mandrel 2.59.0 → 2.61.0

package/lib/migrations/steps/2.2.0-retire-epic-ac-tags.js

@@ -1,26 +1,15 @@
 // lib/migrations/steps/2.2.0-retire-epic-ac-tags.js
 /**
- * Story #4604 — strip the retired `@epic-<id>-ac-N` Gherkin AC tag namespace
- * from consumer feature files.
- *
- * The v2 Epic removal deleted `acceptance-spec-reconciler.js`, the only
- * consumer of the namespaced per-Epic AC tags, and the `/mandrel-plan` authoring
- * prompt no longer mandates them. Surviving tags in consumer `.feature`
- * files are inert and violate the gherkin-standards tag taxonomy's
- * no-ad-hoc-tags rule, so this step removes them: each `@epic-<digits>-ac-<digits>`
- * token is deleted from tag lines, a tag line left with no tags is dropped
- * entirely, and every other tag and line is preserved byte-for-byte. Files
- * with no stale tags are never rewritten.
+ * Strip the inert, taxonomy-violating `@epic-<id>-ac-N` tags from consumer
+ * feature files; a tag line left empty is dropped, everything else is kept
+ * byte-for-byte, and untouched files are never rewritten.
  */
 
 import nodeFs from 'node:fs';
 import path from 'node:path';
 
 /**
- * Mirror of `CANONICAL_FEATURE_ROOTS` in
- * `.agents/scripts/lib/bdd-runner-detect.js`. Duplicated deliberately:
- * `lib/` runs from the installed npm package inside a consumer project and
- * must not import from the materialized `.agents/` payload.
+ * Mirrors `bdd-runner-detect.js`: `lib/` must not import the `.agents/` payload.
  */
 const CANONICAL_FEATURE_ROOTS = Object.freeze([
   'tests/features',
@@ -30,18 +19,11 @@ const CANONICAL_FEATURE_ROOTS = Object.freeze([
 
 const EPIC_AC_TAG_RE = /@epic-\d+-ac-\d+/;
 
-/**
- * A Gherkin tag line: optional indentation followed by one or more
- * whitespace-separated `@tag` tokens and nothing else.
- */
 const TAG_LINE_RE = /^(\s*)(@\S+(?:\s+@\S+)*)\s*$/;
 
 /**
- * Recursively collect `.feature` file paths under `root`.
- *
  * @param {string} root
- * @param {typeof nodeFs} [fsImpl] Filesystem seam; defaults to the real
- *   `node:fs` per `.agents/rules/test-seams.md` rule 1.
+ * @param {typeof nodeFs} [fsImpl]
  * @returns {string[]}
  */
 function collectFeatureFiles(root, fsImpl = nodeFs) {
@@ -72,11 +54,8 @@ function collectFeatureFiles(root, fsImpl = nodeFs) {
 
 /**
  * @param {unknown} ctx
- * @param {typeof nodeFs} [fsImpl] Filesystem seam; forwarded to
- *   {@link collectFeatureFiles} rather than re-acquired there
- *   (`.agents/rules/test-seams.md` rule 4).
- * @returns {string[]} Absolute paths of every `.feature` file under the
- *   canonical feature roots that exist in the consumer tree.
+ * @param {typeof nodeFs} [fsImpl]
+ * @returns {string[]}
  */
 function resolveFeatureFiles(ctx, fsImpl = nodeFs) {
   const projectRoot = ctx?.projectRoot ?? process.cwd();
@@ -86,10 +65,6 @@ function resolveFeatureFiles(ctx, fsImpl = nodeFs) {
 }
 
 /**
- * Strip retired `@epic-<id>-ac-<n>` tokens from one file's content.
- * Only tag lines are touched; a tag line whose every tag was retired is
- * dropped. Returns the original string when nothing matched.
- *
  * @param {string} content
  * @returns {string}
  */
@@ -122,9 +97,7 @@ export const retireEpicAcTags = {
     '(their reconciler consumer was deleted in the v2 Epic removal)',
   /**
    * @param {{ projectRoot?: string, fs?: typeof nodeFs }} [ctx]
-   * @param {typeof nodeFs} [fsImpl] Optional final filesystem seam; defaults
-   *   to `ctx.fs` when the migration runner threads one, else the real
-   *   `node:fs` (`.agents/rules/test-seams.md` rule 1).
+   * @param {typeof nodeFs} [fsImpl]
    * @returns {boolean}
    */
   detect(ctx, fsImpl = ctx?.fs ?? nodeFs) {
@@ -138,9 +111,7 @@ export const retireEpicAcTags = {
   },
   /**
    * @param {{ projectRoot?: string, fs?: typeof nodeFs }} [ctx]
-   * @param {typeof nodeFs} [fsImpl] Optional final filesystem seam; defaults
-   *   to `ctx.fs` when the migration runner threads one, else the real
-   *   `node:fs` (`.agents/rules/test-seams.md` rule 1).
+   * @param {typeof nodeFs} [fsImpl]
    * @returns {void}
    */
   apply(ctx, fsImpl = ctx?.fs ?? nodeFs) {

