@event4u/agent-config 8.4.1 → 8.5.0

package/docs/contracts/file-ownership-matrix.json

@@ -5012,6 +5012,13 @@
       "via": "body_link",
       "depth": 1
     },
+    {
+      "source": ".agent-src.uncondensed/rules/delegation-policy.md",
+      "target": ".agent-src.uncondensed/contexts/execution/subagent-steering.md",
+      "type": "READ_ONLY",
+      "via": "body_link",
+      "depth": 1
+    },
     {
       "source": ".agent-src.uncondensed/rules/delegation-policy.md",
       "target": ".agent-src.uncondensed/contexts/execution/verify-budget.md",
@@ -9366,6 +9373,13 @@
       "via": "self",
       "depth": 0
     },
+    {
+      "source": ".agent-src.uncondensed/skills/git-workflow/SKILL.md",
+      "target": ".agent-src.uncondensed/skills/quality-tools/SKILL.md",
+      "type": "READ_ONLY",
+      "via": "body_link",
+      "depth": 1
+    },
     {
       "source": ".agent-src.uncondensed/skills/github-ci/SKILL.md",
       "target": ".agent-src.uncondensed/skills/github-ci/SKILL.md",
@@ -13034,6 +13048,13 @@
       "via": "self",
       "depth": 0
     },
+    {
+      "source": ".agent-src.uncondensed/skills/subagent-orchestration/prompts/do-in-steps.md",
+      "target": ".agent-src.uncondensed/contexts/execution/subagent-steering.md",
+      "type": "READ_ONLY",
+      "via": "body_link",
+      "depth": 1
+    },
     {
       "source": ".agent-src.uncondensed/skills/subagent-orchestration/prompts/do-in-steps.md",
       "target": ".agent-src.uncondensed/skills/subagent-orchestration/SKILL.md",

package/docs/contracts/frontmatter-contract.md

@@ -83,7 +83,7 @@ install:
 ---
 ```
 
-### Command — `commands/cost-report.md`
+### Command — `commands/cost/report.md`
 
 ```yaml
 ---

package/docs/contracts/gui-wizard.md

@@ -17,9 +17,21 @@ keep-beta-until: 2026-08-19
 ## Source of truth
 
 The GUI is a Fastify server (`src/server/`) serving a Preact SPA
-(`src/ui/`), booted by the `install` / `setup` / `ui:serve` CLI
-subcommands. The legacy `packages/core/installer/src/gui/*` tree was
-retired; the single real installer is `scripts/install.py`.
+(`src/ui/`), booted by the `install` / `setup` / `config` (alias
+`settings`) / `ui:serve` CLI subcommands. The legacy
+`packages/core/installer/src/gui/*` tree was retired; the single real
+installer is `scripts/install.py`.
+
+Entry-point map (road-to-setup-experience § Phase 1):
+
+- `init` — install front-end; opens the wizard in install mode (start
+  screen: recommended path vs customize). `init --project` never boots
+  the GUI — it writes the minimal project surface via the
+  `refresh --project` writer.
+- `setup` — re-runs the guided onboarding wizard (prefilled).
+- `config` — opens the standalone settings hub (`#/settings`; global
+  scope). `config --project` lands on the project surface
+  (`#/project`). `settings` stays as a compatible alias.
 
 - Server app + security hooks: [`src/server/app.ts`](../../src/server/app.ts) (Host allow-list, Origin allow-list, CSRF token — `onRequest` hooks)
 - Wizard routes (incl. the real-apply bridge): [`src/server/routes/wizard.ts`](../../src/server/routes/wizard.ts)
@@ -63,7 +75,7 @@ Finish drives the **whole** install through `POST /api/v1/wizard/apply` →
 `AGENT_CONFIG_NO_UI` set, stdin/stdout not a TTY, a headless host (SSH / Linux
 without `DISPLAY`), or a CLI-mode flag (`--no-ui` / `--tools` / `--ai` /
 `--yes` / `--quiet` / `--dry-run` / `--minimal` / `--settings-only` /
-`--list-tools`). `install.py`'s own tail-launch (`_wizard_spawn`, matching the
+`--list-tools` / `--project`). `install.py`'s own tail-launch (`_wizard_spawn`, matching the
 `WIZARD_READY <url>` handshake) remains for direct CLI install runs.
 
