@event4u/agent-config 9.2.0 → 9.4.0

package/.claude-plugin/marketplace.json

@@ -6,7 +6,7 @@
   },
   "metadata": {
     "description": "Bootstrap shim for the event4u agent-config suite. This plugin ships ONLY the dispatcher hooks plus one install-pointer skill — ALL content (skills, rules, commands) is installed via `npx -y @event4u/agent-config init`, which writes the file projection AND registers the same hooks in ~/.claude/settings.json. DEPRECATED as a content channel; kept so the marketplace listing stays discoverable and existing installs keep working hooks.",
-    "version": "9.2.0",
+    "version": "9.4.0",
     "keywords": [
       "agent-config",
       "skills",

package/CHANGELOG.md

@@ -166,6 +166,29 @@ gated on the telemetry from 6.0.0-C. Deferred to 6.0.0-C: a
 `skills_discoverable` field, reactive just-in-time pack activation, and the
 per-pack budget lint.
 
+### Added — team mode: governed cross-model review (default-off, `road-to-team-mode`)
+
+A new default-off `/team` command family (`review`, `adversarial`, `delegate`,
+`status`) that governs the official `openai/codex-plugin-cc` as the Claude-Code
+transport — a second strong model reviewing the real working-tree diff (depth),
+the complement to the council's neutral-artefact breadth.
+
+- **Default-off + fail-closed.** With `ai_team.enabled: false` (default) no
+  command is suggested and invocation prints an enable pointer — byte-identical
+  to pre-roadmap behaviour. On Claude-Code hosts the wrappers are thin
+  delegations to `/codex:*`; absent the plugin they fail closed with the
+  `agent-config doctor --check team` remediation, never a silent no-op.
+- **Multi-host fallback (review lens only).** On non-Claude-Code hosts
+  `/team:review` sends a size-capped repo-diff bundle through the existing
+  subscription `OpenAICliClient`, with an honest capability-delta header.
+- **Governed, not rebuilt.** Nothing upstream-maintained is reimplemented; the
+  Review-Gate stays upstream's (we add an opt-in loop-bound + ledger line), and
+  `/team:delegate` (write access) sits behind a second opt-in
+  `ai_team.allow_delegate: false`. Config: `docs/contracts/ai-team-config.md`.
+- **No quality claim yet.** Cross-model defect-finding lift is unproven until
+  the Phase 5 benchmark runs (spend-gated); the docs describe workflow value
+  only, never a lift claim.
+
 ### Breaking — v4.0.0 unified setup (`road-to-unified-setup`)
 
 `v4.0.0` is a **hard-cut** release. The legacy Python installer at
@@ -1033,6 +1056,94 @@ our recommendation order, not its support status.
 > that forces a new era split (`# Era: 9.3.x`, etc.) — see
 > [`docs/contracts/CHANGELOG-conventions.md § Era splits`](docs/contracts/CHANGELOG-conventions.md).
 