package/lib/migrations/steps/2.20.0-retire-codebase-snapshot.js

@@ -1,17 +1,5 @@
 // lib/migrations/steps/2.20.0-retire-codebase-snapshot.js
-/**
- * Story #4811 — strip the retired `planning.codebaseSnapshot` block from a
- * consumer's `.agentrc.json` and from the `.agentrc.local.json` overlay an
- * operator pins in `.agentrc.local.json`.
- *
- * Spec authoring is grounded by targeted retrieval plus the Phase 8
- * file-assumption gate, so the snapshot block has no consumer; the block
- * carries `additionalProperties: false`, so a config still setting it fails
- * validation on upgrade rather than warning.
- *
- * `planning` is optional, so a config that carried nothing but the snapshot
- * does not keep an orphan `planning: {}`.
- */
+/** Strip the reader-less `planning.codebaseSnapshot` block. */
 
 import { createRetireAgentrcKeyStep } from '../helpers/retire-agentrc-key.js';
 

package/lib/migrations/steps/2.32.0-retire-lint-baseline-command.js

@@ -1,32 +1,7 @@
 // lib/migrations/steps/2.32.0-retire-lint-baseline-command.js
 /**
- * Story #5004 — strip the retired `project.commands.lintBaseline` from a
- * consumer's config. The framework-owned lint-baseline capture CLI is gone,
- * and the `commands` block carries `additionalProperties: false`, so a
- * config still naming the command fails validation on upgrade.
- *
- * It sweeps **both** config surfaces. `config-resolver.js` deep-merges
- * `.agentrc.local.json` over `.agentrc.json` and validates the result, so a
- * key surviving in the operator's overlay fails exactly as a base one would.
- * Sweeping only the base would report "nothing to migrate" and leave that
- * consumer hard-broken with no self-service remedy — re-running
- * `mandrel update` would keep reporting clean — while this commit's
- * `BREAKING CHANGE:` footer promises the upgrade deletes the key for them.
- *
- * The `lint` baseline KIND survives for consumers whose own linter writes
- * `baselines/lint.json`; only the framework-owned capture shell is gone, so
- * nothing here touches the baseline file or the gate config.
- *
- * An emptied `commands` block is deliberately left in place (`pruneDepth: 0`):
- * unlike `planning.complexityGate`, `project` is a required block and an empty
- * `commands` object is valid against the schema, so pruning it would be a
- * cosmetic edit to a config the consumer owns.
- *
- * This step is also the carrier for the release note #5004 never emitted: its
- * commit ships the `BREAKING CHANGE:` footer that the squash subject on `main`
- * (`227e1af4`) lacks, and which release-please therefore could not surface.
- * See `single-story-close/phases/conventional-subject.js` for the close-side
- * fix that stops the next one being lost.
+ * Strip `project.commands.lintBaseline` (its capture CLI is gone). An emptied
+ * `commands` is kept: `project` is required and `{}` is valid.
  */
 
 import { createRetireAgentrcKeyStep } from '../helpers/retire-agentrc-key.js';