 ### `WIZARD_READY` stdout contract

package/docs/contracts/iron-law-overrides.txt

@@ -18,6 +18,7 @@
 # Iron-Law fences + non-externalisable enumerations; further condensation
 # would force semantic loss. All sit ≤ 4 000-char override ceiling.
 ask-when-uncertain
+commit-policy
 direct-answers
 language-and-tone
 no-cheap-questions

package/docs/contracts/rule-classification.md

@@ -112,9 +112,9 @@ existing skills under `.agent-src.uncondensed/skills/`.
 | commit-conventions | 1938 | `conventional-commits-writing` | Format procedure |
 | docker-commands | 1830 | `docker` | Stack-specific procedure |
 | docs-sync | 3131 | `agent-docs-writing` | Mechanical sync procedure |
-| e2e-testing | 1807 | `e2e-heal` | Procedural; project-specific |
+| e2e-testing | 1807 | `tests-e2e-heal` | Procedural; project-specific |
 | laravel-translations | 995 | `laravel` | Stack-specific |
-| model-recommendation | 2909 | `set-cost-profile` | Routing procedure |
+| model-recommendation | 2909 | `cost-profile` | Routing procedure |
 | onboarding-gate | 4881 | `onboard` | Mechanical: meta-rule about /onboard |
 | package-ci-checks | 1342 | `lint-skills` | Repo-specific procedure |
 | reviewer-awareness | 3573 | `review-routing` | Skill exists; consolidates former `review-routing-awareness` (2026-05-08, see `agents/settings/contexts/adr-auto-rule-consolidation.md`) |

package/docs/contracts/settings-api.md

@@ -6,7 +6,7 @@ keep-beta-until: 2026-08-18
 # Settings GUI — REST API Contract (v1)
 
