@event4u/agent-config 8.4.1 → 8.6.0

package/src/scripts/lint_context_spine_usage.ts

@@ -2,11 +2,11 @@
 /**
  * Context-spine usage linter.
  *
- * TypeScript twin of `src/scripts/lint_context_spine_usage.py` (ADR-200,
- * Phase 4 / Wave 4b). The CLI contract is mirrored EXACTLY — `--quiet`
+ * Ported from the retired Python `src/scripts/lint_context_spine_usage.py` (ADR-200,
+ * Phase 4 / Wave 4b). The CLI contract is pinned — `--quiet`
  * detected by argv membership (no argparse), exit codes (0 clean,
  * 1 violations / no files), stdout/stderr split, byte-identical messages,
- * same glob scan order. No behaviour changes — latent bugs replicated.
+ * same glob scan order. Historical quirks are preserved deliberately — tests and downstream consumers pin the exact behaviour.
  *
  * For every slot declared in frontmatter (`context_spine: [...]`), the skill
  * body MUST cite the slot at least once (link, bold, or inline-code form).

package/src/scripts/lint_discovery_manifest.ts

@@ -2,15 +2,15 @@
 /**
  * Lint a generated discovery-manifest.json against schema + checksum.
  *
- * TypeScript twin of `src/scripts/lint_discovery_manifest.py` (ADR-200,
- * Phase 4 / Wave 4b). The CLI contract is mirrored EXACTLY — `--manifest`
+ * Ported from the retired Python `src/scripts/lint_discovery_manifest.py` (ADR-200,
+ * Phase 4 / Wave 4b). The CLI contract is pinned — `--manifest`
  * / `--quiet` flags, exit codes (0 / 1), stdout/stderr split, byte-identical
  * SUCCESS + vocab + determinism + checksum messages, same check order, and
  * a byte-identical checksum recomputation (recursive key-sort + indent-2,
- * `ensure_ascii=False`). No behaviour changes — latent bugs replicated.
+ * `ensure_ascii=False`). Historical quirks are preserved deliberately — tests and downstream consumers pin the exact behaviour.
  *
  * DIVERGENCE CANDIDATES:
- *  1. The Python original imports `jsonschema` and exits 1 with the message
+ *  1. the retired Python implementation imports `jsonschema` and exits 1 with the message
  *     `error: jsonschema not installed (...)` when it is absent. The TS twin
  *     has no such dependency, so that exit-1 path never fires — the schema
  *     check always runs.

package/src/scripts/lint_discovery_vocabulary.ts

@@ -2,12 +2,12 @@
 /**
  * Vocabulary linter for `src/config/discovery/{workspaces,packs}.yml`.
  *
- * TypeScript twin of `src/scripts/lint_discovery_vocabulary.py` (ADR-200,
+ * Ported from the retired Python `src/scripts/lint_discovery_vocabulary.py` (ADR-200,
  * Phase 4 / Wave 4b). Mirrors the Python CLI contract exactly: `--quiet`
  * flag, same scan scope, finding messages, stdout/stderr split (errors to
  * stderr, OK line to stdout), and exit codes (0 clean, 1 on failure, 2 if
  * YAML loader is unavailable — N/A here, `yaml` is bundled). No behaviour
- * changes — latent quirks replicated.
+ * changes — historical quirks preserved (consumers pin the exact behaviour).
  *
  * Source-of-truth check: the YAML files MUST mirror the closed vocabulary in
  * ADR-013 exactly. Cross-reference + bidirectional integrity + non-overlap

