@onlooker-community/ecosystem 0.33.0 → 0.34.0

package/plugins/librarian/scripts/lib/librarian-lesson-validate.sh

@@ -0,0 +1,140 @@
+#!/usr/bin/env bash
+# Pure validation rules for lesson candidates. No I/O, no network, no CLI.
+#
+# These rules mirror the vendored sub-schemas in plugins/librarian/schema/.
+# ajv cannot run at runtime (installed plugins ship no node_modules, ADR-005),
+# so enforcement here is jq. The two mechanisms have been proven able to
+# disagree, so tests assert them separately.
+
+# Version-shaped token check. Returns 0 when the artifact could plausibly
+# yield a versioned scope, 1 when it definitionally cannot.
+#
+# This rejects only what is impossible, never what is merely low quality:
+# the transform can emit `versioned` scope alone, so an artifact with no
+# version token anywhere cannot produce a valid scope.versions.
+#
+# Usage: librarian_lesson_pregate <artifact_json>
+librarian_lesson_pregate() {
+	local artifact="${1:-}"
+	[[ -z "$artifact" ]] && return 1
+
+	local text
+	text=$(printf '%s' "$artifact" | jq -r '((.summary // "") + " " + (.detail // ""))' 2>/dev/null) || return 1
+	[[ -z "$text" ]] && return 1
+
+	# Dotted (5.4.21), v-prefixed (v5), or x-range (5.x).
+	printf '%s' "$text" | grep -qE '([0-9]+\.[0-9]+)|(\bv[0-9]+)|([0-9]+\.x\b)'
+}
+
+# Version range check, mirroring the vendored pattern.
+#
+# Accepts: <6  <=6  =6  >4  >=4  ">=4 <6"
+# Rejects: ^5.4.21  ~5  5.x  5.4.21  >=0  >=0.0.0
+#
+# The >= and > forms require a non-zero lower bound. An unbounded lower bound
+# matches every session and would never expire — version independence in
+# disguise, which this stage is not allowed to mint.
+#
+# Usage: librarian_lesson_valid_range <string>
+librarian_lesson_valid_range() {
+	local r="${1:-}"
+	[[ -z "$r" ]] && return 1
+
+	# The integer-part alternative is [0-9]*[1-9][0-9]*, not [1-9][0-9]*: the
+	# vendored pattern's equivalent is \d*[1-9]\d*, which allows a leading
+	# zero digit (05, 007) as long as some digit is nonzero. [1-9][0-9]* only
+	# permits a nonzero *leading* digit, so it rejects >=05 while the vendored
+	# schema accepts it — a real jq/schema disagreement, not a style choice.
+	local nonzero='([0-9]*[1-9][0-9]*(\.[0-9]+)?(\.[0-9]+)?|0+\.[0-9]*[1-9][0-9]*(\.[0-9]+)?|0+\.0+\.[0-9]*[1-9][0-9]*)'
+	local any='[0-9]+(\.[0-9]+)?(\.[0-9]+)?'
+	local pattern="^((<|<=|=)${any}|(>|>=)${nonzero}|(>|>=)${any} (<|<=)${any})$"
+
+	# Use bash's own regex engine rather than grep: grep's ^/$ anchor to line
+	# boundaries, not string boundaries, so a value with an embedded newline
+	# could smuggle a valid line past an otherwise-rejected string. [[ =~ ]]
+	# anchors to the whole string. The pattern must stay unquoted here —
+	# quoting the right-hand side of =~ forces literal string matching.
+	[[ "$r" =~ $pattern ]]
+}
+
+# Validate a full candidate. Prints nothing on success; prints a reason slug
+# to stderr on failure.
+#
+# Usage: librarian_lesson_validate_candidate <candidate_json>
+librarian_lesson_validate_candidate() {
+	local candidate="${1:-}"
+	[[ -z "$candidate" ]] && { printf 'schema_invalid\n' >&2; return 1; }
+
+	# Structural shape, including the versioned-only rule and a non-empty
+	# resolution. `versions` must be a non-empty object. artifact_ids,
+	# session_ids, and observed_at are checked against the same patterns as
+	# the vendored lesson-evidence.subschema.json (ULID, non-empty string,
+	# RFC3339 date-time) — a provenance-less artifact (session_id/created_at
+	# stitched in as "") must fail here, not pass through and get buried
+	# permanently once librarian_lesson_seen marks it handled.
+	#
+	# The `keys - [...] | length == 0` checks mirror `additionalProperties:
+	# false` on the vendored `evidence` and `applies_to` sub-schemas
