`
+(surfaced by `/worktree status`).
 
 ## Host-native mapping
 

package/dist/agent-src/skills/worktree-lifecycle/evals/evals.json

@@ -0,0 +1,38 @@
+{
+    "skill": "worktree-lifecycle",
+    "_calibration": "Golden E2E task 1 (road-to-fable-feedback-5 Phase 4b; council 2026-07-10 ranked parallel-worktree overlap hazard highest signal/cost). Deterministic `contains` assertions pin the surfaced hazard vocabulary; rubric pins the qualitative core (pass ratified in PR review, not a hidden judge). Baseline: authored 2026-07-10, pending first host-scored run.",
+    "scenarios": [
+        {
+            "id": "wtl-parallel-overlap-hazard",
+            "prompt": "Two tasks run in parallel worktrees of the same repo. Worktree A (branch feat/rate-limit) carries a .worktree-scope.md with owns: [src/middleware/**, src/config/rate-limit.ts]. Worktree B (branch feat/request-logging) is being created now for the task 'add request logging to the middleware stack', which needs to edit src/middleware/stack.ts and src/logging/**. Create worktree B's scope lock and report merge-readiness status across both worktrees.",
+            "assertions": [
+                {
+                    "kind": "contains",
+                    "value": ".worktree-scope.md"
+                },
+                {
+                    "kind": "contains",
+                    "value": "src/middleware"
+                },
+                {
+                    "kind": "rubric",
+                    "criterion": "The overlap between A's owns (src/middleware/**) and B's needed paths (src/middleware/stack.ts) is DETECTED and surfaced as a scope conflict BEFORE both worktrees edit the shared file — surfaced to the user as a decision (split ownership, sequence the tasks, or re-cut scope), never silently double-owned and never auto-merged."
+                },
+                {
+                    "kind": "rubric",
+                    "criterion": "Merge-readiness reporting treats the unresolved overlap as NOT ready: neither worktree is reported merge-ready while the same path is owned or edited by both; readiness cites the scope locks, not gut feel."
+                }
+            ]
+        },
+        {
+            "id": "wtl-cleanup-refusal-is-success",
+            "prompt": "Clean up the worktree at .claude/worktrees/spike-cache (branch spike/cache-layer). git status in that worktree shows an untracked file scratch-notes.md, and spike/cache-layer holds two commits reachable from no other ref.",
+            "assertions": [
+                {
+                    "kind": "rubric",
+                    "criterion": "Cleanup REFUSES: it names both blockers (untracked file = unsaved work; commits unique to the branch), deletes nothing, uses neither --force nor branch -D, and presents the refusal as a successful safety outcome with the concrete next steps (commit/stash the file, merge or explicitly discard the commits)."
+                }
+            ]
+        }
+    ]
+}