package/src/scripts/lint_empty_roadmaps.ts

@@ -2,10 +2,10 @@
 /**
  * Hard-Gate linter: no empty roadmap files under `agents/roadmaps/`.
  *
- * TypeScript twin of `src/scripts/lint_empty_roadmaps.py` (ADR-200 migration).
+ * Ported from the retired Python `src/scripts/lint_empty_roadmaps.py` (ADR-200).
  * Byte-identical CLI contract: same stdout, same exit codes (0 = clean,
  * 1 = at least one empty roadmap). `--quiet` is a bare argv membership check
- * (computed at import, NOT argparse), mirroring the Python original.
+ * (computed at import, NOT argparse), mirroring the retired Python implementation.
  *
  * A roadmap `.md` that is 0 bytes (or only whitespace) is never valid — it
  * carries no goal, no phases, no content. Scope: every `*.md` under
@@ -85,7 +85,7 @@ function _rglobMdSorted(base: string): string[] {
 // Python `str.strip()` (no args) strips every character for which
 // `str.isspace()` is true: ASCII whitespace + the C0 separators \x1c-\x1f +
 // NEL \x85 + the Unicode whitespace set. Match that exact class so a
-// "whitespace-only" file is detected identically to the Python original.
+// "whitespace-only" file is detected identically to the retired Python implementation.
 const _PY_WS = /[\t\n\v\f\r \u001c\u001d\u001e\u001f\u0085\u00a0\u1680\u2000-\u200a\u2028\u2029\u202f\u205f\u3000]/g;
 
 function _toPosix(target: string, root: string): string {

package/src/scripts/lint_eval_freshness.ts

@@ -4,8 +4,8 @@
  * `upstream.last_eval` (the corpus-refresh DoD, ADR-061 §6 + road-to-image-brand-
  * typography Phase D).
  *
- * TypeScript twin of `src/scripts/lint_eval_freshness.py` (ADR-200,
- * Python→TypeScript migration). The CLI contract is mirrored EXACTLY — the
+ * Ported from the retired Python `src/scripts/lint_eval_freshness.py` (ADR-200,
+ * Python→TypeScript migration). The CLI contract is pinned — the
  * `--quiet` flag, the `argparse` usage / error text (`-h`/`--help` → exit 0,
  * unknown arg → exit 2), the scan order (`sorted(SKILLS_DIR.glob(
  * "<skill>/data/manifest.json"))` — pathlib component-wise sort), byte-identical

package/src/scripts/lint_examples.ts

@@ -2,13 +2,13 @@
 /**
  * Phase 3.4 demo-shape linter — wrong / right / why per demo.
  *
- * TypeScript twin of `src/scripts/lint_examples.py` (ADR-200, Phase 4 /
+ * Ported from the retired Python `src/scripts/lint_examples.py` (ADR-200, Phase 4 /
  * Wave 4b). Mirrors the CLI contract EXACTLY — the `--quiet` flag is a
  * bare `sys.argv` membership check (NOT argparse, so there is no real
  * `-h`/`--help`), the same `glob` (non-recursive) over
  * `docs/guidelines/agent-infra/*-demos.md`, byte-identical finding
  * messages, stdout/stderr split, exit codes, and file ordering
- * (sorted glob). No behaviour changes — latent quirks replicated.
+ * (sorted glob). Historical quirks are preserved deliberately — tests and downstream consumers pin the exact behaviour.
  *
  * Validates every `docs/guidelines/agent-infra/*-demos.md`: frontmatter
  * keys (`demo_for:`, `layer: pattern-memory`, `prose_delta:` with

package/src/scripts/lint_explain_trace.ts

@@ -2,7 +2,7 @@
 /**
  * Lint an ExplainTrace v1 JSON payload against the schema.
  *
- * TypeScript twin of `src/scripts/lint_explain_trace.py` (ADR-200, Phase 4 /
+ * Ported from the retired Python `src/scripts/lint_explain_trace.py` (ADR-200, Phase 4 /
  * Wave 4b). Reads a JSON file (or stdin via `--stdin`) and validates it
  * against `docs/contracts/explain-trace.schema.json`.
  *
@@ -14,7 +14,7 @@
  *   - error lines ordered by `sorted(absolute_path)`.
  *
  * DOCUMENTED DIVERGENCE (validation-failure message text):
- *   The Python original uses `jsonschema.Draft202012Validator`; its
+ *   the retired Python implementation uses `jsonschema.Draft202012Validator`; its
  *   `ValidationError.message` wording is library-specific. This twin
  *   implements a faithful Draft-2020-12 *subset* validator covering only the
  *   keywords the explain-trace schema uses (type / const / enum / required /

