@event4u/agent-config 8.13.0 → 9.1.0

package/dist/discovery/discovery-manifest.json.sha256

@@ -1 +1 @@
-dcc729a9420f9603c704a072c529d664ed459c82e951e058ff133b3e34b46b60  discovery-manifest.json
+4edf44025858feda295b87664a0aa847b8b44794c21fa92fc6fd6ce0c976608a  discovery-manifest.json

package/dist/discovery/discovery-manifest.summary.md

@@ -1,8 +1,8 @@
 # Discovery Manifest — Summary
 
-- Generated: `2026-07-12T14:25:15Z`
+- Generated: `2026-07-14T09:00:03Z`
 - Scanner: `c24312e116f8`
-- Artefacts: **560**
+- Artefacts: **565**
 - Unassigned: **0**
 
 ## `engineering` — Engineering
@@ -11,7 +11,7 @@
 
 | Pack | Artefacts |
 |---|---|
-| `engineering-base` — Engineering Base | 105 |
+| `engineering-base` — Engineering Base | 106 |
 | `git` — Git | 4 |
 | `php` — PHP | 6 |
 | `laravel` — Laravel | 25 |
@@ -103,8 +103,8 @@
 
 | Pack | Artefacts |
 |---|---|
-| `meta` — Meta | 265 |
+| `meta` — Meta | 274 |
 | `memory` — Memory | 9 |
 | `analytics` — Analytics | 4 |
-| `product-reasoning` — Product Reasoning | 16 |
+| `product-reasoning` — Product Reasoning | 11 |
 

package/dist/discovery/orphan-report.md

@@ -1,6 +1,6 @@
 # Discovery — Orphan Report
 
-- Generated: `2026-07-12T14:25:15Z`
+- Generated: `2026-07-14T09:00:03Z`
 - Orphan artefacts: **0**
 
 > An orphan is an artefact whose declared pack has no other members.