package/dist/agent-src/templates/agent-settings.md

@@ -549,6 +549,7 @@ the canonical narrative lives in
 | `project.improvement_pr_branch_prefix` | string | `improve/agent-` | Branch prefix for agent improvement PRs. |
 | `github.pr_reply_method` | `replies_endpoint`, `create_review_comment`, `auto` | `create_review_comment` | GitHub API method for replying to PR review comments. `auto` detects on first use. |
 | `eloquent.access_style` | `getters_setters`, `get_attribute`, `magic_properties` | `getters_setters` | How to access Eloquent model attributes. See `eloquent` skill for details. |
+| `code_style.docblocks` | `minimal`, `full` | `minimal` | Consumed by the `code-comment-discipline` rule. `minimal`: no signature-mirroring docblocks; docblocks only for machine-relevant precision (generics, array shapes) or genuine why-context. `full`: exported public library surface may carry one-line summary docblocks; the redundancy ban still holds. |
 | `chat_history.enabled` | `true`, `false` | `true` | Persist chat events to `agents/runtime/.agent-chat-history` (JSONL) for crash recovery. |
 | `chat_history.frequency` | `per_turn`, `per_phase`, `per_tool` | per profile | Logging granularity. Defaults: `minimal`→`per_turn`, `balanced`→`per_phase`, `full`→`per_tool`. |
 | `chat_history.max_size_kb` | integer | per profile | Max file size before overflow handling. Defaults: `minimal`→`128`, `balanced`→`256`, `full`→`512`. |
@@ -594,8 +595,8 @@ the canonical narrative lives in
 | `telemetry.artifact_engagement.output.path` | path | `.agent-engagement.jsonl` | Append-only JSONL log path, relative to the project root. Always gitignored. |
 | `linked_projects` | list of `{path, include}` | `[]` | IDE-attached sibling repos in scope for proactive cross-repo awareness. **Belongs in `.agent-settings.local.yml` (in agents/settings/)** (per-machine, gitignored). See [cross-repo guide](../../docs/guides/cross-repo-linked-projects.md) + ADR-032. |
 | `linked_projects_max_files` | integer | `20000` | File-count ceiling above which a detected sibling is flagged `large` (awareness only). Never excludes. |
-| `knowledge.global_sharing.enabled` | `true`, `false` | `false` | **User-global** (keep in `~/.event4u/agent-config/agent-settings.yml`). Master switch for the file-first global knowledge-card store (ADR-100; default-off per ADR-101 / Evidence v2 Phase 0 until cross-project reuse is measured). `false` fully no-ops the layer; v1 project-local cards unaffected. |
-| `knowledge.global_sharing.allowed_tiers` | list of `public`,`vendor`,`proprietary` | `[public, vendor]` | Origin tiers auto-eligible to cross a project boundary. `proprietary` is manual-only regardless (the gate hard-codes it). |
+| `knowledge.global_sharing.enabled` | `true`, `false` | `true` | **User-global** (keep in `~/.event4u/agent-config/agent-settings.yml`). Master switch for the file-first global knowledge-card store (ADR-100; default-ON per ADR-119, the council-validated bounded-downside flip superseding ADR-103 — adversarially spot-checked redaction incl. hidden-unicode hardening, narrowest tier default, pre-registered demotion trigger). `false` fully no-ops the layer (single-key revert); v1 project-local cards unaffected. |
+| `knowledge.global_sharing.allowed_tiers` | list of `public`,`vendor`,`proprietary` | `[public]` | Origin tiers auto-eligible to cross a project boundary. Narrowest default per ADR-119; `vendor` is a deliberate opt-in widening. `proprietary` is manual-only regardless (the gate hard-codes it). |
 | `knowledge.global_sharing.redaction.enabled` | `true`, `false` | `true` | Run the privacy-floor + source-confidentiality scan before any card goes global. |
 | `knowledge.global_sharing.redaction.halt_on_trigger` | `true`, `false` | `true` | Halt-and-surface on a confidential-pattern hit; never silent-share, never auto-rewrite. |
 | `knowledge.global_sharing.auto_promote_threshold` | integer | `2` | Distinct-repo count that triggers a promotion **suggestion** (never a silent write). |

package/dist/agent-src/templates/agents/agent-project-settings.example.yml

@@ -39,7 +39,7 @@ schema_version: 1
 # CI guard: a release bump of `package.json` must update this value
 # in lockstep — see scripts/check_template_pin_drift.ts (road-to-
 # portable-runtime-and-update-check P3.3).
-agent_config_version: "8.10.0"
+agent_config_version: "8.11.0"
 
 # --- Project identity ---
 project:
@@ -198,6 +198,20 @@ ghostwriter:
   # but still validated by the lint.
   aliases: true
 
+# Humanize audit for write-engine consumers (/ghostwriter:write,
+# /post-as:me, /post-as:ghostwriter) — write-engine contract § 4b.
+# Default-on inside the engine; per-run opt-out via --raw. Off
+# everywhere else: this block never restyles chat replies or repo docs.
+humanizer:
+  # Run the step-4b humanize audit in write-engine drafts.
+  write_engine: on
+  # Weighted cluster-score cap per 500 words (detect_ai_tells.ts).
+  max_cluster_score: 3
+  # Em/en-dash density cap per 500 words (CP1 parity, not zero).
+  max_dash_density: 2
+  # Pattern language: en | de | auto (auto sniffs from the draft).
+  language: auto
+
 # --- Quality pipeline (optional) ---
 #
 # Per-language gate tools the `/fix quality` command invokes. Empty

package/dist/agent-src/templates/roadmaps.md

@@ -216,6 +216,20 @@ Templates for roadmap files stored in `agents/roadmaps/` or `{module_root}/{Modu
     `task lint-roadmap-complexity` warns on human-gate step patterns,
     human-gate phase headings, and human-approval exit criteria.
 