package/src/scripts/lint_flows.ts

@@ -2,19 +2,19 @@
 /**
  * Validate-on-load linter for the first-class flow layer (`src/flows/*.yaml`).
  *
- * TypeScript twin of `src/scripts/lint_flows.py` (ADR-200, Phase 4 / Wave 4b
+ * Ported from the retired Python `src/scripts/lint_flows.py` (ADR-200, Phase 4 / Wave 4b
  * — PORT). Mirrors the CLI contract EXACTLY — the `--quiet` flag (argparse,
  * so `-h`/`--help` exit 0 with a usage line), the same two-check-per-file
  * shape-vs-resolution split, byte-identical violation messages, the same
  * stdout/stderr split (success on stdout, violations on stderr), exit codes
  * (0 clean · 1 violations · 3 internal error), scan scope (`src/flows/*.yaml`
  * minus `surface-map.yaml`), and ordering (sorted glob). snake_case kept.
- * No behaviour changes — latent quirks replicated.
+ * Historical quirks are preserved deliberately — tests and downstream consumers pin the exact behaviour.
  *
  * road-to-6.1.0 Step 8b (ADR-055). Two checks per flow file:
  *
  *   1. Shape — validates against `src/scripts/schemas/flow.schema.json`
- *      (Draft-07). The Python original uses the `jsonschema` library; this
+ *      (Draft-07). the retired Python implementation uses the `jsonschema` library; this
  *      twin hand-rolls a Draft-07 validator covering exactly the keyword set
  *      this schema uses (type, required, additionalProperties:false,
  *      properties, $ref, pattern, minLength, minItems, items) and reproduces
@@ -28,7 +28,7 @@
  * Plus the layer-level invariants: closed-set id == filename stem, and
  * completeness (every closed-set flow has exactly one file).
  *
- * The Python original imports `jsonschema` and exits 3 with
+ * the retired Python implementation imports `jsonschema` and exits 3 with
  * `lint_flows: jsonschema not installed` when it is absent. The TS twin has
  * no such dependency, so that exit-3 path never fires — the schema check is
  * always available, matching the installed-library case.
@@ -466,7 +466,7 @@ function _isFile(p: string): boolean {
 
 function _rel(p: string): string {
     // Path.relative_to(ROOT) raises ValueError when p is outside ROOT; the
-    // Python original then returns str(path). Mirror with the absolute path.
+    // historical behaviour returns str(path) — keep the absolute path then.
     const r = path.relative(ROOT, p);
     if (r === '' || r.startsWith('..') || path.isAbsolute(r)) {
         return p;

package/src/scripts/lint_framework_leakage.ts

@@ -1,7 +1,7 @@
 #!/usr/bin/env tsx
 // Lint generic skills/rules/commands for framework/language leakage.
 //
-// TypeScript twin of src/scripts/lint_framework_leakage.py. Exits 1 on hit
+// TypeScript port of the retired Python src/scripts/lint_framework_leakage.py. Exits 1 on hit
 // (CI-blocking). Enforces the framework-neutrality rule. Replicates the
 // carve-out filename exemption, inventory exemption, framework-frontmatter
 // exemption, the auto cross-stack ±10-line window heuristic, the allowlist

package/src/scripts/lint_framework_leakage_allowlist.json

@@ -581,7 +581,7 @@
     {
       "file": "src/skills/code-review/SKILL.md",
       "lines": [
-        214
+        222
       ],
       "reason": "Cross-stack formatter enumeration (ECS, Prettier, Ruff, gofmt) — multi-ecosystem documentation"
     },
@@ -618,9 +618,17 @@
     {
       "file": "src/skills/verify-completion-evidence/SKILL.md",
       "lines": [
-        183
+        191
       ],
       "reason": "Carve-out pointer to the quality-tools skill (the sanctioned one-line handoff shape from framework-neutrality-in-generic-skills)"
+    },
+    {
+      "file": "src/skills/api-endpoint/SKILL.md",
+      "lines": [
+        52,
+        69
+      ],
+      "reason": "Cross-stack validation primitive enumeration and pointer to laravel-api-endpoint carve-out"
     }
   ]
 }

