@event4u/agent-config 8.13.0 → 9.1.0

package/src/scripts/check_council_config_location.ts

@@ -3,11 +3,17 @@
  * CI guard: council config lives in `.ai-council.yml`, never `.agent-settings.yml`.
  *
  * Ported from the retired Python `src/scripts/check_council_config_location.py` (ADR-200).
- * The CLI contract is pinned — `--quiet` flag, exit codes (0 clean,
- * 1 at least one violation), byte-identical finding messages, same scan globs
- * (sorted), same fence tracking, same negation / `ai_council:` block detection,
- * and the same `<!-- council-config-allowed -->` escape pragma. No behaviour
- * changes — historical quirks preserved (consumers pin the exact behaviour).
+ * The original two checks keep their pinned CLI contract — `--quiet` flag,
+ * exit codes (0 clean, 1 at least one violation), byte-identical finding
+ * messages, same `SCAN_GLOBS` (sorted), same fence tracking, same negation /
+ * `ai_council:` block detection, and the same `<!-- council-config-allowed -->`
+ * escape pragma.
+ *
+ * Additive since ADR-104: a third check (§3 below) flags project-tree
+ * *placement* of the council file. The original two checks are unchanged; the
+ * path check runs over its own `PATH_CHECK_GLOBS` (the council surfaces + the
+ * settings template + the `.ai-council.yml.example`) so the settings template's
+ * many legitimate `.agent-settings.yml` self-references never trip check §1.
  *
  * Per ADR-104 (superseding ADR-093) the council reads a dedicated
  * `.ai-council.yml` resolved ALWAYS from the user-global location
@@ -16,19 +22,26 @@
  * path). Keys are top-level in that file; the legacy `ai_council.*` block
  * under `.agent-settings.yml` was removed in Phase 0.
  *
- * What it flags, in the council command/skill surfaces + the config contract:
+ * What it flags:
  *
  *   1. A `.agent-settings.yml` reference that is NOT negated — i.e. an
  *      instruction to read/use it for council config. Corrective mentions
  *      ("NOT in `.agent-settings.yml`", "was removed", "never read") carry a
- *      negation marker on the same line and are allowed.
+ *      negation marker on the same line and are allowed. (SCAN_GLOBS)
  *   2. A bare `ai_council:` YAML parent-block declaration — post-ADR-093 the
  *      keys are top-level in `.ai-council.yml`; there is no `ai_council:`
- *      namespace to nest under.
+ *      namespace to nest under. (SCAN_GLOBS)
+ *   3. A project-tree PLACEMENT of the council file — `agents/.ai-council.yml`,
+ *      `agents/settings/.ai-council.yml`, or a `<project_root>/…/.ai-council.yml`
+ *      path — that is NOT negated. The council file is user-global ONLY
+ *      (ADR-104); any project-tree path is drift. Corrective mentions ("is
+ *      ignored", "never read", "no project-local", "superseded") pass on the
+ *      same line. (PATH_CHECK_GLOBS)
  *
  * Escape hatch: a line carrying `<!-- council-config-allowed -->` is exempt
  * (for a legitimate non-council `.agent-settings.yml` reference, e.g.
- * `personal.autonomy`).
+ * `personal.autonomy`, or a historical placement mention in a section
+ * explicitly marked superseded).
  *
  * Exit codes:
  *   0 — clean.
@@ -61,6 +74,35 @@ const NEGATION_RE = /\b(not|never|removed|no\s+longer|neither|instead)\b/i;
 const AI_COUNCIL_BLOCK_RE = /^\s*ai_council:\s*(#.*)?$/;
 const ALLOW_PRAGMA = '<!-- council-config-allowed -->';
 
