@event4u/agent-config 9.10.0 → 9.12.0

package/agents/templates/.ai-video.xml.example

@@ -0,0 +1,247 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  agents/.ai-video.xml.example
+  ============================
+
+  Operator-facing provider configuration for the /video:* command cluster.
+
+  Copy this file to `agents/.ai-video.xml` and fill in the API keys for the
+  providers you actually use. The real file is gitignored and MUST NEVER be
+  committed.
+
+  Loader: scripts/media/lib/load-config.sh
+  Redaction: scripts/media/lib/redact.sh
+  Docs: agents/reference/ai-video/README.md
+-->
+<ai-video version="1">
+
+  <!--
+    Defaults: pick which provider a /video:* run uses when the command
+    does not pass the image-provider / video-provider flags. Must match
+    a provider id="..." declared below.
+
+    Each provider carries a <lifecycle> tag — experimental | stable |
+    deprecated | community — per docs/contracts/provider-lifecycle.md.
+    Day-one shipped tiers are conservative: every adapter is
+    `experimental` until a maintainer captures a real-API smoke trace.
+    The agent refuses to *default* to a non-stable provider silently;
+    it surfaces the tier and asks before running.
+  -->
+  <default-image-provider>openai-images</default-image-provider>
+  <default-video-provider>gemini-veo</default-video-provider>
+
+  <!-- ============================================================ -->
+  <!-- Image providers                                              -->
+  <!-- ============================================================ -->
+
+  <provider id="openai-images" kind="image">
+    <lifecycle>stable</lifecycle>
+    <api-key>sk-REPLACE-ME</api-key>
+    <endpoint>https://api.openai.com/v1</endpoint>
+    <default-model>gpt-image-1</default-model>
+    <dry-run>true</dry-run>
+    <tuning>
+      <aspect>16:9</aspect>
+      <quality>high</quality>
+      <best-of-n>4</best-of-n>
+    </tuning>
+  </provider>
+
+  <!-- ============================================================ -->
+  <!-- Video providers                                              -->
+  <!-- ============================================================ -->
+
+  <provider id="higgsfield" kind="image+video">
+    <lifecycle>stable</lifecycle>
+    <api-key>hf-REPLACE-ME</api-key>
+    <endpoint>https://api.higgsfield.ai/v1</endpoint>
+    <default-model>higgsfield-soul</default-model>
+    <dry-run>true</dry-run>
+    <tuning>
+      <aspect>16:9</aspect>
+      <preset>cinematic</preset>
+      <max-duration>5</max-duration>
+      <best-of-n>2</best-of-n>
+    </tuning>
+  </provider>
+
+  <provider id="gemini-veo" kind="video">
+    <lifecycle>stable</lifecycle>
+    <api-key>AIza-REPLACE-ME</api-key>
+    <endpoint>https://generativelanguage.googleapis.com/v1beta</endpoint>
+    <default-model>veo-3.0-generate-001</default-model>
+    <dry-run>true</dry-run>
+    <tuning>
+      <aspect>16:9</aspect>
+      <fps>24</fps>
+      <max-duration>8</max-duration>
+      <audio-native>true</audio-native>
+    </tuning>
+  </provider>
+
+  <provider id="kling" kind="video">
+    <lifecycle>stable</lifecycle>
+    <access-key>kling-access-REPLACE-ME</access-key>
+    <secret-key>kling-secret-REPLACE-ME</secret-key>
+    <endpoint>https://api.klingai.com/v1</endpoint>
+    <default-model>kling-v2-master</default-model>
+    <dry-run>true</dry-run>
+    <tuning>
+      <aspect>16:9</aspect>
+      <fps>30</fps>
+      <max-duration>10</max-duration>
+      <audio-native>false</audio-native>
+    </tuning>
+  </provider>
+
+  <provider id="sora" kind="video">
+    <lifecycle>stable</lifecycle>
+    <api-key>sora-REPLACE-ME</api-key>
+    <endpoint>https://api.openai.com/v1</endpoint>
+    <default-model>sora-2</default-model>
+    <dry-run>true</dry-run>
+    <tuning>
+      <aspect>16:9</aspect>
+      <fps>30</fps>
+      <max-duration>20</max-duration>
+      <audio-native>true</audio-native>
+    </tuning>
+  </provider>
+
+  <!-- ============================================================ -->
+  <!-- Multiplexer providers — one adapter, many models             -->
+  <!-- Model selection: top-level `model_id` stdin key overrides    -->
+  <!-- <default-model>. Per-model capabilities:                     -->
+  <!-- scripts/ai-video/lib/model-capabilities/<id>.json            -->
+  <!-- Kill-switch: <enabled>false</enabled> refuses every network  -->
+  <!-- subcommand without editing procedures that name the provider.-->
+  <!-- ============================================================ -->
+
+  <provider id="fal" kind="video">
+    <lifecycle>stable</lifecycle>
+    <enabled>true</enabled>
+    <api-key>fal-REPLACE-ME</api-key>
+    <endpoint>https://queue.fal.run</endpoint>
