mandrel 2.60.0 → 2.61.0

package/.agents/scripts/lib/config/defaults.js

@@ -1,23 +1,6 @@
 /**
- * `getAgentrcDefaults()` — single source of `.agentrc.json` defaults.
- *
- * `.agents/docs/agentrc-reference.json` is the authoritative editor-reference
- * inventory of every field the framework supports plus its default
- * value. Runtime accessors under `lib/config/*.js` (`COMMANDS_DEFAULTS`,
- * `BRANCH_PROTECTION_DEFAULTS`, gate defaults, etc.) layer the same
- * values onto whatever the project config carries; a parity test
- * (tests/config/full-agentrc-runtime-parity.test.js) keeps the two in
- * lockstep.
- *
- * Story #1995: the `/mandrel-update` sync helper consults this module
- * (not the template directly) to decide whether a project value is
- * "just the default" and therefore safe to omit from `.agentrc.json`.
- *
- * Identity placeholders (`[OWNER]`, `[REPO]`, `@[USERNAME]`) carry no
- * meaningful default — the operator must set them. They survive in
- * the returned object so the consumer can see the expected shape, but
- * the sync helper treats them as "no usable default" via
- * `IDENTITY_PLACEHOLDER_PATHS`.
+ * `.agentrc.json` defaults from `.agents/docs/agentrc-reference.json`; a
+ * parity test keeps them in lockstep with the runtime accessors' constants.
  */
 
 import fs from 'node:fs';
@@ -33,12 +16,7 @@ export const FULL_AGENTRC_PATH = path.join(
   'agentrc-reference.json',
 );
 
-/**
- * Dotted paths whose template value is a human placeholder
- * (`[OWNER]`, `[REPO]`, `@[USERNAME]`). The sync helper treats these
- * as "no default" — they are never auto-filled, and a project value
- * present at one of these paths is never flagged as redundant.
- */
+/** Placeholder-valued paths: never auto-filled, never flagged redundant. */
 export const IDENTITY_PLACEHOLDER_PATHS = Object.freeze([
   'github.owner',
   'github.repo',
@@ -48,8 +26,6 @@ export const IDENTITY_PLACEHOLDER_PATHS = Object.freeze([
 let _cache = null;
 
 /**
- * Parse `.agents/docs/agentrc-reference.json` and return a deep-frozen snapshot.
- *
  * @param {{ bustCache?: boolean }} [opts]
  * @returns {object}
  */
@@ -57,7 +33,6 @@ export function getAgentrcDefaults(opts = {}) {
   if (!opts.bustCache && _cache) return _cache;
   const raw = fs.readFileSync(FULL_AGENTRC_PATH, 'utf8');
   const parsed = JSON.parse(raw);
-  // Strip the `$schema` pointer — it's editor metadata, not a default.
   delete parsed.$schema;
   _cache = deepFreeze(parsed);
   return _cache;
@@ -70,8 +45,7 @@ function deepFreeze(obj) {
 }
 
 /**
- * Walk a default object and yield `[dottedPath, value]` for every
- * scalar / array leaf. Objects are descended into, not yielded.
+ * Arrays are leaves.
  *
  * @param {object} defaults
  * @returns {Generator<[string, unknown]>}
@@ -93,9 +67,6 @@ export function* iterDefaultLeaves(defaults, prefix = '') {
 }
 
 /**
- * Look up a dotted path inside an arbitrary nested object.
- * Returns `{ present: boolean, value: unknown }`.
- *
  * @param {object|null|undefined} obj
  * @param {string} dottedPath
  */

package/.agents/scripts/lib/config/delivery-routing.js

@@ -1,45 +1,19 @@
 /**
- * `delivery.routing` accessor + framework defaults — Epic #4478 (M7-B), the
- * role-scoped-boot-context flip and the ceremony profile.
- *
- * Stage 6 dropped `delivery.routing.singleDelivery` (the v1 epic
- * single-vs-fan-out kill-switch). Story #5313 dropped
- * `delivery.routing.freshCriticSampleRate` (the maker-checker sampling
- * floor), and Story #5343 dropped the derived-level routing that replaced
- * it: `minimal` and `standard` resolve the inline self-eval as the Story's
- * verdict owner whatever the diff touches, and `strict` is the one profile
- * that spawns a fresh-context critic. v2 has one Story delivery path;
- * routing here is only about spawn boot context and the ceremony profile.
- *
- * `delivery.routing.roleScopedAgents` is the **kill-switch for the role-scoped
- * boot contexts** (Epic #4478, M7-B). It defaults to `true`: a converted spawn
- * (`story-worker`, `acceptance-critic`) boots on its own
- * `.claude/agents/<role>.md` system prompt instead of re-paying the full
- * `CLAUDE.md` @-import closure, which is the whole payoff of the context diet
- * (≈50KB → ≈8KB per spawn). When set to `false`, every converted spawn falls
- * back to `subagent_type: general-purpose` — the instant, code-rollback-free
- * per-consumer revert, and the universal escape for hosts that ignore
- * `.claude/agents/`. Flipping it off never drops a gate: the fallback is the
- * full-closure agent that ran before M7-B.
- *
- * Framework-defaults pattern mirrors `lib/config/ci.js#getCiDelivery`.
+ * `delivery.routing`: spawn boot context and ceremony profile. Only `strict`
+ * spawns a fresh-context critic; `minimal`/`standard` use the inline
+ * self-eval. `roleScopedAgents: false` falls every converted spawn back to
+ * `general-purpose` with the full closure — a revert that drops no gate.
  */
 
