@jaybeeuu/agent-cortex 1.37.1 → 1.39.0

package/.agents/skills/style-versioning/SKILL.md

@@ -61,18 +61,19 @@ Fix status bead showing wrong priority after update
 
 ## After merge to main
 
-The `release.yml` workflow handles everything automatically:
+The `release` job in `.github/workflows/ci.yml` handles everything automatically:
 
 1. **Detects new changesets** on main
-2. **Creates or updates a "Version Packages" PR** with bumped versions and updated CHANGELOG
+2. **Creates a "Version Packages" PR** — the `version` step runs `pnpm version-packages`, which bumps `package.json`, syncs `plugin.json` (via `scripts/sync-plugin-version.sh`), updates `CHANGELOG.md`, and regenerates the committed generated output (`pnpm build:claude`, `pnpm build:copilot`) so the drift gates never fail on a version bump
 3. **When "Version Packages" is merged**:
-   - Bumps `package.json` version
-   - Syncs `plugin.json` version (via `scripts/sync-plugin-version.sh`)
-   - Updates `CHANGELOG.md`
    - Creates a git tag
-   - Publishes to npm via OIDC (no `NPM_TOKEN` needed)
+   - Publishes to npm — `pnpm publish-package` packs with `pnpm pack` and publishes with `npm publish --provenance --access public`. Authenticates via npm Trusted Publishing (OIDC): the release job's `id-token` permission lets npm exchange a GitHub OIDC token for a short-lived npm token at publish time, so no `NPM_TOKEN` secret or `.npmrc` auth config is required — only the one-time npm-side Trusted Publishing setup on npmjs.com (package → Access → Trusted Publishing → GitHub repo `jaybeeuu/agent-cortex` + workflow `.github/workflows/ci.yml`)
    - Creates a GitHub release automatically
 
+`changesets/action` execs the `version`/`publish` inputs without a shell, so each
+must be a single unquoted command token — keep release logic in pnpm scripts
+(`version-packages`, `publish-package`), never inline shell strings.
+
 ### Version lockstep
 
 All version numbers stay in lockstep automatically:
@@ -96,6 +97,6 @@ All version numbers stay in lockstep automatically:
 | Before (manual) | After (changesets) |
 |---|---|
 | Agent bumps versions locally | Agent writes a changeset file |
-| Manual GitHub release creation | Automated via `release.yml` |
-| `publish.yml` triggered by release | `release.yml` triggered by push to main |
+| Manual GitHub release creation | Automated by the `release` job in `ci.yml` |
+| `publish.yml` triggered by release | `ci.yml` release job on push to main |
 | Version sync was manual | `sync-plugin-version.sh` runs automatically |

package/.github/workflows/ci.yml

@@ -7,7 +7,40 @@ on:
   pull_request:
 
 jobs:
-  changeset:
+  setup:
+    name: Setup
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v4
+
+      - name: Setup Node
+        uses: actions/setup-node@v6
+        with:
+          node-version: 24
+
+      - name: Setup pnpm
+        uses: pnpm/action-setup@v4
+        with:
+          version: 10
+          run_install: false
+
+      - name: Cache pnpm store
+        uses: actions/cache@v4
+        with:
+          path: ~/.pnpm-store
+          key: ${{ runner.os }}-pnpm-${{ hashFiles('**/pnpm-lock.yaml') }}
+          restore-keys: |
+            ${{ runner.os }}-pnpm-
+
+      - name: Install dependencies
+        run: pnpm install --frozen-lockfile
+
+      - name: Build
+        run: pnpm build
+
+
+  changeset-check:
     name: Changeset check
     if: github.event_name == 'pull_request'
     runs-on: ubuntu-latest
@@ -21,7 +54,7 @@ jobs:
           BASE_REF: ${{ github.event.pull_request.base.ref }}
         run: |
           # Paths that require a changeset when modified
-          VERSIONED_PATHS='extensions/\|skills/\|agents/\|package.json\|plugin.json'
+          VERSIONED_PATHS='extensions/|skills/|agents/|package\.json|plugin\.json'
 
           changed=$(git diff --name-only "origin/${BASE_REF}...HEAD")
           echo "Changed files:"
@@ -46,29 +79,178 @@ jobs:
 
           echo "Changeset found: $changesets"
 