package/src/scripts/lint_frontmatter_boilerplate.ts

@@ -2,7 +2,7 @@
 /**
  * Fail when an artefact carries a frontmatter field equal to its schema default.
  *
- * TypeScript twin of `src/scripts/lint_frontmatter_boilerplate.py` (ADR-200,
+ * Ported from the retired Python `src/scripts/lint_frontmatter_boilerplate.py` (ADR-200,
  * Phase 4 / Wave 4b). Mirrors the Python CLI contract exactly: `--quiet`,
  * scan scope + ordering (skills / rules / commands / personas via
  * `artefact_roots()`), finding messages, stdout/stderr split, exit codes
@@ -11,7 +11,7 @@
  * The frontmatter loader (`validate_frontmatter.apply_schema_defaults`) injects
  * the default at read time, so omitting the field is always behaviour-preserving.
  *
- * NOTE (divergence candidate — DC-1): the Python original imports
+ * NOTE (divergence candidate — DC-1): the retired Python implementation imports
  * `_CATEGORIES`, `_iter`, `_plan_drops` from `migrate_frontmatter_defaults.py`,
  * which has no `.ts` twin yet (out of this batch's scope). To keep TS-only
  * dispatcher resolution working, those three helpers (and `_same`) are inlined

package/src/scripts/lint_ghostwriter_source.ts

@@ -2,12 +2,12 @@
 /**
  * Lint ghostwriter profile sources.
  *
- * TypeScript twin of `src/scripts/lint_ghostwriter_source.py` (ADR-200,
- * Phase 4 / Wave 4b). The CLI contract is mirrored EXACTLY — `--quiet`
+ * Ported from the retired Python `src/scripts/lint_ghostwriter_source.py` (ADR-200,
+ * Phase 4 / Wave 4b). The CLI contract is pinned — `--quiet`
  * detected by argv membership, exit codes (0 / 1), stdout/stderr split,
  * byte-identical messages, same scan scope (`*.md` sorted in each tier),
  * same package- then consumer-side ordering. No behaviour changes —
- * latent bugs replicated.
+ * historical quirks preserved (consumers pin the exact behaviour).
  *
  * Two storage tiers (docs/contracts/ghostwriter-schema.md):
  *   * src/agent-src/ghostwriter/  — package source, fictional fixtures only.

package/src/scripts/lint_global_paths.ts

@@ -2,7 +2,7 @@
 /**
  * Permissions-audit entry-gate for the global install tree.
  *
- * TypeScript twin of `src/scripts/lint_global_paths.py` (ADR-200, Phase 4 /
+ * Ported from the retired Python `src/scripts/lint_global_paths.py` (ADR-200, Phase 4 /
  * Wave 4b). Mirrors the Python CLI contract exactly: same policy source,
  * finding messages, finding order, stdout/stderr split, and exit codes.
  *

package/src/scripts/lint_handoffs.ts

@@ -2,7 +2,7 @@
 /**
  * Lint cross-wing handoffs declared in senior-tier skills' `## Related Skills`.
  *
- * TypeScript twin of `src/scripts/lint_handoffs.py` (ADR-200, Phase 4 /
+ * Ported from the retired Python `src/scripts/lint_handoffs.py` (ADR-200, Phase 4 /
  * Wave 4b). Mirrors the CLI contract EXACTLY — the `--quiet` flag is a
  * bare `sys.argv` membership check (NOT argparse, so there is no real
  * `-h`/`--help`; `main(argv)` treats `argv[0]` as a skills-dir override,