 > Local-only HTTP API exposed by `agent-config ui:serve` and reused by
-> `agent-config settings` / `agent-config setup`. Listens on `127.0.0.1`
+> `agent-config config` (alias `settings`) / `agent-config setup`. Listens on `127.0.0.1`
 > only; no auth, no cross-origin. The browser SPA is the sole client —
 > the legacy `/onboard` chat skill has been retired.
 >
@@ -72,10 +72,16 @@ Response (200):
     "values":       { "rule_loading_tier": "balanced", "...": "..." },
     "lastModified": 1747749791842,
     "path":         "settings/.agent-settings.yml",
-    "legacyHints":  { "user_name": "Matze" }
+    "legacyHints":  { "user_name": "Matze" },
+    "sources":      { "global": ["rule_loading_tier", "personal.ide"], "project": [] }
 }
 ```
 
+`sources` (road-to-setup-experience § Phase 5.4) carries the dotted
+leaf paths present in each layer FILE (not the merged tree) so the
+settings hub can badge which layer supplies a value — a `project`
+entry overrides a `global` one per the merge order above.
+
 `legacyHints` is an out-of-band sidecar carrying values that have moved
 out of `settingsSchema` but still live in a pre-v2 file on disk. Keys
 are omitted when empty, never `null`. Current hints:
@@ -125,6 +131,56 @@ Errors: **412 Precondition Required** when the header is absent;
 **422 Unprocessable Entity** with per-field errors on validation
 failure; **500** with `code=ATOMIC_WRITE` if the temp-rename loop fails.
 
+### `GET /api/v1/settings/changes`
+
+Pending upgrade-time settings-surface delta
+(road-to-settings-change-review). The installer persists the flattened
+settings surface (`state/settings-surface.json`: per dotted leaf its
+type / default / enum / description + package version) on every global
+install; when a previous snapshot from a different version exists it
+computes the semantic delta and writes `state/settings-delta.json` —
+that file is what this route serves. Classification against the user's
+current values happens client-side via the shared
+`src/shared/settingsSurface.ts` module (`must_fix` / `adopt` /
+`review` / `info`).
+
+Response (200):
+
+```json
+{
+    "delta": {
+        "oldVersion": "8.3.0",
+        "newVersion": "8.4.0",
+        "changes": [
+            { "key": "personal.autonomy", "kind": "default_changed", "old": { "...": "..." }, "new": { "...": "..." } },
+            { "key": "discipline_profile", "kind": "added", "new": { "...": "..." } }
+        ]
+    },
+    "source": "writeRoot"
+}
+```
+
+`kind` ∈ `added | removed | default_changed | enum_added |
+enum_removed | type_changed`. `source` is `userGlobal` when the delta
+was found via the package-sandbox read fallback.
+
+Errors: **404** with `code=NO_PENDING_CHANGES` when no (parseable)
+delta file exists.
+
+### `POST /api/v1/settings/changes/ack`
+
+Clears the pending delta after the review form is resolved (or
+dismissed). Deletes only `<writeRoot>/state/settings-delta.json` —
+never the real machine's file when running in a sandbox. Idempotent.
+
+Response (200): `{ "ok": true, "cleared": true }` (`cleared: false`
+when nothing was pending; `dryRun: true` and no deletion in dry-run
+mode).
+
+A matching `settings-review-pending` doctor check warns while the
+delta file exists; the settings hub renders a review banner linking to
+`#/settings/changes`.
+
 ### `GET /api/v1/user-md`
 
 Reads `<projectRoot>/.agent-user.md`. Returns `{ body: '', exists: false, lastModified: null }`

package/docs/contracts/surface-matrix.md

@@ -1,3 +1,8 @@
+---
+stability: beta
+keep-beta-until: 2026-10-06
+---
+
 # Surface Matrix — per-tool canonical-surface contract
 
 > Machine-checked inventory of which install surface is canonical per tool,

package/docs/cookbook.md

@@ -11,7 +11,7 @@ Each recipe is a short command sequence. Run the commands in order; the listed s
 
 *You have a diff and want a real review, not a rubber-stamp.*
 
-- **Commands:** `/review-changes` → `/judge` → `/quality-fix`
+- **Commands:** `/review:changes` → `/judge` → `/fix:quality`
 - **Skills:** `code-review`, `adversarial-review`
 
 ### Fix a red CI run
@@ -60,7 +60,7 @@ Each recipe is a short command sequence. Run the commands in order; the listed s
 
 *Something is broken and you want root cause before the patch.*
 
-- **Commands:** `/bug-investigate` → `/bug-fix`
+- **Commands:** `/bug:investigate` → `/bug:fix`
 - **Skills:** `systematic-debugging`, `bug-analyzer`
 
 ### Get a second opinion from the AI council
@@ -81,7 +81,7 @@ Each recipe is a short command sequence. Run the commands in order; the listed s
 
 *You want to restructure code without changing behaviour.*
 
-- **Commands:** `/feature:refactor` → `/review-changes` → `/judge`
+- **Commands:** `/feature:refactor` → `/review:changes` → `/judge`
 - **Skills:** `code-refactoring`, `test-driven-development`
 
 ### Commit in logical chunks
@@ -95,7 +95,7 @@ Each recipe is a short command sequence. Run the commands in order; the listed s
 
 *You just opened a repo and want a fast structural read.*
 
