contextos-agents 2.0.0 → 2.1.0

package/.agents/AGENTS.md

@@ -1,4 +1,4 @@
-# ContextOS — Deterministic context compiler and policy engine for AI coding agents.
+# ContextOS -  Deterministic context compiler and policy engine for AI coding agents.
 
 You are working inside a project managed by **ContextOS**. This file is the **single source of truth** for how you must behave, think, and which skills to activate for every task.
 
@@ -6,7 +6,7 @@ You are working inside a project managed by **ContextOS**. This file is the **si
 
 ---
 
-## Step 0 — Identify Before Acting
+## Step 0 -  Identify Before Acting
 
 Before writing a single line of code or plan, stop and answer three questions:
 
@@ -28,12 +28,12 @@ Skills loaded: react, typescript, ui-ux-pro, ponytail-mindset
 
 ---
 
-## Skill Architecture (Context Efficiency)
+## Skill Architecture (High Fidelity & Progressive Disclosure)
 
-Skills are loaded on-demand. To keep the agent context window efficient:
-1. **Keep `SKILL.md` under 500 lines**: Put detailed reference material in separate files.
-2. **Use progressive disclosure**: Use a `references/` directory for deep context and load those files only when specifically needed by the task.
-3. **Use `scripts/`**: Place executable scripts in a `scripts/` directory alongside the skill.
+Skills provide deep, production-ready engineering standards. To maximize instruction adherence:
+1. **High-Fidelity Guidance**: Skills must be complete, self-contained, and comprehensive. Never truncate essential rules, edge cases, or code examples for artificial brevity.
+2. **Progressive Disclosure**: Use a `references/` directory for deep domain specifications, detailed schemas, and specialized manuals, loading them when the task explicitly targets those areas.
+3. **Executable Scripts**: Place verification and automation scripts in a `scripts/` directory alongside the skill.
 
 ## Skill Registry
 
@@ -43,10 +43,10 @@ These 7 skills are always present in ContextOS Core:
 
 | Skill | File | Activate When |
 |-------|------|--------------|
-| **engineering-workflow** | `engineering-workflow/SKILL.md` | **Every task** — defines the DEFINE→PLAN→BUILD→VERIFY→REVIEW→SHIP pipeline |
-| **gstack-roles** | `gstack-roles/SKILL.md` | **Every task** — declare your specialist role before each phase |
-| **ponytail-mindset** | `ponytail-mindset/SKILL.md` | **Every BUILD phase** — run the 7-rung ladder before writing any code |
-| **gemini-precision** | `gemini-precision/SKILL.md` | **All Gemini tasks** — zero assumptions, zero placeholders, surgical blast radius, test proof |
+| **engineering-workflow** | `engineering-workflow/SKILL.md` | **Every task** -  defines the DEFINE→PLAN→BUILD→VERIFY→REVIEW→SHIP pipeline |
+| **gstack-roles** | `gstack-roles/SKILL.md` | **Every task** -  declare your specialist role before each phase |
+| **ponytail-mindset** | `ponytail-mindset/SKILL.md` | **Every BUILD phase** -  run the 7-rung ladder before writing any code |
+| **gemini-precision** | `gemini-precision/SKILL.md` | **All Gemini tasks** -  zero assumptions, zero placeholders, surgical blast radius, test proof |
 | **security** | `security/SKILL.md` | Any feature with auth, data access, user input, external integration |
 | **context-os** | `context-os/SKILL.md` | Managing context rules, compiler pipelines, project policies |
 | **context-manager** | `context-manager/SKILL.md` | Context selection, dynamic skill resolution, project graph traversal |
@@ -58,14 +58,14 @@ The following domain skills are available in the extended catalog and can be add
 | Domain | Skills | Install Command |
 |--------|--------|-----------------|
 | **Frontend** | `react`, `react-best-practices`, `nextjs`, `typescript`, `ui-ux-pro`, `impeccable-design`, `state-management`, `ui-design`, `ux-design`, `web-accessibility`, `brutalist-design`, `minimalist-design`, `soft-design`, `redesign-audit` | `contextos skill add <name>` |
-| **Backend** | `system-design`, `node`, `fastapi`, `nestjs`, `microservices`, `ddd`, `database` | `contextos skill add <name>` |
-| **Cross-Cutting** | `testing`, `docker`, `decisions`, `architecture-diagrams`, `adapters`, `generators`, `graphify`, `performance`, `vercel-optimize` | `contextos skill add <name>` |
+| **Backend** | `system-design`, `api-design`, `node`, `fastapi`, `nestjs`, `microservices`, `ddd`, `database` | `contextos skill add <name>` |
+| **Cross-Cutting** | `testing`, `docker`, `ci-cd`, `terraform`, `security-audit`, `decisions`, `architecture-diagrams`, `adapters`, `generators`, `graphify`, `performance`, `vercel-optimize` | `contextos skill add <name>` |
 