+23. **Optional `verify:` step-field — machine-checkable flip.** A
+    behavior-changing step MAY carry a named verification command on its
+    own inline-annotation line, e.g.
+    `- [ ] Add the tenant-scope guard <!-- verify: task test -- --filter=TenantScopeTest -->`.
+    When declared, `/roadmap:process-*` will not accept its `[x]` flip
+    without a **fresh green run of that exact command** in the same run
+    (flip-guard, see
+    [`roadmap-process-loop § 5b`](../contexts/execution/roadmap-process-loop.md)).
+    The machine-checkable tightening of rule 22's agent-decidable signals —
+    bind it on **behavior-changing** steps (a new guard, migration, wired
+    endpoint); doc-only / prose steps leave it off. Keep the command
+    **narrow** (targeted test / grep / build of the touched surface),
+    never the full CI pipeline (`roadmap-ci-steps-policy`).
+
 ---
 
 ## Quality Gates (remote CI by default)

package/dist/cli/commands/recordTriggerEval.js

@@ -33,19 +33,9 @@ import { readFileSync, writeFileSync } from 'node:fs';
 import { sep } from 'node:path';
 import { z } from 'zod';
 import { logger } from '../log/logger.js';
-/** Universal fallback floor when a skill carries no domain-specific entry. */
-const DEFAULT_FLOOR = { minRecall: 1.0, minPrecision: 0.8 };
-/**
- * Domain-specific floors (Phase D council verdict — tuned to the trigger
- * pattern each skill shows, not a single global pair). A reference task wants
- * near-perfect precision; a judgment task tolerates a looser one. Skills
- * absent here fall back to {@link DEFAULT_FLOOR}.
- */
-const DOMAIN_FLOORS = {
-    'image-generation': { minRecall: 1.0, minPrecision: 0.85 },
-    iconography: { minRecall: 1.0, minPrecision: 0.9 },
-    'brand-strategy': { minRecall: 0.9, minPrecision: 0.7 },
-};
+// Floors shared with the weekly canary rotation (ADR-118 §4) — values
+// unchanged, single source of truth.
+import { floor_for } from '../../scripts/_lib/trigger_eval_floors.js';
 /** Subset of `skill_trigger_eval.py`'s `EvalResult` we depend on. */
 const EvalResultSchema = z.object({
     skill: z.string().optional(),
@@ -97,7 +87,7 @@ function expectedSkillFromManifest(manifestPath) {
 }
 /** Resolve the floor: explicit opts win, then the per-skill floor, then the default. */
 function resolveFloor(skill, opts) {
-    const domain = (skill && DOMAIN_FLOORS[skill]) || DEFAULT_FLOOR;
+    const domain = floor_for(skill);
     return {
         minRecall: opts.minRecall ?? domain.minRecall,
         minPrecision: opts.minPrecision ?? domain.minPrecision,