+## [9.4.0](https://github.com/event4u-app/agent-config/compare/9.3.0...9.4.0) (2026-07-20)
+
+### Features
+
+* **self-review:** large-diff / claim-affecting ai-council escalation (detect + recommend) ([1308e22](https://github.com/event4u-app/agent-config/commit/1308e220179600424d4ac590ae9295b522f3f22c))
+* **council:** cross-round prompt-cache read unlock ([5faf32b](https://github.com/event4u-app/agent-config/commit/5faf32bc3b0522e7e0af3b28a108ce808133a56e))
+* **council:** auto model-tiering gated on the A1<->A3 cache coupling ([1a693bf](https://github.com/event4u-app/agent-config/commit/1a693bffe79addde715becc9a366c5185e9545b9))
+* **council:** stance repair fires only on genuinely unparseable STANCE ([40196bd](https://github.com/event4u-app/agent-config/commit/40196bdac2489dc50ac1213976e776d94f3f89c7))
+* **adoption:** wedge promise, opt-in first-run instrument, honest positioning surface ([c93e314](https://github.com/event4u-app/agent-config/commit/c93e314b102ba437afcbef994306a5f0c42d2476))
+* **routing:** reciprocal cluster routing for the weighted-matrix mode ([6be7bc5](https://github.com/event4u-app/agent-config/commit/6be7bc5b7d042bdfc000c5a51270a7c9da5a2f28))
+* **skill:** weighted-matrix mode in decision-record ([7eaf4db](https://github.com/event4u-app/agent-config/commit/7eaf4db125eebe19cb0d57ac32f15f917530b206))
+* **command:** /contribution-precheck — contributor self-service gate subset ([5e7de9b](https://github.com/event4u-app/agent-config/commit/5e7de9b6b828653bb0e49e1711f42ee56c18e4cd))
+* **catalog:** provenance source column + CREDITS.md ([10cca8a](https://github.com/event4u-app/agent-config/commit/10cca8af8a244aa30d0ee036126e24c506c82e48))
+* **ci:** wire lint_originality --changed as the originality-gate PR job ([00c3754](https://github.com/event4u-app/agent-config/commit/00c3754df8d9a95c30a84c294bfb3ab9cfbbe509))
+* **skills:** add learning-tutor skill — six structured tutoring modes ([8ed343d](https://github.com/event4u-app/agent-config/commit/8ed343d282ad669489866cda84a6a214f1943ca6))
+* **skill:** evaluate-llm-feature — black-box LLM-feature evaluator ([b94249f](https://github.com/event4u-app/agent-config/commit/b94249fb067c39d8fa5c8f4fa6cfe2b1290e336b))
+* **flows:** optional team annotation + resolver ([7b14ed5](https://github.com/event4u-app/agent-config/commit/7b14ed5cbba5bec6b4e5500fb68c6770ad7d5f87))
+* **mcp:** lazy catalog router — index, scoring, stub tools ([d17b9e0](https://github.com/event4u-app/agent-config/commit/d17b9e05fc5742f922177febab086c4723796029))
+* **originality:** anti-reskin shingle-overlap gate ([dae4760](https://github.com/event4u-app/agent-config/commit/dae4760c7b041844bde10fa3e2eb6ae5f34a9fa6))
+
+### Bug Fixes
+
+* **skill:** keep subagent-orchestration under the 400-line size gate ([c419da9](https://github.com/event4u-app/agent-config/commit/c419da949db135c6c1723d85e78906669ee881a2))
+* **portability:** drop task-ci literals from the shipped precheck command ([a0d83d3](https://github.com/event4u-app/agent-config/commit/a0d83d33984847143749131fe0e01509c72edbbb))
+* **ci:** CAPABILITIES 277 count + defang injection-probe examples ([c1d4036](https://github.com/event4u-app/agent-config/commit/c1d4036dd615fa2bcbd670e66583f8eac15fbb6a))
+* **originality:** close the adversarial DF batch-masking hole ([dd84403](https://github.com/event4u-app/agent-config/commit/dd8440363a7ecda67934cca27cb0df4b69ba34e6))
+* **mcp:** version the catalog-index cache filename ([93d980a](https://github.com/event4u-app/agent-config/commit/93d980aff254ceb9d31bf290f36a249377e81eea))
+
+### Documentation
+
+* **team:** CHANGELOG entry + close-out (Phase 6 + prereqs); upstream re-verified ([a6405c5](https://github.com/event4u-app/agent-config/commit/a6405c5ade5e4e1a22c7cb60eaf0d31f7f212b9e))
+* **team:** three-way router disambiguation cross-links (council / team / subagents) ([f82ed16](https://github.com/event4u-app/agent-config/commit/f82ed168f81c48ef98b0e561f44bc13c8691ce77))
+* **self-review:** document the escalation path; flip Phase 1 step (part c) ([9f26716](https://github.com/event4u-app/agent-config/commit/9f267166b1305f9833f89ae8119638105ecd42c1))
+* **roadmap:** archive road-to-api-cost-optimization — A3 executed, fully closed ([94e2044](https://github.com/event4u-app/agent-config/commit/94e20444f215491d6f5350b09910d37a928a090e))
+* **cost:** B2 index-branch pointers (deferred follow-up closed) ([7d68245](https://github.com/event4u-app/agent-config/commit/7d68245ebc013b5fa05f0790473e910e45227a5e))
+* **roadmap:** adoption roadmap — second autonomous slice landed ([0febec6](https://github.com/event4u-app/agent-config/commit/0febec66d629dc2cca6410bfaa07c841711e1966))
+* **announcements:** draft the honest-launch story (drafted, not posted) ([8e1b757](https://github.com/event4u-app/agent-config/commit/8e1b757f53f367c1fdc7d7150eed4ff8edc1e426))
+* **roadmap:** archive road-to-weighted-decision-matrix — fully executed ([4586dcd](https://github.com/event4u-app/agent-config/commit/4586dcd5432c618ffd007af2f0977a24249945aa))