 ---
 
 ## Automatic Skill Activation Rules (Proactive Routing)
 
-The following rules are **deterministic** — no judgment needed. If the condition is true, the skill is loaded.
+The following rules are **deterministic** -  no judgment needed. If the condition is true, the skill is loaded.
 
 > **Availability Guard**: Load only skills that are physically installed in `.agents/core/skills/`. For uninstalled catalog skills, rely on core skills (`engineering-workflow`, `ponytail-mindset`, `gemini-precision`, `security`) and recommend `contextos skill add <name>` when deep domain checklists are needed.
 
@@ -159,6 +159,22 @@ role: Staff Engineer (Orchestrator)
 trigger: "graphify" OR "codebase graph" OR "project graph" OR "map codebase" OR "knowledge graph" OR "построй граф проекта"
 load: [graphify, system-design, context-manager]
 role: Architect
+
+trigger: "security audit" OR "vulnerability" OR "pentest"
+load: [security-audit, security, engineering-workflow]
+role: Chief Security Officer (audit) -> Senior Developer (build)
+
+trigger: "api design" OR "REST API" OR "contract" OR "openapi"
+load: [api-design, system-design, engineering-workflow]
+role: Architect (plan) -> Senior Developer (build)
+
+trigger: "terraform" OR "opentofu" OR "iac" OR "infrastructure"
+load: [terraform, decisions, engineering-workflow]
+role: DevOps Engineer
+
+trigger: "ci/cd" OR "github actions" OR "pipeline" OR "quality gates"
+load: [ci-cd, engineering-workflow]
+role: DevOps Engineer
 ```
 
 ### By Technology Detected in Codebase
@@ -178,7 +194,7 @@ files: "components/ui/*" present → shadcn detected, apply K9-K11 rules from im
 
 ---
 
-## Pipeline — Phase-by-Phase Rules
+## Pipeline -  Phase-by-Phase Rules
 
 Every task MUST follow these phases in order. No skipping.
 
@@ -191,7 +207,7 @@ Required output before proceeding:
 - Explicit in-scope / out-of-scope
 - List of files that will change
 - Acceptance criteria as testable statements
-- **STOP — do not write code until spec is reviewed**
+- **STOP -  do not write code until spec is reviewed**
 
 ---
 
@@ -205,7 +221,7 @@ Required output before proceeding:
 - Test requirement per task
 - Risk assessment
 - **If UI domain, read and incorporate `.interface-design/system.md` design memory**
-- **STOP — do not write code until plan is approved**
+- **STOP -  do not write code until plan is approved**
 
 ---
 
@@ -236,12 +252,12 @@ Rules:
 **Role**: `[ROLE: Staff Engineer]` + `[ROLE: Senior Designer]` if UI  
 **Load**: `engineering-workflow` (code review checklist) + `impeccable-design` (if UI)
 
-For UI tasks — run the full impeccable-design audit:
-- Typography rules T1–T10
-- Color rules C1–C12
-- Layout rules L1–L11 (including z-index check)
-- Component rules K1–K11 (shadcn-first)
-- Animation rules A1–A8 (Framer Motion exception noted)
+For UI tasks -  run the full impeccable-design audit:
+- Typography rules T1-T10
+- Color rules C1-C12
+- Layout rules L1-L11 (including z-index check)
+- Component rules K1-K11 (shadcn-first)
+- Animation rules A1-A8 (Framer Motion exception noted)
 
 ---
 
@@ -276,6 +292,10 @@ Use this table to instantly determine which skills to load:
 | Architecture visualization | `architecture-diagrams` + `system-design` | Architect |
 | Multi-agent parallel tasks | `subagent-orchestrator` + `engineering-workflow` | Staff Engineer (Orchestrator) |