+	# (including the "versioned" scope branch), and the `all(type ==
+	# "string" and length > 0)` checks mirror their array items' `minLength:
+	# 1`. Neither is decorative: without them a model that "helpfully" adds
+	# an extra field, or emits an empty-string array entry, produces a
+	# proposal that passes here but fails ajv against the contract it claims
+	# to satisfy — and lessons are meant to be shared with other people. Each
+	# `keys` call is guarded by a preceding `type == "object"` check in the
+	# same `and` chain: jq's `and` short-circuits left to right, so `keys` on
+	# a missing/non-object value is never reached.
+	if ! printf '%s' "$candidate" | jq -e '
+		(.claim | type) == "string" and (.claim | length) > 0
+		and (.rationale | type) == "string" and (.rationale | length) > 0
+		and (.evidence | type) == "object"
+		and ((.evidence | keys) - ["artifact_ids", "session_ids", "project_key", "observed_at", "resolution"] | length) == 0
+		and (.evidence.artifact_ids | type) == "array" and (.evidence.artifact_ids | length) > 0
+		and (.evidence.artifact_ids | all(type == "string" and test("^[0-9A-HJKMNP-TV-Z]{26}$")))
+		and (.evidence.session_ids | type) == "array" and (.evidence.session_ids | length) > 0
+		and (.evidence.session_ids | all(type == "string" and length > 0))
+		and (.evidence.project_key | type) == "string"
+		and (.evidence.project_key | test("^[0-9a-f]{12}$"))
+		and (.evidence.observed_at | type) == "string"
+		and (.evidence.observed_at | test("^(?:(?:\\d\\d[2468][048]|\\d\\d[13579][26]|\\d\\d0[48]|[02468][048]00|[13579][26]00)-02-29|\\d{4}-(?:(?:0[13578]|1[02])-(?:0[1-9]|[12]\\d|3[01])|(?:0[469]|11)-(?:0[1-9]|[12]\\d|30)|(?:02)-(?:0[1-9]|1\\d|2[0-8])))T(?:(?:[01]\\d|2[0-3]):[0-5]\\d(?::[0-5]\\d(?:\\.\\d+)?)?(?:Z))$"))
+		and (.evidence.resolution | type) == "string" and (.evidence.resolution | length) > 0
+		and (.applies_to | type) == "object"
+		and ((.applies_to | keys) - ["stack", "scope", "file_patterns", "task_kinds"] | length) == 0
+		and (.applies_to.stack | type) == "array" and (.applies_to.stack | length) > 0
+		and (.applies_to.stack | all(type == "string" and length > 0))
+		and (.applies_to.file_patterns | type) == "array"
+		and (.applies_to.file_patterns | all(type == "string" and length > 0))
+		and (.applies_to.task_kinds | type) == "array"
+		and (.applies_to.task_kinds | all(type == "string" and length > 0))
+		and .applies_to.scope.kind == "versioned"
+		and ((.applies_to.scope | keys) - ["kind", "versions"] | length) == 0
+		and (.applies_to.scope.versions | type) == "object"
+		and (.applies_to.scope.versions | length) > 0
+	' >/dev/null 2>&1; then
+		printf 'schema_invalid\n' >&2
+		return 1
+	fi
+
+	# Cross-field rule JSON Schema cannot express: every versions key must
+	# name an entry in stack.
+	if ! printf '%s' "$candidate" | jq -e '
+		(.applies_to.scope.versions | keys) - .applies_to.stack | length == 0
+	' >/dev/null 2>&1; then
+		printf 'schema_invalid\n' >&2
+		return 1
+	fi
+
+	# Every range must satisfy the vendored pattern. NUL-delimited, not
+	# newline-delimited: a range value with an embedded newline would
+	# otherwise split into two lines that can each pass individually even
+	# though the single value they came from is not a valid range. Do not
+	# skip empty reads either — jq never emits one for a non-empty object
+	# of strings, so an empty read means the range itself is empty, and
+	# librarian_lesson_valid_range already rejects that.
+	local range
+	while IFS= read -r -d '' range; do
+		librarian_lesson_valid_range "$range" || { printf 'schema_invalid\n' >&2; return 1; }
+	done < <(printf '%s' "$candidate" | jq --raw-output0 '.applies_to.scope.versions[]' 2>/dev/null)
+
+	return 0
+}