package/lib/migrations/steps/2.57.0-retire-delivery-limit-knobs.js

@@ -1,28 +1,7 @@
 // lib/migrations/steps/2.57.0-retire-delivery-limit-knobs.js
 /**
- * Story #5313 — the delivery diet. Strip the retired `delivery.*` keys from a
- * consumer's config:
- *
- *   - `delivery.routing.freshCriticSampleRate` — the maker-checker sampling
- *     floor is gone; the standard profile routes purely off the derived
- *     change level (high or underivable → fresh critic, low → inline).
- *   - `delivery.codeReview.maxFixScopeFiles` — the auto-fix file-count
- *     ceiling bounded remediation by count rather than by risk.
- *   - `delivery.signals` (`rework.editsPerFile`, `retry.repeatCount`) — the
- *     detector thresholds and `SIGNALS_DEFAULTS` are retired wholesale.
- *   - `delivery.quality.codingGuardrails.cyclomaticMustFix` — the cyclomatic
- *     ratchet keeps its fixed ceiling of 12; `cyclomaticFlag` stays advisory.
- *
- * Every affected block carries `additionalProperties: false`, so a config
- * still setting any of them fails validation on upgrade rather than warning.
- * It sweeps **both** config surfaces (`.agentrc.json` and the gitignored
- * `.agentrc.local.json`), because `config-resolver.js` deep-merges the
- * overlay before the AJV gate runs.
- *
- * Pruning: `delivery.signals` is removed whole (`pruneDepth: 1` prunes an
- * emptied `delivery`); the nested keys prune their emptied ancestors up to
- * `delivery` itself. `delivery` is optional, so an emptied block is removed
- * rather than left as `{}`. A sibling key that survives keeps its block.
+ * Strip the retired `delivery.*` limit knobs; `delivery` is optional, so
+ * emptied ancestors are pruned up to it.
  */
 
 import { createRetireAgentrcKeyStep } from '../helpers/retire-agentrc-key.js';

package/lib/migrations/steps/2.57.0-retire-planning-limit-knobs.js

@@ -1,32 +1,7 @@
 // lib/migrations/steps/2.57.0-retire-planning-limit-knobs.js
 /**
- * Story #5312 — the planning diet. Strip the ten retired `planning.*` keys
- * from a consumer's config:
- *
- *   - `planning.complexityGate` — the plan-side lite claim and its persist
- *     backstop are gone; nothing reads the switch.
- *   - `planning.riskHeuristics` — the phrase list was empty in every consumer
- *     that resolved it, and the critic trigger that matched it went with the
- *     consolidation critic.
- *   - `planning.failOnSharedEditors`, `planning.requireExplicitCrossStoryDeps`,
- *     `planning.failOnRegistryConflicts`, `planning.failOnLargeFanOut`,
- *     `planning.largeFanOutThreshold`, `planning.crossCuttingRegistries` —
- *     every conflict finding is advisory now, and the registry and fan-out
- *     findings no longer exist.
- *   - `planning.memoryPool.staleAfterDays`, `planning.memoryPool.growthDelta`
- *     — the memory-hygiene advisory keeps only its index-byte arm.
- *
- * The `planning` block carries `additionalProperties: false`, so a config
- * still setting any of them fails validation on upgrade rather than warning.
- * It sweeps **both** config surfaces (`.agentrc.json` and the gitignored
- * `.agentrc.local.json`), because `config-resolver.js` deep-merges the
- * overlay before the AJV gate runs.
- *
- * Pruning: the two `memoryPool` keys prune the `memoryPool` object when it
- * empties and then `planning` itself (`pruneDepth: 2`); the top-level keys
- * prune `planning` (`pruneDepth: 1`). `planning` is optional, so an emptied
- * block is removed rather than left as `{}`. A `memoryPool` that still
- * carries `indexByteCeiling` survives untouched.
+ * Strip the retired `planning.*` limit knobs; `planning` is optional, so
+ * emptied blocks are pruned.
  */
 
 import { createRetireAgentrcKeyStep } from '../helpers/retire-agentrc-key.js';

package/lib/migrations/steps/2.60.0-retire-audit-results-autofile.js

@@ -0,0 +1,21 @@
+// lib/migrations/steps/2.60.0-retire-audit-results-autofile.js
+/**
+ * Strip `delivery.feedbackLoop.auditResultsAutoFile`: it had no reader. The
+ * sibling `retroProposals` is live and stays.
+ */
+
+import { createRetireAgentrcKeyStep } from '../helpers/retire-agentrc-key.js';
+
+export const retireAuditResultsAutoFile = createRetireAgentrcKeyStep({
+  version: '2.60.0',
+  description:
+    'strip the retired delivery.feedbackLoop.auditResultsAutoFile key from ' +
+    '.agentrc.json — its graduator was deleted, so the toggle had no ' +
+    'runtime reader (Story #5366)',
+  keys: [
+    {
+      path: ['delivery', 'feedbackLoop', 'auditResultsAutoFile'],
+      pruneDepth: 2,
+    },
+  ],
+});

