@event4u/agent-config 9.11.0 → 9.12.0

package/.claude-plugin/marketplace.json

@@ -6,7 +6,7 @@
   },
   "metadata": {
     "description": "Bootstrap shim for the event4u agent-config suite. This plugin ships ONLY the dispatcher hooks plus one install-pointer skill — ALL content (skills, rules, commands) is installed via `npx -y @event4u/agent-config init`, which writes the file projection AND registers the same hooks in ~/.claude/settings.json. DEPRECATED as a content channel; kept so the marketplace listing stays discoverable and existing installs keep working hooks.",
-    "version": "9.11.0",
+    "version": "9.12.0",
     "keywords": [
       "agent-config",
       "skills",

package/CHANGELOG.md

@@ -244,6 +244,58 @@ Entry-shape contract: [`docs/contracts/CHANGELOG-conventions.md`](docs/contracts
 > that forces a new era split (`# Era: 9.11.x`, etc.) — see
 > [`docs/contracts/CHANGELOG-conventions.md § Era splits`](docs/contracts/CHANGELOG-conventions.md).
 
+## [9.12.0](https://github.com/event4u-app/agent-config/compare/9.11.0...9.12.0) (2026-08-01)
+
+### Features
+
+* **corpus:** ship the delivery route and the T7 conflict as data ([3f84502](https://github.com/event4u-app/agent-config/commit/3f8450281ded70ada9283ebaf2e72680a37aa21d))
+* **typography:** branch on hosting mode instead of hard-wiring the import ([47385a1](https://github.com/event4u-app/agent-config/commit/47385a1acee8c9876c187b7ead27cdd23d77f025))
+* **design:** make third-party asset delivery self-hosted by default ([dff1a4c](https://github.com/event4u-app/agent-config/commit/dff1a4c9a51f94fd01e186f98c0e9691378e109d))
+* **work-engine:** overlay composition replaces lane choice ([aef95a6](https://github.com/event4u-app/agent-config/commit/aef95a6a397cb064876379d5cdee0895f981726c))
+* **ci:** settle CI after a push, run preflight before one, confine the copy ([aec0115](https://github.com/event4u-app/agent-config/commit/aec011585ab89e7de2a1789cb3fbdfbb47430902))
+* **skills:** ui-apply-generic — the default lane becomes a real executor ([0930705](https://github.com/event4u-app/agent-config/commit/0930705745fda7eae14dc32a271cb41b8177e381))
+* **work-engine:** multi-axis stack detection ([36b33da](https://github.com/event4u-app/agent-config/commit/36b33dac8a67c627b8e6b863889202768fb23e3e))
+* **ci:** fail the build when the installer can reach a module-level process.exit ([a52c2ad](https://github.com/event4u-app/agent-config/commit/a52c2ad087b0ad7b4dc0eed28a91f70174afc04f))
+
+### Bug Fixes
+
+* **roadmap:** drop an illegal status value from the archived local-ci-trust plan ([c60745e](https://github.com/event4u-app/agent-config/commit/c60745e9cc6e0012437e27849f9e64e5b6368556))
+* **ci:** give release-drift its dependencies so the gate can run at all ([4262f34](https://github.com/event4u-app/agent-config/commit/4262f34df52a9fd092103bdb455b748efa2e5e00))
+* **ci:** make the kernel-prefix gate able to fail, then re-anchor it ([154d366](https://github.com/event4u-app/agent-config/commit/154d36619cac7441c21001fa4c3c1387a54129ce))
+* **design-tokens:** drop the host allow-list that silenced real findings ([4128875](https://github.com/event4u-app/agent-config/commit/4128875432da79e61cc00f7487af09a152c283aa))
+* **skills:** ui-apply-generic ships a consumer-reachable invocation ([98ca19a](https://github.com/event4u-app/agent-config/commit/98ca19aa622582e4c4c85b2d9945030ce038d665))
+* **hooks:** the roadmap gate names its real cause ([1a49867](https://github.com/event4u-app/agent-config/commit/1a49867b41b6eeaa70b45c3d8479a9d9b1ea2399))
+* **install:** keep the projection CLI out of the consumer installer bundle ([802b8fd](https://github.com/event4u-app/agent-config/commit/802b8fd88f1b1fffddbb0e0040359be50d7f5fd2))