 | Codebase graph / repo mapping | `graphify` + `context-manager` + `system-design` | Architect |
+| Security audit / pen-test | `security-audit` + `security` + `engineering-workflow` | Chief Security Officer |
+| API contract / interface design | `api-design` + `system-design` + `engineering-workflow` | Architect |
+| Terraform / IaC | `terraform` + `decisions` + `engineering-workflow` | DevOps Engineer |
+| CI/CD pipeline automation | `ci-cd` + `engineering-workflow` | DevOps Engineer |
 
 ---
 
@@ -326,18 +346,18 @@ These rules apply regardless of which skills are loaded:
 
 ### Code Quality
 - Business logic NEVER lives in API route handlers → always in `services/` or `use-cases/`
-- No `// TODO` in committed code — create a tracked issue instead
+- No `// TODO` in committed code -  create a tracked issue instead
 - All async operations have explicit error handling
-- No secrets hardcoded — use environment variables
+- No secrets hardcoded -  use environment variables
 
 ### Security
-- Auth check BEFORE any data access — no exceptions
+- Auth check BEFORE any data access -  no exceptions
 - All user input validated and sanitized before processing
-- SQL queries use parameterized form — no string concatenation
+- SQL queries use parameterized form -  no string concatenation
 
 ### Design
-- No arbitrary Tailwind values (`gap-[17px]`) — use scale utilities
-- No hardcoded z-indexes (`z-[999]`) — use Radix/shadcn Portals
+- No arbitrary Tailwind values (`gap-[17px]`) -  use scale utilities
+- No hardcoded z-indexes (`z-[999]`) -  use Radix/shadcn Portals
 - Every list/table/feed has a designed empty state
 
 ### Engineering
@@ -348,10 +368,10 @@ These rules apply regardless of which skills are loaded:
 
 ### Completion Protocol
 When finishing a workflow or task, always report your final status clearly using one of the following:
-- **DONE** — completed with evidence.
-- **DONE_WITH_CONCERNS** — completed, but list specific concerns.
-- **BLOCKED** — cannot proceed; state blocker and what was tried.
-- **NEEDS_CONTEXT** — missing info; state exactly what is needed.
+- **DONE** -  completed with evidence.
+- **DONE_WITH_CONCERNS** -  completed, but list specific concerns.
+- **BLOCKED** -  cannot proceed; state blocker and what was tried.
+- **NEEDS_CONTEXT** -  missing info; state exactly what is needed.
 
 ---
 

package/.agents/adapters/aider/export.js

@@ -7,6 +7,7 @@ const fs = require('fs');
 const path = require('path');
 const { AGENTS_MD_PATH, collectSkillDirectories, extractYamlField, stripFrontmatter } = require('../shared.js');
 const { registerAdapter, applyArtifacts, createProvenanceHeader } = require('../pure-compiler.js');
+const YAML = require('../../compiler/vendor/yaml.js');
 
 const GENERATOR_ID = 'aider@2';
 
@@ -43,7 +44,7 @@ function buildSkillSection(skillDir) {
   }
 
   const descLine = description ? `> ${description.replace(/\r?\n+/g, ' ').trim()}\n` : '';
-  const skillRef = `*Source: \`.agents/skills/${skillName}/SKILL.md\` — Load via \`/read .agents/skills/${skillName}/SKILL.md\`*\n`;
+  const skillRef = `*Source: \`.agents/skills/${skillName}/SKILL.md\` - Load via \`/read .agents/skills/${skillName}/SKILL.md\`*\n`;
   return `\n## Skill: ${title}\n${descLine}${skillRef}`;
 }
 
@@ -68,23 +69,49 @@ function render(context) {
   }, 'markdown');
 
   // 1. .aider.conf.yml
-  const aiderConfContent = [