package/lib/migrations/steps/strip-removed-agentrc-keys.js

@@ -0,0 +1,333 @@
+// lib/migrations/steps/strip-removed-agentrc-keys.js
+/**
+ * Strip the `.agentrc` keys the config-surface cut removed (removed gates,
+ * zero-reader keys, tuning keys folded into constants) from both config
+ * surfaces, reporting each one's replacement — and a `behaviour change` line
+ * when the consumer's value differed, so the upgrade never silently changes
+ * delivery. Only `delivery`/`planning` (optional) ancestors are pruned.
+ */
+
+import nodeFs from 'node:fs';
+import path from 'node:path';
+
+const AGENTRC_FILENAMES = Object.freeze([
+  '.agentrc.json',
+  '.agentrc.local.json',
+]);
+
+const PRUNABLE_ROOTS = new Set(['delivery', 'planning']);
+
+/**
+ * @param {string} dotted
+ * @param {string} constant
+ * @param {unknown} value
+ */
+const folded = (dotted, constant, value) => ({
+  path: dotted.split('.'),
+  constant,
+  value,
+});
+
+/**
+ * `alwaysChanges`: removal changes behaviour for anyone who had it on.
+ *
+ * @param {string} dotted
+ * @param {string} reason
+ * @param {{ alwaysChanges?: boolean }} [opts]
+ */
+const removed = (dotted, reason, { alwaysChanges = false } = {}) => ({
+  path: dotted.split('.'),
+  reason,
+  alwaysChanges,
+});
+
+const REMOVED_AGENTRC_KEYS = Object.freeze([
+  removed(
+    'delivery.quality.gates.lint',
+    'the lint baseline gate was removed (npm run lint still runs as a close gate)',
+    { alwaysChanges: true },
+  ),
+  removed(
+    'delivery.quality.gates.lighthouse',
+    'the lighthouse baseline gate was removed',
+    { alwaysChanges: true },
+  ),
+  removed('delivery.quality.baselineEpsilon.lint', 'its gate was removed'),
+  removed(
+    'delivery.quality.baselineEpsilon.lighthouse',
+    'its gate was removed',
+  ),
+  removed('delivery.quality.gates.mutation.strykerConfigPath', 'no reader'),
+  removed('delivery.auditToStories.autoComment', 'no reader'),
+  removed('delivery.codeReview.providerConfig', 'no reader'),
+  removed('delivery.quality.gates.crap.friction', 'no reader'),
+  removed('delivery.quality.gates.crap.refreshTimeoutMs', 'no reader'),
+  removed(
+    'delivery.quality.gates.maintainability.refreshTimeoutMs',
+    'no reader',
+  ),
+  removed('delivery.quality.gates.duplication.refreshTimeoutMs', 'no reader'),
+  removed(
+    'delivery.quality.gates.crap.incrementalCoverage.enabled',
+    'deprecated alias — set skipWhenUnchanged / baselineJoin instead',
+    { alwaysChanges: true },
+  ),
+  folded('delivery.quality.gateScoping.scope', 'GATE_SCOPING.scope', 'diff'),
+  folded(
+    'delivery.quality.gateScoping.diffRef',
+    'GATE_SCOPING.diffRef',
+    'main',
+  ),
+  folded(
+    'delivery.quality.gates.crap.refreshTag',
+    'BASELINE_REFRESH_TAG',
+    'baseline-refresh:',
+  ),
+  folded(
+    'delivery.quality.gates.maintainability.refreshTag',
+    'BASELINE_REFRESH_TAG',
+    'baseline-refresh:',
+  ),
+  folded(
+    'delivery.quality.gates.coverage.timeoutMs',
+    'COVERAGE_GATE_DEFAULTS.timeoutMs',
+    600000,
+  ),
+  folded(
+    'delivery.quality.formatAutofix.timeoutMs',
+    'FORMAT_AUTOFIX_TIMEOUT_MS',
+    60000,
+  ),
+  folded(
+    'delivery.quality.codingGuardrails.cyclomaticFlag',