package/dist/discovery/packs.json

@@ -1,10 +1,10 @@
 {
-  "checksum": "sha256:4d464b4e3eaa81d6d437c9387901b1853cf43b0ba47e32a7d347a9648f1ea769",
-  "generated_at": "2026-07-12T14:25:15Z",
+  "checksum": "sha256:69fcb002e72524fe832ff2fc8dc5cfc7335f71d1b6c049c8e108c83665d97eb2",
+  "generated_at": "2026-07-14T09:00:03Z",
   "packs": [
     {
       "always_on": false,
-      "artefact_count": 105,
+      "artefact_count": 106,
       "artefacts": [
         "src/domains/engineering-base/mission/upgrade/command.md",
         "src/rules/active-remediation.md",
@@ -88,6 +88,7 @@
         "src/skills/risk-officer/SKILL.md",
         "src/skills/secrets-management/SKILL.md",
         "src/skills/security-audit/SKILL.md",
+        "src/skills/security-maturity-assessment/SKILL.md",
         "src/skills/security/SKILL.md",
         "src/skills/sentry-integration/SKILL.md",
         "src/skills/source-discovery/SKILL.md",
@@ -113,14 +114,14 @@
         "src/skills/worktree-lifecycle/SKILL.md"
       ],
       "by_lifecycle": {
-        "active": 104,
+        "active": 105,
         "archived": 0,
         "deprecated": 0,
         "experimental": 1
       },
       "by_trust_level": {
         "advisory": 0,
-        "core": 103,
+        "core": 104,
         "experimental": 1,
         "professional": 1,
         "restricted": 0
@@ -1220,7 +1221,7 @@
     },
     {
       "always_on": true,
-      "artefact_count": 265,
+      "artefact_count": 274,
       "artefacts": [
         "src/agent-src/templates/agents/proposal.example.md",
         "src/domains/ai-video/image/analyse/command.md",
@@ -1308,6 +1309,7 @@
         "src/domains/meta/context/refactor/command.md",
         "src/domains/meta/cost/command.md",
         "src/domains/meta/cost/profile/command.md",
+        "src/domains/meta/explain-run/command.md",
         "src/domains/meta/mode/command.md",
         "src/domains/meta/optimize/agents-dir/command.md",
         "src/domains/meta/optimize/augmentignore/command.md",
@@ -1339,6 +1341,11 @@
         "src/domains/meta/team-knowledge/bootstrap/command.md",
         "src/domains/meta/team-knowledge/command.md",
         "src/domains/meta/team-knowledge/consolidate/command.md",
+        "src/domains/meta/team/adversarial/command.md",
+        "src/domains/meta/team/command.md",
+        "src/domains/meta/team/delegate/command.md",
+        "src/domains/meta/team/review/command.md",
+        "src/domains/meta/team/status/command.md",
         "src/domains/meta/upstream-contribute/command.md",
         "src/domains/product-basic/estimate-ticket/command.md",
         "src/domains/product-basic/jira-ticket/command.md",
@@ -1439,6 +1446,7 @@
         "src/skills/decision-record/SKILL.md",
         "src/skills/description-assist/SKILL.md",
         "src/skills/doc-coauthoring/SKILL.md",
+        "src/skills/docx-authoring/SKILL.md",
         "src/skills/emit-tickets/SKILL.md",
         "src/skills/file-editor/SKILL.md",
         "src/skills/guideline-writing/SKILL.md",
@@ -1452,6 +1460,7 @@
         "src/skills/judge-test-coverage/SKILL.md",
         "src/skills/learning-to-rule-or-skill/SKILL.md",
         "src/skills/lint-skills/SKILL.md",
+        "src/skills/llm-provider-knowledge/SKILL.md",
         "src/skills/markitdown/SKILL.md",
         "src/skills/mcp-builder/SKILL.md",
         "src/skills/mcp/SKILL.md",
@@ -1460,6 +1469,7 @@
         "src/skills/module-detect-on-the-fly/SKILL.md",
         "src/skills/module-management/SKILL.md",
         "src/skills/override-management/SKILL.md",
+        "src/skills/pdf-tools/SKILL.md",
         "src/skills/persona-writing/SKILL.md",
         "src/skills/project-docs/SKILL.md",
         "src/skills/prompt-engineering-patterns/SKILL.md",
@@ -1489,15 +1499,15 @@
         "src/skills/verify-repair-loop/SKILL.md"
       ],
       "by_lifecycle": {
-        "active": 264,
+        "active": 273,
         "archived": 0,
         "deprecated": 0,
         "experimental": 1
       },
       "by_trust_level": {
         "advisory": 0,
-        "core": 264,
-        "experimental": 1,
+        "core": 272,
+        "experimental": 2,
         "professional": 0,
         "restricted": 0
       },
@@ -1606,7 +1616,7 @@
     },
     {
       "always_on": false,
-      "artefact_count": 16,
+      "artefact_count": 11,
       "artefacts": [
         "src/domains/meta/challenge-me/command.md",
         "src/domains/meta/challenge-me/vision/command.md",
@@ -1618,22 +1628,17 @@
         "src/domains/meta/council/design/command.md",
         "src/domains/meta/council/optimize/command.md",
         "src/domains/meta/council/pr/command.md",
-        "src/domains/meta/grill-me/command.md",
-        "src/domains/meta/team/adversarial/command.md",
-        "src/domains/meta/team/command.md",
-        "src/domains/meta/team/delegate/command.md",
-        "src/domains/meta/team/review/command.md",
-        "src/domains/meta/team/status/command.md"
+        "src/domains/meta/grill-me/command.md"
       ],
       "by_lifecycle": {
-        "active": 16,
+        "active": 11,
         "archived": 0,
         "deprecated": 0,
         "experimental": 0
       },
       "by_trust_level": {
         "advisory": 0,
-        "core": 16,
+        "core": 11,
         "experimental": 0,
         "professional": 0,
         "restricted": 0

package/dist/discovery/trust-report.md

@@ -1,6 +1,6 @@
 # Discovery — Trust Report
 
-- Generated: `2026-07-12T14:25:15Z`
+- Generated: `2026-07-14T09:00:03Z`
 - Workspaces tracked: **10**
 - Human-review-required artefacts: **3**
 