-    yamlProv,
-    '# Load project conventions as a read-only context file on every session',
-    'read:',
-    '  - CONVENTIONS.md',
-    '',
-    '# Auto commit edits with standard git format',
-    'auto-commits: true',
-    'dirty-commits: true',
-    '',
-  ].join('\n');
+  const existingAiderConfPath = path.join(projectRoot, '.aider.conf.yml');
+  let aiderConfContent = '';
+
+  if (fs.existsSync(existingAiderConfPath)) {
+    try {
+      const rawUserConf = fs.readFileSync(existingAiderConfPath, 'utf8');
+      const parsed = YAML.parse(rawUserConf) || {};
+
+      if (!parsed.read) {
+        parsed.read = ['CONVENTIONS.md'];
+      } else if (Array.isArray(parsed.read)) {
+        if (!parsed.read.includes('CONVENTIONS.md')) {
+          parsed.read.push('CONVENTIONS.md');
+        }
+      } else if (typeof parsed.read === 'string') {
+        if (parsed.read !== 'CONVENTIONS.md') {
+          parsed.read = [parsed.read, 'CONVENTIONS.md'];
+        }
+      }
+
+      aiderConfContent = yamlProv + '\n' + YAML.stringify(parsed);
+    } catch {
+      aiderConfContent = yamlProv + '\nread:\n  - CONVENTIONS.md\n';
+    }
+  } else {
+    aiderConfContent = [
+      yamlProv,
+      '# Load project conventions as a read-only context file on every session',
+      'read:',
+      '  - CONVENTIONS.md',
+      '',
+      '# Auto commit edits with standard git format',
+      'auto-commits: true',
+      'dirty-commits: true',
+      '',
+    ].join('\n');
+  }
 
   // 2. CONVENTIONS.md
   const convSections = [];
   convSections.push(
     mdProv +
-    `# ContextOS — Project Conventions for Aider\n\n` +
+    `# ContextOS - Project Conventions for Aider\n\n` +
     `> **Core law: Do not read everything. Read only what the current task requires.**\n\n`
   );
 
@@ -97,7 +124,7 @@ function render(context) {
     `Skills are loaded on demand. Use \`/read .agents/skills/<skill>/SKILL.md\` when needed.\n\n` +
     `### Skill Index\n`);
 
-  const skills = collectSkillDirectories(context?.profile);
+  const skills = collectSkillDirectories(context?.profile, context?.projectRoot);
   for (const skill of skills) {
     const section = buildSkillSection(skill);
     if (section) convSections.push(section);

package/.agents/adapters/claude/export.js

@@ -54,7 +54,7 @@ function renderClaudeSkill(skillDir, context) {
 }
 
 function render(context) {
-  const skills = collectSkillDirectories(context?.profile);
+  const skills = collectSkillDirectories(context?.profile, context?.projectRoot);
   const artifacts = [];
 
   for (const skill of skills) {

package/.agents/adapters/copilot/export.js

@@ -79,7 +79,7 @@ function render(context) {
     `| --- | --- | --- |\n`
   );
 
-  const skills = collectSkillDirectories(context?.profile);
+  const skills = collectSkillDirectories(context?.profile, context?.projectRoot);
   for (const skill of skills) {
     const skillName = path.basename(skill);
     const yamlPath = path.join(skill, 'skill.yaml');

package/.agents/adapters/cursor/export.js

@@ -187,7 +187,7 @@ ${agentsMd}
     });
   }
 
-  const skills = collectSkillDirectories(context?.profile);
+  const skills = collectSkillDirectories(context?.profile, context?.projectRoot);
   for (const skill of skills) {
     const mdc = generateCursorMdc(skill);
     if (mdc) {

package/.agents/adapters/drift-detector.js