package/plugins/lineage/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lineage",
-  "version": "0.2.1",
+  "version": "0.2.2",
   "description": "Per-change provenance for the Onlooker ecosystem. Records session/turn metadata plus a secret-redacted, size-capped snippet for every Edit/Write/MultiEdit at PostToolUse, then answers \"why does this line exist?\" via /lineage by joining change records to historian-preserved transcripts. Emits lineage.* events for audit. Builds on the Onlooker ecosystem plugin.",
   "author": {
     "name": "Onlooker Community",

package/plugins/lineage/CHANGELOG.md

@@ -1,5 +1,12 @@
 # Changelog
 
+## [0.2.2](https://github.com/onlooker-community/ecosystem/compare/lineage-v0.2.1...lineage-v0.2.2) (2026-08-02)
+
+
+### Bug Fixes
+
+* restore config convenience functions & refactor execution plugins to shared loader ([#128](https://github.com/onlooker-community/ecosystem/issues/128)) ([4b3660c](https://github.com/onlooker-community/ecosystem/commit/4b3660c5a8b234187ec1e71c37b63e6a3d305c98))
+
 ## [0.2.1](https://github.com/onlooker-community/ecosystem/compare/lineage-v0.2.0...lineage-v0.2.1) (2026-08-01)
 
 

package/plugins/lineage/scripts/lib/lineage-config.sh

@@ -1,71 +1,37 @@
 #!/usr/bin/env bash
 # Config resolution for lineage.
 #
-# Reads three layers, latest wins:
+# Uses the shared config loader from ecosystem. Reads five layers, latest wins:
 #   1. plugins/lineage/config.json (defaults shipped with the plugin)
 #   2. ~/.claude/settings.json
-#   3. <repo>/.claude/settings.json
+#   3. ~/.claude/settings.local.json (local overrides user)
+#   4. <repo>/.claude/settings.json
+#   5. <repo>/.claude/settings.local.json (local overrides project)
 #
 # Exposes:
-#   lineage_config_load <repo_root>     # populates _LINEAGE_CONFIG (JSON)
-#   lineage_config_get <jq-path>        # echoes string value (empty if unset)
-#   lineage_config_get_json <jq-path>   # echoes JSON value (null if unset)
-#   lineage_config_max_snippet_chars    # echoes the snippet cap (default 4000)
-#   lineage_config_redact_enabled       # 0 unless redact_secrets is false
-#   lineage_config_prompt_source        # echoes the prompt-source strategy
-#   lineage_config_ignore_globs         # echoes ignore globs, one per line
+#   lineage_config_load <repo_root>    # populates _lineage_CONFIG (JSON)
+#   lineage_config_get <jq-path>       # echoes string value (empty if unset)
+#   lineage_config_get_json <jq-path>  # echoes JSON value (null if unset)
 