+* **install:** scope rules on the CLI global path, not only in the wizard ([9535c57](https://github.com/event4u-app/agent-config/commit/9535c574be9b07801b0721e2625e1bff2cdb2bc2))
+
+### Documentation
+
+* **roadmap:** pre-registration covers the inputs, not only the scoring ([ca90448](https://github.com/event4u-app/agent-config/commit/ca904481823ceed9590f71b685e1621447edacec))
+* **roadmap:** unblock the UI measurements — bench:ui as the port verify stage ([cf9fbf4](https://github.com/event4u-app/agent-config/commit/cf9fbf4ce708d19f679b427aa3856d738cb76bff))
+* **adr:** record one owner for third-party webfont delivery ([dd20e14](https://github.com/event4u-app/agent-config/commit/dd20e148290ecbcad5ba5ac9915c1b5c927dfdce))
+* **roadmap:** merge the coverage benchmark into the tier follow-up ([d08f464](https://github.com/event4u-app/agent-config/commit/d08f46499eeb26af423cd7ae8f34a07cf8a7e9f0))
+* **roadmap:** artefact-count reproducibility as a draft candidate ([850e2c6](https://github.com/event4u-app/agent-config/commit/850e2c689579187b64a481feb2988c2a927d4130))
+* **roadmap:** universal stack coverage — refusal is not coverage ([0bdc726](https://github.com/event4u-app/agent-config/commit/0bdc726ee1ba3a30ff9196e659c14ecce87e12b8))
+* **roadmap:** close road-to-consistent-rule-scoping with its execution notes ([4ca0640](https://github.com/event4u-app/agent-config/commit/4ca0640b30dff0f3a4059083c577622fbb4bbc23))
+
+### Tests
+
+* **work-engine:** baseline the shapes the flat stack label cannot express ([337e4ff](https://github.com/event4u-app/agent-config/commit/337e4ff5eff91439b72a01095329770f6e85eb69))
+* **install:** pin the CLI global deploy against the wizard plan ([5fa64a3](https://github.com/event4u-app/agent-config/commit/5fa64a363cd1d38976cd4ba6583ea1ce90b81238))
+
+### Build
+
+* **install:** refresh the tracked dist/install output for the wizard-plan change ([a2690f3](https://github.com/event4u-app/agent-config/commit/a2690f3f1b9b123f00f505c12f9c9a68d16d2d14))
+
+### Chores
+
+* **funding:** add the sponsor button and say plainly what it is ([a219af6](https://github.com/event4u-app/agent-config/commit/a219af6f68d0fa82291272a726ed81dd2331a7e5))
+* **roadmaps:** archive road-to-webfont-delivery-ownership ([ebfa91d](https://github.com/event4u-app/agent-config/commit/ebfa91dffd260db55d187a71b7c8144eb574596c))
+* **roadmaps:** regenerate the dashboard after the merge ([82c8a45](https://github.com/event4u-app/agent-config/commit/82c8a45b2b2a3f05da1feaf516b6a448ee73fcfe))
+* **roadmaps:** archive the completed rule-scoping roadmap ([5bedc17](https://github.com/event4u-app/agent-config/commit/5bedc17826d26612d1b7db52ded5d5bd2dd694d5))
+
+Tests: 9819 (+77 since 9.11.0)
+
 ## [9.11.0](https://github.com/event4u-app/agent-config/compare/9.10.0...9.11.0) (2026-07-31)
 
 ### Features

package/README.md

@@ -4,7 +4,7 @@
 
 [![Smoke](https://github.com/event4u-app/agent-config/actions/workflows/smoke.yml/badge.svg)](https://github.com/event4u-app/agent-config/actions/workflows/smoke.yml) [![Public install smoke (3 OS × 2 Node)](https://github.com/event4u-app/agent-config/actions/workflows/smoke-public-install.yml/badge.svg)](https://github.com/event4u-app/agent-config/actions/workflows/smoke-public-install.yml) [![npm](https://img.shields.io/npm/v/@event4u/agent-config?style=flat-square&label=npm&color=orange)](https://www.npmjs.com/package/@event4u/agent-config) [![agent-config MCP server](https://glama.ai/mcp/servers/event4u-app/agent-config/badges/score.svg)](https://glama.ai/mcp/servers/event4u-app/agent-config) [![MCP Toplist](https://mcptoplist.com/badge/glama%2Fevent4u-app%2Fagent-config.svg)](https://mcptoplist.com/server/glama%2Fevent4u-app%2Fagent-config)
 