@@ -23,6 +23,9 @@ const DRIFT_STATES = {
   ORPHAN_MANAGED_OUTPUT: 'ORPHAN_MANAGED_OUTPUT',
   ADAPTER_VERSION_MISMATCH: 'ADAPTER_VERSION_MISMATCH',
   PROFILE_MISMATCH: 'PROFILE_MISMATCH',
+  CORRUPT_LOCKFILE: 'CORRUPT_LOCKFILE',
+  EMPTY_PROJECTION: 'EMPTY_PROJECTION',
+  CONFIG_ERROR: 'CONFIG_ERROR',
 };
 
 /**
@@ -67,9 +70,6 @@ function computeDiffSnippet(beforeStr, afterStr, maxLines = 15) {
 function detectDrift(projectRoot, adapters = 'all', options = {}) {
   const absRoot = path.resolve(projectRoot);
   const lockManager = new LockfileV2Manager(absRoot);
-  const lockfile = lockManager.read();
-
-  const { artifacts, collisions, context } = renderAdapters(absRoot, adapters, options);
 
   const findings = {
     [DRIFT_STATES.STALE_INPUT]: [],
@@ -78,11 +78,57 @@ function detectDrift(projectRoot, adapters = 'all', options = {}) {
     [DRIFT_STATES.ORPHAN_MANAGED_OUTPUT]: [],
     [DRIFT_STATES.ADAPTER_VERSION_MISMATCH]: [],
     [DRIFT_STATES.PROFILE_MISMATCH]: [],
+    [DRIFT_STATES.CORRUPT_LOCKFILE]: [],
+    [DRIFT_STATES.EMPTY_PROJECTION]: [],
+    [DRIFT_STATES.CONFIG_ERROR]: [],
   };
 
   const diffs = [];
 
-  // 1. Check Profile Mismatch
+  // 0. Safe lockfile load with corrupt lockfile detection
+  let lockfile = null;
+  try {
+    lockfile = lockManager.read();
+  } catch (err) {
+    findings[DRIFT_STATES.CORRUPT_LOCKFILE].push({
+      reason: `Lockfile is corrupt: ${err.message}`,
+    });
+  }
+
+  // 1. Adapter rendering with error containment
+  let rendered;
+  try {
+    rendered = renderAdapters(absRoot, adapters, options);
+  } catch (err) {
+    findings[DRIFT_STATES.CONFIG_ERROR].push({
+      reason: err.message,
+    });
+    return {
+      hasDrift: true,
+      hasError: true,
+      code: 2,
+      totalFindings: 1,
+      findings,
+      collisions: [],
+      diffs: [],
+      projectedCount: 0,
+      error: err.message,
+    };
+  }
+
+  const { artifacts, collisions, context } = rendered;
+
+  // 2. Empty projection check
+  if (artifacts.length === 0) {
+    const hasAgentsDir = fs.existsSync(path.join(absRoot, '.agents'));
+    if (hasAgentsDir) {
+      findings[DRIFT_STATES.EMPTY_PROJECTION].push({
+        reason: 'Projected artifact set is empty while .agents directory exists',
+      });
+    }
+  }
+
+  // 3. Check Profile Mismatch
   if (lockfile && lockfile.profile) {
     if (context.profileId && lockfile.profile.id !== context.profileId) {
       findings[DRIFT_STATES.PROFILE_MISMATCH].push({
@@ -92,7 +138,7 @@ function detectDrift(projectRoot, adapters = 'all', options = {}) {
     }
   }
 
-  // 2. Check Stale Input (Source Graph Hash)
+  // 4. Check Stale Input (Source Graph Hash)
   if (lockfile && lockfile.sourceGraphHash) {
     if (context.sourceGraphHash && lockfile.sourceGraphHash !== context.sourceGraphHash) {
       findings[DRIFT_STATES.STALE_INPUT].push({
@@ -104,7 +150,7 @@ function detectDrift(projectRoot, adapters = 'all', options = {}) {
 
   const projectedPaths = new Set(artifacts.map(a => a.path));
 
-  // 3. Inspect each projected artifact against disk and lockfile
+  // 5. Inspect each projected artifact against disk and lockfile
   for (const art of artifacts) {
     const fullPath = path.resolve(absRoot, art.path);
     const projectedContent = art.content.toString('utf8');
@@ -151,14 +197,32 @@ function detectDrift(projectRoot, adapters = 'all', options = {}) {