-  checks:
+  lint:
+    name: Lint
+    needs: setup
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
         uses: actions/checkout@v4
+
       - name: Setup Node
-        uses: actions/setup-node@v4
+        uses: actions/setup-node@v6
         with:
-          node-version: 20
+          node-version: 24
+
+      - name: Cache pnpm store
+        uses: actions/cache@v4
+        with:
+          path: ~/.pnpm-store
+          key: ${{ runner.os }}-pnpm-${{ hashFiles('**/pnpm-lock.yaml') }}
+          restore-keys: |
+            ${{ runner.os }}-pnpm-
+
       - name: Setup pnpm
         uses: pnpm/action-setup@v4
         with:
           version: 10
           run_install: false
+
       - name: Install dependencies
         run: pnpm install --frozen-lockfile
+
       - name: Lint
         run: pnpm lint
+
+  test:
+    name: Test
+    needs: setup
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v4
+
+      - name: Setup Node
+        uses: actions/setup-node@v6
+        with:
+          node-version: 24
+
+      - name: Cache pnpm store
+        uses: actions/cache@v4
+        with:
+          path: ~/.pnpm-store
+          key: ${{ runner.os }}-pnpm-${{ hashFiles('**/pnpm-lock.yaml') }}
+          restore-keys: |
+            ${{ runner.os }}-pnpm-
+
+      - name: Setup pnpm
+        uses: pnpm/action-setup@v4
+        with:
+          version: 10
+          run_install: false
+
+      - name: Install dependencies
+        run: pnpm install --frozen-lockfile
+
       - name: Test
         run: pnpm test
-      - name: Build
-        run: pnpm build
+
+  claude-plugin-check:
+    name: Claude plugin check
+    needs: setup
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v4
+
+      - name: Setup Node
+        uses: actions/setup-node@v6
+        with:
+          node-version: 24
+
+      - name: Cache pnpm store
+        uses: actions/cache@v4
+        with:
+          path: ~/.pnpm-store
+          key: ${{ runner.os }}-pnpm-${{ hashFiles('**/pnpm-lock.yaml') }}
+          restore-keys: |
+            ${{ runner.os }}-pnpm-
+
+      - name: Setup pnpm
+        uses: pnpm/action-setup@v4
+        with:
+          version: 10
+          run_install: false
+
+      - name: Install dependencies
+        run: pnpm install --frozen-lockfile
+
+      # `pnpm build:claude` is an alias of `agent-cortex install claude` (both run
+      # bin/installers/claude.mjs), so this drift check proves the committed subtree
+      # equals the installer's output — stale output or hand-edits to generated
+      # files fail the build. The subtree stays committed because the marketplace
+      # install flow reads it straight from the working tree (fresh clone installs
+      # as-is).
       - name: Check generated Claude plugin is up to date
         run: |
           pnpm build:claude
-          git diff --exit-code claude/agents/ claude/skills/
+          git diff --exit-code claude/agents/ claude/skills/ claude/.claude-plugin/plugin.json claude/hooks.json claude/hooks/
+
+      - name: Check generated Copilot agent files are up to date
+        run: |
+          pnpm build:copilot
+          git diff --exit-code -- 'agents/*.agent.md'
+
+  release:
+    name: Release
+    needs: [lint, test, claude-plugin-check]
+    if: github.event_name == 'push' && github.ref == 'refs/heads/main'
+    runs-on: ubuntu-latest
+    permissions:
+      contents: write
+      pull-requests: write
+      # npm Trusted Publishing (OIDC): npm exchanges this id-token for a
+      # short-lived npm token at publish time — no token config or secret.
+      id-token: write
+    concurrency: ${{ github.workflow }}-${{ github.ref }}
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v4
+        with:
+          fetch-depth: 0
+
+      - name: Setup Node
+        uses: actions/setup-node@v6
+        with:
+          node-version: 24
+
+      - name: Cache pnpm store
+        uses: actions/cache@v4
+        with:
+          path: ~/.pnpm-store
+          key: ${{ runner.os }}-pnpm-${{ hashFiles('**/pnpm-lock.yaml') }}
+          restore-keys: |
+            ${{ runner.os }}-pnpm-
+
+      - name: Setup pnpm
+        uses: pnpm/action-setup@v4
+        with:
+          version: 10
+          run_install: false
+
+      - name: Install dependencies
+        run: pnpm install --frozen-lockfile
+
+      - name: Create Release Pull Request or Publish
+        id: changesets
+        uses: changesets/action@v1
+        with:
+          # changesets/action execs these inputs via @actions/exec with NO shell:
+          # the string is split by argStringToArray on whitespace (single quotes
+          # survive literally), so each must be a single unquoted command token
+          # that runs a pnpm script. version-packages bumps versions, syncs
+          # plugin.json, THEN regenerates the committed generated output
+          # (build:claude writes claude/.claude-plugin/plugin.json with the NEW
+          # version, build:copilot re-derives agents/*.agent.md) before the action
+          # commits, so the Version Packages PR always passes the drift gates.
+          version: pnpm version-packages
+          publish: pnpm publish-package
+          commit: "chore: version packages"
+          title: "chore: version packages"
+        env:
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+          # Publish authenticates via npm Trusted Publishing (OIDC token
+          # exchange at publish time) — no NPM_TOKEN secret, no token config.
+          # Requires the one-time npm-side setup: npmjs.com → @jaybeeuu/
+          # agent-cortex → Access → Trusted Publishing, tied to GitHub repo
+          # jaybeeuu/agent-cortex + workflow .github/workflows/ci.yml.