+* **roadmap:** originality-gate + contributor-funnel roadmap, executed and parked ([4d0e73b](https://github.com/event4u-app/agent-config/commit/4d0e73b67298cd78b509778514ab170fcc75e930))
+* **probe:** anti-reskin-gate demand probe + extraction floor ([b849580](https://github.com/event4u-app/agent-config/commit/b8495802f93a966bcf5808e01b15b93e4017fd9a))
+* **roadmap:** complete + archive the ecosystem-harvest index hub ([e1752d1](https://github.com/event4u-app/agent-config/commit/e1752d176fbf948aff364fb1271532164bb2b755))
+* regenerate proof page for the new skill count (277) ([2476284](https://github.com/event4u-app/agent-config/commit/247628404098690ba2f68fa1bef6fdba1753ee13))
+* **roadmap:** complete + archive ecosystem-harvest domain-watch ([d07e81e](https://github.com/event4u-app/agent-config/commit/d07e81e017a90e92863d9bcffd1818b232fefaeb))
+* **domain-watch:** watch-notes for the two gated verticals ([26bb9dd](https://github.com/event4u-app/agent-config/commit/26bb9dd77c7c6adb1bebc9677f5096d8e66ef999))
+* **roadmap:** correct the flip-gate checkbox and tighten the flow-team criterion ([89a2d26](https://github.com/event4u-app/agent-config/commit/89a2d26721090cc7545a19ef73877689a445420f))
+* **roadmap:** persona-library harvest — executed and archived ([1c6940a](https://github.com/event4u-app/agent-config/commit/1c6940a2693c94ad366ddc31f791d13870da6d07))
+* correct outdated Antigravity host claims ([fca90e2](https://github.com/event4u-app/agent-config/commit/fca90e2c3413465e0a4bfbfd65d1da01ea15bef7))
+
+### Chores
+
+* **meta:** sync pack README with shortened precheck description ([601fdc1](https://github.com/event4u-app/agent-config/commit/601fdc111553d8d4c55796d43c3203d938b5c179))
+* **ci:** wire lint-originality and validate-flow-teams into the pipeline ([48bc88a](https://github.com/event4u-app/agent-config/commit/48bc88a2ce24bfffd1f98e4194163986b3adf245))
+
+Tests: 7833 (+63 since 9.3.0)
+
+## [9.3.0](https://github.com/event4u-app/agent-config/compare/9.2.0...9.3.0) (2026-07-16)
+
+### Features
+
+* **ergonomics:** harvest ergonomics plate — tdd cluster, fix:route, persona-improvement, hand-off examples ([e8be16f](https://github.com/event4u-app/agent-config/commit/e8be16f2a0194a6b6cb3b2ed4a9899db31067d1d))
+* **review:** wire reuse + OOP-shape lens into the review/orchestration surfaces ([067175a](https://github.com/event4u-app/agent-config/commit/067175a04c1d49c356bf8e42c4cb0f23b3d91473))
+* **hooks:** PostToolUse PR-URL reminder — reply-shape backstop for direct-answers ([1bf82a1](https://github.com/event4u-app/agent-config/commit/1bf82a1f23fd2fac7ae86fe1fae3cc6b3e0da657))
+
+### Bug Fixes
+
+* **counts:** regenerate command-flows.md (+5 commands) + map explain-run orphan into surface-map ([a6254e4](https://github.com/event4u-app/agent-config/commit/a6254e434e966eaca9e697093980dfc3cc04a8d8))
+* **hooks:** pre-push gate mirrors the full CI consistency check locally ([ebd706f](https://github.com/event4u-app/agent-config/commit/ebd706fb1e978189954ca838bc41bd3f536ee560))
+
+### Documentation
+
+* refresh guideline counts (100 -> 101) after the new dev-standard guideline ([02ac1a5](https://github.com/event4u-app/agent-config/commit/02ac1a53214b5cd22eecee873e2b81286c01a6b2))
+* **standards:** apply council findings — paradigm-appropriate + minimal-diff precedence ([474b1c6](https://github.com/event4u-app/agent-config/commit/474b1c68b8a28dd1f5302b135fbe69876696ea6f))
+* **standards:** component-oriented + OOP-first development standard ([5bd62bd](https://github.com/event4u-app/agent-config/commit/5bd62bdf14208f65ae166b954a5c7b4e49211ffa))
+* **roadmaps:** council-review + apply findings to feedback-9.2.0 followups ([dc187d4](https://github.com/event4u-app/agent-config/commit/dc187d4b83debda1c4f8c551acfc6400149da520))
+* **roadmaps:** draft feedback-9.2.0 follow-ups roadmap ([69d363d](https://github.com/event4u-app/agent-config/commit/69d363df10f5e9dd6605ba6af370ac1d477a5a92))
+* **roadmaps:** spawn adversarial-council benchmark follow-up; mark deferred arm moved ([36a69d9](https://github.com/event4u-app/agent-config/commit/36a69d9f00b4a236535ea01bf8dd36a4d82f1293))
+
+### Refactoring
+
+* **subagent-orchestration:** relocate worker-prompt contract to spawn-contract context ([de38ce1](https://github.com/event4u-app/agent-config/commit/de38ce12ff167eafe7a0631f1088ed244e2b85bf))
+
+### Chores
+
+* **harvest:** close second-sweep coverage plate — all folds verified, proposals parked, archived ([7af8a75](https://github.com/event4u-app/agent-config/commit/7af8a75305289bd1f2d36498bea362b789b0f610))
+* **roadmaps:** archive completed adversarial-verification-council roadmap ([fc34874](https://github.com/event4u-app/agent-config/commit/fc34874a608644d89ab12aa0147d5f6237a4f9ca))
+
+Tests: 7770 (+6 since 9.2.0)
+
 ## [9.2.0](https://github.com/event4u-app/agent-config/compare/9.1.0...9.2.0) (2026-07-14)
 