+    <default-model>fal-ai/ltx-2/text-to-video</default-model>
+    <dry-run>true</dry-run>
+    <tuning>
+      <aspect>16:9</aspect>
+      <max-duration>10</max-duration>
+      <audio-native>false</audio-native>
+    </tuning>
+  </provider>
+
+  <provider id="replicate" kind="video">
+    <lifecycle>stable</lifecycle>
+    <enabled>true</enabled>
+    <api-key>r8_REPLACE-ME</api-key>
+    <endpoint>https://api.replicate.com/v1</endpoint>
+    <default-model>kwaivgi/kling-v2.1-master</default-model>
+    <dry-run>true</dry-run>
+    <tuning>
+      <aspect>16:9</aspect>
+      <max-duration>10</max-duration>
+      <audio-native>false</audio-native>
+    </tuning>
+  </provider>
+
+  <!--
+    Local ComfyUI (ADR-060 — container-primary sandbox). No api-key:
+    the adapter talks to YOUR ComfyUI. A loopback endpoint is assumed
+    to be the shipped container posture (read-only image, cap-drop ALL,
+    network-none at generation time — run line in the adapter header).
+    A NON-loopback endpoint is the remote escape hatch: isolation is
+    the operator's responsibility and the block must carry
+    <unsandboxed>accepted</unsandboxed> or the adapter refuses (exit 6).
+    Models: wan22-ti2v-5b (default, Apache-2.0) | ltx-2 (audio-sync).
+    Shipped workflow templates only — operator workflow JSONs are
+    rejected by design. macOS: no CUDA — container path is
+    reference-only; use the remote escape hatch.
+  -->
+  <provider id="comfyui" kind="video">
+    <lifecycle>experimental</lifecycle>
+    <enabled>true</enabled>
+    <endpoint>http://127.0.0.1:8188</endpoint>
+    <default-model>wan22-ti2v-5b</default-model>
+    <dry-run>true</dry-run>
+    <tuning>
+      <aspect>16:9</aspect>
+      <max-duration>5</max-duration>
+      <audio-native>false</audio-native>
+    </tuning>
+  </provider>
+
+  <!-- ============================================================ -->
+  <!-- Audio adapters (music-video orchestration)                   -->
+  <!-- Contract: scripts/ai-video/lib/audio-adapter-contract.md     -->
+  <!-- local-cli adapters wrap an OPERATOR-installed tool (pip) —   -->
+  <!-- no api-key element needed; <enabled>false</enabled> opts a   -->
+  <!-- configured-but-unwanted adapter out (otherwise a missing CLI -->
+  <!-- is a loud config failure, never a silent probe fallback).    -->
+  <!-- ============================================================ -->
+
+  <provider id="allin1" kind="audio-analysis">
+    <lifecycle>experimental</lifecycle>
+    <enabled>true</enabled>
+    <dry-run>true</dry-run>
+  </provider>
+
+  <provider id="whisperx" kind="lyrics">
+    <lifecycle>experimental</lifecycle>
+    <enabled>true</enabled>
+    <dry-run>true</dry-run>
+  </provider>
+
+  <!-- ============================================================ -->
+  <!-- Lip-sync post-process (v2 contract, kind="lipsync")          -->
+  <!-- Sparse budget: lib/model-capabilities/syncso.json            -->
+  <!-- ============================================================ -->
+
+  <!--
+    Local (MIT) lip-sync — offline alternative to syncso. Wraps an
+    OPERATOR-installed MuseTalk (github.com/TMElyralab/MuseTalk); the
+    wrapped entry point is configurable via the MUSETALK_CMD env var.
+    No api-key. Same sparse lipsync_budget discipline as syncso
+    (lib/model-capabilities/musetalk.json) — local renders are free but
+    the quality argument for sparseness is unchanged.
+  -->
+  <provider id="musetalk" kind="lipsync">
+    <lifecycle>experimental</lifecycle>
+    <enabled>true</enabled>
+    <dry-run>true</dry-run>
+  </provider>
+
+  <provider id="syncso" kind="lipsync">
+    <lifecycle>experimental</lifecycle>
+    <enabled>true</enabled>
+    <api-key>sk-REPLACE-ME</api-key>
+    <endpoint>https://api.sync.so</endpoint>
+    <default-model>lipsync-2</default-model>
+    <dry-run>true</dry-run>
+  </provider>
+
+  <!-- ============================================================ -->
+  <!-- Extra slot — future providers without schema bump            -->
+  <!-- Use kind="image" | "video" | "image+video" | "audio-analysis"-->
+  <!-- | "lyrics" | "lipsync".                                      -->
+  <!-- ============================================================ -->
+
+  <extra>
+    <!--
+    <provider id="my-future-backend" kind="video">
+      <lifecycle>experimental</lifecycle>
+      <api-key>REPLACE-ME</api-key>
+      <endpoint>https://example.invalid/v1</endpoint>
+      <default-model>example-1</default-model>
+      <dry-run>true</dry-run>
+      <tuning>
+        <aspect>16:9</aspect>
+        <fps>24</fps>
+        <max-duration>6</max-duration>
+        <audio-native>false</audio-native>
+      </tuning>
+    </provider>
+    -->
+  </extra>
+
+</ai-video>