@@ -8,16 +8,16 @@
 
 | Workspace | core | professional | experimental | advisory | restricted |
 |---|---|---|---|---|---|
-| `agent-config-maintainer` | 301 | 0 | 2 | 0 | 0 |
+| `agent-config-maintainer` | 304 | 0 | 3 | 0 | 0 |
 | `construction` | 23 | 0 | 0 | 0 | 0 |
-| `engineering` | 166 | 58 | 1 | 0 | 0 |
+| `engineering` | 167 | 58 | 2 | 0 | 0 |
 | `finance` | 26 | 4 | 0 | 1 | 0 |
-| `founder` | 30 | 0 | 0 | 1 | 0 |
-| `gtm` | 28 | 13 | 0 | 0 | 0 |
+| `founder` | 30 | 0 | 1 | 1 | 0 |
+| `gtm` | 28 | 13 | 1 | 0 | 0 |
 | `legal-review-prep` | 23 | 0 | 0 | 6 | 0 |
-| `ops` | 23 | 8 | 0 | 0 | 0 |
-| `product` | 23 | 15 | 0 | 0 | 0 |
-| `small-business` | 29 | 0 | 18 | 0 | 0 |
+| `ops` | 23 | 8 | 1 | 0 | 0 |
+| `product` | 23 | 15 | 1 | 0 | 0 |
+| `small-business` | 29 | 0 | 19 | 0 | 0 |
 
 ## Human-review-required artefacts
 

package/dist/discovery/workspaces.json

@@ -1,10 +1,10 @@
 {
-  "checksum": "sha256:4d464b4e3eaa81d6d437c9387901b1853cf43b0ba47e32a7d347a9648f1ea769",
-  "generated_at": "2026-07-12T14:25:15Z",
+  "checksum": "sha256:69fcb002e72524fe832ff2fc8dc5cfc7335f71d1b6c049c8e108c83665d97eb2",
+  "generated_at": "2026-07-14T09:00:03Z",
   "scanner_version": "c24312e116f8",
   "workspaces": [
     {
-      "artefact_count": 184,
+      "artefact_count": 185,
       "default_packs": [
         "engineering-base",
         "git"
@@ -27,7 +27,7 @@
       ],
       "packs": [
         {
-          "artefact_count": 105,
+          "artefact_count": 106,
           "artefacts": [
             "src/domains/engineering-base/mission/upgrade/command.md",
             "src/rules/active-remediation.md",
@@ -111,6 +111,7 @@
             "src/skills/risk-officer/SKILL.md",
             "src/skills/secrets-management/SKILL.md",
             "src/skills/security-audit/SKILL.md",
+            "src/skills/security-maturity-assessment/SKILL.md",
             "src/skills/security/SKILL.md",
             "src/skills/sentry-integration/SKILL.md",
             "src/skills/source-discovery/SKILL.md",
@@ -592,7 +593,7 @@
       ]
     },
     {
-      "artefact_count": 294,
+      "artefact_count": 298,
       "default_packs": [
         "meta",
         "memory",
@@ -605,7 +606,7 @@
       "optional_packs": [],
       "packs": [
         {
-          "artefact_count": 265,
+          "artefact_count": 274,
           "artefacts": [
             "src/agent-src/templates/agents/proposal.example.md",
             "src/domains/ai-video/image/analyse/command.md",
@@ -693,6 +694,7 @@
             "src/domains/meta/context/refactor/command.md",
             "src/domains/meta/cost/command.md",
             "src/domains/meta/cost/profile/command.md",
+            "src/domains/meta/explain-run/command.md",
             "src/domains/meta/mode/command.md",
             "src/domains/meta/optimize/agents-dir/command.md",