-- **Commands:** `/project-analyze` → `/project-health`
+- **Commands:** `/project:analyze` → `/project:health`
 - **Skills:** `project-analyzer`
 
 ### Estimate a ticket
@@ -134,14 +134,14 @@ Explore, plan, estimate, refine, and investigate before building. The "what shou
 
 Build it. The core "make the change" front — drive a prompt, ticket, or feature end-to-end through plan → implement → verify.
 
-- **Path:** `/work` → `/review-changes` → `/quality-fix` → `/commit`
+- **Path:** `/work` → `/review:changes` → `/fix:quality` → `/commit`
 - **Skills:** `test-driven-development`, `code-review`, `systematic-debugging`, `git-workflow`
 
 ### Review flow
 
-Check it. Self-review, judge, quality-fix, and threat-model a change before it ships.
+Check it. Self-review, judge, fix/quality, and threat-model a change before it ships.
 
-- **Path:** `/review-changes` → `/judge` → `/quality-fix` → `/threat-model`
+- **Path:** `/review:changes` → `/judge` → `/fix:quality` → `/threat-model`
 - **Skills:** `code-review`, `adversarial-review`, `quality-tools`, `threat-modeling`, `receiving-code-review`
 
 ### Delivery flow

package/docs/decisions/ADR-114-commit-policy-iron-law-override.md

@@ -0,0 +1,74 @@
+# ADR-114 — commit-policy Iron-Law Override (per-rule cap 2.5k → ceiling 4.0k)
+
+- **Status:** Accepted (2026-07-08)
+- **Supersedes:** none — extends the override set locked by
+  [ADR-002](ADR-002-kernel-bucket-overrides.md) under
+  `docs/contracts/kernel-membership.md` § 5.1.
+- **Related:** ADR-002 (kernel-bucket cap raise + the original 6 overrides).
+
+## Context
+
+Commit 259bb1b24 (*feat(commit-policy): one-shot authorization is not a
+standing license*, merged to main 2026-07-07) added a second Iron-Law fence
+to `commit-policy`:
+
+```
+A ONE-OFF AUTHORIZATION IS SPENT ON EXACTLY THAT OPERATION, ONCE.
+IT NEVER BECOMES A STANDING LICENSE FOR LATER COMMITS OR PUSHES.
+EACH FURTHER COMMIT / PUSH NEEDS ITS OWN FRESH, EXPLICIT GO-AHEAD.
+```
+
+plus the prose enumerating which phrasings spend the authorization and the
+canonical failure it prevents. That grew the rule from 2 354 chars (the
+post-ADR-002 trimmed size) to **3 194 chars** — over the 2 500 per-rule hard
+cap, without an entry in `docs/contracts/iron-law-overrides.txt`, so
+`lint-rule-budget` hard-fails on every branch that carries main.
+
+Kernel-bucket state at decision time: **25 393 / 26 000 chars** (9 rules) —
+the bucket cap from ADR-002 still holds with ~600 chars headroom; only the
+per-rule cap is exceeded.
+
+## Decision
+
+1. Add `commit-policy` (3 194 chars) to
+   `docs/contracts/iron-law-overrides.txt` with this ADR as justification.
+   It sits between 2.5k and the 4.0k override ceiling.
+2. The kernel bucket cap (26 000) and the override ceiling (4 000) stay
+   unchanged.
+
+## Rationale
+
+`commit-policy` now carries **three non-externalisable structural
+elements** — the same test ADR-002 applied to the original 6 overrides:
+
+- The primary Iron-Law fence (`NEVER COMMIT. NEVER ASK ABOUT COMMITTING.`)
+  plus the closed 4-exception enumeration — the rule's contract.
+- The new one-shot-authorization fence plus the phrasing enumeration
+  ("commit this", "push it", "open the PR" are spent on exactly that
+  operation). Externalising the enumeration would force a context load on
+  every commit-adjacent turn — i.e. always — defeating the kernel-vs-auto
+  split.
+- The split-into-chunks fence (`COMMIT AUTHORIZED → SPLIT INTO LOGICAL
+  CHUNKS BY DEFAULT`) with its never-ask clauses.
+
+ADR-002 noted commit-policy was trimmable *because* it carried no
+enumeration; 259bb1b24 changed exactly that premise by adding one whose
+misreading (a one-off "commit this" read as standing license) is the
+canonical failure the fence exists to stop.
+
+## Consequences
+
+- **Pro:** `lint-rule-budget` is green again on every branch tracking main;
+  the Iron-Law fences stay byte-preserved in one rule.
+- **Con:** 7 of 9 kernel rules now carry overrides; the 2.5k hard cap
+  disciplines only new/small rules. The 26k bucket (98%+ utilisation
+  headroom per ADR-002) remains the effective backstop.
+- Future commit-policy growth past 4 000 chars is not covered — that would
+  require condensation or an externalisation decision, not another ADR.
+
+## Rollback
+
+Trim the one-shot-authorization prose into
+`contexts/authority/commit-mechanics.md` (keeping only the fence in the
+rule) and remove the allowlist entry — reversible; this ADR does not lock
+that out.

package/docs/decisions/ADR-115-command-cluster-consolidation-phase-4.md

@@ -0,0 +1,91 @@
+---
+adr: 115
+status: accepted
+date: 2026-07-08
+decision: command-cluster-consolidation-phase-4
+supersedes: —
+superseded_by: —
+phase: road-to-command-structure-optimization · Phase 0
+---
+
+# ADR-115 — Command-cluster consolidation Phase 4 (flat dash commands → nested clusters)
+
+- **Deciders:** maintainer + AI council (anthropic/claude-sonnet-4-5 + openai/gpt-4o, 2-round debate, 2026-07-08)
+
+## Context
+
+After the Phase 1–3 cluster collapses, ~27 flat dash-separated commands