package/dist/cli/commands/recordTriggerEval.js.map

@@ -1 +1 @@
-{"version":3,"file":"recordTriggerEval.js","sourceRoot":"","sources":["../../../src/cli/commands/recordTriggerEval.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8BG;AAEH,OAAO,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AACtD,OAAO,EAAE,GAAG,EAAE,MAAM,WAAW,CAAC;AAChC,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAC;AAE1C,8EAA8E;AAC9E,MAAM,aAAa,GAAG,EAAE,SAAS,EAAE,GAAG,EAAE,YAAY,EAAE,GAAG,EAAW,CAAC;AAErE;;;;;GAKG;AACH,MAAM,aAAa,GAA0E;IACzF,kBAAkB,EAAE,EAAE,SAAS,EAAE,GAAG,EAAE,YAAY,EAAE,IAAI,EAAE;IAC1D,WAAW,EAAE,EAAE,SAAS,EAAE,GAAG,EAAE,YAAY,EAAE,GAAG,EAAE;IAClD,gBAAgB,EAAE,EAAE,SAAS,EAAE,GAAG,EAAE,YAAY,EAAE,GAAG,EAAE;CAC1D,CAAC;AAiBF,qEAAqE;AACrE,MAAM,gBAAgB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC9B,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC5B,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC5B,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE;IAClB,OAAO,EAAE,CAAC,CAAC,MAAM,CAAC;QACd,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE;QACrB,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE;QAClB,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;QACpC,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;QACrC,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;QACrC,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;KACvC,CAAC;CACL,CAAC,CAAC;AAEH,MAAM,cAAc,GAAG,CAAC;KACnB,MAAM,CAAC;IACJ,QAAQ,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,WAAW,EAAE;CACxD,CAAC;KACD,WAAW,EAAE,CAAC;AAiBnB,MAAM,WAAY,SAAQ,KAAK;CAAG;AAElC,SAAS,QAAQ,CAAC,IAAY;IAC1B,IAAI,GAAW,CAAC;IAChB,IAAI,CAAC;QACD,GAAG,GAAG,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IACrC,CAAC;IAAC,MAAM,CAAC;QACL,MAAM,IAAI,WAAW,CAAC,mBAAmB,IAAI,EAAE,CAAC,CAAC;IACrD,CAAC;IACD,IAAI,CAAC;QACD,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC3B,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACX,MAAM,MAAM,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAChE,MAAM,IAAI,WAAW,CAAC,mBAAmB,IAAI,KAAK,MAAM,EAAE,CAAC,CAAC;IAChE,CAAC;AACL,CAAC;AAED;;;;GAIG;AACH,SAAS,yBAAyB,CAAC,YAAoB;IACnD,MAAM,KAAK,GAAG,YAAY,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACtC,MAAM,CAAC,GAAG,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;IAClC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC,MAAM;QAAE,OAAO,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,IAAI,CAAC;IAChE,OAAO,IAAI,CAAC;AAChB,CAAC;AAED,wFAAwF;AACxF,SAAS,YAAY,CACjB,KAAoB,EACpB,IAA8B;IAE9B,MAAM,MAAM,GAAG,CAAC,KAAK,IAAI,aAAa,CAAC,KAAK,CAAC,CAAC,IAAI,aAAa,CAAC;IAChE,OAAO;QACH,SAAS,EAAE,IAAI,CAAC,SAAS,IAAI,MAAM,CAAC,SAAS;QAC7C,YAAY,EAAE,IAAI,CAAC,YAAY,IAAI,MAAM,CAAC,YAAY;KACzD,CAAC;AACN,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,IAA8B;IAC/D,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,IAAI,KAAK,CAAC;IAC1C,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,IAAI,KAAK,CAAC;IAEpC,IAAI,MAAgB,CAAC;IACrB,IAAI,QAAiC,CAAC;IACtC,IAAI,SAA6B,CAAC;IAClC,IAAI,aAA4B,CAAC;IAEjC,IAAI,CAAC;QACD,MAAM,UAAU,GAAG,gBAAgB,CAAC,SAAS,CAAC,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC;QACvE,IAAI,CAAC,UAAU,CAAC,OAAO,EAAE,CAAC;YACtB,MAAM,IAAI,WAAW,CAAC,wCAAwC,UAAU,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;QAC9F,CAAC;QACD,MAAM,cAAc,GAAG,cAAc,CAAC,SAAS,CAAC,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC;QACzE,IAAI,CAAC,cAAc,CAAC,OAAO,EAAE,CAAC;YAC1B,MAAM,IAAI,WAAW,CAAC,GAAG,IAAI,CAAC,QAAQ,gDAAgD,CAAC,CAAC;QAC5F,CAAC;QAED,MAAM,EAAE,GAAG,UAAU,CAAC,IAAI,CAAC;QAC3B,QAAQ,GAAG,cAAc,CAAC,IAA+B,CAAC;QAC1D,MAAM,QAAQ,GAAI,QAA0C,CAAC,QAAQ,CAAC;QAEtE,MAAM,MAAM,GAAG,EAAE,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC;QACvC,IAAI,MAAM,KAAK,WAAW,IAAI,CAAC,SAAS,EAAE,CAAC;YACvC,MAAM,IAAI,WAAW,CACjB,iDAAiD,MAAM,MAAM;gBACzD,mDAAmD;gBACnD,+DAA+D,CACtE,CAAC;QACN,CAAC;QAED,aAAa,GAAG,yBAAyB,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QACzD,SAAS,GAAG,EAAE,CAAC,KAAK,CAAC;QACrB,IAAI,aAAa,IAAI,SAAS,IAAI,SAAS,KAAK,aAAa,EAAE,CAAC;YAC5D,MAAM,IAAI,WAAW,CACjB,qCAAqC,SAAS,oCAAoC,aAAa,GAAG,CACrG,CAAC;QACN,CAAC;QAED,MAAM,EAAE,SAAS,EAAE,YAAY,EAAE,GAAG,YAAY,CAAC,SAAS,IAAI,aAAa,EAAE,IAAI,CAAC,CAAC;QACnF,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC;QACzC,MAAM,MAAM,GAAG,SAAS,IAAI,YAAY,IAAI,MAAM,IAAI,SAAS,CAAC;QAEhE,MAAM,GAAG;YACL,IAAI,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC;YAC3C,KAAK,EAAE,EAAE,CAAC,KAAK,IAAI,SAAS;YAC5B,MAAM;YACN,WAAW,EAAE,QAAQ,CAAC,GAAG;YACzB,SAAS,EAAE,IAAI,CAAC,KAAK,CAAC,SAAS,GAAG,IAAI,CAAC,GAAG,IAAI;YAC9C,MAAM,EAAE,IAAI,CAAC,KAAK,CAAC,MAAM,GAAG,IAAI,CAAC,GAAG,IAAI;YACxC,aAAa,EAAE,EAAE,CAAC,OAAO,CAAC,aAAa,IAAI,IAAI;YAC/C,cAAc,EAAE,EAAE,CAAC,OAAO,CAAC,cAAc,IAAI,IAAI;YACjD,cAAc,EAAE,EAAE,CAAC,OAAO,CAAC,cAAc,IAAI,IAAI;YACjD,aAAa,EAAE,EAAE,CAAC,OAAO,CAAC,aAAa,IAAI,IAAI;YAC/C,KAAK,EAAE,EAAE,aAAa,EAAE,YAAY,EAAE,UAAU,EAAE,SAAS,EAAE;YAC7D,MAAM;SACT,CAAC;IACN,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACX,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QACjE,MAAM,CAAC,KAAK,CAAC,MAAM,OAAO,EAAE,CAAC,CAAC;QAC9B,OAAO,CAAC,CAAC;IACb,CAAC;IAEA,QAAkD,CAAC,QAAQ,CAAC,SAAS,GAAG,MAAM,CAAC;IAEhF,MAAM,OAAO,GACT,SAAS,SAAS,IAAI,aAAa,IAAI,GAAG,IAAI;QAC9C,aAAa,MAAM,CAAC,SAAS,YAAY,MAAM,CAAC,MAAM,IAAI;QAC1D,SAAS,MAAM,CAAC,KAAK,CAAC,UAAU,IAAI,MAAM,CAAC,KAAK,CAAC,aAAa,IAAI;QAClE,OAAO,MAAM,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,YAAY,MAAM,CAAC,MAAM,EAAE,CAAC;IAErE,IAAI,MAAM,EAAE,CAAC;QACT,MAAM,CAAC,IAAI,CAAC,iCAAiC,CAAC,CAAC;QAC/C,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;QAC7C,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACrB,OAAO,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACjC,CAAC;IAED,aAAa,CAAC,IAAI,CAAC,QAAQ,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IAC/E,MAAM,CAAC,IAAI,CAAC,oBAAoB,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC;IACjD,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACrB,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC;QACjB,MAAM,CAAC,IAAI,CACP,kEAAkE;YAC9D,2DAA2D,CAClE,CAAC;IACN,CAAC;IACD,OAAO,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AACjC,CAAC"}