-_LINEAGE_CONFIG="{}"
+# shellcheck source=../../../scripts/lib/config-loader.sh
+source "${PLUGIN_ROOT}/../../scripts/lib/config-loader.sh"
+
+_lineage_CONFIG="{}"
 
 lineage_config_load() {
 	local repo_root="${1:-}"
-	local plugin_root="${CLAUDE_PLUGIN_ROOT:-}"
-	local home_dir="${HOME:-}"
-
-	local merged="{}"
-	local file
-
-	file="${plugin_root}/config.json"
-	if [[ -f "$file" ]]; then
-		local defaults
-		defaults=$(jq '.' "$file" 2>/dev/null) || defaults="{}"
-		merged=$(jq -n --argjson a "$merged" --argjson b "$defaults" '$a * $b' 2>/dev/null) \
-			|| merged="$defaults"
-	fi
-
-	local repo_settings=""
-	[[ -n "$repo_root" ]] && repo_settings="${repo_root}/.claude/settings.json"
-
-	for file in "${home_dir}/.claude/settings.json" "$repo_settings"; do
-		[[ -n "$file" && -f "$file" ]] || continue
-		local overlay
-		overlay=$(jq '{ lineage: (.lineage // {}) }' "$file" 2>/dev/null) || continue
-		[[ -z "$overlay" ]] && continue
-		local attempt
-		if attempt=$(jq -n --argjson a "$merged" --argjson b "$overlay" '
-			def deepmerge($a; $b):
-				if ($a|type) == "object" and ($b|type) == "object" then
-					reduce (($a|keys) + ($b|keys) | unique)[] as $k
-						({}; .[$k] = deepmerge($a[$k]; $b[$k]))
-				elif $b == null then $a
-				else $b end;
-			deepmerge($a; $b)
-		' 2>/dev/null) && [[ -n "$attempt" ]]; then
-			merged="$attempt"
-		fi
-	done
-
-	_LINEAGE_CONFIG="$merged"
+	config_load_plugin "lineage" "$repo_root" "_lineage_CONFIG"
+	return 0
 }
 
 lineage_config_get() {
 	local path="$1"
-	printf '%s' "$_LINEAGE_CONFIG" | jq -r "${path} // empty" 2>/dev/null
+	config_get "_lineage_CONFIG" "${path}"
 }
 
 lineage_config_get_json() {
 	local path="$1"
-	printf '%s' "$_LINEAGE_CONFIG" | jq -c "${path}" 2>/dev/null
+	config_get_json "_lineage_CONFIG" "${path}"
 }
 
 lineage_config_max_snippet_chars() {
@@ -75,10 +41,8 @@ lineage_config_max_snippet_chars() {
 }
 
 lineage_config_redact_enabled() {
-	# Default on. jq's `//` treats a literal `false` as empty, so read the raw
-	# JSON value and only disable on an explicit false.
 	local v
-	v=$(lineage_config_get_json '.lineage.redact_secrets')
+	v=$(lineage_config_get '.lineage.redact_secrets')
 	[[ "$v" != "false" ]]
 }
 
@@ -89,5 +53,5 @@ lineage_config_prompt_source() {
 }
 
 lineage_config_ignore_globs() {
-	printf '%s' "$_LINEAGE_CONFIG" | jq -r '.lineage.ignore_globs[]? // empty' 2>/dev/null
+	lineage_config_get_json '.lineage.ignore_globs // ["**/.git/**","**/node_modules/**","**/dist/**","**/*.lock"]' | jq -r '.[]'
 }

package/plugins/scribe/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "scribe",
-  "version": "0.4.1",
+  "version": "0.4.2",
   "description": "Intent documentation from agent activity. Captures why changes were made — problem context, decisions, tradeoffs — and distills them into readable artifacts at session end.",
   "author": {
     "name": "Onlooker Community",

package/plugins/scribe/CHANGELOG.md

@@ -1,5 +1,12 @@
 # Changelog
 
+## [0.4.2](https://github.com/onlooker-community/ecosystem/compare/scribe-v0.4.1...scribe-v0.4.2) (2026-08-02)
+
+
+### Bug Fixes
+
+* restore config convenience functions & refactor execution plugins to shared loader ([#128](https://github.com/onlooker-community/ecosystem/issues/128)) ([4b3660c](https://github.com/onlooker-community/ecosystem/commit/4b3660c5a8b234187ec1e71c37b63e6a3d305c98))
+
 ## [0.4.1](https://github.com/onlooker-community/ecosystem/compare/scribe-v0.4.0...scribe-v0.4.1) (2026-08-01)
 