package/dist/agent-src/commands/fix/ci.md

@@ -20,12 +20,41 @@ packs:
 # /fix ci
 ## Instructions
 
+### 0. Wait for the run to settle first
+
+A run still in progress has no verdict to fix. Do NOT read a partial run and
+start guessing — and do NOT end the turn reporting "CI is running".
+
+```bash
+until [ "$(gh pr checks <n> --json state \
+    --jq '[.[] | select(.state=="IN_PROGRESS" or .state=="QUEUED" or .state=="PENDING")] | length')" = "0" ]
+do sleep 45; done
+```
+
+Run that in the BACKGROUND so the turn resumes when the verdict lands; a
+foreground sleep-poll chain is blocked and per-minute re-polling is the tool
+loop `token-efficiency` forbids. If the waiter exits because `gh` itself failed
+(network down), it has observed nothing — say so rather than treating it as a
+pass.
+
+Note `gh run view --log-failed` returns *"run is still in progress; logs will be
+available when it is complete"* until the WHOLE run finishes, which is the other
+reason to settle first.
+
 ### 1. Identify the failing CI run
 
 - Get the current branch name from `git branch --show-current`.
 - Fetch the latest CI run for this branch via GitHub API:
   - `GET /repos/{owner}/{repo}/actions/runs?branch={branch}&per_page=5`
 - Find the most recent failed run.
+- **Before fixing, establish whose failure it is.** Re-run the same gate against
+  `origin/main`, and check whether any of your changed files appear in its
+  inputs (`git diff origin/main --stat -- <path>`). A pre-existing trunk failure
+  is reported, not adopted — and not ignored.
+- **A local repro can differ from CI.** A developer checkout carries settings and
+  generated trees a clean runner never has, so a gate can fail locally for an
+  unrelated reason (or pass locally while CI fails). When they disagree, CI is
+  authoritative; name the difference instead of assuming one cause.
 