 ### Features

package/CONTRIBUTING.md

@@ -127,6 +127,20 @@ the review floor, not around it.
   specific consumer project, domain, or stack. The
   [`augment-portability`](dist/agent-src/rules/augment-portability.md) rule and
   `scripts/check_portability.py` enforce this in CI.
+- **External contributions get credited.** A merged community skill carries
+  `provenance: community` in its frontmatter — the public catalog
+  ([`docs/catalog.md`](docs/catalog.md)) renders it as `community` in the
+  `source` column — and gets a row in [`CREDITS.md`](CREDITS.md)
+  (§ Community contributions). Maintainers add both on merge; if you were
+  missed, open an issue — attribution gaps are treated as bugs.
+- **Originality is CI-gated.** Every PR touching skills, personas, or domain
+  commands runs `lint_originality --changed` (the anti-reskin gate, see the
+  `originality-gate` job in `.github/workflows/skill-lint.yml`). Run it
+  locally before pushing:
+  `./scripts-run src/scripts/lint_originality --changed <changed files>` —
+  or run the whole contributor precheck in one pass via the
+  [`/contribution-precheck`](src/domains/meta/contribution-precheck/command.md)
+  command (frontmatter schema + skill lint + originality, Node-only).
 
 ## Agent-assisted contribution workflow
 

package/README.md

@@ -4,11 +4,13 @@
 
 [![Smoke](https://github.com/event4u-app/agent-config/actions/workflows/smoke.yml/badge.svg)](https://github.com/event4u-app/agent-config/actions/workflows/smoke.yml) [![Public install smoke (3 OS × 2 Node)](https://github.com/event4u-app/agent-config/actions/workflows/smoke-public-install.yml/badge.svg)](https://github.com/event4u-app/agent-config/actions/workflows/smoke-public-install.yml) [![npm](https://img.shields.io/npm/v/@event4u/agent-config?style=flat-square&label=npm&color=orange)](https://www.npmjs.com/package/@event4u/agent-config) [![agent-config MCP server](https://glama.ai/mcp/servers/event4u-app/agent-config/badges/score.svg)](https://glama.ai/mcp/servers/event4u-app/agent-config)
 
-[![Skills](https://img.shields.io/badge/Skills-275-orange?style=flat-square)](dist/agent-src/skills/) [![Rules](https://img.shields.io/badge/Rules-105-orange?style=flat-square)](dist/agent-src/rules/) [![Commands](https://img.shields.io/badge/Commands-184-orange?style=flat-square)](dist/agent-src/commands/) [![Guidelines](https://img.shields.io/badge/Guidelines-100-orange?style=flat-square)](docs/guidelines/) [![Personas](https://img.shields.io/badge/Personas-29-orange?style=flat-square)](dist/agent-src/personas/) [![Advisors](https://img.shields.io/badge/Advisors-5-orange?style=flat-square)](dist/agent-src/personas/advisors/)
+[![Skills](https://img.shields.io/badge/Skills-278-orange?style=flat-square)](dist/agent-src/skills/) [![Rules](https://img.shields.io/badge/Rules-105-orange?style=flat-square)](dist/agent-src/rules/) [![Commands](https://img.shields.io/badge/Commands-190-orange?style=flat-square)](dist/agent-src/commands/) [![Guidelines](https://img.shields.io/badge/Guidelines-101-orange?style=flat-square)](docs/guidelines/) [![Personas](https://img.shields.io/badge/Personas-29-orange?style=flat-square)](dist/agent-src/personas/) [![Advisors](https://img.shields.io/badge/Advisors-5-orange?style=flat-square)](dist/agent-src/personas/advisors/)
 
 > **Choose your experience — developer · founder · content · agency · finance · ops. Add packs. Get a focused command set, not a 500-artefact dump.** Bring your own AI provider.
 
-**Try it in 30 seconds** — drop one read-only subagent into any repo and watch it gate "done": `@production-validator check this branch is actually done`. No wizard, no lock-in, nothing else installed — the [30-second wedge ↓](#quickstart) is the whole first step. Full docs: **[event4u-app.github.io/agent-config](https://event4u-app.github.io/agent-config)**.
+**Try it in 30 seconds** — drop one read-only subagent into any repo and watch it gate "done": `@production-validator check this branch is actually done`. No wizard, no lock-in, nothing else installed — the [30-second wedge ↓](#quickstart) is the whole first step. Start at the proof, not the catalog: **[event4u-app.github.io/agent-config/proof/](https://event4u-app.github.io/agent-config/proof/)**.
+
+![The trust surface running green — every "verify it yourself" command from a real, CI-re-executed run](docs/media/proof-demo.gif)
 
 **Every public claim in this README is machine-checked — [verify it yourself](docs/proof.md).** In a market that runs on unbacked headline numbers, this one binds each claim to resolvable evidence or fails its own build.
 
@@ -120,8 +122,14 @@ is generated from source: a claim→evidence table (every public claim binds to
 resolvable pointer, or CI fails), honest-null benchmarks *including the runs where
 the package changed nothing*, and a "verify it yourself" block you run on a fresh
 checkout. The proof page fails CI if it drifts from its sources — reproducibility
-is the proof. Browse it on the deployed docs site:
-[event4u-app.github.io/agent-config](https://event4u-app.github.io/agent-config).
+is the proof. Browse it on the deployed docs site — the proof page is the primary entry:
+[event4u-app.github.io/agent-config/proof/](https://event4u-app.github.io/agent-config/proof/).
+The honest comparison frame lives at
+[`docs/us-vs-the-category.md`](docs/us-vs-the-category.md).
+
+Maintaining a skills catalog yourself? The **anti-reskin gate** that blocks
+find-replace re-skin PRs here runs on your catalog too —
+[`docs/anti-reskin-gate.md`](docs/anti-reskin-gate.md).
 