+    'CODING_GUARDRAILS.cyclomaticFlag',
+    8,
+  ),
+  folded(
+    'delivery.quality.codingGuardrails.requireSiblingTest',
+    'CODING_GUARDRAILS.requireSiblingTest',
+    false,
+  ),
+  folded(
+    'delivery.quality.autoRefresh.crapJumpCap',
+    'AUTO_REFRESH_DEFAULTS.crapJumpCap',
+    5,
+  ),
+  folded(
+    'delivery.quality.autoRefresh.scope',
+    'AUTO_REFRESH_DEFAULTS.scope',
+    'diff',
+  ),
+  ...Object.entries({
+    maintainability: 0.5,
+    crap: 0.5,
+    coverage: 0.1,
+    mutation: 0.5,
+    'bundle-size': 1024,
+    duplication: 0.5,
+  }).map(([kind, value]) =>
+    folded(
+      `delivery.quality.baselineEpsilon.${kind}`,
+      `BASELINE_EPSILON.${kind}`,
+      value,
+    ),
+  ),
+  folded('delivery.codeReview.maxFixAttempts', 'none (no reader)', 3),
+  folded('github.defaultTimeoutMs', 'GH_DEFAULT_TIMEOUT_MS', 60000),
+  folded(
+    'delivery.ci.watch.pollIntervalMs',
+    'WATCH_DEFAULTS.pollIntervalMs (--poll-interval-ms)',
+    10000,
+  ),
+  folded(
+    'delivery.ci.watch.maxPolls',
+    'WATCH_DEFAULTS.maxPolls (--max-polls)',
+    180,
+  ),
+  folded(
+    'delivery.ci.watch.maxResumes',
+    'WATCH_DEFAULTS.maxResumes (--max-resumes)',
+    3,
+  ),
+  folded(
+    'delivery.ci.watch.attachWindowMs',
+    'WATCH_DEFAULTS.attachWindowMs (--attach-window-ms)',
+    1200000,
+  ),
+  folded(
+    'delivery.execution.timeoutMs',
+    'LIMITS_DEFAULTS.executionTimeoutMs',
+    600000,
+  ),
+  folded(
+    'delivery.execution.requireCreditedCapture',
+    'off (coverage-capture --require-credited)',
+    false,
+  ),
+  folded(
+    'delivery.tempRetention.staleDays',
+    'TEMP_RETENTION_DEFAULTS.staleDays',
+    7,
+  ),
+  folded('delivery.mergeWatch.intervalSeconds', 'DEFAULT_INTERVAL_SECONDS', 30),
+  folded('delivery.mergeWatch.updateAttempts', 'DEFAULT_UPDATE_ATTEMPTS', 3),
+  folded('delivery.review.lensDiffFloor', 'DEFAULT_LENS_DIFF_FLOOR', 40),
+  folded(
+    'delivery.feedbackLoop.frictionWindowDays',
+    'FRICTION_WINDOW_DAYS',
+    30,
+  ),
+  folded(
+    'delivery.auditToStories.severityFloor',
+    'DEFAULT_SEVERITY_FLOOR (--severity)',
+    'high',
+  ),
+  folded('planning.memoryPool.indexByteCeiling', 'INDEX_BYTE_CEILING', 24576),
+]);
+
+/**
+ * @param {object | null} config
+ * @param {string[]} keyPath
+ * @returns {object[] | null}
+ */
+function containersFor(config, keyPath) {
+  if (!config || typeof config !== 'object') return null;
+  const chain = [config];
+  for (const segment of keyPath.slice(0, -1)) {
+    const next = chain[chain.length - 1][segment];
+    if (!next || typeof next !== 'object' || Array.isArray(next)) return null;
+    chain.push(next);
+  }
+  return chain;
+}
+
+/**
+ * @param {object | null} config
+ * @param {string[]} keyPath
+ * @returns {{ present: boolean, value?: unknown }}
+ */
+function lookup(config, keyPath) {
+  const chain = containersFor(config, keyPath);
+  const leaf = keyPath[keyPath.length - 1];
+  if (!chain || !Object.hasOwn(chain[chain.length - 1], leaf)) {
+    return { present: false };
+  }
+  return { present: true, value: chain[chain.length - 1][leaf] };
+}
+
+/**
+ * @param {object} config
+ * @param {string[]} keyPath
+ * @returns {void}
+ */
+function deleteAndPrune(config, keyPath) {