 export const DELIVERY_ROUTING_DEFAULTS = Object.freeze({
   roleScopedAgents: true,
   /** @type {'minimal'|'standard'|'strict'} */
   ceremonyProfile: 'standard',
-  /**
-   * When true (default), attended `/mandrel-deliver` lands through merge in one
-   * close (`--wait-merge` semantics) instead of stopping at `agent::closing`.
-   * Operators opt out per-run with `--no-wait-merge`.
-   */
+  /** Land through merge in one close; opt out with `--no-wait-merge`. */
   closeAndLand: true,
 });
 
 /**
- * Normalize ceremony profile; unknown values → `standard`.
- *
  * @param {unknown} value
  * @returns {'minimal'|'standard'|'strict'}
  */
@@ -51,10 +25,7 @@ function normalizeCeremonyProfile(value) {
 }
 
 /**
- * Read the merged `delivery.routing` block, applying framework defaults for
- * any field the operator omitted. Accepts the full resolved config, the bare
- * `delivery` bag, or the bare `routing` bag — mirroring `getCiDelivery`'s
- * tolerant unwrap so callers can pass whichever shape they hold.
+ * Accepts the full config, the `delivery` bag, or the `routing` bag.
  *
  * @param {object | null | undefined} config
  * @returns {{

package/.agents/scripts/lib/config/explain.js

@@ -1,25 +1,7 @@
 /**
- * Config-explain capability (Story #3523, Epic #3438).
- *
- * `explainConfig()` answers the operator question "what does each resolved
- * config key mean, what is its effective value, and where did that value
- * come from?". It pairs with the unified config resolver: the resolver
- * decides the *effective* value, this module attributes that value to a
- * *source* layer and pins a one-line *meaning* to every key.
- *
- * Source attribution is two-valued (Story #3690 removed the named
- * config-profile layer):
- *   - `agentrc`  — the key is present in the project's resolved `.agentrc.json`
- *                  (including any `.agentrc.local.json` overlay). The operator
- *                  set it.
- *   - `default`  — the project does not carry the key; the framework default
- *                  from `.agents/docs/agentrc-reference.json` applies.
- *
- * Secret hygiene: no key in the `.agentrc.json` surface is a credential today,
- * but the report is defensive — any key whose dotted path matches a
- * secret-shaped token (`token`, `secret`, `password`, `apiKey`, `credential`,
- * …) has its value redacted to `null` and is flagged `redacted: true`. Only
- * the *source* of a secret is ever reported, never the value.
+ * `mandrel explain`: each config key's effective value, source (`agentrc`
+ * incl. local overlay, or `default`) and one-line meaning. Secret-shaped keys
+ * report their source only; the value is redacted to `null`.
  */
 
 import { resolveConfig } from '../config-resolver.js';
@@ -30,11 +12,7 @@ import {
 } from './defaults.js';
 
 /**
- * Dotted-path segment patterns that mark a key as secret-bearing. Matched
- * case-insensitively against any segment of the dotted path. The
- * `.agentrc.json` schema carries none of these today; the guard is forward
- * defence so a future credential-shaped key never leaks its value through
- * `mandrel explain`.
+ * Forward defence: no key matches today.
  *
  * @type {readonly RegExp[]}
  */
@@ -51,12 +29,7 @@ const SECRET_SEGMENT_PATTERNS = Object.freeze([
 ]);
 
 /**
- * Curated one-line meanings keyed by dotted config path. Wildcard floor
- * paths (`...floors.*`) are covered by the prefix fallbacks below, so this
- * map pins the operator-facing keys that benefit from a bespoke gloss. Any
- * key without an exact entry falls back to the longest matching prefix gloss,
- * then to a top-level block gloss, so every key always reports a non-empty
- * meaning.
+ * Exact glosses; misses fall back to the longest prefix, then the block.
  *
  * @type {Readonly<Record<string, string>>}
  */
@@ -88,8 +61,6 @@ const KEY_MEANINGS = Object.freeze({
   'github.projectOwner': 'Owner of the GitHub Projects board.',
   'github.operatorHandle':
     'GitHub @handle mentioned when a run needs operator attention.',
-  'github.defaultTimeoutMs':
-    'Default timeout (ms) for GitHub CLI / API calls when a caller does not supply one.',
   'github.branchProtection.enforce':
     'Whether the framework applies branch-protection rules.',
   'github.branchProtection.requiredChecks':
@@ -118,14 +89,6 @@ const KEY_MEANINGS = Object.freeze({
     'Tokens identifying the nav-registry SSOT a route-adding Story is expected to reference.',
 