 Audit-disciplined by construction — every memory consult, decision
 key, and hook concern lands in `agents/runtime/state/` so you can replay it.

package/dist/agent-src/commands/contribution-precheck.md

@@ -0,0 +1,100 @@
+---
+model_tier: medium
+name: contribution-precheck
+pack: meta
+tier: 2
+visibility: internal
+skills: [lint-skills, check-refs]
+description: "Contributor self-service precheck: run the PR-relevant lint subset (skill linter, originality gate, frontmatter schema) on changed files locally — a verdict with fix hints before opening a PR."
+suggestion:
+  eligible: false
+  rationale: "Package-internal — contributors to event4u/agent-config invoke it explicitly before opening a PR."
+workspaces:
+  - agent-config-maintainer
+packs:
+  - meta
+---
+
+# contribution-precheck
+
+Run the same gates a PR will hit — locally, Node-only, before pushing. Mirrors
+the CI enforcement path (`originality-gate` + skill-lint jobs in
+`.github/workflows/skill-lint.yml`) so a contributor never learns about a
+failure from remote CI first.
+
+Requires only Node + installed `node_modules` (the `./scripts-run` shim invokes
+`tsx` directly — no task runner, no full CI toolchain).
+
+## Instructions
+
+### 1. Compute the changed set
+
+```bash
+BASE=$(git merge-base origin/main HEAD 2>/dev/null || echo HEAD)
+CHANGED=$(git diff --name-only --diff-filter=ACMR "$BASE" -- \
+  'src/skills/*/SKILL.md' \
+  'src/agent-src/personas/*.md' \
+  'src/domains/**/command.md' \
+  | grep -v '^src/agent-src/personas/_' || true)
+```
+
+Uncommitted work counts: append `git diff --name-only` + `git diff --cached
+--name-only` output filtered to the same patterns. Empty set → report
+"nothing to precheck — no changed skills / personas / domain commands" and
+stop (that is an honest no-op, not a pass).
+
+### 2. Run the three gates, in order
+
+| Gate | Command | Mirrors |
+|---|---|---|
+| Frontmatter schema | `./scripts-run src/scripts/validate_frontmatter --root src` | CI schema validation |
+| Skill lint | `./scripts-run src/scripts/skill_linter <changed SKILL.md files>` | `skill-lint` job (`--changed`) |
+| Originality (anti-reskin) | `./scripts-run src/scripts/lint_originality --changed $CHANGED` | `originality-gate` job |
+
+Notes:
+
+- `skill_linter` takes positional paths — pass the changed `SKILL.md` files
+  explicitly (its own `--changed` derivation filters to the projected trees,
+  not `src/`, and would silently check nothing on authored edits).
+- `lint_originality --changed` needs the explicit file list from step 1 — it
+  does not self-derive.
+
+### 3. Emit the verdict
+
+One compact block, worst gate first:
+
+```
+Precheck: <N> changed file(s)
+  ✅|❌ frontmatter — <0 failing | list failing files + first error each>
+  ✅|❌ skill lint  — <pass/warn/fail counts | per-file errors>
+  ✅|❌ originality — <no overlap ≥ WARN | offending pair + overlap %>
+Verdict: READY | FIX FIRST (<n> blocking finding(s))
+```
+
+For every ❌ add one fix hint: the failing file, the rule/pair it tripped, and
+the smallest change that clears it (e.g. "overlap 72% with `<skill>` — rewrite
+the shared procedure sections in your own words; find-replace re-skins score
+~100% because entities are neutralized").
+
+### 4. Degraded mode (no git remote / shallow clone)
+
+`origin/main` missing → fall back to `git diff --name-only HEAD` (working
+tree) for step 1 and say so in the verdict header. Never claim the CI result
+will match exactly in degraded mode — the PR gate diffs against the real base.
+
+## Gotcha
+
+- A clean precheck is **necessary, not sufficient** — remote CI additionally
+  runs the per-pack matrix, security linters and reference checks. The
+  precheck covers the gates that most commonly fail external contributions.
+- Do not "fix" an originality failure by shuffling words until the score dips
+  under the threshold — the entity-neutralized shingle gate is calibrated for
+  find-replace re-skins; a borderline score means the artifact needs its own
+  substance, not better camouflage.
+
+## Do NOT
+
+- Do NOT run the full local CI pipeline as a substitute — this command exists precisely so a
+  contributor without the full toolchain gets a verdict.
+- Do NOT skip step 1's empty-set report — "0 files checked" is INCONCLUSIVE,
+  never a pass (same guard as CI).