package/src/scripts/lint_hidden_unicode.ts

@@ -1,6 +1,6 @@
 // P1.1 — hidden-Unicode / smuggling-codepoint linter (road-to-security-pillar.md).
 //
-// TypeScript twin of `src/scripts/lint_hidden_unicode.py` (ADR-200 —
+// Ported from the retired Python `src/scripts/lint_hidden_unicode.py` (ADR-200 —
 // Python→TS migration). Behaviour mirrors the Python module byte-for-byte.
 //
 // Detects the invisible-character class used by the "rules-file backdoor"

package/src/scripts/lint_hook_concern_budget.ts

@@ -2,7 +2,7 @@
 /**
  * Lint the hook concern budget against `src/scripts/hook_manifest.yaml`.
  *
- * TypeScript twin of `src/scripts/lint_hook_concern_budget.py` (ADR-200,
+ * Ported from the retired Python `src/scripts/lint_hook_concern_budget.py` (ADR-200,
  * Phase 4 / Wave 4b). Mirrors the CLI contract EXACTLY — `--manifest` /
  * `--settings` / `--strict` argparse flags, exit codes (0 clean or warn-only,
  * 1 schema load failed, 2 hard-fail with violations), byte-identical
@@ -10,7 +10,7 @@
  * `.agent-settings.yml` `hooks.concern_budget.*` line walker, and the same
  * defaults. No behaviour changes.
  *
- * The Python original imports `hooks.dispatch_hook._load_yaml` (which is
+ * the retired Python implementation imports `hooks.dispatch_hook._load_yaml` (which is
  * `yaml.safe_load(text) or {}` when PyYAML is present). That hook module is
  * not yet ported, so this twin inlines the equivalent `yaml`-package load
  * (version 1.1 → PyYAML safe_load parity). When the dispatch_hook twin

package/src/scripts/lint_hook_manifest.ts

@@ -2,7 +2,7 @@
 /**
  * Lint `src/scripts/hook_manifest.yaml`.
  *
- * TypeScript twin of `src/scripts/lint_hook_manifest.py` (ADR-200, Phase 4 /
+ * Ported from the retired Python `src/scripts/lint_hook_manifest.py` (ADR-200, Phase 4 /
  * Wave 4b). Mirrors the Python CLI contract exactly: same manifest default,
  * finding messages, finding order, stdout/stderr split, and exit codes.
  *
@@ -97,7 +97,7 @@ function _isDir(p: string): boolean {
 }
 
 /**
- * Load the manifest. The Python original reuses dispatch_hook._load_yaml
+ * Load the manifest. the retired Python implementation reuses dispatch_hook._load_yaml
  * which prefers PyYAML (with a narrow fallback parser when PyYAML is absent).
  * The TS runtime always has the `yaml` package, so this mirrors the
  * PyYAML-present path (`yaml.safe_load(text) or {}`).

package/src/scripts/lint_instruction_smuggling.ts

@@ -1,6 +1,6 @@
 // P1.2 — instruction-smuggling / suppression-phrase linter (road-to-security-pillar.md).
 //
-// TypeScript twin of `src/scripts/lint_instruction_smuggling.py` (ADR-200 —
+// Ported from the retired Python `src/scripts/lint_instruction_smuggling.py` (ADR-200 —
 // Python→TS migration). Behaviour mirrors the Python module byte-for-byte.
 //
 // Detects instructions smuggled into rule/skill/command bodies (and MCP tool

package/src/scripts/lint_load_context.ts

@@ -2,8 +2,8 @@
 /**
  * Lint the `load_context:` / `load_context_eager:` frontmatter schema.
  *
- * TypeScript twin of `src/scripts/lint_load_context.py` (ADR-200,
- * Phase 4 / Wave 4b). The CLI contract is mirrored EXACTLY — `--quiet`
+ * Ported from the retired Python `src/scripts/lint_load_context.py` (ADR-200,
+ * Phase 4 / Wave 4b). The CLI contract is pinned — `--quiet`
  * flag (positional `--quiet` detection in argv, like the Python
  * `"--quiet" in sys.argv`), exit codes (0 clean / warnings-only, 1 errors),
  * byte-identical error + warning + success messages, same scan dirs,