     }
   }
 
-  // 4. Check for orphan files recorded in lockfile but no longer projected
+  // 6. Check for orphan files recorded in lockfile but no longer projected
+  // Task 1.4: Scoped strictly to the active adapters being checked
   if (lockfile && lockfile.managedFiles) {
+    const targetGenerators = new Set(artifacts.map(a => a.generator));
+    const adapterList = adapters === 'all' ? null : (Array.isArray(adapters) ? adapters : [adapters]);
+    const allowedPrefixes = adapterList ? adapterList.map(a => `${a}@`) : null;
+
     for (const [recordedPath, meta] of Object.entries(lockfile.managedFiles)) {
+      if (meta && meta.generator && allowedPrefixes) {
+        const matchesTarget = targetGenerators.has(meta.generator) ||
+          allowedPrefixes.some(p => meta.generator.startsWith(p));
+        if (!matchesTarget) {
+          continue; // Skip files from adapters not currently being verified
+        }
+      }
+
+      if (meta && meta.kind && meta.kind !== 'generated-adapter') {
+        continue;
+      }
+
       if (!projectedPaths.has(recordedPath)) {
         const fullRecorded = path.resolve(absRoot, recordedPath);
         if (fs.existsSync(fullRecorded)) {
           findings[DRIFT_STATES.ORPHAN_MANAGED_OUTPUT].push({
             path: recordedPath,
+            generator: meta.generator,
             reason: 'File recorded in lockfile is no longer generated by active skills/profile',
           });
           diffs.push({
@@ -178,9 +242,18 @@ function detectDrift(projectRoot, adapters = 'all', options = {}) {
 
   const totalFindings = Object.values(findings).reduce((acc, list) => acc + list.length, 0);
   const hasDrift = totalFindings > 0 || collisions.length > 0;
+  const hasError = findings[DRIFT_STATES.CORRUPT_LOCKFILE].length > 0 ||
+    findings[DRIFT_STATES.EMPTY_PROJECTION].length > 0 ||
+    findings[DRIFT_STATES.CONFIG_ERROR].length > 0;
+  const code = hasError ? 2 : (hasDrift ? 1 : 0);
+  const status = hasError ? 'error' : (hasDrift ? 'drift' : 'pass');
 
   return {
+    schemaVersion: '2.0.0',
+    status,
     hasDrift,
+    hasError,
+    code,
     totalFindings,
     findings,
     collisions,

package/.agents/adapters/gemini/export.js

@@ -103,7 +103,7 @@ ${mergedContent.trimStart()}
 }
 
 function render(context) {
-  const skills = collectSkillDirectories(context?.profile);
+  const skills = collectSkillDirectories(context?.profile, context?.projectRoot);
   const artifacts = [];
 
   for (const skill of skills) {

package/.agents/adapters/pure-compiler.js

@@ -139,6 +139,13 @@ function registerAdapter(name, adapter) {
   adaptersRegistry.set(name, adapter);
 }
 
+/**
+ * Unregisters an adapter from the pure compiler registry.
+ */
+function unregisterAdapter(name) {
+  adaptersRegistry.delete(name);
+}
+
 /**
  * Retrieves a registered adapter.
  */
@@ -436,8 +443,11 @@ module.exports = {
   createProvenanceHeader,
   loadCompilerContext,
   registerAdapter,
+  unregisterAdapter,
   getAdapter,
   listAdapters,
   renderAdapters,
   applyArtifacts,
+  computeExactHash,
+  computeSemanticHash,
 };

package/.agents/adapters/shared.js

@@ -12,17 +12,26 @@ const AGENTS_MD_PATH = path.join(AGENTS_DIR, 'AGENTS.md');
  * Plugins intentionally live outside `core/skills`, so adapters must use this
  * helper rather than enumerate the core directory themselves.