package/dist/agent-src/commands/fix/route.md

@@ -0,0 +1,49 @@
+---
+model_tier: medium
+name: fix-route
+pack: engineering-base
+tier: 2
+visibility: internal
+sub: route
+cluster: fix
+description: Classify a vaguely-described problem and dispatch to the right fix sub-command (or name the specialist skill when it is not a fix task)
+argument-hint: "[free-text problem description]"
+suggestion:
+  eligible: true
+  trigger_description: "something's broken but I'm not sure which fixer — throw me a problem and route it"
+  trigger_context: "user describes a problem without naming a specific fix sub-command"
+workspaces:
+  - agent-config-maintainer
+packs:
+  - meta
+---
+
+# /fix route
+
+The classify-and-dispatch front door for the `/fix` family. Adapted from the
+ecosystem source's `/smart-fix` — folded into the `fix` verb (ADR-041
+controlled-verb vocabulary) rather than a new top-level verb. It runs the
+`/fix` auto-detection over a free-text problem and routes; when the problem is
+not a fix task, it names the right specialist instead of forcing a fix sub.
+
+## Instructions
+
+1. Read the free-text problem.
+2. Run the `/fix` cluster's detection table (see the cluster head) over it:
+   CI failure → `fix ci`; broken cross-refs → `fix refs`; PR review threads →
+   `fix pr-comments`; code-comment noise → `fix comments`; seeder/FK →
+   `fix seeder`; type/lint/format errors → `fix quality`; project-leak in the
+   shared package → `fix portability`.
+3. **HIGH confidence** → route to that sub-command and follow its instructions.
+4. **Not a fix task** (a new feature, an analysis, a design question) → do NOT
+   force a fix sub; name the correct surface instead (`/feature`, a
+   `project-analysis-*` skill, `improve-before-implement`, etc.) and stop.
+5. **LOW confidence / ≥ 2 conflict** → print the fix menu and ask; in
+   non-interactive mode emit `ambiguous_routing` and stop (per the
+   non-interactive-contract). Never guess past LOW.
+
+## Rules
+
+- **Dispatch only — no fixing here.** This sub classifies and hands off; the routed sub-command does the work under its own rules.
+- **One route per turn.** Do NOT chain.
+- **Do NOT commit or push** — the routed sub-command's rules govern that.

package/dist/agent-src/commands/fix.md

@@ -2,10 +2,10 @@
 model_tier: medium
 name: fix
 disable-model-invocation: true
-argument-hint: "[ci|refs|portability|seeder|pr-comments|comments|quality] [args]"
+argument-hint: "[ci|refs|portability|seeder|pr-comments|comments|quality|route] [args]"
 pack: engineering-base
 intent: "Fix-workflow dispatcher — ci, pr-comments, refs, seeder, portability, comments, quality"
-routes_to: [fix-ci, fix-pr-comments, fix-refs, fix-seeder, fix-portability, fix-comments, fix-quality]
+routes_to: [fix-ci, fix-pr-comments, fix-refs, fix-seeder, fix-portability, fix-comments, fix-quality, fix-route]
 replaces: []
 tier: 1
 visibility: advanced
@@ -39,6 +39,7 @@ with a single entry point + sub-command dispatch.
 | `/fix pr-comments` | `commands/fix/pr-comments.md` | Fix and reply to all open review comments — **bot + human, classified per comment**; dedupes by comment id + reply marker |
 | `/fix comments` | `commands/fix/comments.md` | Review the **code comments** in the current branch's diff and simplify, shorten, or remove each one (≠ `pr-comments`, which targets GitHub review threads) |
 | `/fix quality` | `commands/fix/quality.md` | Run the quality pipeline (type-checker / linter / formatter, PHP and/or JS/TS) and fix every error — auto-detects language from changed files |
+| `/fix route` | `commands/fix/route.md` | Classify a vaguely-described problem and dispatch to the right fix sub (or name the specialist when it is not a fix task) — the `/smart-fix` front door, folded into the `fix` verb |
 
 Sub-command names match the locked contract in
 [`docs/contracts/command-clusters.md`](../docs/contracts/command-clusters.md).
@@ -84,6 +85,7 @@ into it and removed.
    > 5. pr-comments — address open review comments (bot / human / both)
    > 6. comments — simplify / shorten / remove code comments in the branch diff
    > 7. quality — run the quality pipeline and fix every error
+   > 8. route — describe the problem; I classify and dispatch
 
 ## Rules
 

package/dist/agent-src/commands/tdd/green.md

@@ -0,0 +1,32 @@
+---
+model_tier: medium
+name: tdd-green
+pack: engineering-base
+tier: 2
+visibility: internal
+cluster: tdd
+sub: green
+skills: [test-driven-development]
+description: TDD green phase — write the minimum production code to make the failing test pass; no test edits
+argument-hint: "[failing test | context]"
+suggestion:
+  eligible: true
+  trigger_description: "make the failing test pass"
+  trigger_context: "a failing test exists, ready to implement"
+workspaces:
+  - agent-config-maintainer
+packs:
+  - meta
+---
+
+# /tdd green
+
+Drives the **Implement** phase of
+[`test-driven-development`](../../../skills/test-driven-development/SKILL.md).
+
+## Instructions
+
+1. Write the **minimum** production code to make the failing test pass — no scope beyond the one case.
+2. Honor the Implement Forbidden block: **no `tests/**` edits** — changing the assertion to fit the code is the canonical violation; a genuinely-wrong test → STOP and ask, never silently edit.
+3. Run the test; confirm green.
+4. Output: the green run. Hand to `/tdd refactor` (or `/tdd red` for the next case).

package/dist/agent-src/commands/tdd/red.md

@@ -0,0 +1,33 @@
+---
+model_tier: medium
+name: tdd-red
+pack: engineering-base
+tier: 2
+visibility: internal
+cluster: tdd
+sub: red
+skills: [test-driven-development]
+description: TDD red phase — enumerate cases, write ONE failing test, watch it fail at an assertion (not an import error)
+argument-hint: "[behavior to test]"
+suggestion:
+  eligible: true
+  trigger_description: "write the failing test first"
+  trigger_context: "starting a new behavior test-first"
+workspaces:
+  - agent-config-maintainer
+packs:
+  - meta
+---
+
+# /tdd red
+
+Drives the **Design → Test-Red** phases of
+[`test-driven-development`](../../../skills/test-driven-development/SKILL.md).
+
+## Instructions
+
+1. State the behavior in one sentence; enumerate the cases (happy / boundary / error).
+2. Write ONE failing test for the first case.
+3. Run it; confirm it fails at an **assertion**, not an import/collection error.
+4. Honor the Test-Red Forbidden block: **no production edits** (diff = `tests/**` only).
+5. Output: the failing test + its observed failure reason. Hand to `/tdd green`.