             "src/domains/meta/optimize/augmentignore/command.md",
@@ -724,6 +726,11 @@
             "src/domains/meta/team-knowledge/bootstrap/command.md",
             "src/domains/meta/team-knowledge/command.md",
             "src/domains/meta/team-knowledge/consolidate/command.md",
+            "src/domains/meta/team/adversarial/command.md",
+            "src/domains/meta/team/command.md",
+            "src/domains/meta/team/delegate/command.md",
+            "src/domains/meta/team/review/command.md",
+            "src/domains/meta/team/status/command.md",
             "src/domains/meta/upstream-contribute/command.md",
             "src/domains/product-basic/estimate-ticket/command.md",
             "src/domains/product-basic/jira-ticket/command.md",
@@ -824,6 +831,7 @@
             "src/skills/decision-record/SKILL.md",
             "src/skills/description-assist/SKILL.md",
             "src/skills/doc-coauthoring/SKILL.md",
+            "src/skills/docx-authoring/SKILL.md",
             "src/skills/emit-tickets/SKILL.md",
             "src/skills/file-editor/SKILL.md",
             "src/skills/guideline-writing/SKILL.md",
@@ -837,6 +845,7 @@
             "src/skills/judge-test-coverage/SKILL.md",
             "src/skills/learning-to-rule-or-skill/SKILL.md",
             "src/skills/lint-skills/SKILL.md",
+            "src/skills/llm-provider-knowledge/SKILL.md",
             "src/skills/markitdown/SKILL.md",
             "src/skills/mcp-builder/SKILL.md",
             "src/skills/mcp/SKILL.md",
@@ -845,6 +854,7 @@
             "src/skills/module-detect-on-the-fly/SKILL.md",
             "src/skills/module-management/SKILL.md",
             "src/skills/override-management/SKILL.md",
+            "src/skills/pdf-tools/SKILL.md",
             "src/skills/persona-writing/SKILL.md",
             "src/skills/project-docs/SKILL.md",
             "src/skills/prompt-engineering-patterns/SKILL.md",
@@ -901,7 +911,7 @@
           "id": "analytics"
         },
         {
-          "artefact_count": 16,
+          "artefact_count": 11,
           "artefacts": [
             "src/domains/meta/challenge-me/command.md",
             "src/domains/meta/challenge-me/vision/command.md",
@@ -913,12 +923,7 @@
             "src/domains/meta/council/design/command.md",
             "src/domains/meta/council/optimize/command.md",
             "src/domains/meta/council/pr/command.md",
-            "src/domains/meta/grill-me/command.md",
-            "src/domains/meta/team/adversarial/command.md",
-            "src/domains/meta/team/command.md",
-            "src/domains/meta/team/delegate/command.md",
-            "src/domains/meta/team/review/command.md",
-            "src/domains/meta/team/status/command.md"
+            "src/domains/meta/grill-me/command.md"
           ],
           "id": "product-reasoning"
         }