-[![Skills](https://img.shields.io/badge/Skills-286-orange?style=flat-square)](dist/agent-src/skills/) [![Rules](https://img.shields.io/badge/Rules-111-orange?style=flat-square)](dist/agent-src/rules/) [![Commands](https://img.shields.io/badge/Commands-191-orange?style=flat-square)](dist/agent-src/commands/) [![Guidelines](https://img.shields.io/badge/Guidelines-101-orange?style=flat-square)](docs/guidelines/) [![Personas](https://img.shields.io/badge/Personas-29-orange?style=flat-square)](dist/agent-src/personas/) [![Advisors](https://img.shields.io/badge/Advisors-5-orange?style=flat-square)](dist/agent-src/personas/advisors/)
+[![Skills](https://img.shields.io/badge/Skills-287-orange?style=flat-square)](dist/agent-src/skills/) [![Rules](https://img.shields.io/badge/Rules-111-orange?style=flat-square)](dist/agent-src/rules/) [![Commands](https://img.shields.io/badge/Commands-191-orange?style=flat-square)](dist/agent-src/commands/) [![Guidelines](https://img.shields.io/badge/Guidelines-101-orange?style=flat-square)](docs/guidelines/) [![Personas](https://img.shields.io/badge/Personas-29-orange?style=flat-square)](dist/agent-src/personas/) [![Advisors](https://img.shields.io/badge/Advisors-5-orange?style=flat-square)](dist/agent-src/personas/advisors/)
 
 **Try it in 30 seconds** — drop one read-only subagent into any repo and watch it gate "done": `@production-validator check this branch is actually done`. No wizard, no lock-in, nothing else installed — the [30-second wedge ↓](#quickstart) is the whole first step. Start at the proof, not the catalog: **[event4u-app.github.io/agent-config/proof/](https://event4u-app.github.io/agent-config/proof/)**.
 
@@ -612,6 +612,13 @@ the file install. Porting the bash dispatcher to native Windows is
 **demand-gated**: a named Windows adopter who cannot use WSL2 or the MCP
 path reopens it (see `agents/roadmaps/` — road-to-credible-install Phase 3).
 
+## Funding
+
+The package is free, MIT, and stays that way — no paid tier, no dual
+licensing. If it saves you time and you want to chip in, the GitHub Sponsor
+button at the top of the repo is the whole mechanism. If you would rather not,
+use it anyway; nothing here is gated on it.
+
 ## License
 
 [MIT](LICENSE).

package/dist/agent-src/commands/fix/ci.md

@@ -20,12 +20,41 @@ packs:
 # /fix ci
 ## Instructions
 
+### 0. Wait for the run to settle first
+
+A run still in progress has no verdict to fix. Do NOT read a partial run and
+start guessing — and do NOT end the turn reporting "CI is running".
+
+```bash
+until [ "$(gh pr checks <n> --json state \
+    --jq '[.[] | select(.state=="IN_PROGRESS" or .state=="QUEUED" or .state=="PENDING")] | length')" = "0" ]
+do sleep 45; done
+```
+
+Run that in the BACKGROUND so the turn resumes when the verdict lands; a
+foreground sleep-poll chain is blocked and per-minute re-polling is the tool
+loop `token-efficiency` forbids. If the waiter exits because `gh` itself failed
+(network down), it has observed nothing — say so rather than treating it as a
+pass.
+
+Note `gh run view --log-failed` returns *"run is still in progress; logs will be
+available when it is complete"* until the WHOLE run finishes, which is the other
+reason to settle first.
+
 ### 1. Identify the failing CI run
 