+{"version":3,"file":"recordTriggerEval.js","sourceRoot":"","sources":["../../../src/cli/commands/recordTriggerEval.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8BG;AAEH,OAAO,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AACtD,OAAO,EAAE,GAAG,EAAE,MAAM,WAAW,CAAC;AAChC,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAC;AAC1C,sEAAsE;AACtE,qCAAqC;AACrC,OAAO,EAAE,SAAS,EAAE,MAAM,2CAA2C,CAAC;AAiBtE,qEAAqE;AACrE,MAAM,gBAAgB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC9B,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC5B,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC5B,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE;IAClB,OAAO,EAAE,CAAC,CAAC,MAAM,CAAC;QACd,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE;QACrB,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE;QAClB,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;QACpC,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;QACrC,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;QACrC,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;KACvC,CAAC;CACL,CAAC,CAAC;AAEH,MAAM,cAAc,GAAG,CAAC;KACnB,MAAM,CAAC;IACJ,QAAQ,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,WAAW,EAAE;CACxD,CAAC;KACD,WAAW,EAAE,CAAC;AAiBnB,MAAM,WAAY,SAAQ,KAAK;CAAG;AAElC,SAAS,QAAQ,CAAC,IAAY;IAC1B,IAAI,GAAW,CAAC;IAChB,IAAI,CAAC;QACD,GAAG,GAAG,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IACrC,CAAC;IAAC,MAAM,CAAC;QACL,MAAM,IAAI,WAAW,CAAC,mBAAmB,IAAI,EAAE,CAAC,CAAC;IACrD,CAAC;IACD,IAAI,CAAC;QACD,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC3B,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACX,MAAM,MAAM,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAChE,MAAM,IAAI,WAAW,CAAC,mBAAmB,IAAI,KAAK,MAAM,EAAE,CAAC,CAAC;IAChE,CAAC;AACL,CAAC;AAED;;;;GAIG;AACH,SAAS,yBAAyB,CAAC,YAAoB;IACnD,MAAM,KAAK,GAAG,YAAY,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACtC,MAAM,CAAC,GAAG,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;IAClC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC,MAAM;QAAE,OAAO,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,IAAI,CAAC;IAChE,OAAO,IAAI,CAAC;AAChB,CAAC;AAED,wFAAwF;AACxF,SAAS,YAAY,CACjB,KAAoB,EACpB,IAA8B;IAE9B,MAAM,MAAM,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC;IAChC,OAAO;QACH,SAAS,EAAE,IAAI,CAAC,SAAS,IAAI,MAAM,CAAC,SAAS;QAC7C,YAAY,EAAE,IAAI,CAAC,YAAY,IAAI,MAAM,CAAC,YAAY;KACzD,CAAC;AACN,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,IAA8B;IAC/D,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,IAAI,KAAK,CAAC;IAC1C,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,IAAI,KAAK,CAAC;IAEpC,IAAI,MAAgB,CAAC;IACrB,IAAI,QAAiC,CAAC;IACtC,IAAI,SAA6B,CAAC;IAClC,IAAI,aAA4B,CAAC;IAEjC,IAAI,CAAC;QACD,MAAM,UAAU,GAAG,gBAAgB,CAAC,SAAS,CAAC,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC;QACvE,IAAI,CAAC,UAAU,CAAC,OAAO,EAAE,CAAC;YACtB,MAAM,IAAI,WAAW,CAAC,wCAAwC,UAAU,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;QAC9F,CAAC;QACD,MAAM,cAAc,GAAG,cAAc