 ### 2. Get the failure details
 

package/dist/agent-src/commands/pr/create.md

@@ -318,6 +318,66 @@ This is the [`direct-answers` Iron Law 2](../rules/direct-answers.md)
 live-state clause applied to the PR surface: git/PR/CI state decays
 silently and is NEVER reported from memory or inference.
 
+#### 4d. Settle CI before the turn ends (MANDATORY)
+
+```
+A PUSH TO AN OPEN PR IS NOT DONE UNTIL CI IS SETTLED.
+NEVER END THE TURN ON "CI IS RUNNING" — WAIT FOR THE VERDICT.
+RED → DIAGNOSE AND FIX IN THE WORKING TREE. NEVER LEAVE A KNOWN FAILURE UNREAD.
+```
+
+§4c makes the REPORT honest. This makes the turn honest: a truthful
+"checks are pending" is still an unfinished job, and reporting it as the
+closing line hands the user a PR whose outcome nobody has looked at.
+Pending is a reason to wait, never a reason to stop.
+
+**Settled** means every check has reached a terminal state:
+
+```bash
+until [ "$(gh pr checks <n> --json state \
+    --jq '[.[] | select(.state=="IN_PROGRESS" or .state=="QUEUED" or .state=="PENDING")] | length')" = "0" ]
+do sleep 45; done
+gh pr checks <n> --json name,state,link \
+  --jq '.[] | select(.state!="SUCCESS" and .state!="SKIPPED") | "\(.state)  \(.name)  \(.link)"'
+```
+
+Run the wait as a BACKGROUND command so the turn resumes on its own when
+the verdict lands. A foreground sleep-poll chain is blocked, and burning
+turns on `gh pr checks` every minute is the tool-loop
+[`token-efficiency`](../rules/token-efficiency.md) forbids.
+
+**On red:**
+
+1. **Verify it is yours before fixing it.** Check `origin/main` for the same
+   failure and whether any of your files appear in the failing gate's inputs
+   (`git diff origin/main --stat -- <path>`). A pre-existing trunk failure is
+   reported, not silently adopted — and not silently ignored either.
+2. **Get the real log, do not infer.** `gh run view --job <id> --log-failed`.
+   Logs are unavailable until the whole run completes; a local repro is often
+   faster but can differ from CI (a developer checkout carries settings and
+   generated trees a clean runner does not — see the `SCOPE_GUARD_BYPASS` and
+   untracked-`dist/` cases). When local and CI disagree, CI is authoritative.
+3. **Fix, then re-verify locally** with the narrowest command that proves the
+   target green.
+4. **Bounded at N=3 per failing target** ([`autonomous-execution`](../rules/autonomous-execution.md)).
+   Same failure signature twice → the hypothesis is wrong; change approach
+   rather than spending the third attempt on a near-identical retry.
+5. **The push stays gated.** `git push` is a Hard Floor
+   ([`non-destructive-by-default`](../rules/non-destructive-by-default.md)) and a
+   one-off authorization is spent on the push it was given for
+   ([`commit-policy`](../rules/commit-policy.md)). Fix in the working tree and
+   push only under a fresh or still-standing instruction. A CI-fix loop that
+   re-pushes on its own authority is not on the table.
+
+**When the verdict cannot be reached** — network down, `gh` failing, the run
+never registering — say so plainly and name what is unverified. A background
+waiter that exits because `gh` errored has NOT observed a green run; treat its
+output as absent, not as a pass.
+
+**Not gated by this:** posting the status anywhere. Progress narration belongs
+in the chat reply, never as a PR comment
+([`no-pr-progress-comments`](../rules/no-pr-progress-comments.md)).
+
 #### 4d. Jira transition (only when transitioned)
 
 Linked ticket + `routine_confirmations: true` → ask `1. Yes / 2. No`.

package/dist/agent-src/contexts/authority/kernel-rule-edits.md

@@ -21,15 +21,31 @@ diagnosis.
 