+// ── §3 project-tree placement check (ADR-104) ──────────────────────
+// The council file is user-global ONLY. These are the surfaces where a
+// stray project-tree placement instruction does real damage — the council
+// command/skill surfaces + contract (SCAN_GLOBS) PLUS the settings template
+// and the copy-from example. The template carries countless legitimate
+// `.agent-settings.yml` self-references, so it is scanned ONLY by §3, never
+// by §1.
+const PATH_CHECK_GLOBS = [
+    ...SCAN_GLOBS,
+    'src/config/agent-settings.template.yml',
+    'agents/templates/.ai-council.yml.example',
+] as const;
+
+// A project-tree PLACEMENT of the council file: `agents/.ai-council.yml`,
+// `agents/settings/.ai-council.yml`, or any `<project_root>/…/.ai-council.yml`.
+// Deliberately does NOT match the user-global `…/agent-config/settings/
+// .ai-council.yml` (no literal `agents/` segment) nor the copy-from
+// `agents/templates/.ai-council.yml.example` (segment is `templates/`, and
+// `.example` is not the config file).
+const PROJECT_PATH_COUNCIL_RE =
+    /(?:agents\/(?:settings\/)?\.ai-council\.yml(?!\.example)|<project[_-]?root>[^\n`]*\.ai-council\.yml)/;
+
+// Broader negation set for §3 — corrective placement mentions use vocabulary
+// the §1 NEGATION_RE does not cover ("is ignored", "no project-local
+// lookup", "superseded"). A match on the same line marks the reference
+// corrective and is allowed.
+const PATH_NEGATION_RE =
+    /\b(not|never|removed|no\s+longer|neither|instead|ignored|superseded|no\s+project-local|not\s+read|does\s+not\s+read)\b/i;
+
 /**
  * Mirror Python `str.lstrip()` — strips all leading Unicode whitespace.
  * Python's `str.lstrip()` (no args) strips the Unicode whitespace class;
@@ -79,9 +121,12 @@ function _lstrip(s: string): string {
  * the same sort (component-wise via Path comparison). We approximate with a
  * recursive walk per glob pattern, sorting POSIX paths.
  */
-function* iter_files(root: string): Generator<string> {
+function* iter_files(
+    root: string,
+    globs: readonly string[] = SCAN_GLOBS,
+): Generator<string> {
     const seen = new Set<string>();
-    for (const pattern of SCAN_GLOBS) {
+    for (const pattern of globs) {
         for (const p of _glob(root, pattern)) {
             if (_isFile(p) && !seen.has(p)) {
                 seen.add(p);
@@ -220,18 +265,69 @@ function find_violations(root: string): string[] {
     return findings;
 }
 
+/**
+ * §3 — flag project-tree PLACEMENT of the council config file (ADR-104).
+ *
+ * The council file is user-global only; any `agents/(settings/)?.ai-council.yml`
+ * or `<project_root>/…/.ai-council.yml` path is drift. Corrective mentions
+ * (same-line `PATH_NEGATION_RE`) and the `<!-- council-config-allowed -->`
+ * pragma pass. Fenced code is skipped, mirroring §1/§2.
+ */
+function find_path_violations(root: string): string[] {
+    const findings: string[] = [];
+    for (const p of iter_files(root, PATH_CHECK_GLOBS)) {
+        const rel = _relPosix(root, p);
+        let in_fence = false;
+        const lines = fs.readFileSync(p, 'utf-8').split('\n');
+        if (lines.length > 0 && lines[lines.length - 1] === '') {
+            lines.pop();
+        }
+        for (let i = 0; i < lines.length; i++) {
+            const lineno = i + 1;
+            const raw = lines[i]!;
+            const stripped = _lstrip(raw);
+            if (stripped.startsWith('```') || stripped.startsWith('~~~')) {
+                in_fence = !in_fence;
+                continue;
+            }
+            if (in_fence || raw.includes(ALLOW_PRAGMA)) {
+                continue;
+            }
+            // Corrective sentences often wrap, leaving the negation
+            // ("never reads", "no project-local lookup") on the previous
+            // line and the path on this one. Check both lines for negation
+            // so a correctly-negated wrapped mention is not flagged. A real
+            // "place it here" instruction never carries a negation one line up.
+            const prev = i > 0 ? lines[i - 1]! : '';
+            const negated =
+                PATH_NEGATION_RE.test(raw) || PATH_NEGATION_RE.test(prev);
+            if (PROJECT_PATH_COUNCIL_RE.test(raw) && !negated) {
+                findings.push(
+                    `${rel}:${lineno}: council config placed in the project tree ` +
+                        '— the `.ai-council.yml` file is user-global ONLY ' +
+                        '(`~/.event4u/agent-config/settings/.ai-council.yml`, ADR-104). ' +
+                        'The project tree is never searched. Point at the user-global ' +
+                        'path, add a negation marker, or add ' +
+                        `\`${ALLOW_PRAGMA}\` for a historical/superseded reference.`,
+                );
+            }
+        }
+    }
+    return findings;
+}
+
 function main(): number {
     const root = process.cwd();
-    const findings = find_violations(root);
+    const findings = [...find_violations(root), ...find_path_violations(root)];
     if (findings.length) {
         process.stdout.write('❌  Council config-location violations:\n\n');
         for (const f of findings) {
             process.stdout.write(`  - ${f}\n`);
         }
         process.stdout.write(
-            '\nRule: council config lives in `.ai-council.yml` ' +
-                '(docs/contracts/ai-council-config.md + ADR-093), never in ' +
-                '`.agent-settings.yml`.\n',
+            '\nRule: council config lives in the user-global `.ai-council.yml` ' +
+                '(`~/.event4u/agent-config/settings/.ai-council.yml`, ADR-104) — ' +
+                'never in `.agent-settings.yml`, never in a project `agents/` tree.\n',
         );
         return 1;
     }
@@ -270,11 +366,15 @@ if (_isCliEntry() || process.argv[1] === _HERE) {
 