+remained (`bug-fix`, `project-analyze`, `optimize-project`, `quality-fix`, …).
+ADR-044 derives the invoked slug from the physical path by hyphen-joining
+(`fix/ci` → `fix-ci`), which creates a cost asymmetry the earlier phases did
+not exploit: **nesting `bug-fix` as `bug/fix` keeps the invoked slug
+`bug-fix`** — invocation-neutral — while only reorder-moves
+(`quality-fix` → `fix/quality` = `fix-quality`) change the typed name.
+
+## Decision
+
+1. **Nest the remaining coherent families** (council-adopted set):
+   - Extended clusters: `optimize` (+`project`, `prompt`), `fix` (+`quality`),
+     `tests` (+`e2e-plan`, `e2e-heal`), `analyze` (+`reference-repo`).
+   - New clusters: `bug` (fix · investigate), `project` (analyze · health),
+     `review` (changes · routing), `package` (test · reset),
+     `cost` (report · profile), `sync` (agent-settings · gitignore ·
+     gitignore-fix — absorbs the single-sub `sync-gitignore` cluster).
+   - Slug reorders carry `replaces:` aliases: `fix-quality`,
+     `tests-e2e-plan`, `tests-e2e-heal`, `cost-profile`.
+2. **Cluster heads are dispatch menus, not verbs.** ADR-041's controlled-verb
+   allowlist governs the leading token of visible *command slugs* (and the
+   `sub:` head for nested commands). A cluster head named after a noun/scope
+   (`bug`, `project`, `cost`) is a navigation surface — the same shape as the
+   pre-existing `agents`, `memory`, `brand`, `video` heads — and does not add
+   a verb to the allowlist. (Council round 2 explicitly overturned the
+   verb-policy objection on this ground.)
+3. **Co-location rule.** All subs of a cluster live in the same pack directory
+   as the head — slug derivation implies it. Cross-pack members move packs
+   (`optimize-project` eng → meta, `review-routing` meta → eng,
+   `package-test` eng → meta, `sync-gitignore` eng → meta,
+   `analyze-reference-repo` eng → analysis-workbench).
+4. **Bare invocation is deterministic.** Multi-sub head → numbered menu;
+   single-sub head → default-route; documented default-flow exceptions live in
+   the head's `## Dispatch`. Enforced structurally by
+   `scripts/check_cluster_patterns.ts`, which now also resolves every
+   `routes_to:` entry to a real command.
+5. **Tier-0 slugs never change.** Deferred/rejected per council:
+   - `ticket` cluster (implement/estimate/refine/jira) — tier-0
+     `implement-ticket` rename + cross-pack move; revisit with usage
+     telemetry.
+   - `security` cluster — weak cohesion; `security-audit-config` and
+     `threat-model` stay flat.
+   - `prepare-for-review` → `review/prepare` — pre-commit muscle memory.
+   - Demotions (`check-current-md`, `update-form-request-messages`) — need a
+     skill-coverage / pack-boundary audit first.
+
+## Consequences
+
+- 19 commands nested; 15 keep their invoked slug, 4 gain `replaces:` aliases.
+- `review-changes` becomes internal; the advanced surface is the `review`
+  head (eval key moves `review-changes.json` → `review.json`).
+- `lint_no_new_atomic_commands.ts` is repointed from the removed
+  `.agent-src.uncondensed/commands` dir to `src/domains` so the atomic-surface
+  gate has teeth again; the new clusters are registered in the locked table.
+- Consumers invoking old reordered slugs are migrated via `replaces:` +
+  the `migrate` flow; slug-neutral nests need no migration.
+
+## Alternatives considered
+
+- **Colon-namespaced subcommands** — rejected long ago (ADR-044): Claude Code
+  cannot resolve them.
+- **`ticket` cluster now** — rejected by both council members (highest-risk
+  item: tier-0 rename + pack move with unclear ownership).
+- **Keeping `/optimize` agent-layer-only** — council split; maintainer
+  directive adopted the widened scope; the head menu + scope-check rule
+  disambiguates the three scopes.
+
+## References
+
+- `docs/contracts/command-clusters.md` — locked table (Phase 4 rows) + the
+  new "Bare invocation" section.
+- `agents/roadmaps/road-to-command-structure-optimization.md` — inventory,
+  council verdicts, phases.
+- ADR-003 (flat clusters), ADR-041 (controlled verbs), ADR-044 (path-derived
+  hyphen slugs).

package/docs/decisions/INDEX.md

@@ -117,6 +117,8 @@ _Auto-generated by `scripts/adr/regenerate_index.py`. Do not edit._
 | [ADR-111](ADR-111-canonical-glama-listing.md) | Canonical Glama Listing | accepted | 2026-07-07 | — |
 | [ADR-112](ADR-112-stdio-lite-stays-read-only.md) | Stdio Lite Stays Read Only | accepted | 2026-07-07 | — |
 | [ADR-113](ADR-113-ci-native-release-label-trigger.md) | Ci Native Release Label Trigger | accepted | 2026-07-08 | — |
+| [ADR-114](ADR-114-commit-policy-iron-law-override.md) | Commit Policy Iron Law Override | — | — | — |
+| [ADR-115](ADR-115-command-cluster-consolidation-phase-4.md) | Command Cluster Consolidation Phase 4 | accepted | 2026-07-08 | — |
 | [ADR-200](ADR-200-python-to-typescript-migration.md) | Python To Typescript Migration | accepted | 2026-06-11 | — |
 
 ## Unnumbered (legacy)

package/docs/featured-commands.md