+  const chain = containersFor(config, keyPath);
+  if (!chain) return;
+  delete chain[chain.length - 1][keyPath[keyPath.length - 1]];
+  if (!PRUNABLE_ROOTS.has(keyPath[0])) return;
+  for (let index = chain.length - 1; index > 0; index -= 1) {
+    if (Object.keys(chain[index]).length > 0) break;
+    delete chain[index - 1][keyPath[index - 1]];
+  }
+}
+
+/**
+ * @param {object} entry
+ * @param {unknown} value
+ * @returns {boolean}
+ */
+function changesBehaviour(entry, value) {
+  if ('constant' in entry) {
+    return JSON.stringify(value) !== JSON.stringify(entry.value);
+  }
+  if (!entry.alwaysChanges) return false;
+  return !(value && typeof value === 'object' && value.enabled === false);
+}
+
+/**
+ * @param {string} filename
+ * @param {object} entry
+ * @param {unknown} value
+ * @returns {string}
+ */
+function reportLine(filename, entry, value) {
+  const dotted = entry.path.join('.');
+  const replacement =
+    'constant' in entry
+      ? `now ${entry.constant} = ${JSON.stringify(entry.value)}`
+      : entry.reason;
+  const prefix = changesBehaviour(entry, value)
+    ? `  behaviour change: ${filename} set ${dotted} = ${JSON.stringify(value)};`
+    : `  removed ${filename} ${dotted};`;
+  return `${prefix} ${replacement}`;
+}
+
+/**
+ * Mutates `config`.
+ *
+ * @param {object} config
+ * @param {string} filename
+ * @returns {string[]}
+ */
+function stripRemovedKeys(config, filename) {
+  const lines = [];
+  for (const entry of REMOVED_AGENTRC_KEYS) {
+    const { present, value } = lookup(config, entry.path);
+    if (!present) continue;
+    lines.push(reportLine(filename, entry, value));
+    deleteAndPrune(config, entry.path);
+  }
+  return lines;
+}
+
+/**
+ * @param {{ projectRoot?: string }} ctx
+ * @param {string} filename
+ * @param {typeof nodeFs} fsImpl
+ * @returns {object | null}
+ */
+function readConfig(ctx, filename, fsImpl) {
+  try {
+    const file = path.join(ctx?.projectRoot ?? process.cwd(), filename);
+    return JSON.parse(fsImpl.readFileSync(file, 'utf8'));
+  } catch {
+    return null;
+  }
+}
+
+/**
+ * @param {object | null} config
+ * @returns {boolean}
+ */
+function carriesRemovedKey(config) {
+  return REMOVED_AGENTRC_KEYS.some(
+    (entry) => lookup(config, entry.path).present,
+  );
+}
+
+export const stripRemovedAgentrcKeys = {
+  version: '2.61.0',
+  description:
+    'strip the .agentrc keys the config-surface cut removed — the lint and ' +
+    'lighthouse gates, zero-reader keys, and never-set tuning keys now ' +
+    'fixed as constants (Story #5382)',
+  detect(ctx) {
+    const fsImpl = ctx?.fs ?? nodeFs;
+    return AGENTRC_FILENAMES.some((filename) =>
+      carriesRemovedKey(readConfig(ctx, filename, fsImpl)),
+    );
+  },
+  apply(ctx) {
+    const fsImpl = ctx?.fs ?? nodeFs;
+    const log = ctx?.log ?? console.log;
+    for (const filename of AGENTRC_FILENAMES) {
+      const config = readConfig(ctx, filename, fsImpl);
+      if (!carriesRemovedKey(config)) continue;
+      for (const line of stripRemovedKeys(config, filename)) log(line);
+      fsImpl.writeFileSync(
+        path.join(ctx?.projectRoot ?? process.cwd(), filename),
+        `${JSON.stringify(config, null, 2)}\n`,
+      );
+    }
+  },
+};