 

package/plugins/scribe/scripts/lib/scribe-config.sh

@@ -1,65 +1,35 @@
 #!/usr/bin/env bash
-# Config resolution for Scribe.
+# Config resolution for scribe.
 #
-# Reads three layers, latest wins:
+# Uses the shared config loader from ecosystem. Reads five layers, latest wins:
 #   1. plugins/scribe/config.json (defaults shipped with the plugin)
 #   2. ~/.claude/settings.json
-#   3. <repo>/.claude/settings.json
+#   3. ~/.claude/settings.local.json (local overrides user)
+#   4. <repo>/.claude/settings.json
+#   5. <repo>/.claude/settings.local.json (local overrides project)
 #
 # Exposes:
-#   scribe_config_load <repo_root>     # populates _SCRIBE_CONFIG (JSON)
-#   scribe_config_get <jq-path>        # echoes string value (empty if unset)
-#   scribe_config_get_json <jq-path>   # echoes JSON value (null if unset)
+#   scribe_config_load <repo_root>    # populates _scribe_CONFIG (JSON)
+#   scribe_config_get <jq-path>       # echoes string value (empty if unset)
+#   scribe_config_get_json <jq-path>  # echoes JSON value (null if unset)
 
-_SCRIBE_CONFIG="{}"
+# shellcheck source=../../../scripts/lib/config-loader.sh
+source "${PLUGIN_ROOT}/../../scripts/lib/config-loader.sh"
+
+_scribe_CONFIG="{}"
 
 scribe_config_load() {
 	local repo_root="${1:-}"
-	local plugin_root="${CLAUDE_PLUGIN_ROOT:-}"
-	local home_dir="${HOME:-}"
-
-	local merged="{}"
-	local file
-
-	file="${plugin_root}/config.json"
-	if [[ -f "$file" ]]; then
-		local defaults
-		defaults=$(jq '.' "$file" 2>/dev/null) || defaults="{}"
-		merged=$(jq -n --argjson a "$merged" --argjson b "$defaults" '$a * $b' 2>/dev/null) \
-			|| merged="$defaults"
-	fi
-
-	local repo_settings=""
-	[[ -n "$repo_root" ]] && repo_settings="${repo_root}/.claude/settings.json"
-
-	for file in "${home_dir}/.claude/settings.json" "$repo_settings"; do
-		[[ -n "$file" && -f "$file" ]] || continue
-		local overlay
-		overlay=$(jq '{ scribe: (.scribe // {}) }' "$file" 2>/dev/null) || continue
-		[[ -z "$overlay" ]] && continue
-		local attempt
-		if attempt=$(jq -n --argjson a "$merged" --argjson b "$overlay" '
-			def deepmerge($a; $b):
-				if ($a|type) == "object" and ($b|type) == "object" then
-					reduce (($a|keys) + ($b|keys) | unique)[] as $k
-						({}; .[$k] = deepmerge($a[$k]; $b[$k]))
-				elif $b == null then $a
-				else $b end;
-			deepmerge($a; $b)
-		' 2>/dev/null) && [[ -n "$attempt" ]]; then
-			merged="$attempt"
-		fi
-	done
-
-	_SCRIBE_CONFIG="$merged"
+	config_load_plugin "scribe" "$repo_root" "_scribe_CONFIG"
+	return 0
 }
 
 scribe_config_get() {
 	local path="$1"
-	printf '%s' "$_SCRIBE_CONFIG" | jq -r "${path} // empty" 2>/dev/null
+	config_get "_scribe_CONFIG" "${path}"
 }
 