@@ -11,7 +11,7 @@ A curated subset of the 124 active commands. Full set lives in
 | [`/implement-ticket`](../dist/agent-src/commands/implement-ticket.md) | Drive a Jira / Linear ticket end-to-end through refine → plan → implement → test → verify |
 | [`/work`](../dist/agent-src/commands/work.md) | Same end-to-end loop for a free-form prompt — confidence-band gated |
 | [`/fix ci`](../dist/agent-src/commands/fix.md) | Fetch CI failures from GitHub Actions and fix them |
-| [`/review-changes`](../dist/agent-src/commands/review-changes.md) | Self-review local changes before creating a PR (five judges) |
+| [`/review-changes`](../dist/agent-src/commands/review/changes.md) | Self-review local changes before creating a PR (five judges) |
 | [`/pr:create`](../dist/agent-src/commands/pr/create.md) | Create a GitHub PR with Jira-linked description |
 
 ## For everyone

package/docs/featured-skills.md

@@ -1,6 +1,6 @@
 # Featured Skills
 
-A curated subset of the ~218 active skills. Three tiers, one per primary audience. Full catalog lives in [`dist/agent-src/skills/`](../dist/agent-src/skills/); see also [`docs/catalog.md`](catalog.md) for the complete index and [`docs/featured-commands.md`](featured-commands.md) for command-level highlights.
+A curated subset of the 264 skills. Three tiers, one per primary audience. Full catalog lives in [`dist/agent-src/skills/`](../dist/agent-src/skills/); see also [`docs/catalog.md`](catalog.md) for the complete index and [`docs/featured-commands.md`](featured-commands.md) for command-level highlights.
 
 > **Eval-gated messaging note.** Until `task bench --corpus non-dev` reports `selection_accuracy >= 0.60` (see `road-to-product-adoption.md` Phase 1), this page is documentation, not marketing. The entries below are the candidates the corpus tests against; their description quality is what the eval validates.
 
@@ -20,7 +20,7 @@ Each row links to the canonical artefact under `dist/agent-src/`. Substitutions
 | [`/refine-prompt`](../dist/agent-src/skills/refine-prompt/SKILL.md) | Reconstruct a free-form prompt into actionable AC + assumptions + confidence band before the engine plans |
 | [`/work`](../dist/agent-src/commands/work.md) | Drive a free-form prompt end-to-end through refine → score → plan → implement → test → verify → report |
 | [`/grill-me`](../dist/agent-src/commands/grill-me.md) | Interactive grill-style interview that sharpens a fuzzy plan / idea into a copyable Markdown pitch |
-| [`/optimize-prompt`](../dist/agent-src/commands/optimize-prompt.md) | Optimize a raw prompt for ChatGPT / Claude / Gemini via the 4-D methodology |
+| [`/optimize-prompt`](../dist/agent-src/commands/optimize/prompt.md) | Optimize a raw prompt for ChatGPT / Claude / Gemini via the 4-D methodology |
 | [`decision-record`](../dist/agent-src/skills/decision-record/SKILL.md) | Lock a trade-off — options · trade-offs · consequences — before the ADR file is written |
 | [`fundraising-narrative`](../dist/agent-src/skills/fundraising-narrative/SKILL.md) | Why-now / why-us / why-this framing, market-size reasoning, traction-story construction |
 | [`okr-tree-modeling`](../dist/agent-src/skills/okr-tree-modeling/SKILL.md) | Decompose a company objective into team OKRs; audit a draft tree for measurability and laddering |
@@ -67,7 +67,7 @@ Each row links to the canonical artefact under `dist/agent-src/`. Substitutions
 |---|---|
 | [`/work`](../dist/agent-src/commands/work.md) | Free-form prompt end-to-end loop — refine → plan → implement → test → verify, confidence-band gated |
 | [`/implement-ticket`](../dist/agent-src/commands/implement-ticket.md) | Drive a Jira / Linear ticket end-to-end — same loop, ticket-anchored |
-| [`/review-changes`](../dist/agent-src/commands/review-changes.md) | Self-review local changes before creating a PR — dispatches to five specialized judges and consolidates verdicts |
+| [`/review-changes`](../dist/agent-src/commands/review/changes.md) | Self-review local changes before creating a PR — dispatches to five specialized judges and consolidates verdicts |
 | [`/commit`](../dist/agent-src/commands/commit.md) | Stage and commit all uncommitted changes — splits into logical commits following Conventional Commits |
 | [`judge-bug-hunter`](../dist/agent-src/skills/judge-bug-hunter/SKILL.md) | Correctness review — null-safety, edge cases, off-by-one, races, error handling |
 | [`judge-code-quality`](../dist/agent-src/skills/judge-code-quality/SKILL.md) | Readability review — naming, single-responsibility, DRY, dead code, codebase-convention drift |
@@ -92,4 +92,4 @@ task lint-featured-skills
 
 CI runs this in `taskfiles/ci-fast.yml`. Stale entries (renamed / removed skill or command) fail the build. See [`scripts/lint_featured_skills.py`](../src/scripts/lint_featured_skills.py) for the matcher.
 
-→ Browse all ~218 active skills: [`dist/agent-src/skills/`](../dist/agent-src/skills/) · all ~129 commands: [`dist/agent-src/commands/`](../dist/agent-src/commands/)