  */
-function collectSkillDirectories(overrideProfile = null) {
+function collectSkillDirectories(overrideProfile = null, projectRoot = null) {
+  let profile = overrideProfile;
+  let root = projectRoot;
+
+  if (overrideProfile && typeof overrideProfile === 'object') {
+    if (overrideProfile.projectRoot && !root) {
+      root = overrideProfile.projectRoot;
+    }
+  }
+
+  const effectiveRoot = root ? path.resolve(root) : process.cwd();
   const plugins = require(path.join(AGENTS_DIR, 'plugins.js'));
-  let dirs = plugins.collectAllSkillDirs()
+  let dirs = plugins.collectAllSkillDirs(effectiveRoot)
     .filter(dir => fs.existsSync(dir) && fs.statSync(dir).isDirectory())
     .sort((a, b) => path.basename(a).localeCompare(path.basename(b)));
 
-  let profile = overrideProfile;
   if (!profile) {
     try {
       const profilesEngine = require(path.join(AGENTS_DIR, 'profiles.js'));
-      profile = profilesEngine.getActiveProfile();
+      profile = profilesEngine.getActiveProfile(effectiveRoot);
     } catch {
       profile = null;
     }

package/.agents/adapters/zed/export.js

@@ -95,7 +95,7 @@ function render(context) {
     `### Available Skills\n`
   );
 
-  const skills = collectSkillDirectories(context?.profile);
+  const skills = collectSkillDirectories(context?.profile, context?.projectRoot);
   for (const skill of skills) {
     const res = buildSkillSection(skill);
     if (res) {

package/.agents/compiled/registry.v2.json

@@ -1,7 +1,7 @@
 {
   "schemaVersion": 2,
   "compilerVersion": "2.0.0",
-  "sourceGraphHash": "sha256:c15f3691d9ed833630152b65959fdef465d88a7cf5bb27d44a086621e20c89c1",
+  "sourceGraphHash": "sha256:938c5051454535087e03f26af35c434cf194f414d2ec8044b4ae754e8524cf37",
   "skills": {
     "context-manager": {
       "id": "context-manager",
@@ -66,9 +66,9 @@
       "category": "general",
       "type": "compiler",
       "entrypoint": "SKILL.md",
-      "entrypointHash": "sha256:f28a8b6df5cf6d0dc8b32d8e4149f866b59ee11da0c1c050f766a0009674ca86",
-      "resourceTreeHash": "sha256:697cd51226283b147f719e2f4074acb058be1f3fe42714a3babb771e52e26a73",
-      "estimatedTokens": 1227,
+      "entrypointHash": "sha256:ab14bcd603573c975a69cb95b5ef8a305de8eb888c81c20c994121313f017239",
+      "resourceTreeHash": "sha256:48568f01d27fa53e2e01a6a63afd60eb2d43cabdc9eb2cfe6f02a2b67d0f53e1",
+      "estimatedTokens": 1365,
       "source": ".agents/core/skills/context-os/skill.yaml",
       "signals": {
         "aliases": [
@@ -85,7 +85,7 @@
       },
       "context": {
         "priority": 50,
-        "estimatedTokens": 1227
+        "estimatedTokens": 1365
       },
       "resources": [
         {
@@ -137,9 +137,9 @@
       "category": "general",
       "type": "instruction-only",
       "entrypoint": "SKILL.md",
-      "entrypointHash": "sha256:0985a21360cdd796a2f2970b659b6a7a1cdd55672dd35b0292400f9a0092b556",
-      "resourceTreeHash": "sha256:6e2e654c903e1043609c1f7f36980a19c1e20e35bc3fa337ad051293f1e9124c",
-      "estimatedTokens": 3065,
+      "entrypointHash": "sha256:88b606d086f63c5e293630ad84ff524d2542f2953fc1a5a451bd77352073b0ad",
+      "resourceTreeHash": "sha256:e78a054d8f54a72550cf10d551a82f56015aedb3f16a14021e654574bad5804f",
+      "estimatedTokens": 3083,
       "source": ".agents/core/skills/engineering-workflow/skill.yaml",
       "signals": {
         "aliases": [