 export {
     SCAN_GLOBS,
+    PATH_CHECK_GLOBS,
     AGENT_SETTINGS_RE,
     NEGATION_RE,
     AI_COUNCIL_BLOCK_RE,
+    PROJECT_PATH_COUNCIL_RE,
+    PATH_NEGATION_RE,
     ALLOW_PRAGMA,
     iter_files,
     find_violations,
+    find_path_violations,
     main,
 };

package/src/scripts/check_host_loadability.ts

@@ -0,0 +1,81 @@
+/**
+ * check_host_loadability.ts — U4 real-host loadability smoke
+ * (road-to-ecosystem-harvest-reliability-measurement).
+ *
+ * The condensation-hash + linter gates prove the SOURCE tree's shape; this
+ * check proves the GENERATED host trees are actually loadable by their hosts:
+ *   - .claude/skills/<dir>/SKILL.md — frontmatter parses, has name +
+ *     description, and name matches the directory (Claude Code's load rule).
+ *   - .cursor/rules/*.mdc — frontmatter parses (Cursor rejects the file
+ *     silently otherwise).
+ * Run AFTER the projection is generated (CI: the sync-consistency job).
+ * Exit 1 on the first malformed artefact, naming it.
+ */
+import * as fs from 'node:fs';
+import * as path from 'node:path';
+
+import { parse as parseYaml } from 'yaml';
+
+export function check_claude_skills(root: string, errors: string[]): void {
+    const dir = path.join(root, '.claude', 'skills');
+    if (!fs.existsSync(dir)) return;
+    for (const name of fs.readdirSync(dir)) {
+        const skillMd = path.join(dir, name, 'SKILL.md');
+        if (!fs.existsSync(skillMd)) {
+            errors.push(`${skillMd}: missing SKILL.md`);
+            continue;
+        }
+        const src = fs.readFileSync(skillMd, 'utf-8');
+        const m = src.match(/^---\n([\s\S]*?)\n---/);
+        if (!m) { errors.push(`${skillMd}: no frontmatter`); continue; }
+        let meta: Record<string, unknown>;
+        try { meta = parseYaml(m[1] ?? '') as Record<string, unknown>; }
+        catch (e) { errors.push(`${skillMd}: frontmatter YAML invalid (${(e as Error).message})`); continue; }
+        if (typeof meta['name'] !== 'string' || !meta['name']) errors.push(`${skillMd}: missing name`);
+        else if (meta['name'] !== name) errors.push(`${skillMd}: name '${meta['name']}' != dir '${name}'`);
+        if (typeof meta['description'] !== 'string' || !meta['description']) errors.push(`${skillMd}: missing description`);
+    }
+}
+
+export function check_cursor_rules(root: string, errors: string[]): void {
+    const dir = path.join(root, '.cursor', 'rules');
+    if (!fs.existsSync(dir)) return;
+    for (const name of fs.readdirSync(dir)) {
+        if (!name.endsWith('.mdc')) continue;
+        const p = path.join(dir, name);
+        const src = fs.readFileSync(p, 'utf-8');
+        const m = src.match(/^---\n([\s\S]*?)\n---/);
+        if (!m) { errors.push(`${p}: no frontmatter`); continue; }
+        // Cursor's documented .mdc format writes `globs: *.php` UNQUOTED —
+        // valid for Cursor's parser, invalid strict YAML (`*` starts an
+        // alias). Quote the globs value before the strict parse so the check
+        // mirrors the host's acceptance, not the YAML spec's.
+        const lenient = (m[1] ?? '').replace(
+            /^(globs:[ \t]*)([^"'\s[][^\n]*)$/m,
+            (_all, key: string, val: string) => `${key}"${val.trim()}"`,
+        );
+        try { parseYaml(lenient); }
+        catch (e) { errors.push(`${p}: frontmatter YAML invalid (${(e as Error).message})`); }
+    }
+}
+
+export function run(root: string): string[] {
+    const errors: string[] = [];
+    check_claude_skills(root, errors);
+    check_cursor_rules(root, errors);
+    return errors;
+}
+
+const isMain = process.argv[1] !== undefined
+    && path.resolve(process.argv[1]) === path.resolve(new URL(import.meta.url).pathname);
+if (isMain) {
+    const rootIdx = process.argv.indexOf('--root');
+    const root = rootIdx !== -1 ? process.argv[rootIdx + 1] ?? '.' : '.';
+    const errors = run(root);
+    if (errors.length > 0) {
+        for (const e of errors) process.stderr.write(`❌  ${e}\n`);
+        process.exit(1);
+    }
+    process.stdout.write('✅  host trees loadable (.claude skills + .cursor mdc)\n');
+    process.exit(0);
+}