package/AGENTS.md

@@ -4,9 +4,10 @@ Instructions for agents working on this repository.
 
 ## What This Repo Is
 
-A personal Copilot CLI plugin containing custom agents and skills, plus PI extensions for
-enhancing the coding agent runtime. Changes here affect the behaviour of every agent, skill,
-and PI extension available in the author's coding sessions.
+A personal Copilot CLI plugin containing custom agents and skills, shipped to Copilot, pi,
+and Claude Code, plus PI extensions and Claude hooks for enhancing the coding agent
+runtime. Changes here affect the behaviour of every agent, skill, and PI extension
+available in the author's coding sessions.
 
 ## Structure
 
@@ -14,8 +15,12 @@ and PI extension available in the author's coding sessions.
 agent-cortex/
 ├── package.json           # PI package manifest (pi: { extensions, skills })
 ├── plugin.json            # GitHub Copilot plugin manifest — agents, skills, MCP servers
-├── agents/                # Custom agents (*.agent.md)
-│   └── ralph.agent.md
+├── agents/                # Custom agents — canonical composable <name>/ dirs
+│   ├── *.agent.md         #   generated from <name>/ by scripts/build-copilot-agents.mjs
+│   ├── ralph/             #   composable format — see agents/README.md
+│   ├── plan/              #   "
+│   ├── ralph-plan/        #   "
+│   └── strategy/          #   "
 ├── skills/               # Grouped by domain, discovered recursively
 │   ├── planning/         # Scope, spec, decompose
 │   ├── engineering/      # The coding loop
@@ -27,6 +32,8 @@ agent-cortex/
 │   └── skill-stats/
 │       ├── README.md      # Installation & usage
 │       └── index.ts       # Extension entrypoint
+├── hooks/                # Canonical Claude Code hooks (hooks.json + scripts — see docs/claude-hooks.md)
+│   └── claude/           #   generated into claude/hooks.json + claude/hooks/ by bin/installers/claude.mjs
 └── package.json          # PI package manifest (pi: { extensions, skills })
 ```
 
@@ -52,7 +59,19 @@ Generated automatically by changesets. Do not edit `CHANGELOG.md` manually.
 
 ## Agent Conventions
 
-- Agent files are named `<name>.agent.md` and live in `agents/`.
+- Agents live in composable `<name>/` directories under `agents/`: a shared `agent.md` body plus
+  per-harness subdirectories `pi/`, `copilot/`, `claude/` (frontmatter.json and optional section
+  files) per the spec in `agents/README.md`. `ralph`, `plan`, `ralph-plan`, and `strategy` all use
+  the composable layout. The flat `agents/*.agent.md` files are **generated output** — composed
+  from the canonical directories by the shared `bin/installers/copilot.mjs` code path behind both
+  `agent-cortex install copilot` and `scripts/build-copilot-agents.mjs` (thin wrapper), and
+  committed for Copilot CLI (plugin.json `agents: "agents/"` scans for `*.agent.md`); never edit
+  them by hand. The `claude/` subtree is generated by the install-time generator
+  `bin/installers/claude.mjs` (a plain `agent-cortex install claude` also registers the plugin
+  with Claude Code via the `claude plugin` CLI; `pnpm build:claude` is the generate-only alias,
+  running `agent-cortex install claude --output claude`; `ralph`
+  is authored natively in `agents-native/` and copied verbatim; the other agents compose from their
+  `claude/` harness dirs).
 - Keep orchestration logic in the agent file; extract shared per-task workflow into a skill
   so it can be reused (e.g. ralph delegates per-task stage execution to `run-pipeline-stage`).
 
@@ -65,6 +84,8 @@ Generated automatically by changesets. Do not edit `CHANGELOG.md` manually.
   commands — they should not add token overhead.
 - Extensions that persist data should write to `~/.pi/agent-cortex/` (global, cross-project)
   and tag records with the project path for per-project slicing.
+- PI extensions with Claude Code equivalents are ported to `hooks/claude/`; the port/reject
+  audit with rationale lives in `docs/claude-hooks.md`.
 
 ## User preferences
 

package/CHANGELOG.md

@@ -1,5 +1,77 @@
 # Changelog
 
+## 1.39.0
+
+### Minor Changes
+
+- 5d4159f: Handoff documents now end with a `## Starter prompt` section: a ready-to-paste first-message prompt pointing the next session at the handoff doc by absolute path and the artifacts it references, telling it to read those before acting, asking it to clean up any provisional artifacts unless the handoff says otherwise, and staying under ~150 words.