+→ Browse all 264 skills: [`dist/agent-src/skills/`](../dist/agent-src/skills/) · all 172 commands: [`dist/agent-src/commands/`](../dist/agent-src/commands/)

package/docs/flows.md

@@ -32,7 +32,7 @@ Explore, plan, estimate, refine, and investigate **before** building.
 Drive a prompt, ticket, or feature end-to-end through plan → implement → verify.
 
 - **Entry commands:** `/work` · `/implement-ticket` · `/feature:dev` · `/bug-fix`
-- **Canonical path:** `/work` → `/review-changes` → `/quality-fix` → `/commit`
+- **Canonical path:** `/work` → `/review changes` → `/fix quality` → `/commit`
 - **Skills:** `test-driven-development` · `code-review` · `systematic-debugging` · `git-workflow`
 
 ## 🔎 Review — *check it*
@@ -40,7 +40,7 @@ Drive a prompt, ticket, or feature end-to-end through plan → implement → ver
 Self-review, judge, quality-fix, and threat-model a change before it ships.
 
 - **Entry commands:** `/review-changes` · `/judge`
-- **Canonical path:** `/review-changes` → `/judge` → `/quality-fix` → `/threat-model`
+- **Canonical path:** `/review changes` → `/judge` → `/fix quality` → `/threat-model`
 - **Skills:** `code-review` · `adversarial-review` · `quality-tools` · `threat-modeling` · `receiving-code-review`
 
 ## 🚢 Delivery — *ship it*

package/docs/getting-started-by-role.md

@@ -2,7 +2,7 @@
 
 > Pick the entry that matches what you do day-to-day. Each section names the three skills you will reach for first and shows whether MCP (no terminal) or CLI (terminal) is the simpler install path for that role.
 
-`agent-config` ships ~210 skills, ~67 rules, and ~124 commands. You do not need all of them. Each role below filters to the slice that pays back in week one; the rest stays available and shows up on demand when a task references it.
+`agent-config` ships 264 skills, 95 governed rules, and 172 commands. You do not need all of them. Each role below filters to the slice that pays back in week one; the rest stays available and shows up on demand when a task references it.
 
 > **Taglines at a glance →** [`docs/role-experiences.md`](role-experiences.md) — the one-line pitch per role experience, in one table.
 

package/docs/getting-started-laravel.md

@@ -30,7 +30,7 @@ The Laravel quality pipeline runs PHPStan + Rector + ECS, with Pest as the test
 
 - [`quality-tools`](../dist/agent-src/skills/quality-tools/SKILL.md) — PHPStan output triage, Rector apply, ECS fix.
 - [`pest-testing`](../dist/agent-src/skills/pest-testing/SKILL.md) — Pest test authoring patterns.
-- [`/quality-fix`](../dist/agent-src/commands/quality-fix.md) — runs the full pipeline and fixes reported errors.
+- [`/fix quality`](../dist/agent-src/commands/fix/quality.md) — runs the full pipeline and fixes reported errors.
 
 ## Docker and dev environment
 

package/docs/getting-started.md

@@ -39,8 +39,11 @@ project sees the new skills, rules, and hooks at once, no per-repo bump:
 ```bash
 agent-config upgrade            # fetch + install the latest globally (content + hooks)
 agent-config refresh --global   # idempotent re-install, same version
-agent-config refresh --project  # refresh a project's minimal surface — bridge
+agent-config init --project     # initialize a project's minimal surface — bridge
                                 # marker, agents/overrides/, .gitignore (no wizard)
+agent-config refresh --project  # refresh that surface (same writer, idempotent)
+agent-config config             # open the configuration GUI (global settings hub)
+agent-config config --project   # open the project configuration surface
 agent-config doctor             # PATH, hook wiring, duplicate surfaces, bridge presence
 ```
 
@@ -168,10 +171,10 @@ Your agent now understands slash commands:
 | `/fix ci` | Fetch and fix GitHub Actions failures |
 | `/optimize skills` | Audit skills, find duplicates, run linter |
 | `/feature plan` | Interactively plan a feature |
-| `/quality-fix` | Run and fix all quality checks |
+| `/fix quality` | Run and fix all quality checks |
 | `/chat-history import` | Pull a prior session into the current chat (resume) |
 
-→ [Browse all 166 active commands](../dist/agent-src/commands/)
+→ [Browse all 172 active commands](../dist/agent-src/commands/)
 
 ---
 

package/docs/governance-advantage.md

@@ -33,7 +33,7 @@ the host lacks (a static host gives it no runtime attention guarantee, but a
 runtime-only system gives it nothing at all here). A runtime-only system contributes *nothing* on these hosts.
 
 ### 2. Intent routing, not a 500-artefact dump
-A prompt does not load all 258 skills. `dist/router.json` (88 rules, intent →
+A prompt does not load all 264 skills. `dist/router.json` (91 routed rules, intent →
 skill, keyword/phrase/path triggers) carries the right skill on intent. The
 governance value is *selection discipline* — the host gets the relevant rule
 set, not the whole catalogue as context ballast.

package/docs/guidelines/agent-infra/5w2h-analysis.md

@@ -10,7 +10,7 @@ the **Reference-Guideline Sunset Policy** (see frontmatter `upstream` /
   — L1 Quick analysis depth.