package/src/scripts/condense.ts

@@ -1670,6 +1670,10 @@ export function generate_claude_subagents(): number {
         const tools = Array.isArray(toolsRaw) ? toolsRaw.map((t) => String(t)).join(', ') : String(toolsRaw ?? '');
         const tier = typeof fm['model_tier'] === 'string' ? (fm['model_tier'] as string) : 'inherit';
         const model = tier === 'inherit' ? 'inherit' : (_TIER_TO_CLAUDE_MODEL[tier] ?? 'inherit');
+        // Optional pinned reasoning effort (skill-quality-gates Phase 4, Source S):
+        // pass through to the native frontmatter only when the source declares it —
+        // hosts without an effort knob never see the key.
+        const effort = typeof fm['effort'] === 'string' ? (fm['effort'] as string) : null;
 
         const guardedBody =
             defense !== '' && !body.includes('prompt-defense-preamble')
@@ -1681,6 +1685,7 @@ export function generate_claude_subagents(): number {
             `description: ${description}\n` +
             `tools: ${tools}\n` +
             `model: ${model}\n` +
+            (effort !== null ? `effort: ${effort}\n` : '') +
             '---\n' +
             guardedBody;
 

package/src/scripts/council_cli.ts

@@ -603,8 +603,13 @@ function build_members(settings: Dict, opts: BuildMembersOptions = {}): External
                 );
             }
             const api_key_ref = (cfg['api_key_ref'] as string | null) ?? null;
+            // Council opts in explicitly (caching is client-default OFF): on
+            // unless the operator sets `prompt_cache: false` on the member.
+            const enable_prompt_cache = cfg['prompt_cache'] !== false;
             for (const sib_model of siblings[name] as string[]) {
-                members.push(_construct_api_member(name, sib_model, { api_key_ref }));
+                members.push(
+                    _construct_api_member(name, sib_model, { api_key_ref, enable_prompt_cache }),
+                );
             }
             continue;
         }
@@ -613,6 +618,9 @@ function build_members(settings: Dict, opts: BuildMembersOptions = {}): External
             members.push(
                 _construct_api_member(name, model, {
                     api_key_ref: (cfg['api_key_ref'] as string | null) ?? null,
+                    // Council opts in explicitly (client-default OFF); on unless
+                    // the operator sets `prompt_cache: false`.
+                    enable_prompt_cache: cfg['prompt_cache'] !== false,
                 }),
             );
         } else if (mode === 'cli' && _CLI_PROVIDERS.has(name)) {
@@ -747,14 +755,18 @@ function _format_advisor_summary(
 function _construct_api_member(
     name: string,
     model: string | null,
-    opts: { api_key_ref?: string | null } = {},
+    opts: { api_key_ref?: string | null; enable_prompt_cache?: boolean | undefined } = {},
 ): ExternalAIClient {
     const api_key_ref = opts.api_key_ref ?? null;
     if (name === 'anthropic') {
         const api_key = api_key_ref
             ? resolve_api_key(api_key_ref, 'ai_council.members.anthropic')
             : load_anthropic_key();
-        return new AnthropicClient({ model: model || 'claude-sonnet-4-5', api_key });
+        return new AnthropicClient({
+            model: model || 'claude-sonnet-4-5',
+            api_key,
+            enable_prompt_cache: opts.enable_prompt_cache,
+        });
     }