@@ -156,7 +156,7 @@
       },
       "context": {
         "priority": 50,
-        "estimatedTokens": 3065
+        "estimatedTokens": 3083
       },
       "resources": [
         {
@@ -188,9 +188,9 @@
       "category": "general",
       "type": "instruction-only",
       "entrypoint": "SKILL.md",
-      "entrypointHash": "sha256:677c7229e8b483990cf4b441b990328f5933127a7c449830fe2786cd232321c4",
-      "resourceTreeHash": "sha256:38e0e3e512df2855647a083a6e0ae759a3af613b7f2e2848046b8d6998143539",
-      "estimatedTokens": 1868,
+      "entrypointHash": "sha256:bd091c13a5c15c2ac55a8c27b309ffdd8e0a5a8b8260198808b70e45e685b9fd",
+      "resourceTreeHash": "sha256:8ae82b8dd89128820c8b28c7e9e8aac878f363381dd2a11043b8aff9d03ae35e",
+      "estimatedTokens": 1890,
       "source": ".agents/core/skills/gemini-precision/skill.yaml",
       "signals": {
         "aliases": [
@@ -207,13 +207,21 @@
       },
       "context": {
         "priority": 50,
-        "estimatedTokens": 1868
+        "estimatedTokens": 1890
       },
       "resources": [
+        {
+          "path": "EXAMPLES.md",
+          "mode": "on-demand"
+        },
         {
           "path": "SKILL.md",
           "mode": "on-demand"
         },
+        {
+          "path": "TROUBLESHOOTING.md",
+          "mode": "on-demand"
+        },
         {
           "path": "VALIDATION.json",
           "mode": "on-demand"
@@ -231,9 +239,9 @@
       "category": "general",
       "type": "instruction-only",
       "entrypoint": "SKILL.md",
-      "entrypointHash": "sha256:faaa89d02bf41416c173e6387e5c9c5065cfe4d82e76c2ae244b77c6cecd3230",
-      "resourceTreeHash": "sha256:f83fba0726700070887643c7e20a0584ba29b0f96c2587bcd834860362ce7a95",
-      "estimatedTokens": 1774,
+      "entrypointHash": "sha256:09334359de594f9c3e667ae0660db9a5c977c583b25ccf7de71fe25b7134454e",
+      "resourceTreeHash": "sha256:0bcfb511ef61a6782e3394c0779e5f5eed1833aff6e24c7749957df209c6185a",
+      "estimatedTokens": 1791,
       "source": ".agents/core/skills/gstack-roles/skill.yaml",
       "signals": {
         "aliases": [
@@ -250,7 +258,7 @@
       },
       "context": {
         "priority": 50,
-        "estimatedTokens": 1774
+        "estimatedTokens": 1791
       },
       "resources": [
         {
@@ -333,9 +341,9 @@
       "category": "backend",
       "type": "instruction-only",
       "entrypoint": "SKILL.md",
-      "entrypointHash": "sha256:151bc9080230cdec8e1de9d703d03b739ab0767e24fb2551acd5cf58feb4f3ab",
-      "resourceTreeHash": "sha256:da5be685a6db8c48faeb74722891816960e4b6a86378b680f045a81a204ac572",
-      "estimatedTokens": 1615,
+      "entrypointHash": "sha256:5daec60e9bb1c49a2b66e43d73e897397507e3604ef4bf02588d35cfd59b1903",
+      "resourceTreeHash": "sha256:b4302851046e1faffc18bc600c79d92d1da7f31bed03781eee89e84ddedc4956",
+      "estimatedTokens": 2237,
       "source": ".agents/core/skills/security/skill.yaml",
       "signals": {
         "aliases": [
@@ -403,7 +411,7 @@
       },
       "context": {
         "priority": 90,
-        "estimatedTokens": 1615
+        "estimatedTokens": 2237
       },
       "resources": [
         {
@@ -421,10 +429,6 @@
         {
           "path": "VALIDATION.json",
           "mode": "on-demand"
-        },
-        {
-          "path": "security.md",
-          "mode": "on-demand"
         }
       ],
       "deprecated": false,