+- 5351ae9: agent-cortex install claude now fully installs agent-cortex into Claude Code: it regenerates the claude/ subtree and registers it with the Claude Code runtime via the claude plugin CLI (--dry-run prints the plan without writing; --output <dir> generates only).
+
+### Patch Changes
+
+- adb5f84: Add optional ASCII workflow diagram guidance (inclusion rules, style guide, template example) to the skill anatomy and reference it from write-a-skill
+- 5d4159f: Fix create-chores to resolve `bd` via PATH by default instead of a machine-specific hardcoded path. The BD_PATH env override is retained for machines where bd is not on PATH.
+- 3e8b6e7: Refactor the `hitl-collab` skill to the canonical anatomy template: added When to use / When NOT to use boundaries, Red Flags, Common Rationalizations, a worked handoff-doc example, and a verification checklist; switched bead updates to `--append-notes` so existing notes are preserved.
+- b33d9ef: Refactor the improve-codebase-architecture skill to the anatomy template: add when-to-use / when-not-to-use boundaries, red flags, common rationalizations, philosophy, phase-gate checklists, cross-skill references, a worked example, and a verification checklist.
+- da1e3dd: Add `bd dep add` line to the init-beads skill's embedded AGENTS.md quick-reference template so it matches the repo template and stops re-propagating the drift
+- 358509f: Prune stale doc-contract prose assertions from the run-pipeline-stage progress test; re-enable the skills-script test suites in the pnpm workspace so they actually run in CI.
+- 32b33ac: Refactor the record-idea skill to the anatomy template: add when-to-use boundaries, red flags, rationale, and a verification checklist; move the idea-record scaffold to FORMAT.md to match the generator script.
+- 662cea5: Refactor the `classify-bead` skill to the anatomy template: adds when-not-to-use boundaries, red flags, common rationalizations, philosophy, and a verification checklist.
+- bb01fd6: Refactor create-task skill to the anatomy template: adds When to use / When NOT to use, Red Flags, Common Rationalizations, verification checklist, and moves the bead-property contract detail to REFERENCE.md. No behavioural change — the create-chores script invocation contract is preserved exactly.
+- 876e5cc: Refactor design-an-interface skill to the anatomy template: adds When to use, When NOT to use, verification checklist, phase gates, and rationalization sections while keeping the parallel sub-agent design workflow intact
+- 00c4238: Refactor grill-with-docs to the anatomy template: add when-to-use boundaries, numbered workflow, red flags, common rationalizations, examples, and a verification checklist; consolidate the previously-dangling CONTEXT.md/ADR format links into REFERENCE.md.
+- fd5f787: Refactor init-beads skill to the anatomy template: adds When to use / When NOT to use, Red Flags, Common Rationalizations, Cross-skill references, Examples, and a verification checklist. No behavioural change — the `bd init --quiet --stealth` invocation, install-method preference order, and AGENTS.md quick-reference block are preserved exactly.
+- 608fb58: Refactor maintain-agent-docs skill to the canonical anatomy template: added When NOT to use, Philosophy, Red Flags, Common Rationalizations, Phase-gate checklist, Cross-skill references, Examples, and a concrete Verification checklist; tightened the description to the two-sentence format with quoted trigger phrases.
+- 027431c: Refactor the `prd-to-tasks` skill to the canonical anatomy template: condensed the 5-phase workflow, moved the epic/task body templates into `REFERENCE.md`, added Examples and Phase-gate checklists, and aligned section ordering and voice with `docs/skills/skill-anatomy.md`.
+- e80246a: Refactor the ralph skill to the canonical skill anatomy: add When to use / When NOT to use, Red Flags, Common Rationalizations, Philosophy, phase-gate checklists, cross-skill references, and a verification checklist; align the skill docs with the ralph agent definition (state.json for poll-timer and agent-ID→bead bookkeeping, parent-keyed stage log files, stage runners self-serving `bd prime`, and the single-feature-epic one-hop branching shortcut).