     if (name === 'openai') {
         const api_key = api_key_ref
@@ -1409,6 +1421,8 @@ function _serialise_responses(responses: CouncilResponse[]): Dict[] {
             text: r.text,
             input_tokens: r.input_tokens,
             output_tokens: r.output_tokens,
+            cache_creation_input_tokens: r.cache_creation_input_tokens,
+            cache_read_input_tokens: r.cache_read_input_tokens,
             latency_ms: r.latency_ms,
             error: r.error,
             metadata,
@@ -1427,6 +1441,8 @@ function _deserialise_responses(items: Dict[]): CouncilResponse[] {
                 text: (d['text'] as string) ?? '',
                 input_tokens: _pyInt(d['input_tokens'] ?? 0, 0),
                 output_tokens: _pyInt(d['output_tokens'] ?? 0, 0),
+                cache_creation_input_tokens: _pyInt(d['cache_creation_input_tokens'] ?? 0, 0),
+                cache_read_input_tokens: _pyInt(d['cache_read_input_tokens'] ?? 0, 0),
                 latency_ms: _pyInt(d['latency_ms'] ?? 0, 0),
                 error: (d['error'] as string | null) ?? null,
                 metadata: (d['metadata'] as Dict) || {},

package/src/scripts/hook_manifest.yaml

@@ -134,6 +134,17 @@ concerns:
     script: src/scripts/surface_probe_hook.ts
     args: []
     fail_closed: false
+  # road-to-team-mode Phase 4 — managed Review-Gate circuit breaker.
+  # Runs AFTER the plugin's own Stop gate: reads the persisted gate job
+  # record, counts consecutive BLOCK verdicts per session, injects the
+  # circuit-breaker notice exactly once at ai_team.review_gate.
+  # max_consecutive_blocks. No-op (byte-identical Stop path) while
+  # ai_team.review_gate.managed is false — the shipped default.
+  # Never blocks, exit 0 always.
+  team-review-gate:
+    script: src/scripts/team_review_gate_hook.ts
+    args: []
+    fail_closed: false
 
 platforms:
   augment:
@@ -146,7 +157,7 @@ platforms:
   claude:
     session_start:    [chat-history, hot-context, first-run-gate, onboarding-gate, verify-before-complete, minimal-safe-diff, profile-staleness, wrapper-freshness, surface-probe]
     session_end:      [chat-history]
-    stop:             [chat-history, hot-context, verify-before-complete]
+    stop:             [chat-history, hot-context, verify-before-complete, team-review-gate]
     user_prompt_submit: [chat-history, verify-before-complete, minimal-safe-diff]
     pre_tool_use:     [block-no-verify, rtk-wrap, design-slop]
     post_tool_use:    [chat-history, roadmap-progress, context-hygiene, verify-before-complete, minimal-safe-diff, injection-scan]

package/src/scripts/install.ts

@@ -2494,7 +2494,11 @@ function _detect_legacy_for_migration(project_root: string): string[] {
         return [];
     }
 
-    if (isFile(path.join(project_root, CONSUMER_BRIDGE_MARKER_RELPATH))) return [];
+    // Migration-idempotency sentinel. Previously the consumer bridge marker;
+    // that file was retired (ADR-020 amendment 2026-07-13), so the durable
+    // "this project has already been installed / migrated" signal is now the
+    // install-mode marker, written on every full or minimal install.
+    if (isFile(path.join(project_root, INSTALL_MODE_MARKER_REL))) return [];
 
     const found: string[] = [];
     for (const name of MIGRATE_LEGACY_YAML_FILES) {
@@ -2573,38 +2577,34 @@ function _format_global_root_for_marker(global_root: string): string {
 }
 