 ## Trigger
 
-A PR is a "kernel-rule edit" iff it modifies any file in
-`.agent-src.uncondensed/rules/` that is in the locked kernel set
+A PR is a "kernel-rule edit" iff it modifies any file in `src/rules/`
+that is in the locked kernel set
 (see [`docs/contracts/kernel-membership.md`](../../../docs/contracts/kernel-membership.md)).
+(Until 2026-07-31 this named the pre-ADR-051 authoring tree, which no
+longer exists — so the trigger could not match a live file.)
 
 The CI guard (Phase 4.2 of the always-budget-relief roadmap) fails
 any PR that touches **> 1** kernel rule in the same diff. Override is
 a single PR label: `bundled-always-rules-acknowledged` — the maintainer
 records why the bundle is necessary in the PR body.
 
+## Re-anchor the cache prefix in the same PR
+
+The kernel bodies are the KV-cache prefix of every request, so editing
+one invalidates that cache for every consumer. `check_kernel_prefix_stability`
+(Rule Backstops workflow) fails until the edit is recorded:
+
+```bash
+./scripts-run src/scripts/check_kernel_prefix_stability --update-baseline
+```
+
+Commit the resulting `internal/bench/reports/kernel-prefix.json` **in the
+same PR** — that is what makes a cache-invalidating change explicit in the
+diff instead of a silent 10× cost event.
+
 ## Out of scope
 
 - Auto-tier rules. Auto rules load on demand; the soak rationale does

package/dist/agent-src/rules/design-fidelity.md

@@ -20,7 +20,7 @@ applies_to_user_types:
 routes_to:
   - "guideline:design-fidelity-mechanics"
 workspaces: [engineering]
-packs: [frontend-design]
+packs: [engineering-base, frontend-design]
 ---
 
 # Design Fidelity
@@ -73,7 +73,7 @@ porting, or modifying UI to match it.
 - The user explicitly invites exploration ("show me options", "redesign this", "improve the layout") — that authorises deviation for that turn.
 - Non-UI surfaces (scripts, CLI, backend).
 
-Body migrated to [`guideline:design-fidelity-mechanics`](../docs/guidelines/design-fidelity-mechanics.md) (per P4 of `road-to-kernel-and-router.md`) — surgical visual edits (targeted-edit vs redesign-trigger discipline, stable anchors), asset & imagery discipline (owned-asset path, real-imagery-as-proof, iconography floor, no unrequested filler), deviation-surfacing shape, failure-mode catalog, `daf-*` fixtures.
+Body migrated to [`guideline:design-fidelity-mechanics`](../docs/guidelines/design-fidelity-mechanics.md) (per P4 of `road-to-kernel-and-router.md`) — surgical visual edits (targeted-edit vs redesign-trigger discipline, stable anchors), asset & imagery discipline (owned-asset path, third-party delivery is self-hosted by default, real-imagery-as-proof, iconography floor, no unrequested filler), deviation-surfacing shape, failure-mode catalog, `daf-*` fixtures.
 Trigger-set above activates this routing on demand, independent of the discipline profile (ADR-110).
 