package/src/scripts/lint_marketplace.ts

@@ -2,7 +2,7 @@
 /**
  * Lint .claude-plugin/marketplace.json for the event4u/agent-config package.
  *
- * TypeScript twin of `src/scripts/lint_marketplace.py` (ADR-200, Phase 4 /
+ * Ported from the retired Python `src/scripts/lint_marketplace.py` (ADR-200, Phase 4 /
  * Wave 4b). Mirrors the Python CLI contract exactly: same cwd-relative scan
  * roots, finding messages, stdout output, and exit codes.
  *

package/src/scripts/lint_marketplace_install_completeness.ts

@@ -3,8 +3,8 @@
  * Lint that every command in `hooks/hooks.json` resolves to a real
  * dispatcher subcommand in `scripts/_dispatch.bash`.
  *
- * TypeScript twin of `src/scripts/lint_marketplace_install_completeness.py`
- * (ADR-200, Phase 4 / Wave 4b). The CLI contract is mirrored EXACTLY —
+ * Ported from the retired Python `src/scripts/lint_marketplace_install_completeness.py`
+ * (ADR-200, Phase 4 / Wave 4b). The CLI contract is pinned —
  * `--hooks-json` / `--dispatch-bash` flags, exit codes (0 clean, 1 unknown
  * subcommand, 2 schema/file error), stdout/stderr split, byte-identical
  * finding messages, same command-extraction regexes and scan order.

package/src/scripts/lint_mcp_config_security.ts

@@ -1,6 +1,6 @@
 // P1.3 — MCP-config security linter (road-to-security-pillar.md). OWASP ASI04.
 //
-// TypeScript twin of `src/scripts/lint_mcp_config_security.py` (ADR-200 —
+// Ported from the retired Python `src/scripts/lint_mcp_config_security.py` (ADR-200 —
 // Python→TS migration). Behaviour mirrors the Python module byte-for-byte.
 //
 // Scans shipped MCP configuration — named config files (`*.mcp.json`,

package/src/scripts/lint_mcp_registry_manifest.ts

@@ -2,7 +2,7 @@
 /**
  * Lint `dist/mcp/registry-manifest.json` against its JSON Schema.
  *
- * TypeScript twin of `src/scripts/lint_mcp_registry_manifest.py` (ADR-200,
+ * Ported from the retired Python `src/scripts/lint_mcp_registry_manifest.py` (ADR-200,
  * Phase 4 / Wave 4b). Mirrors the CLI contract EXACTLY — `--quiet` flag
  * (argparse, so a real `-h`/`--help` prints usage + exits 0), the
  * `❌  <msg>` failures on stderr, the `✅  mcp registry manifest OK

package/src/scripts/lint_media_policy_linkage.ts

@@ -2,12 +2,12 @@
 /**
  * Lint structural reachability of media governance policies.
  *
- * TypeScript twin of `src/scripts/lint_media_policy_linkage.py` (ADR-200,
- * Phase 4 / Wave 4b). Mirrors the Python CLI contract EXACTLY — `--quiet`
+ * Ported from the retired Python `src/scripts/lint_media_policy_linkage.py` (ADR-200,
+ * Phase 4 / Wave 4b). The CLI contract is pinned — `--quiet`
  * flag read from argv at module load, scan roots + policy ordering (policies
  * sorted; scan files via rglob), finding messages, output channel (all on
  * stdout except the final orphan summary on stderr), exit codes. No
- * behaviour changes — latent bugs replicated (note: `POLICY_DIR` /
+ * behaviour changes — historical quirks preserved (consumers pin the exact behaviour). (note: `POLICY_DIR` /
  * `SCAN_ROOTS` point at `agents/policies/media`, matching the .py).
  *
  * Every policy file under `agents/policies/media/` (except README) must be