 - Get the current branch name from `git branch --show-current`.
 - Fetch the latest CI run for this branch via GitHub API:
   - `GET /repos/{owner}/{repo}/actions/runs?branch={branch}&per_page=5`
 - Find the most recent failed run.
+- **Before fixing, establish whose failure it is.** Re-run the same gate against
+  `origin/main`, and check whether any of your changed files appear in its
+  inputs (`git diff origin/main --stat -- <path>`). A pre-existing trunk failure
+  is reported, not adopted — and not ignored.
+- **A local repro can differ from CI.** A developer checkout carries settings and
+  generated trees a clean runner never has, so a gate can fail locally for an
+  unrelated reason (or pass locally while CI fails). When they disagree, CI is
+  authoritative; name the difference instead of assuming one cause.
 
 ### 2. Get the failure details
 

package/dist/agent-src/commands/pr/create.md

@@ -318,6 +318,66 @@ This is the [`direct-answers` Iron Law 2](../rules/direct-answers.md)
 live-state clause applied to the PR surface: git/PR/CI state decays
 silently and is NEVER reported from memory or inference.
 
+#### 4d. Settle CI before the turn ends (MANDATORY)
+
+```
+A PUSH TO AN OPEN PR IS NOT DONE UNTIL CI IS SETTLED.
+NEVER END THE TURN ON "CI IS RUNNING" — WAIT FOR THE VERDICT.
+RED → DIAGNOSE AND FIX IN THE WORKING TREE. NEVER LEAVE A KNOWN FAILURE UNREAD.
+```
+
+§4c makes the REPORT honest. This makes the turn honest: a truthful
+"checks are pending" is still an unfinished job, and reporting it as the
+closing line hands the user a PR whose outcome nobody has looked at.
+Pending is a reason to wait, never a reason to stop.
+
+**Settled** means every check has reached a terminal state:
+
+```bash
+until [ "$(gh pr checks <n> --json state \
+    --jq '[.[] | select(.state=="IN_PROGRESS" or .state=="QUEUED" or .state=="PENDING")] | length')" = "0" ]
+do sleep 45; done
+gh pr checks <n> --json name,state,link \
+  --jq '.[] | select(.state!="SUCCESS" and .state!="SKIPPED") | "\(.state)  \(.name)  \(.link)"'
+```
+
+Run the wait as a BACKGROUND command so the turn resumes on its own when
+the verdict lands. A foreground sleep-poll chain is blocked, and burning
+turns on `gh pr checks` every minute is the tool-loop
+[`token-efficiency`](../rules/token-efficiency.md) forbids.
+
+**On red:**
+
+1. **Verify it is yours before fixing it.** Check `origin/main` for the same
+   failure and whether any of your files appear in the failing gate's inputs
+   (`git diff origin/main --stat -- <path>`). A pre-existing trunk failure is
+   reported, not silently adopted — and not silently ignored either.
+2. **Get the real log, do not infer.** `gh run view --job <id> --log-failed`.
+   Logs are unavailable until the whole run completes; a local repro is often
+   faster but can differ from CI (a developer checkout carries settings and
+   generated trees a clean runner does not — see the `SCOPE_GUARD_BYPASS` and
+   untracked-`dist/` cases). When local and CI disagree, CI is authoritative.
+3. **Fix, then re-verify locally** with the narrowest command that proves the
+   target green.
+4. **Bounded at N=3 per failing target** ([`autonomous-execution`](../rules/autonomous-execution.md)).
+   Same failure signature twice → the hypothesis is wrong; change approach
+   rather than spending the third attempt on a near-identical retry.
+5. **The push stays gated.** `git push` is a Hard Floor
+   ([`non-destructive-by-default`](../rules/non-destructive-by-default.md)) and a
+   one-off authorization is spent on the push it was given for
+   ([`commit-policy`](../rules/commit-policy.md)). Fix in the working tree and
+   push only under a fresh or still-standing instruction. A CI-fix loop that
+   re-pushes on its own authority is not on the table.
+
+**When the verdict cannot be reached** — network down, `gh` failing, the run
+never registering — say so plainly and name what is unverified. A background
+waiter that exits because `gh` errored has NOT observed a green run; treat its
+output as absent, not as a pass.
+
+**Not gated by this:** posting the status anywhere. Progress narration belongs
+in the chat reply, never as a PR comment
+([`no-pr-progress-comments`](../rules/no-pr-progress-comments.md)).
+
 #### 4d. Jira transition (only when transitioned)
 
 Linked ticket + `routine_confirmations: true` → ask `1. Yes / 2. No`.

package/dist/agent-src/contexts/authority/kernel-rule-edits.md

@@ -21,15 +21,31 @@ diagnosis.
 