package/dist/agent-src/commands/tdd/refactor.md

@@ -0,0 +1,31 @@
+---
+model_tier: medium
+name: tdd-refactor
+pack: engineering-base
+tier: 2
+visibility: internal
+cluster: tdd
+sub: refactor
+skills: [test-driven-development]
+description: TDD refactor phase — clean up (rename, deduplicate) while keeping the test green
+argument-hint: "[target | context]"
+suggestion:
+  eligible: true
+  trigger_description: "refactor while the test stays green"
+  trigger_context: "test is green, ready to clean up"
+workspaces:
+  - agent-config-maintainer
+packs:
+  - meta
+---
+
+# /tdd refactor
+
+Drives the **Refactor** step of
+[`test-driven-development`](../../../skills/test-driven-development/SKILL.md).
+
+## Instructions
+
+1. Refactor (rename, deduplicate, extract) ONLY while the test stays green — re-run after each change.
+2. If a change reddens the test, revert it; refactoring never changes behavior.
+3. Output: the cleaned diff + a final green run. Loop back to `/tdd red` for the next behavior.

package/dist/agent-src/commands/tdd.md

@@ -0,0 +1,50 @@
+---
+model_tier: medium
+name: tdd
+disable-model-invocation: true
+argument-hint: "[red|green|refactor] [behavior | args]"
+pack: engineering-base
+tier: 2
+visibility: internal
+description: TDD orchestrator — routes to red (failing test), green (minimum code), refactor (clean while green)
+cluster: tdd
+type: orchestrator
+auto_detect: true
+suggestion:
+  eligible: true
+  trigger_description: "write the failing test first, make the test pass, refactor while green"
+  trigger_context: "user is driving a change test-first and names a TDD phase"
+workspaces:
+  - agent-config-maintainer
+packs:
+  - meta
+---
+
+# /tdd
+
+Thin ergonomic split over the [`test-driven-development`](../../skills/test-driven-development/SKILL.md)
+skill — one sub-command per phase of that skill's mode contract. **No logic
+lives here**; each sub loads the skill and drives its named phase.
+
+## Sub-commands
+
+| Sub-command | Routes to | Purpose |
+|---|---|---|
+| `/tdd red` | `commands/tdd/red.md` | Design → Test-Red: enumerate cases, write ONE failing test, watch it fail at an assertion |
+| `/tdd green` | `commands/tdd/green.md` | Implement: write the minimum code to pass; no test edits |
+| `/tdd refactor` | `commands/tdd/refactor.md` | Refactor: clean up while the test stays green |
+
+## Dispatch
+
+1. Parse `/tdd <sub> [args]`. Explicit sub → route. Otherwise infer the phase
+   from observable state via the skill's mode-inference table (no test yet →
+   red; test failing at an assertion → green; green + defect → red again).
+2. Load [`test-driven-development`](../../skills/test-driven-development/SKILL.md)
+   and drive ONLY the named phase, honoring that phase's Forbidden block.
+3. LOW confidence / bare `/tdd` → show the three-row menu and ask.
+
+## Rules
+
+- **One phase per turn.** Do NOT chain red→green→refactor silently — each sub is one turn.
+- **No logic duplication.** The behavior is the skill's; these commands only select the phase.
+- **Do NOT commit or push.**

package/dist/agent-src/commands/team.md

@@ -146,6 +146,10 @@ measured improvement.
 
 - `/council` — breadth under a neutrality contract; the complement, not the
   competitor.
+- `subagent-orchestration` skill — the in-session, same-weights variant (no
+  network, no spend); team is cross-model with repo access. The three-way
+  router split: council = independent breadth, team = collaborative depth,
+  subagents = in-session same-weights.
 - `adversarial-review` skill — the free single-model first rung below
   `/team adversarial`.
 - `docs/contracts/ai-team-config.md` — the `ai_team` settings block

package/dist/agent-src/contexts/communication/rules-auto/guidelines-mechanics.md

@@ -10,6 +10,7 @@ before writing or reviewing code); this file is the catalog.
 | File | Topic |
 |---|---|
 | `code-clarity.md` | Cross-language clarity rules — inline single-use values, carve-outs (side effects, loops, type narrowing, debugger) |
+| `component-oriented-and-oop-development.md` | Reuse-first components (FE) + OOP-where-it-reduces-complexity (backend); carve-out index; bounded by the anti-over-engineering anchors |
 
 ## PHP (`docs/guidelines/php/`)
 

package/dist/agent-src/contexts/execution/subagent-spawn-contract.md

@@ -41,11 +41,90 @@ private-data leg stays narrow: the composer rejects inline bodies (multi-line /
 oversized entries), accepts only ref-like tokens, and caps the count. Anything
 dropped is recorded in `warnings` and surfaced — never silently widened.
 