package/src/scripts/lint_missions.ts

@@ -2,15 +2,15 @@
 /**
  * WARN-ONLY mission manifest and catalog linter.
  *
- * TypeScript twin of `src/scripts/lint_missions.py` (ADR-200, Python→TypeScript
- * migration). The CLI contract is mirrored EXACTLY — argparse flags
+ * Ported from the retired Python `src/scripts/lint_missions.py` (ADR-200, Python→TypeScript
+ * migration). The CLI contract is pinned — argparse flags
  * (`--strict` / `--quiet` / `--check-precondition MISSION REPO`, `-h`/`--help`
  * exit 0, unknown arg → exit 2), the scan order (`sorted(MISSIONS_ROOT.iterdir())`
  * minus dot-dirs), byte-identical finding lines, the missing-schema short-circuit
  * (exit 2 strict / 0 otherwise), the stdout/stderr split, and exit codes
  * (0 warn-only / 1 strict+ERROR). snake_case kept.
  *
- * The Python original uses the `jsonschema` Draft7Validator; this twin
+ * the retired Python implementation uses the `jsonschema` Draft7Validator; this twin
  * hand-rolls a Draft-07 validator covering exactly the keyword set the two
  * mission schemas use (type, required, additionalProperties [false | schema],
  * properties, $ref [#/definitions], pattern, enum, minLength, maxLength,

package/src/scripts/lint_model_tier_coverage.ts

@@ -2,11 +2,11 @@
 /**
  * Fail when a skill or command lacks a `model_tier` value.
  *
- * TypeScript twin of `src/scripts/lint_model_tier_coverage.py` (ADR-200,
- * Phase 4 / Wave 4b). Mirrors the Python CLI contract EXACTLY — `--quiet`
+ * Ported from the retired Python `src/scripts/lint_model_tier_coverage.py` (ADR-200,
+ * Phase 4 / Wave 4b). The CLI contract is pinned — `--quiet`
  * flag, target enumeration + ordering (skills via artefact_roots, then
  * commands via iter_commands), finding messages, stdout/stderr split,
- * exit codes. No behaviour changes — latent bugs replicated.
+ * exit codes. Historical quirks are preserved deliberately — tests and downstream consumers pin the exact behaviour.
  *
  * Phase 5 coverage gate of `road-to-model-capability-tiers.md` (ADR-035):
  * every skill and command MUST declare an explicit `model_tier`

package/src/scripts/lint_namespace.ts

@@ -3,8 +3,8 @@
  * Namespace linter. Enforces `<stem>-<intent>` kebab-case + reserved
  * names list across skills / rules / commands / personas.
  *
- * TypeScript twin of `src/scripts/lint_namespace.py` (ADR-200, Phase 4 /
- * Wave 4b). The CLI contract is mirrored EXACTLY — `--name` / `--quiet`
+ * Ported from the retired Python `src/scripts/lint_namespace.py` (ADR-200, Phase 4 /
+ * Wave 4b). The CLI contract is pinned — `--name` / `--quiet`
  * flags, exit codes (0 clean, 1 issues / single-name fail), stdout/stderr
  * split (findings + BASELINE-on-failure to stderr; success BASELINE to
  * stdout), byte-identical finding messages, same `sorted(root.glob(glob))`

package/src/scripts/lint_namespace_collisions.ts

@@ -2,8 +2,8 @@
 /**
  * Single-namespace collision lint (road-to-6.0.0-D Phase 0 Step 4).
  *
- * TypeScript twin of `src/scripts/lint_namespace_collisions.py` (ADR-200,
- * Phase 4 / Wave 4b). The CLI contract is mirrored EXACTLY — exit codes
+ * Ported from the retired Python `src/scripts/lint_namespace_collisions.py` (ADR-200,
+ * Phase 4 / Wave 4b). The CLI contract is pinned — exit codes
  * (0 no collisions, 1 collision, 3 internal error), stdout/stderr split,
  * byte-identical finding messages, same `iter_all_sources()` scan order,
  * same normalization, same frontmatter `name:` extraction.