 ## See also

package/dist/agent-src/skills/ai-code-blindspots/SKILL.md

@@ -48,6 +48,7 @@ Run the row(s) for what you touched. The grep is a fast authoring-time backstop
 | **DB query / ORM** | parameterized, never string-built; tenant predicate present; no `SELECT *` across a serialization boundary; N+1 avoided (eager load) | `source-discovery`, `security` |
 | **Migration** | reversible (`down`); expand-contract for drop/rename (never a bare `DROP COLUMN` before code stops reading it); transaction; index on new FK/filter column | `engineering-safety-floor`, `migration-architect` |
 | **User-controlled render (FE)** | output-encoded; no `dangerouslySetInnerHTML`/`v-html`/`innerHTML`/`eval` on non-constant input; no secret/token in client code; token not in `localStorage` | `frontend-render-security` |
+| **Third-party asset in shipped markup / CSS** | delivery is self-hosted through the project's own route (framework font/asset primitive, bundled package, or locally-served file) — a font/icon/stylesheet CDN link transmits the **visitor's IP** to that third party on every page view; a hotlink only on a stated consumer opt-in; `integrity` + `crossorigin` if a CDN link stays | `design-fidelity-mechanics` § Asset & imagery discipline (owner), `typography-system` |
 | **File / outbound fetch** | path confined to an allowed base; SSRF allow-list + private-IP block on user-supplied URLs; size limit; **explicit timeout** (no unbounded/default-infinite wait); server-side validation (never client-only) | `security`, `defense-in-depth` |
 | **Infra / IaC** | least-privilege (no `Action:*`/`Resource:*`); encryption at rest; no `0.0.0.0/0` to mgmt/DB ports; no hardcoded creds; scanner-verified, not `plan`-verified | `engineering-safety-floor`, `terraform`, `secrets-management` |
 | **New dependency** | package exists on the real registry (not hallucinated); not typo-adjacent to a popular one; pinned + lockfile committed; CVE-scanned | `supply-chain-intake`, `dependency-upgrade` |

package/dist/agent-src/skills/design-intelligence/SKILL.md

@@ -204,6 +204,23 @@ corpus. Canon is a gap-filler, never an override of a registered brand value.
 4. On `design_confirmed: true` the directive engine advances; revisions
    loop back here.
 
+### Font delivery columns — which one is the answer
+
+`font-pairings-reference.csv` carries three delivery-adjacent columns and they
+are **not** interchangeable. This is the arbitration between them, so the file
+and its sibling `data/stacks/nextjs.csv` (row 22: a font-CDN `<link>` sits in
+that row's **Don't** column) no longer read as opposite instructions:
+
+| Column | What it answers | Status |
+|---|---|---|
+| `Google Fonts URL` | *where do I find / verify this font?* | discovery + availability check |
+| `Self-Hosted Route` | *how does it get onto the page?* | **the default answer** — `@fontsource/*` package ids derived from the row's own Google-Fonts families; two rows name a foundry file instead (Fontshare pairs with a Google alternative) |
+| `CSS Import` | the third-party CDN `@import` | **opt-in only** — emitting it transmits the visitor's IP to the third party; policy owner is [`design-fidelity-mechanics`](../../../docs/guidelines/design-fidelity-mechanics.md) § Asset & imagery discipline ([`ADR-205`](../../../docs/decisions/ADR-205-webfont-delivery-ownership.md)) |
+
+Per-stack route resolution (Next / bundler / asset-pipeline / plain) lives in
+[`typography-system`](../typography-system/SKILL.md) § Delivery — one table, not
+two.
+
 ### Font fallback (no google-fonts index — by design)
 
 The 745 KB Google-Fonts index was rejected (ADR-061 §8): it duplicates a
@@ -332,7 +349,16 @@ Before finalizing any design brief, cross-check against
 [`docs/guidelines/design-antipatterns.md`](../../../docs/guidelines/design-antipatterns.md)
 — especially the Color (C1–C5), Typography (T7–T8), and Layout (L1–L2) sections.
 If the grounded corpus selection lands on a pattern in the catalog, either invoke
-the override condition or adjust the selection. Run the AI-slop originality
+the override condition or adjust the selection.
+For typography this is **a field, not a memory test**: a
+`font-pairings-reference.csv` row whose heading or body font is a T7 overused-AI
+default carries it in its `AI-Default Flag` column (`T7:<font>`; 15 of 73 rows) —
+read the field. An empty flag means the row carries no T7 font, so a pairing is
+never "flagged by association" (Poppins + Open Sans, the example most often
+cited as flagged, carries none). T8 (single typeface for everything) needs no
+column: it is `Heading Font == Body Font` on the row. A flag is a visible
+conflict to resolve, never a ban — the catalog's override condition still
+applies. Run the AI-slop originality
 self-test (catalog § "The AI-slop originality self-test") on the chosen aesthetic
 direction before emitting `design_confirmed`.