,CAAC,SAAS,CAAC,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC;QACzE,IAAI,CAAC,cAAc,CAAC,OAAO,EAAE,CAAC;YAC1B,MAAM,IAAI,WAAW,CAAC,GAAG,IAAI,CAAC,QAAQ,gDAAgD,CAAC,CAAC;QAC5F,CAAC;QAED,MAAM,EAAE,GAAG,UAAU,CAAC,IAAI,CAAC;QAC3B,QAAQ,GAAG,cAAc,CAAC,IAA+B,CAAC;QAC1D,MAAM,QAAQ,GAAI,QAA0C,CAAC,QAAQ,CAAC;QAEtE,MAAM,MAAM,GAAG,EAAE,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC;QACvC,IAAI,MAAM,KAAK,WAAW,IAAI,CAAC,SAAS,EAAE,CAAC;YACvC,MAAM,IAAI,WAAW,CACjB,iDAAiD,MAAM,MAAM;gBACzD,mDAAmD;gBACnD,+DAA+D,CACtE,CAAC;QACN,CAAC;QAED,aAAa,GAAG,yBAAyB,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QACzD,SAAS,GAAG,EAAE,CAAC,KAAK,CAAC;QACrB,IAAI,aAAa,IAAI,SAAS,IAAI,SAAS,KAAK,aAAa,EAAE,CAAC;YAC5D,MAAM,IAAI,WAAW,CACjB,qCAAqC,SAAS,oCAAoC,aAAa,GAAG,CACrG,CAAC;QACN,CAAC;QAED,MAAM,EAAE,SAAS,EAAE,YAAY,EAAE,GAAG,YAAY,CAAC,SAAS,IAAI,aAAa,EAAE,IAAI,CAAC,CAAC;QACnF,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC;QACzC,MAAM,MAAM,GAAG,SAAS,IAAI,YAAY,IAAI,MAAM,IAAI,SAAS,CAAC;QAEhE,MAAM,GAAG;YACL,IAAI,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC;YAC3C,KAAK,EAAE,EAAE,CAAC,KAAK,IAAI,SAAS;YAC5B,MAAM;YACN,WAAW,EAAE,QAAQ,CAAC,GAAG;YACzB,SAAS,EAAE,IAAI,CAAC,KAAK,CAAC,SAAS,GAAG,IAAI,CAAC,GAAG,IAAI;YAC9C,MAAM,EAAE,IAAI,CAAC,KAAK,CAAC,MAAM,GAAG,IAAI,CAAC,GAAG,IAAI;YACxC,aAAa,EAAE,EAAE,CAAC,OAAO,CAAC,aAAa,IAAI,IAAI;YAC/C,cAAc,EAAE,EAAE,CAAC,OAAO,CAAC,cAAc,IAAI,IAAI;YACjD,cAAc,EAAE,EAAE,CAAC,OAAO,CAAC,cAAc,IAAI,IAAI;YACjD,aAAa,EAAE,EAAE,CAAC,OAAO,CAAC,aAAa,IAAI,IAAI;YAC/C,KAAK,EAAE,EAAE,aAAa,EAAE,YAAY,EAAE,UAAU,EAAE,SAAS,EAAE;YAC7D,MAAM;SACT,CAAC;IACN,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACX,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QACjE,MAAM,CAAC,KAAK,CAAC,MAAM,OAAO,EAAE,CAAC,CAAC;QAC9B,OAAO,CAAC,CAAC;IACb,CAAC;IAEA,QAAkD,CAAC,QAAQ,CAAC,SAAS,GAAG,MAAM,CAAC;IAEhF,MAAM,OAAO,GACT,SAAS,SAAS,IAAI,aAAa,IAAI,GAAG,IAAI;QAC9C,aAAa,MAAM,CAAC,SAAS,YAAY,MAAM,CAAC,MAAM,IAAI;QAC1D,SAAS,MAAM,CAAC,KAAK,CAAC,UAAU,IAAI,MAAM,CAAC,KAAK,CAAC,aAAa,IAAI;QAClE,OAAO,MAAM,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,YAAY,MAAM,CAAC,MAAM,EAAE,CAAC;IAErE,IAAI,MAAM,EAAE,CAAC;QACT,MAAM,CAAC,IAAI,CAAC,iCAAiC,CAAC,CAAC;QAC/C,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;QAC7C,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACrB,OAAO,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACjC,CAAC;IAED,aAAa,CAAC,IAAI,CAAC,QAAQ,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IAC/E,MAAM,CAAC,IAAI,CAAC,oBAAoB,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC;IACjD,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACrB,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC;QACjB,MAAM,CAAC,IAAI,CACP,kEAAkE;YAC9D,2DAA2D,CAClE,CAAC;IACN,CAAC;IACD,OAAO,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AACjC,CAAC"}

package/dist/discovery/deprecation-report.md

@@ -1,6 +1,6 @@
 # Discovery — Deprecation Report
 
-- Generated: `2026-07-10T18:19:22Z`
+- Generated: `2026-07-12T08:25:51Z`
 - Deprecated artefacts: **0**
 
 _None. Tree is clean._