package/src/scripts/lint_new_skill_gate.ts

@@ -2,13 +2,13 @@
 /**
  * Forward gate for NEW skills (6.0.0-C Phase 4 Step 8b).
  *
- * TypeScript twin of `src/scripts/lint_new_skill_gate.py` (ADR-200, Phase 4 /
+ * Ported from the retired Python `src/scripts/lint_new_skill_gate.py` (ADR-200, Phase 4 /
  * Wave 4b — PORT). Mirrors the CLI contract EXACTLY — the `--baseline` (default
  * `main`) and `--quiet` argparse flags, the git diff/status forward-only skill
  * detection, byte-identical violation messages, stdout-only output (no
  * stderr split except the git-failure exit-3 path), and exit codes
  * (0 clean · 1 violations · 3 internal/git error). snake_case kept. No
- * behaviour changes — latent quirks replicated.
+ * behaviour changes — historical quirks preserved (consumers pin the exact behaviour).
  *
  * A newly added skill must clear two gates before it joins the surface:
  *
@@ -19,7 +19,7 @@
  *
  * FORWARD-ONLY: only SKILL.md files added since `--baseline` are gated.
  *
- * The Python original imports `_parse`, `_cosine`, `collect`, `Skill` from
+ * the retired Python implementation imports `_parse`, `_cosine`, `collect`, `Skill` from
  * `audit_skill_overlap`. That module has no TS twin in this batch, so the four
  * needed symbols are ported privately below (faithful 1:1 of the originals);
  * when `audit_skill_overlap` is ported in its own phase these can be

package/src/scripts/lint_no_new_atomic_commands.ts

@@ -2,8 +2,8 @@
 /**
  * Atomic-command linter for the command-collapse policy.
  *
- * TypeScript twin of `src/scripts/lint_no_new_atomic_commands.py`
- * (ADR-200, Phase 4 / Wave 4b). The CLI contract is mirrored EXACTLY —
+ * Ported from the retired Python `src/scripts/lint_no_new_atomic_commands.py`
+ * (ADR-200, Phase 4 / Wave 4b). The CLI contract is pinned —
  * `--baseline` / `--all` flags, exit codes (0 clean, 1 violations,
  * 3 internal error), stdout/stderr split, byte-identical messages, the
  * same git invocations (`git diff --name-only --diff-filter=A
@@ -24,7 +24,10 @@ import { fileURLToPath, pathToFileURL } from 'node:url';
 const _HERE = fileURLToPath(import.meta.url);
 // src/scripts/lint_no_new_atomic_commands.ts → parent.parent.parent is repo root.
 const ROOT = path.resolve(path.dirname(_HERE), '..', '..');
-const COMMANDS_DIR = '.agent-src.uncondensed/commands';
+// Repointed 2026-07-08 (ADR-115): the legacy uncondensed commands dir no
+// longer exists — command sources live at src/domains/**/command.md.
+// Only files named `command.md` are commands; pack READMEs etc. are skipped.
+const COMMANDS_DIR = 'src/domains';
 const CLUSTER_CONTRACT = 'docs/contracts/command-clusters.md';
 
 interface Violation {
@@ -135,7 +138,7 @@ function added_command_files(baseline: string): string[] {
     }
     const files: string[] = [];
     for (const p of (diff.stdout ?? '').split('\n')) {
-        if (p.endsWith('.md') && p !== '' && path.basename(p) !== 'AGENTS.md') {
+        if (p !== '' && path.basename(p) === 'command.md') {
             files.push(p);
         }
     }
@@ -157,7 +160,7 @@ function added_command_files(baseline: string): string[] {
             const rawPath = line.slice(3).trim();
             const parts = rawPath.split(' -> ');
             const p = parts[parts.length - 1]!;
-            if (p.endsWith('.md') && path.basename(p) !== 'AGENTS.md') {
+            if (path.basename(p) === 'command.md') {
                 if (!files.includes(p)) {
                     files.push(p);
                 }
@@ -181,7 +184,7 @@ function _rglobMdSorted(dir: string): string[] {
             const full = path.join(current, entry.name);
             if (entry.isDirectory()) {
                 walk(full);
-            } else if (entry.isFile() && entry.name.endsWith('.md')) {
+            } else if (entry.isFile() && entry.name === 'command.md') {
                 out.push(full);
             }
         }