package/dist/install/install.mjs

@@ -9536,7 +9536,10 @@ var _AGENTS_DIR_MARKERS = [
   "roadmaps",
   "settings/.ai-council.yml",
   "roadmaps-progress.md",
-  ".event4u-bridge.yml"
+  // `overrides/` is the guaranteed minimal-consumer surface (ADR-020).
+  // Replaced the retired `.event4u-bridge.yml` marker (ADR-020 amendment
+  // 2026-07-13) so a bare consumer `agents/` dir stays anchorable.
+  "overrides"
 ];
 var _LEGACY_ANCHOR_ENV = "AGENT_CONFIG_LEGACY_ANCHOR";
 function _exists(p) {
@@ -14248,8 +14251,16 @@ var settingsSchema = external_exports.object({
     ),
     suppress_setup_hint: external_exports.boolean().default(false).describe(
       "Suppress the one-line wizard/init recommendation to set up the codex plugin on Claude-Code hosts. Cosmetic only \u2014 never changes behavior."
-    )
-  }).default({ enabled: false, model: "auto", allow_delegate: false, max_calls_per_day: 50, suppress_setup_hint: false }),
+    ),
+    review_gate: external_exports.object({
+      managed: external_exports.boolean().default(false).describe(
+        "Managed governance of the codex plugin's Stop-hook Review Gate (road-to-team-mode Phase 4). false (default) = byte-identical pre-Phase-4 behavior: no counting, no circuit breaker. true = count consecutive BLOCK verdicts per session and trip the circuit breaker at max_consecutive_blocks."
+      ),
+      max_consecutive_blocks: external_exports.number().int().min(1).default(3).describe(
+        "Circuit-breaker bound: after this many CONSECUTIVE BLOCK verdicts in one session, a visible notice is injected exactly once and the managed layer stops re-blocking \u2014 the user decides, never an infinite Claude\u2194Codex loop. An ALLOW verdict resets the counter. Positive integer."
+      )
+    }).default({ managed: false, max_consecutive_blocks: 3 })
+  }).default({ enabled: false, model: "auto", allow_delegate: false, max_calls_per_day: 50, suppress_setup_hint: false, review_gate: { managed: false, max_consecutive_blocks: 3 } }),
   onboarding: external_exports.object({
     onboarded: external_exports.boolean().default(false).describe(
       "Set to true once the developer has completed `agent-config setup`. The onboarding-gate rule blocks the first turn of every chat until this is true. Toggle back to false to re-trigger the wizard."
@@ -14279,6 +14290,21 @@ var settingsSchema = external_exports.object({
     create_pr: external_exports.object({
       preview_description: external_exports.boolean().default(false).describe(
         "When /create-pr runs, show the generated title and body and wait for confirmation before opening the PR. Off by default (zero-friction PR creation); turn on if you want a last-look gate."
+      ),
+      detail_level: external_exports.enum(["min", "med", "max"]).default("min").describe(
+        "Verbosity tier for the generated PR description body. min (default) = title + 2-3 sentence what/why/impact + linked ticket (token-frugal); med = min + grouped changes + tests note; max = med + how-to-test + edge cases + reviewer guidance. Critical info (breaking changes, migrations, security, rollback) is ALWAYS included at every tier \u2014 the tier governs explanatory depth, never whether a critical callout appears."
+      ),
+      api_examples: external_exports.boolean().default(true).describe(
+        "JSON request/response examples for API-endpoint changes. true (default) = include a fenced example ONLY when grounded in a real source (response DTO/resource, OpenAPI/schema, test fixture, or an actual probe); no grounded source \u2192 a one-line pointer, never an invented example. false = never add API examples."
+      ),
+      screenshots: external_exports.boolean().default(false).describe(
+        "Screenshots for frontend changes. false (default) = never attempt. true = attempt when the host has browser/preview tooling and the diff touches a frontend surface; capability-gated (emits a one-line note and leaves the placeholder when tooling is absent, never fails or blocks the PR). Before/after + changed-region highlighting is best-effort."
+      ),
+      ui_paths: external_exports.array(external_exports.string()).default([]).describe(
+        'Optional glob list that makes frontend detection explicit instead of heuristic (e.g. ["resources/views/**", "src/pages/**"]). Empty (default) = a light path/extension heuristic that fails open (no false enrichment when the surface is ambiguous).'
+      ),
+      api_paths: external_exports.array(external_exports.string()).default([]).describe(
+        'Optional glob list that makes API-endpoint detection explicit instead of heuristic (e.g. ["app/Http/Controllers/Api/**", "src/pages/api/**"]). Empty (default) = a light path/extension heuristic that fails open.'
       )
     })
   }),
@@ -18379,7 +18405,7 @@ function _detect_legacy_for_migration(project_root) {
     }
     return [];
   }
-  if (isFile(path11.join(project_root, CONSUMER_BRIDGE_MARKER_RELPATH))) return [];
+  if (isFile(path11.join(project_root, INSTALL_MODE_MARKER_REL))) return [];