 ## Trigger
 
-A PR is a "kernel-rule edit" iff it modifies any file in
-`.agent-src.uncondensed/rules/` that is in the locked kernel set
+A PR is a "kernel-rule edit" iff it modifies any file in `src/rules/`
+that is in the locked kernel set
 (see [`docs/contracts/kernel-membership.md`](../../../docs/contracts/kernel-membership.md)).
+(Until 2026-07-31 this named the pre-ADR-051 authoring tree, which no
+longer exists — so the trigger could not match a live file.)
 
 The CI guard (Phase 4.2 of the always-budget-relief roadmap) fails
 any PR that touches **> 1** kernel rule in the same diff. Override is
 a single PR label: `bundled-always-rules-acknowledged` — the maintainer
 records why the bundle is necessary in the PR body.
 
+## Re-anchor the cache prefix in the same PR
+
+The kernel bodies are the KV-cache prefix of every request, so editing
+one invalidates that cache for every consumer. `check_kernel_prefix_stability`
+(Rule Backstops workflow) fails until the edit is recorded:
+
+```bash
+./scripts-run src/scripts/check_kernel_prefix_stability --update-baseline
+```
+
+Commit the resulting `internal/bench/reports/kernel-prefix.json` **in the
+same PR** — that is what makes a cache-invalidating change explicit in the
+diff instead of a silent 10× cost event.
+
 ## Out of scope
 
 - Auto-tier rules. Auto rules load on demand; the soak rationale does

package/dist/agent-src/rules/design-fidelity.md

@@ -73,7 +73,7 @@ porting, or modifying UI to match it.
 - The user explicitly invites exploration ("show me options", "redesign this", "improve the layout") — that authorises deviation for that turn.
 - Non-UI surfaces (scripts, CLI, backend).
 
-Body migrated to [`guideline:design-fidelity-mechanics`](../docs/guidelines/design-fidelity-mechanics.md) (per P4 of `road-to-kernel-and-router.md`) — surgical visual edits (targeted-edit vs redesign-trigger discipline, stable anchors), asset & imagery discipline (owned-asset path, real-imagery-as-proof, iconography floor, no unrequested filler), deviation-surfacing shape, failure-mode catalog, `daf-*` fixtures.
+Body migrated to [`guideline:design-fidelity-mechanics`](../docs/guidelines/design-fidelity-mechanics.md) (per P4 of `road-to-kernel-and-router.md`) — surgical visual edits (targeted-edit vs redesign-trigger discipline, stable anchors), asset & imagery discipline (owned-asset path, third-party delivery is self-hosted by default, real-imagery-as-proof, iconography floor, no unrequested filler), deviation-surfacing shape, failure-mode catalog, `daf-*` fixtures.
 Trigger-set above activates this routing on demand, independent of the discipline profile (ADR-110).
 