 /**
- * Write `agents/.event4u-bridge.yml`. Skipped under `AGENT_CONFIG_DEV_MODE=1`
- * and when the project root is the agent-config source repo
- * (`.agent-src.uncondensed/` present) — same rationale. Atomic write.
+ * Remove a legacy `agents/.event4u-bridge.yml` if a previous install wrote
+ * one. The bridge marker was retired (ADR-020 dated amendment 2026-07-13):
+ * it carried no project-specific data — `global_root` is derived directly
+ * from the well-known `~/.event4u/agent-config` path — yet was committed to
+ * the shared project tree, so every developer's install rewrote its volatile
+ * `installed_at` / `installer_version` fields and overwrote each other's.
+ * The global root is now resolved from the well-known path; the migration
+ * idempotency sentinel moved to `agents/.agent-state/install-mode.txt`.
+ *
+ * Skipped under `AGENT_CONFIG_DEV_MODE=1` and inside the agent-config source
+ * repo (detected by the uncondensed-source marker dir) — the same gate the
+ * writer used. Returns the removed path (so the caller can report it) or null.
  */
-function _write_consumer_bridge_marker(
+function _remove_legacy_consumer_bridge_marker(
     project_root: string,
-    installer_version: string,
     env: NodeJS.ProcessEnv | null = null,
-    now: Date | null = null,
 ): string | null {
     const env_map = env ?? process.env;
     if (env_map['AGENT_CONFIG_DEV_MODE'] === '1') return null;
     if (isDir(path.join(project_root, '.agent-src.uncondensed'))) return null;
 
-    const global_root_str = _format_global_root_for_marker(
-        user_global_paths.event4u_root(env_map),
-    );
-    const stamp = utcStamp(now ?? undefined);
-
-    const body =
-        '# event4u/agent-config — consumer bridge marker (auto-written).\n' +
-        '# Spec: docs/contracts/consumer-bridge.md (event4u-bridge/v1).\n' +
-        '# Reader contract: expand ~ against the current $HOME; fail closed\n' +
-        '# when global_root is missing on disk; never write back through it.\n' +
-        'schema: event4u-bridge/v1\n' +
-        `global_root: ${global_root_str}\n` +
-        `installed_at: ${stamp}\n` +
-        `installer_version: ${installer_version}\n`;
-
     const target = path.join(project_root, CONSUMER_BRIDGE_MARKER_RELPATH);
-    mkdirp(path.dirname(target));
-    atomicWrite0644(target, body, '.event4u-bridge.');
+    if (!isFile(target)) return null;
+    try {
+        fs.rmSync(target);
+    } catch {
+        return null;
+    }
     return target;
 }
 
@@ -2641,16 +2641,14 @@ function _write_per_tool_project_anchors(
         const target = path.join(project_root, rel_path);
         mkdirp(path.dirname(target));
 
-        const bridge_abs = path.join(project_root, CONSUMER_BRIDGE_MARKER_RELPATH);
-        const bridge_rel = path.relative(path.dirname(target), bridge_abs);
-
         const body =
             '# event4u/agent-config — per-tool project anchor (auto-written).\n' +
             '# Spec: docs/contracts/consumer-bridge.md § Per-tool anchor strategy.\n' +
-            `# Tool: ${tool_id}. Bridge marker: agents/.event4u-bridge.yml.\n` +
+            `# Tool: ${tool_id}. Resolves the global install directly — no\n` +
+            '# project-local bridge marker (retired, ADR-020 amendment 2026-07-13).\n' +
+            '# This anchor is gitignored: each developer regenerates it on install.\n' +
             'schema: event4u-bridge/v1\n' +
             `tool: ${tool_id}\n` +
-            `bridge: ${bridge_rel}\n` +
             `global_root: ${global_root_str}\n` +
             `installed_at: ${stamp}\n`;
 
@@ -3377,15 +3375,15 @@ function install_global(
         const rc = _update_installed_tools_manifest(project_root, tools, 'global', force, files_by_tool);
         if (rc !== 0) return rc;
 