 - [`refine-ticket`](../../../.agent-src.uncondensed/skills/refine-ticket/SKILL.md)
   — completeness check on a Jira / Linear ticket before estimation.
-- [`bug-investigate`](../../../.agent-src.uncondensed/commands/bug-investigate.md)
+- [`bug-investigate`](../../../.agent-src.uncondensed/commands/bug/investigate.md)
   — gap analysis on an incident report before forming a hypothesis.
 
 > **Core principle:** "Quality of decisions equals quality of questions

package/docs/guidelines/agent-infra/ios-simulator-guide.md

@@ -11,7 +11,7 @@
   capture, multi-device test sweeps.
 - Intended companions: `react-native-setup` skill (environment),
   `mobile-e2e-strategy` skill (framework selection), `playwright-testing`
-  / `e2e-plan` skills (cross-platform E2E strategy).
+  / `/tests e2e-plan` command (cross-platform E2E strategy).
 - **macOS-only:** Xcode + simctl + (optional) idb require a macOS host.
   On Linux/Windows this guideline is reference-only — no implementation
   recipes are portable.

package/docs/proof.md

@@ -26,14 +26,23 @@ evidence pointer, or `task check-claims` fails the build.
 
 | Claim | Kind | Evidence | Resolves |
 |---|---|---|---|
+| 172 commands. | quant | `src/scripts/check_artefact_count_messaging.ts#Artefact-count messaging gate` | ✅ |
 | On a weak host (claude-haiku-4-5) the package produces a significant, placebo-controlled discipline lift on scope/downstream traps; on a strong host the same measurement is a published null — the package transplants discipline a weak model lacks, not model intelligence. | quant | `docs/benchmark.md#weak-host-specific` | ✅ |
 | The lift-carrying essential cut (kernel + downstream-changes) keeps a significant weak-host discipline lift at a fraction of the full load's tokens, and the lift is FAMILY- and HOST-SCOPED — measured on three hosts: claude-haiku-4-5 (weak) shows the family-scoped lift (trapE 0.533→1.000, 7/7 discordant, corpus cost 1.71x); claude-sonnet-4-6 (strong) is a ceiling null; gpt-5-mini (non-Claude weak, codex prompt-prepend surface) FAILED replication with headroom (corpus Δ=+0.024 p=0.70, capability trend n.s. — no harm claimed, injection-surface confound documented). Therefore discipline_profile: auto enables the lift only where measured (vendor-granular unknown_defaults). Non-claims — the balanced router profile was removed after a NULL measurement (p=0.81, n=24); no full-tier recommendation exists; no cross-vendor lift is claimed. | quant | `docs/benchmark.md#REPLICATION FAILED` | ✅ |
 | The whole layer is compiled into host agents with zero runtime daemon. | qual | `docs/contracts/no-runtime-boundary.md#file-first, no-runtime suite` | ✅ |
+| 95 governed rules. | quant | `src/scripts/check_artefact_count_messaging.ts#Artefact-count messaging gate` | ✅ |
+| 264 skills (README hero + feature list). | quant | `src/scripts/check_artefact_count_messaging.ts#Artefact-count messaging gate` | ✅ |
 | Removes only its own keys from a shared host config (matched by JSON-pointer + SHA-256), never a neighbour tool's entries. | qual | `docs/contracts/install-layout.md#JSON-pointer` | ✅ |
 
-**4 backed claim(s)** — all evidence pointers resolve in CI.
+**7 backed claim(s)** — all evidence pointers resolve in CI.
 
-We also publish our **debt**: 4 claim(s) are logged as
+Artefact counts in public prose (skills, commands, governed rules,
+guidelines, personas) are **generated from source and CI-drift-checked**:
+`update_counts.ts` writes the numbers, `check_artefact_count_messaging.ts`
+fails the build on any count-shaped prose mention that drifts from the
+source count — or on two different numbers for the same artefact kind.
+
+We also publish our **debt**: 1 claim(s) are logged as
 `unbacked` inventory in the ledger — not yet bound, and therefore not
 allowed to carry a marker in public prose. Hiding them would be the
 opposite of the point.

package/package.json

@@ -1,6 +1,6 @@
 {
     "name": "@event4u/agent-config",
-    "version": "8.4.1",
+    "version": "8.5.0",
     "description": "Universal AI Agent OS — audited skills, governance rules, commands, and templates for AI coding tools (Claude Code, Cursor, Windsurf, Copilot).",
     "license": "MIT",
     "private": false,
@@ -38,6 +38,8 @@
         "dist/",
         "docs/",
         "src/scripts/",
+        "src/server/schemas/",
+        "src/shared/",
         "src/install/",
         "src/agent-src/scripts/",
         "src/agent-src/templates/scripts/",

package/src/agent-src/README.md

@@ -42,7 +42,7 @@ For full details see [augment-infrastructure.md](contexts/augment-infrastructure
 |---|---|
 | `/agent-handoff` | Generate context summary for a fresh chat |
 | `/fix-pr-comments` | Fix all open PR review comments |
-| `/quality-fix` | Run PHPStan + Rector and fix errors |
+| `/fix quality` | Run PHPStan + Rector and fix errors |
 | `/create-pr` | Create a GitHub PR with description |
 | `/bug-investigate` | Investigate a bug from Jira/Sentry |
 | `/tests-create` | Write tests for current changes |