 scribe_config_get_json() {
 	local path="$1"
-	printf '%s' "$_SCRIBE_CONFIG" | jq -c "${path}" 2>/dev/null
-}
+	config_get_json "_scribe_CONFIG" "${path}"
+}

package/plugins/tribunal/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "tribunal",
-  "version": "1.1.1",
+  "version": "1.1.2",
   "description": "Multi-agent execution with LLM-as-a-Judge quality gates. An Actor performs work; a jury of typed Judges scores it against a project-overridable rubric; a Meta-Judge reviews the jury for bias; the gate decides accept, retry, or exhaust. Grounded in LLM-as-a-Judge (Zheng et al. 2023) and LLM-as-a-Meta-Judge (Wu et al. 2024). Builds on the Onlooker ecosystem plugin.",
   "author": {
     "name": "Onlooker Community",

package/plugins/tribunal/CHANGELOG.md

@@ -1,5 +1,12 @@
 # Changelog
 
+## [1.1.2](https://github.com/onlooker-community/ecosystem/compare/tribunal-v1.1.1...tribunal-v1.1.2) (2026-08-02)
+
+
+### Bug Fixes
+
+* restore config convenience functions & refactor execution plugins to shared loader ([#128](https://github.com/onlooker-community/ecosystem/issues/128)) ([4b3660c](https://github.com/onlooker-community/ecosystem/commit/4b3660c5a8b234187ec1e71c37b63e6a3d305c98))
+
 ## [1.1.1](https://github.com/onlooker-community/ecosystem/compare/tribunal-v1.1.0...tribunal-v1.1.1) (2026-08-01)
 
 

package/plugins/tribunal/scripts/lib/tribunal-config.sh

@@ -1,93 +1,55 @@
 #!/usr/bin/env bash
-# Config resolution for Tribunal.
+# Config resolution for tribunal.
 #
-# Reads three layers, latest wins:
+# Uses the shared config loader from ecosystem. Reads five layers, latest wins:
 #   1. plugins/tribunal/config.json (defaults shipped with the plugin)
 #   2. ~/.claude/settings.json
-#   3. <repo>/.claude/settings.json
+#   3. ~/.claude/settings.local.json (local overrides user)
+#   4. <repo>/.claude/settings.json
+#   5. <repo>/.claude/settings.local.json (local overrides project)
 #
 # Exposes:
-#   tribunal_config_load <repo_root>       # populates _TRIBUNAL_CONFIG (JSON)
-#   tribunal_config_get <jq-path>          # echoes string value (empty if unset)
-#   tribunal_config_get_json <jq-path>     # echoes JSON value (null if unset)
-#   tribunal_config_stop_hook_enabled      # 0 if tribunal.stop_hook.enabled is true
-#   tribunal_config_judge_model <judge_type>
-#                                          # echoes per-judge-type model override,
-#                                          # falling back to tribunal.judges.model
-#
-# Settings overlay only touches the `tribunal.*` subtree so this plugin coexists
-# with other plugins' configuration.
+#   tribunal_config_load <repo_root>    # populates _tribunal_CONFIG (JSON)
+#   tribunal_config_get <jq-path>       # echoes string value (empty if unset)
+#   tribunal_config_get_json <jq-path>  # echoes JSON value (null if unset)
+
+# shellcheck source=../../../scripts/lib/config-loader.sh
+source "${PLUGIN_ROOT}/../../scripts/lib/config-loader.sh"
 
 _TRIBUNAL_CONFIG="{}"
 