-        // Consumer bridge marker (Phase 4.2). The surrounding
-        // `.agent-src.uncondensed` guard already covers the source-repo case;
-        // the dev-mode skip is enforced inside the writer.
-        const marker_path = _write_consumer_bridge_marker(project_root, installed_version);
-        if (marker_path !== null && !state.QUIET) {
-            const rel = isRelativeTo(marker_path, project_root)
-                ? path.relative(project_root, marker_path)
-                : marker_path;
-            info(`Bridge marker written: ${rel}`);
+        // Consumer bridge marker retired (ADR-020 amendment 2026-07-13):
+        // clean up any legacy `agents/.event4u-bridge.yml` a prior install
+        // committed. The global root is resolved from the well-known path.
+        const removed_marker = _remove_legacy_consumer_bridge_marker(project_root);
+        if (removed_marker !== null && !state.QUIET) {
+            const rel = isRelativeTo(removed_marker, project_root)
+                ? path.relative(project_root, removed_marker)
+                : removed_marker;
+            info(`Removed legacy bridge marker: ${rel}`);
         }
 
         const anchor_paths = _write_per_tool_project_anchors(project_root, tools);
@@ -3800,13 +3798,14 @@ function install_minimal(target_root_in: string, force: boolean, user_type: stri
         }
     }
 
-    const installed_version = installed_lock.current_package_version();
-    const marker_path = _write_consumer_bridge_marker(target_root, installed_version);
-    if (marker_path !== null) {
-        const rel = isRelativeTo(marker_path, target_root)
-            ? path.relative(target_root, marker_path)
-            : marker_path;
-        success(`Wrote ${rel}`);
+    // Bridge marker retired (ADR-020 amendment 2026-07-13) — clean up any
+    // legacy `agents/.event4u-bridge.yml` a prior install left behind.
+    const removed_marker = _remove_legacy_consumer_bridge_marker(target_root);
+    if (removed_marker !== null) {
+        const rel = isRelativeTo(removed_marker, target_root)
+            ? path.relative(target_root, removed_marker)
+            : removed_marker;
+        success(`Removed legacy bridge marker: ${rel}`);
     }
 
     _write_install_mode_marker(target_root, 'minimal');

package/src/scripts/lint_agents_layout.ts

@@ -42,7 +42,11 @@ const ALLOWED_FLAT_FILES: ReadonlySet<string> = new Set([
     // separate violation caught by check_tracked_but_ignored.ts.
     '.ai-video.xml',       // operator AI-video config; gitignored per .gitignore § AI Video
     'installed-tools.lock', // installer per-user inventory; gitignored per ADR-020
-    '.event4u-bridge.yml',  // consumer bridge marker; ADR-020 (should only be in consumers)
+    // Retired marker (ADR-020 amendment 2026-07-13). No longer written; the
+    // global root resolves from `~/.event4u/agent-config`. Kept tolerated so a
+    // legacy leftover in a not-yet-reinstalled consumer is not flagged as a
+    // violation — the next install deletes it.
+    '.event4u-bridge.yml',
 ]);
 
 // All directories allowed at the agents/ root in the SOURCE REPO.
@@ -75,6 +79,8 @@ const ALLOWED_SOURCE_DIRS: ReadonlySet<string> = new Set([
 const CONSUMER_EXPECTED_ENTRIES: ReadonlySet<string> = new Set([
     // Required consumer entries
     'overrides',
+    // Retired marker (ADR-020 amendment 2026-07-13) — no longer written, but
+    // kept in the tolerated set so a legacy leftover does not warn.
     '.event4u-bridge.yml',
     '.gitkeep',
     // Optional but legitimate consumer entries (will not trigger warnings)
@@ -93,9 +99,9 @@ const CONSUMER_EXPECTED_ENTRIES: ReadonlySet<string> = new Set([
 const MIGRATE_HINT =
     'Run `npx @event4u/agent-config migrate` to sweep legacy project-scope ' +
     'artefacts in one pass. The unified `migrate` command (see ' +
-    '`docs/contracts/migrate-command.md`) leaves `agents/overrides/` + ' +
-    '`agents/.event4u-bridge.yml` as the only consumer-side files; the ' +
-    'wizard recreates fresh config on `agent-config setup`.';
+    '`docs/contracts/migrate-command.md`) leaves `agents/overrides/` as the ' +
+    'only consumer-side agent surface; the wizard recreates fresh config on ' +
+    '`agent-config setup`.';
 
 function _isDir(p: string): boolean {
     try {