 ## See also

package/dist/agent-src/skills/ai-code-blindspots/SKILL.md

@@ -48,6 +48,7 @@ Run the row(s) for what you touched. The grep is a fast authoring-time backstop
 | **DB query / ORM** | parameterized, never string-built; tenant predicate present; no `SELECT *` across a serialization boundary; N+1 avoided (eager load) | `source-discovery`, `security` |
 | **Migration** | reversible (`down`); expand-contract for drop/rename (never a bare `DROP COLUMN` before code stops reading it); transaction; index on new FK/filter column | `engineering-safety-floor`, `migration-architect` |
 | **User-controlled render (FE)** | output-encoded; no `dangerouslySetInnerHTML`/`v-html`/`innerHTML`/`eval` on non-constant input; no secret/token in client code; token not in `localStorage` | `frontend-render-security` |
+| **Third-party asset in shipped markup / CSS** | delivery is self-hosted through the project's own route (framework font/asset primitive, bundled package, or locally-served file) — a font/icon/stylesheet CDN link transmits the **visitor's IP** to that third party on every page view; a hotlink only on a stated consumer opt-in; `integrity` + `crossorigin` if a CDN link stays | `design-fidelity-mechanics` § Asset & imagery discipline (owner), `typography-system` |
 | **File / outbound fetch** | path confined to an allowed base; SSRF allow-list + private-IP block on user-supplied URLs; size limit; **explicit timeout** (no unbounded/default-infinite wait); server-side validation (never client-only) | `security`, `defense-in-depth` |
 | **Infra / IaC** | least-privilege (no `Action:*`/`Resource:*`); encryption at rest; no `0.0.0.0/0` to mgmt/DB ports; no hardcoded creds; scanner-verified, not `plan`-verified | `engineering-safety-floor`, `terraform`, `secrets-management` |
 | **New dependency** | package exists on the real registry (not hallucinated); not typo-adjacent to a popular one; pinned + lockfile committed; CVE-scanned | `supply-chain-intake`, `dependency-upgrade` |

package/dist/agent-src/skills/design-intelligence/SKILL.md

@@ -204,6 +204,23 @@ corpus. Canon is a gap-filler, never an override of a registered brand value.
 4. On `design_confirmed: true` the directive engine advances; revisions
    loop back here.
 
+### Font delivery columns — which one is the answer
+
+`font-pairings-reference.csv` carries three delivery-adjacent columns and they
+are **not** interchangeable. This is the arbitration between them, so the file
+and its sibling `data/stacks/nextjs.csv` (row 22: a font-CDN `<link>` sits in
+that row's **Don't** column) no longer read as opposite instructions:
+
+| Column | What it answers | Status |
+|---|---|---|
+| `Google Fonts URL` | *where do I find / verify this font?* | discovery + availability check |
+| `Self-Hosted Route` | *how does it get onto the page?* | **the default answer** — `@fontsource/*` package ids derived from the row's own Google-Fonts families; two rows name a foundry file instead (Fontshare pairs with a Google alternative) |
+| `CSS Import` | the third-party CDN `@import` | **opt-in only** — emitting it transmits the visitor's IP to the third party; policy owner is [`design-fidelity-mechanics`](../../../docs/guidelines/design-fidelity-mechanics.md) § Asset & imagery discipline ([`ADR-205`](../../../docs/decisions/ADR-205-webfont-delivery-ownership.md)) |
+
+Per-stack route resolution (Next / bundler / asset-pipeline / plain) lives in
+[`typography-system`](../typography-system/SKILL.md) § Delivery — one table, not
+two.
+
 ### Font fallback (no google-fonts index — by design)
 
 The 745 KB Google-Fonts index was rejected (ADR-061 §8): it duplicates a
@@ -332,7 +349,16 @@ Before finalizing any design brief, cross-check against
 [`docs/guidelines/design-antipatterns.md`](../../../docs/guidelines/design-antipatterns.md)
 — especially the Color (C1–C5), Typography (T7–T8), and Layout (L1–L2) sections.
 If the grounded corpus selection lands on a pattern in the catalog, either invoke
-the override condition or adjust the selection. Run the AI-slop originality
+the override condition or adjust the selection.
+For typography this is **a field, not a memory test**: a
+`font-pairings-reference.csv` row whose heading or body font is a T7 overused-AI
+default carries it in its `AI-Default Flag` column (`T7:<font>`; 15 of 73 rows) —
+read the field. An empty flag means the row carries no T7 font, so a pairing is
+never "flagged by association" (Poppins + Open Sans, the example most often
+cited as flagged, carries none). T8 (single typeface for everything) needs no
+column: it is `Heading Font == Body Font` on the row. A flag is a visible
+conflict to resolve, never a ban — the catalog's override condition still
+applies. Run the AI-slop originality
 self-test (catalog § "The AI-slop originality self-test") on the chosen aesthetic
 direction before emitting `design_confirmed`.