+- d917afb: Refactor request-refactor-plan SKILL.md to the anatomy template; move the refactor plan template into FORMAT.md.
+- d6d33ec: Refactor technical-direction skill to the canonical anatomy template, adding when-to-use/not-to-use boundaries, red flags, common rationalizations, cross-skill references, an examples section, and a verification checklist. The decision-memo template moves to FORMAT.md.
+- 67a668f: Refactor the write-a-prd skill to the anatomy template: adds when-to-use/when-not-to-use boundaries, red flags, common rationalizations, phase gates, cross-skill references, an example, and a verification checklist; the PRD template moves to FORMAT.md.
+- bedd373: Refactor the write-a-ticket skill to the canonical anatomy template: added when-to-use and when-not-to-use boundaries, red flags, common rationalizations, philosophy, cross-skill references, worked examples, and a verification checklist. The ticket template and per-section guidance are preserved.
+- fd95ffe: Refactor run-pipeline-stage SKILL.md to the canonical anatomy template: add `When to use`, `When NOT to use`, `Workflow`, `Red Flags`, `Common Rationalizations`, `Cross-skill references`, `Examples`, `Philosophy / rationale`, and a `Verification checklist`; add quoted trigger phrases to the description; tokenize subagent dispatch as {{TOOL:task}}. No behavioural change to the stage pipeline — all playbooks, prompts, dispatch rules, and path references are preserved.
+
+## 1.38.1
+
+### Patch Changes
+
+- 5def727: Fix generate-progress parser for current bd list format
+- 735f083: Fix Release CI npm publish (ENEEDAUTH): the release job now publishes via npm Trusted Publishing (OIDC) — no `NPM_TOKEN` secret or `.npmrc` auth config. The `release` job's `id-token: write` permission is the only workflow-side requirement; npm exchanges the GitHub OIDC token for a short-lived npm token at publish time.
+
+  **One-time npm-side setup required** (no GitHub secret): on npmjs.com, open the package `@jaybeeuu/agent-cortex` → Access → Trusted Publishing → Add new publisher → GitHub, select the `jaybeeuu/agent-cortex` repository and the `.github/workflows/ci.yml` workflow. Publishing then needs no token configuration.
+
+## 1.38.0
+
+### Minor Changes
+
+- fbc6fa5: Add the Copilot CLI harness installer (`agent-cortex install copilot`), sharing the generator with `pnpm build:copilot`. It regenerates the flat `agents/*.agent.md` files the Copilot plugin loads (plugin.json `agents: "agents/"`), with the same `--dry-run` / `--output` contract as the claude and pi installers.
+- 42d3a33: Add central token-map.json mapping tool names, paths, and agent naming across the copilot, claude, and pi harnesses, with the token substitution contract for the install-time generation system. Use {{TOOL:...}} / {{PATH:...}} tokens in canonical sources; installers substitute per-harness names from the map.
+- 3a7e896: Add using-agent-skills meta-skill with 8 core operating behaviors and skill routing tree. Routes incoming work to the right skill, enforces scope discipline, and flags persistent failures to the user instead of working around them.
+- 4f5b134: Add a `wait_for_agents` tool to the subagent extension: it blocks until at least one background sub-agent (spawned with `task`) completes and returns its result, with `read_agent` kept as a fallback. Ralph's PI completion detection now waits on `wait_for_agents` instead of a `sleep 120` poll loop.
+- e1180d5: Update the agent-modes extension to discover agents from the composable directory format (`agents/<name>/` + per-harness `pi/frontmatter.json`). The PI system prompt is composed from `agent.md`, resolving `{{SECTION:...}}` includes from the agent's `pi/` directory and substituting `{{TOOL:...}}` / `{{PATH:...}}` tokens via token-map.json, so tool restrictions now translate to real PI tool names (e.g. `view` → `read`, `web_fetch` → `fetch_content`, null-mapped tools dropped). Flat `*.agent.md` files remain supported as a fallback for agents that have not been migrated to composable directories yet.
+- 603679a: Make the composable agent directories (`agents/<name>/`) canonical: the hand-authored flat `agents/*.agent.md` sources are removed and the flat Copilot/pi agent files are now generated output, composed from the canonical dirs by `scripts/build-copilot-agents.mjs` (`pnpm build:copilot`). `claude/agents/*.md` is composed from the same dirs' `claude/` harness by `scripts/build-claude-agents.mjs` (ralph stays native via `agents-native/ralph.md`). Agent names, descriptions, and tool sets are unchanged; agent bodies now carry the composable (tokenized) content. CI verifies both generated outputs never drift.