   const found = [];
   for (const name of MIGRATE_LEGACY_YAML_FILES) {
     if (isFile(path11.join(project_root, name))) {
@@ -18438,26 +18464,17 @@ function _format_global_root_for_marker(global_root) {
   }
   return `~/${rel.split(path11.sep).join("/")}`;
 }
-function _write_consumer_bridge_marker(project_root, installer_version, env = null, now = null) {
+function _remove_legacy_consumer_bridge_marker(project_root, env = null) {
   const env_map = env ?? process3.env;
   if (env_map["AGENT_CONFIG_DEV_MODE"] === "1") return null;
   if (isDir(path11.join(project_root, ".agent-src.uncondensed"))) return null;
-  const global_root_str = _format_global_root_for_marker(
-    event4u_root(env_map)
-  );
-  const stamp = utcStamp(now ?? void 0);
-  const body = `# event4u/agent-config \u2014 consumer bridge marker (auto-written).
-# Spec: docs/contracts/consumer-bridge.md (event4u-bridge/v1).
-# Reader contract: expand ~ against the current $HOME; fail closed
-# when global_root is missing on disk; never write back through it.
-schema: event4u-bridge/v1
-global_root: ${global_root_str}
-installed_at: ${stamp}
-installer_version: ${installer_version}
-`;
   const target = path11.join(project_root, CONSUMER_BRIDGE_MARKER_RELPATH);
-  mkdirp(path11.dirname(target));
-  atomicWrite0644(target, body, ".event4u-bridge.");
+  if (!isFile(target)) return null;
+  try {
+    fs13.rmSync(target);
+  } catch {
+    return null;
+  }
   return target;
 }
 var PROJECT_ANCHOR_TOOLS = {
@@ -18479,14 +18496,13 @@ function _write_per_tool_project_anchors(project_root, tools, env = null, now =
     if (!tools.has(tool_id)) continue;
     const target = path11.join(project_root, rel_path);
     mkdirp(path11.dirname(target));
-    const bridge_abs = path11.join(project_root, CONSUMER_BRIDGE_MARKER_RELPATH);
-    const bridge_rel = path11.relative(path11.dirname(target), bridge_abs);
     const body = `# event4u/agent-config \u2014 per-tool project anchor (auto-written).
 # Spec: docs/contracts/consumer-bridge.md \xA7 Per-tool anchor strategy.
-# Tool: ${tool_id}. Bridge marker: agents/.event4u-bridge.yml.
+# Tool: ${tool_id}. Resolves the global install directly \u2014 no
+# project-local bridge marker (retired, ADR-020 amendment 2026-07-13).
+# This anchor is gitignored: each developer regenerates it on install.
 schema: event4u-bridge/v1
 tool: ${tool_id}
-bridge: ${bridge_rel}
 global_root: ${global_root_str}
 installed_at: ${stamp}
 `;
@@ -19059,10 +19075,10 @@ function install_global(tools, force, project_root = null, core_only = false) {
     const files_by_tool = _files_by_tool_from_deploy(deploy_results);
     const rc = _update_installed_tools_manifest(project_root, tools, "global", force, files_by_tool);
     if (rc !== 0) return rc;
-    const marker_path = _write_consumer_bridge_marker(project_root, installed_version);
-    if (marker_path !== null && !state.QUIET) {
-      const rel = isRelativeTo(marker_path, project_root) ? path11.relative(project_root, marker_path) : marker_path;
-      info(`Bridge marker written: ${rel}`);
+    const removed_marker = _remove_legacy_consumer_bridge_marker(project_root);
+    if (removed_marker !== null && !state.QUIET) {
+      const rel = isRelativeTo(removed_marker, project_root) ? path11.relative(project_root, removed_marker) : removed_marker;
+      info(`Removed legacy bridge marker: ${rel}`);
     }
     const anchor_paths = _write_per_tool_project_anchors(project_root, tools);
     if (anchor_paths.length > 0 && !state.QUIET) {
@@ -19415,11 +19431,10 @@ personal:
       success(`Wrote ${SETTINGS_FILE} (user_type=${user_type})`);
     }
   }
-  const installed_version = current_package_version();
-  const marker_path = _write_consumer_bridge_marker(target_root, installed_version);
-  if (marker_path !== null) {
-    const rel = isRelativeTo(marker_path, target_root) ? path11.relative(target_root, marker_path) : marker_path;
-    success(`Wrote ${rel}`);
+  const removed_marker = _remove_legacy_consumer_bridge_marker(target_root);
+  if (removed_marker !== null) {
+    const rel = isRelativeTo(removed_marker, target_root) ? path11.relative(target_root, removed_marker) : removed_marker;
+    success(`Removed legacy bridge marker: ${rel}`);
   }
   _write_install_mode_marker(target_root, "minimal");
   if (!state.QUIET) {

package/dist/mcp/registry-manifest.json

@@ -1,15 +1,15 @@
 {
   "discovery": {
-    "artefact_count": 560,
+    "artefact_count": 565,
     "scanner_version": "c24312e116f8"
   },
-  "generated_at": "2026-07-12",
+  "generated_at": "2026-07-14",
   "package": {
     "description": "Universal AI Agent OS \u2014 audited skills, governance rules, commands, and templates for AI coding tools (Claude Code, Cursor, Windsurf, Copilot).",
     "homepage": "https://event4u-app.github.io/agent-config",
     "name": "@event4u/agent-config",
     "repository": "https://github.com/event4u-app/agent-config",
-    "version": "8.13.0"
+    "version": "9.1.0"
   },
   "registries": [
     {