 tribunal_config_load() {
 	local repo_root="${1:-}"
-	local plugin_root="${CLAUDE_PLUGIN_ROOT:-}"
-	local home_dir="${HOME:-}"
-
-	local merged="{}"
-	local file
-
-	file="${plugin_root}/config.json"
-	if [[ -f "$file" ]]; then
-		local defaults
-		defaults=$(jq '.' "$file" 2>/dev/null) || defaults="{}"
-		merged=$(jq -n --argjson a "$merged" --argjson b "$defaults" '$a * $b' 2>/dev/null) \
-			|| merged="$defaults"
-	fi
-
-	for file in "${home_dir}/.claude/settings.json" "${repo_root}/.claude/settings.json"; do
-		[[ -n "$file" && -f "$file" ]] || continue
-		local overlay
-		overlay=$(jq '{ tribunal: (.tribunal // {}) }' "$file" 2>/dev/null) || continue
-		[[ -z "$overlay" ]] && continue
-		local attempt
-		if attempt=$(jq -n --argjson a "$merged" --argjson b "$overlay" '
-			def deepmerge($a; $b):
-				if ($a|type) == "object" and ($b|type) == "object" then
-					reduce (($a|keys) + ($b|keys) | unique)[] as $k
-						({}; .[$k] = deepmerge($a[$k]; $b[$k]))
-				elif $b == null then $a
-				else $b end;
-			deepmerge($a; $b)
-		' 2>/dev/null) && [[ -n "$attempt" ]]; then
-			merged="$attempt"
-		fi
-	done
-
-	_TRIBUNAL_CONFIG="$merged"
+	config_load_plugin "tribunal" "$repo_root" "_TRIBUNAL_CONFIG"
+	return 0
 }
 
-# Read a string value from the loaded config.
-# Usage: tribunal_config_get '.tribunal.session.gate_policy'
 tribunal_config_get() {
 	local path="$1"
-	printf '%s' "$_TRIBUNAL_CONFIG" | jq -r "${path} // empty" 2>/dev/null
+	config_get "_TRIBUNAL_CONFIG" "${path}"
 }
 
-# Read a JSON value (arrays, objects, numbers) from the loaded config.
-# Usage: tribunal_config_get_json '.tribunal.session.judge_types'
 tribunal_config_get_json() {
 	local path="$1"
-	printf '%s' "$_TRIBUNAL_CONFIG" | jq -c "${path}" 2>/dev/null
+	config_get_json "_TRIBUNAL_CONFIG" "${path}"
 }
 
-# Returns 0 if tribunal.stop_hook.enabled is true. Default is false.
 tribunal_config_stop_hook_enabled() {
 	local v
 	v=$(tribunal_config_get '.tribunal.stop_hook.enabled')
 	[[ "$v" == "true" ]]
 }
 
-# Resolve the model id for a given judge_type.
-# Precedence: tribunal.judges.<type>.model > tribunal.judges.model
 tribunal_config_judge_model() {
-	local judge_type="$1"
-	local override
-	override=$(tribunal_config_get ".tribunal.judges.\"${judge_type}\".model")
-	if [[ -n "$override" ]]; then
-		printf '%s' "$override"
-		return 0
+	local judge_type="${1:-}"
+	local v
+	if [[ -n "$judge_type" ]]; then
+		v=$(tribunal_config_get ".tribunal.judges.\"$judge_type\".model")
+		if [[ -n "$v" ]]; then
+			printf '%s' "$v"
+			return 0
+		fi
 	fi
-	tribunal_config_get '.tribunal.judges.model'
+	v=$(tribunal_config_get '.tribunal.judges.model')
+	printf '%s' "${v:-claude-opus-4-7}"
 }

package/plugins/warden/scripts/lib/warden-config.sh

@@ -1,72 +1,35 @@
 #!/usr/bin/env bash
-# Config resolution for Warden.
+# Config resolution for warden.
 #
-# Reads three layers, latest wins:
+# Uses the shared config loader from ecosystem. Reads five layers, latest wins:
 #   1. plugins/warden/config.json (defaults shipped with the plugin)
 #   2. ~/.claude/settings.json
-#   3. <repo>/.claude/settings.json
+#   3. ~/.claude/settings.local.json (local overrides user)
+#   4. <repo>/.claude/settings.json
+#   5. <repo>/.claude/settings.local.json (local overrides project)
 #
 # Exposes:
-#   warden_config_load <repo_root>     # populates _WARDEN_CONFIG (JSON)
-#   warden_config_get <jq-path>        # echoes string value (empty if unset)
-#   warden_config_get_json <jq-path>   # echoes JSON value (null if unset)
+#   warden_config_load <repo_root>    # populates _warden_CONFIG (JSON)
+#   warden_config_get <jq-path>       # echoes string value (empty if unset)
+#   warden_config_get_json <jq-path>  # echoes JSON value (null if unset)
 