+## Bundle resolver — bind to the existing surfaces
+
+The brief is **resolved**, not hand-built. `resolveBundle(slice)` maps a task
+slice to a concrete bundle by selecting from what the package already ships — no
+parallel registry:
+
+- **Role-profile via reused `judge-*` lenses** — a review slice → `judge-code-quality`,
+  security → `judge-security-auditor`, tests → `judge-test-coverage`, bug-hunt →
+  `judge-bug-hunter`. The lens rides as the leading persona so the subagent loads it.
+- **Role-mode** per slice kind (review → `reviewer`, tests → `tester`, plan → `planner`, …).
+- **Tier** per slice kind (`lite|medium|high`), consumed by `subagent-routing`.
+- **Knowledge refs** filtered by the **ADR-100 guard** (`filterKnowledgeByPolicy`):
+  a cross-project bundle drops `proprietary` refs; the drop is recorded.
+
+Every resolved bundle emits an auditable `(role_mode, judge_lens, tier,
+knowledge_ref_count, dropped_proprietary)` signature (`bundleAuditLine`) into the
+[`orchestration-telemetry`](orchestration-telemetry.md) object — counts + ids
+only, never bodies.
+
 ## Reference implementation
 
 [`src/scripts/_lib/subagent_spawn.ts`](../../../../src/scripts/_lib/subagent_spawn.ts)
-(`composeSpawnBrief`), covered by
-[`tests/scripts/_lib_subagent_spawn.test.ts`](../../../../tests/scripts/_lib_subagent_spawn.test.ts).
+(`composeSpawnBrief`) + [`src/scripts/_lib/subagent_bundle.ts`](../../../../src/scripts/_lib/subagent_bundle.ts)
+(`resolveBundle`, `filterKnowledgeByPolicy`, `bundleAuditLine`), covered by
+[`tests/scripts/_lib_subagent_spawn.test.ts`](../../../../tests/scripts/_lib_subagent_spawn.test.ts)
++ [`tests/scripts/_lib_subagent_bundle.test.ts`](../../../../tests/scripts/_lib_subagent_bundle.test.ts).
+
+## Worker-prompt rules — verbatim at spawn
+
+Relocated from the `subagent-orchestration` skill body (road-to-feedback-9.2.0
+Phase 2, size-budget split). Every dispatched worker prompt obeys these rules —
+they prevent the two classic handoff failures: lossy re-summarization dropping
+the user's requirements, and over-scripted prompts that break on first
+contingency.
+
+- **(a) User constraints verbatim.** Pass the user's
+  constraints/exclusions/preferences into the worker prompt **verbatim** — never
+  a paraphrase (a paraphrase silently drops requirements).
+- **(b) Describe the goal, don't script the approach.** State the outcome and
+  let the worker choose the path; over-scripting breaks on contingencies.
+- **(c) Translate environment paths.** Orchestrator-local paths do not exist in
+  the worker's sandbox — resolve/translate them at spawn.
+- **(d) Pre-declared check-in conditions.** The worker names, at spawn time, the
+  conditions under which it will halt and ask ("if login required", "if
+  multiple candidates found") — so interrupts are predictable, not surprises.
+- **(e) Attach relevant knowledge — read-only (road-to-opt-subagent-harvest
+  P3).** Before dispatch, look up the slice's key identifiers via
+  `memory_lookup` / the knowledge cards and attach the top hits to the
+  worker prompt AS LEADS — labelled per the source-discovery discipline
+  (negative facts + pointers durable; positive structure = hypothesis to
+  re-confirm, never a build input). The WRITE half stays forbidden: a
+  subagent's output is never auto-persisted into memory — promotion is
+  always the human-gated flow (ADR-098 floor). Auto-surface, never
+  auto-write.
+
+## Hand-off worked examples — step N output feeds step N+1
+
+Relocated from the `subagent-orchestration` skill (ecosystem-harvest ergonomics
+U4, size-budget split). Ordered modes (`do-in-steps`) pass each step's return
+as the next step's context; the failure this prevents is re-deriving state the
+previous step established, or dropping a decision it made.
+
+**Ordered chain (do-in-steps).** Step 1 returns a structured result; step 2's
+worker prompt embeds it verbatim as "context from step 1", never a paraphrase:
+
+```
+Step 1 (analyze) → returns: { entrypoints: [...], risk_notes: "..." }
+Step 2 (implement) worker prompt:
+  "Context from step 1 (verbatim, do not re-derive):
+     entrypoints = [...]; risk_notes = '...'
+   Your task: <goal>. Use the entrypoints above; do not re-scan."
+Step 3 (verify) worker prompt:
+  "Context: step 2 changed <files>. Assert <invariant>."
+```
+
+**Fan-out → synthesis (do-in-parallel + a synthesis step).** Each parallel
+worker returns one envelope; the synthesis step receives ALL of them as an
+ordered list and is told what to reconcile ("merge the N findings; a finding
+present in ≥2 returns is high-confidence"). The synthesis prompt names the
+cross-item comparison — it does not just concatenate.
+
+The rule both encode: **the receiving prompt embeds the prior return verbatim
+and states what to do with it** — the same verbatim-first discipline as the
+worker-prompt rules above, applied across a step boundary.
 
 ## Related