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "mandrel",
-  "version": "2.59.0",
+  "version": "2.61.0",
   "description": "Claude Code-first opinionated workflow framework: instructions, skills, rules, and SDLC workflows that govern AI coding assistants.",
   "files": [
     ".agents/",
@@ -20,21 +20,21 @@
     "test:quick": "node .agents/scripts/run-tests.js --tier quick",
     "test:integration": "node .agents/scripts/run-tests.js --tier integration",
     "test:e2e": "node .agents/scripts/run-tests.js --tier e2e",
-    "test:profile": "node .agents/scripts/run-test-profile.js",
+    "test:profile": "node scripts/run-test-profile.js",
     "test:census": "SPAWN_CENSUS_OUT=\"${SPAWN_CENSUS_OUT:-temp/census.json}\" NODE_OPTIONS=\"--require $PWD/tests/fixtures/spawn-census.cjs\" node .agents/scripts/run-tests.js",
-    "test:isolate": "node .agents/scripts/test-isolate.js",
-    "verify": "node .agents/scripts/run-verify.js",
+    "test:isolate": "node scripts/test-isolate.js",
+    "verify": "node scripts/run-verify.js",
     "typecheck": "node -e \"process.exit(0)\"",
-    "test:coverage": "node .agents/scripts/run-coverage.js",
+    "test:coverage": "node scripts/run-coverage.js",
     "coverage:check": "node .agents/scripts/check-baselines.js --gate coverage",
     "coverage:update": "node .agents/scripts/update-coverage-baseline.js",
     "coverage:reanchor": "node .agents/scripts/update-coverage-baseline.js --full-scope",
     "baseline:agents-loc": "node baselines/agents-loc-baseline.mjs",
-    "baselines:scope": "node .agents/scripts/check-baseline-scope.js",
-    "baselines:prune": "node .agents/scripts/prune-baseline-orphans.js",
+    "baselines:scope": "node scripts/check-baseline-scope.js",
+    "baselines:prune": "node scripts/prune-baseline-orphans.js",
     "baselines:merge-driver": "node .agents/scripts/merge-baseline.js --install",
     "lint:md": "markdownlint-cli2 \".agents/**/*.md\" \"*.md\" \"!node_modules/**\" \"!.worktrees/**\"",
-    "lint": "node .agents/scripts/run-lint.js && node .agents/scripts/check-generated-validator.js --check && node .agents/scripts/check-pinned-override-notes.js && npm run docs:check",
+    "lint": "node scripts/run-lint.js && node scripts/check-generated-validator.js --check && node scripts/check-pinned-override-notes.js && npm run docs:check",
     "docs:gen": "node .agents/scripts/generate-config-docs.js && node .agents/scripts/generate-workflows-doc.js && node .agents/scripts/generate-lens-checklists.js",
     "docs:check": "node .agents/scripts/generate-config-docs.js --check && node .agents/scripts/generate-workflows-doc.js --check && node .agents/scripts/generate-lens-checklists.js --check && node .agents/scripts/check-doc-links.js && npm run skills:check",
     "skills:index": "node .agents/scripts/generate-skills-index.js",
@@ -45,15 +45,18 @@
     "maintainability:update": "node .agents/scripts/update-maintainability-baseline.js",
     "maintainability:reanchor": "node .agents/scripts/update-maintainability-baseline.js --full-scope",
     "check:arch": "node .agents/scripts/check-arch-cycles.js",
+    "//resident-context-reports": "check:context-budget and check:workflow-citations are REPORTS, not ratchets (Story #5340, ADR 20260917-5340). check:context-budget still fails when the alwaysLoaded tier exceeds its recorded total plus the committed tolerance; its workflow tier, and check:workflow-citations in full, print and always exit 0. A green run is not evidence the numbers held — read the output.",
     "check:context-budget": "node .agents/scripts/check-context-budget.js",
     "check:cyclomatic": "node .agents/scripts/check-cyclomatic.js",
     "cyclomatic:update": "node .agents/scripts/check-cyclomatic.js --update",
-    "dead-exports:update": "node .agents/scripts/update-dead-exports-baseline.js && node .agents/scripts/update-dead-exports-baseline.js --production",
-    "check:knip-entries": "node .agents/scripts/check-knip-entries.js",
-    "validator:gen": "node .agents/scripts/check-generated-validator.js",
-    "validator:check": "node .agents/scripts/check-generated-validator.js --check",
-    "check:schema-refs": "node .agents/scripts/check-schema-references.js",
-    "check:workflow-citations": "node .agents/scripts/check-workflow-citations.js",
+    "dead-exports:update": "node scripts/update-dead-exports-baseline.js && node scripts/update-dead-exports-baseline.js --production",
+    "check:knip-entries": "node scripts/check-knip-entries.js",
+    "validator:gen": "node scripts/check-generated-validator.js",
+    "validator:check": "node scripts/check-generated-validator.js --check",
+    "config:ceiling": "node scripts/check-agentrc-key-ceiling.js",
+    "check:comment-policy": "node scripts/check-comment-policy.js",
+    "check:schema-refs": "node scripts/check-schema-references.js",
+    "check:workflow-citations": "node scripts/check-workflow-citations.js",
     "crap:check": "node .agents/scripts/check-baselines.js --gate crap",
     "crap:update": "node .agents/scripts/update-crap-baseline.js",
     "crap:reanchor": "node .agents/scripts/update-crap-baseline.js --full-scope",