-_WARDEN_CONFIG="{}"
+# shellcheck source=../../../scripts/lib/config-loader.sh
+source "${PLUGIN_ROOT}/../../scripts/lib/config-loader.sh"
+
+_warden_CONFIG="{}"
 
 warden_config_load() {
 	local repo_root="${1:-}"
-	local plugin_root="${CLAUDE_PLUGIN_ROOT:-}"
-	local home_dir="${HOME:-}"
-
-	local merged="{}"
-	local file
-
-	file="${plugin_root}/config.json"
-	if [[ -f "$file" ]]; then
-		local defaults
-		defaults=$(jq '.' "$file" 2>/dev/null) || defaults="{}"
-		merged=$(jq -n --argjson a "$merged" --argjson b "$defaults" '$a * $b' 2>/dev/null) \
-			|| merged="$defaults"
-	fi
-
-	local repo_settings=""
-	[[ -n "$repo_root" ]] && repo_settings="${repo_root}/.claude/settings.json"
-
-	for file in "${home_dir}/.claude/settings.json" "$repo_settings"; do
-		[[ -n "$file" && -f "$file" ]] || continue
-		local overlay
-		overlay=$(jq '{ warden: (.warden // {}) }' "$file" 2>/dev/null) || continue
-		[[ -z "$overlay" ]] && continue
-		local attempt
-		if attempt=$(jq -n --argjson a "$merged" --argjson b "$overlay" '
-			def deepmerge($a; $b):
-				if ($a|type) == "object" and ($b|type) == "object" then
-					reduce (($a|keys) + ($b|keys) | unique)[] as $k
-						({}; .[$k] = deepmerge($a[$k]; $b[$k]))
-				elif $b == null then $a
-				else $b end;
-			deepmerge($a; $b)
-		' 2>/dev/null) && [[ -n "$attempt" ]]; then
-			merged="$attempt"
-		fi
-	done
-
-	_WARDEN_CONFIG="$merged"
+	config_load_plugin "warden" "$repo_root" "_warden_CONFIG"
+	return 0
 }
 
 warden_config_get() {
 	local path="$1"
-	# NB: do NOT use `${path} // empty` — jq's `//` treats `false` and `0` as
-	# empty, so a `false` boolean would read back as "" and a `${v:-true}`
-	# default would silently flip it to true. Emit the raw value and map only a
-	# literal JSON null to the empty string.
-	local v
-	v=$(printf '%s' "$_WARDEN_CONFIG" | jq -r "${path}" 2>/dev/null) || return 1
-	[[ "$v" == "null" ]] && v=""
-	printf '%s' "$v"
+	config_get "_warden_CONFIG" "${path}"
 }
 
 warden_config_get_json() {
 	local path="$1"
-	printf '%s' "$_WARDEN_CONFIG" | jq -c "${path}" 2>/dev/null
-}
+	config_get_json "_warden_CONFIG" "${path}"
+}

package/scripts/lib/config-loader.sh

@@ -110,7 +110,14 @@ config_get() {
 
 	# Use indirect expansion to read the variable's value.
 	local config_json="${!config_var}"
-	printf '%s' "$config_json" | jq -r "${path} // empty" 2>/dev/null
+	# NB: do NOT use `${path} // empty` — jq's `//` treats `false` and `0` as
+	# empty, so a false boolean would read back as "" and a true default would
+	# silently flip it. Emit the raw value and map only a literal JSON null to
+	# the empty string.
+	local v
+	v=$(printf '%s' "$config_json" | jq -r "${path}" 2>/dev/null) || return 1
+	[[ "$v" == "null" ]] && v=""
+	printf '%s' "$v"
 }
 
 # Get a JSON value from loaded config.