+- 60d498f: Port the pi extensions with Claude equivalents to the Claude Code plugin's hooks:
+  SessionStart now also injects the using-agent-skills / bd-tool / git-workflow skill
+  policy, and a Notification hook matched on documented notification types
+  (`agent_completed|agent_needs_input|permission_prompt`) raises desktop notifications
+  via the bundled `hooks/scripts/notify.mjs`. Hook support scripts are now bundled
+  into `claude/hooks/` by the shared installer, and the audit (auto-name, skill-stats,
+  subagent, agent-modes rejected with rationale) is recorded in `docs/claude-hooks.md`.
+- 6863b0e: Add `agent-cortex install claude` — install-time generator for the Claude Code plugin
+  subtree, sharing one code path with `pnpm build:claude` so the outputs can never diverge.
+  `claude/.claude-plugin/plugin.json` (version now tracked from `package.json`) and
+  `claude/hooks.json` (from the new canonical `hooks/claude/` source) are generated rather
+  than hand-maintained, and the committed `claude/skills/` gains the previously-missing
+  `using-agent-skills` symlink. Root tests (`test/`) are now included in `pnpm test`.
+- f2b441e: Add the pi harness installer (`agent-cortex install pi`): composes agents from the canonical composable directories plus `pi/` sections, substitutes `{{TOOL:...}}` / `{{PATH:...}}` tokens against token-map.json's pi column (null-mapped tools dropped with warnings, paths resolved against the plugin root), and writes `<output>/agents/<name>.agent.md` plus token-substituted skill copies to `<output>/skills` (default `~/.pi/agent`). Supports `--dry-run`, `--output <dir>`, and an optional `--plugin-root <dir>` override. The shared composer gains pi-friendly options (`dropNullTools`, `pluginRoot`, `resolveRelativePaths`, `warn`) with the copilot/claude build defaults unchanged, and the root test suite is now wired into `pnpm test`.
+
+### Patch Changes
+
+- 99fcc9a: Complete the move to install-time Claude code generation: the standalone `scripts/build-claude-agents.mjs` build script is removed and `pnpm build:claude` is now a pure alias of `agent-cortex install claude` — both invoke the shared `bin/installers/claude.mjs` generator, so there is a single code path for the committed `claude/` plugin subtree and install-time vs regenerated output can never diverge. Generated agents carry installer provenance headers, and CI's drift check (regenerate + `git diff --exit-code`) validates the committed subtree byte-for-byte against installer output. `agents-native/` remains the canonical source for Claude-native agents (`ralph`), copied verbatim by the installer.
+- 9b0c4fc: Fix the release pipeline so Version Packages PRs regenerate generated output. `changesets/action` execs the `version`/`publish` inputs without a shell, so quoted multi-command strings crash (`bash -c '...'` split on whitespace → unterminated quote, exit 2). The chain now lives in exec-safe single-command pnpm scripts: `pnpm version-packages` bumps versions, syncs `plugin.json`, then regenerates the committed Claude/Copilot agent output so the drift gates never fail on the bumped version; `pnpm publish-package` performs the pack + provenance publish.
+- f1b8a25: Add composable agent directory structures for the plan, ralph-plan, and strategy agents (`agents/plan/`, `agents/ralph-plan/`, `agents/strategy/` with per-harness `pi/`, `copilot/`, and `claude/` frontmatter). The existing flat `*.agent.md` files are retained until the composer/installer migration lands, so no shipped behaviour changes yet.
+- d83a7cf: Add composable agent directory structure for the ralph agent (`agents/ralph/` with per-harness `pi/`, `copilot/`, and `claude/` frontmatter and polling sections). The existing flat `agents/ralph.agent.md` is retained until the composer/installer migration lands, so no shipped behaviour changes yet.
+- c4728c5: Migrate hardcoded tool names in skill files to `{{TOOL:name}}` tokens (task, read_agent, bash, view, rg, glob) so installers can substitute per-harness names.
+
 ## 1.37.1
 
 ### Patch Changes