   // delivery.*
-  'delivery.execution.timeoutMs':
-    'Per-execution timeout for orchestrated delivery steps.',
-  'delivery.ci.watch.pollIntervalMs':
-    'Poll cadence (ms) for the merge/CI watch loop.',
-  'delivery.ci.watch.maxPolls':
-    'Maximum number of poll probes before the CI watch gives up.',
-  'delivery.ci.watch.maxResumes':
-    'Maximum times the CI watch may resume after a transient stall.',
   'delivery.ci.autoMerge':
     'Merge posture: trust-ci merges on green checks; strict also requires a clean review gate.',
   'delivery.docsFreshness.paths':
@@ -146,14 +109,10 @@ const KEY_MEANINGS = Object.freeze({
     'Whether a worktree is removed after a Story closes cleanly.',
   'delivery.worktreeIsolation.bootstrapFiles':
     'Files copied into each new worktree (e.g. .env, .mcp.json, local overrides).',
-  'delivery.mergeWatch.intervalSeconds':
-    'Poll cadence (seconds) for the close-and-land merge wait after the arm.',
   'delivery.mergeWatch.maxBudgetSeconds':
     'Cumulative wall-clock budget (seconds) across resumes before the merge wait gives up and blocks.',
   'delivery.codeReview.providers':
     'Ordered provider chain the code-review phase consults.',
-  'delivery.codeReview.maxFixAttempts':
-    'Maximum auto-fix attempts the code-review phase makes.',
   'delivery.codeReview.autoFixSeverity':
     'Severity threshold for on-branch code-review remediation (medium fixes 🔴/🟠/🟡, high fixes 🔴/🟠 only; default medium).',
   'delivery.routing.roleScopedAgents':
@@ -164,8 +123,6 @@ const KEY_MEANINGS = Object.freeze({
     'When true, single-story-close lands through merge in one close (opt out with --no-wait-merge).',
   'delivery.feedbackLoop.retroProposals':
     'When true, auto-file actionable retro proposals as follow-up issues.',
-  'delivery.quality.formatAutofix.timeoutMs':
-    'Bounded timeout (ms) for the close-time format autofix spawn.',
   'delivery.quality.requireBaselines':
     'When true, absent baseline artifacts fail close-validation instead of skipping cleanly.',
   'delivery.quality.navigability.routeGlobs':
@@ -187,10 +144,6 @@ const KEY_MEANINGS = Object.freeze({
 });
 
 /**
- * Prefix-keyed fallback glosses. Used when a key has no exact entry in
- * `KEY_MEANINGS` (notably wildcard floor paths and per-gate sub-keys). The
- * longest matching prefix wins.
- *
  * @type {ReadonlyArray<[string, string]>}
  */
 const PREFIX_MEANINGS = Object.freeze([
@@ -198,20 +151,12 @@ const PREFIX_MEANINGS = Object.freeze([
     'delivery.quality.gates',
     'Quality-gate threshold/configuration for the delivery close gate.',
   ],
-  [
-    'delivery.quality.codingGuardrails',
-    'Per-commit coding-guardrail threshold.',
-  ],
   [
     'delivery.quality.autoRefresh',
     'Auto-refresh policy for ratcheted baselines.',
   ],
-  [
-    'delivery.quality.baselineEpsilon',
-    'Tolerance epsilon applied when comparing a quality baseline.',
-  ],
   ['delivery.quality', 'Delivery-time quality configuration.'],
-  ['delivery.mergeWatch', 'Merge-wait poll cadence and wall-clock budget.'],
+  ['delivery.mergeWatch', 'Merge-wait posture and wall-clock budget.'],
   [
     'delivery.feedbackLoop',
     'Opt-out toggles for auto-filing non-blocking findings.',
@@ -220,7 +165,7 @@ const PREFIX_MEANINGS = Object.freeze([
     'delivery.routing',
     'Delivery-spawn routing and acceptance-ceremony profile.',
   ],
-  ['delivery.ci', 'CI-aware delivery namespace (watch, auto-merge).'],
+  ['delivery.ci', 'CI-aware delivery namespace (auto-merge, advisory checks).'],
   [
     'planning.navigation',
     'Plan-time navigability reachability gate (route globs + nav registry).',
@@ -237,9 +182,6 @@ const PREFIX_MEANINGS = Object.freeze([
 ]);
 
 /**
- * Block-level fallback glosses by top-level prefix. Guarantees every key gets
- * a non-empty meaning even if neither the exact map nor a prefix gloss matches.
- *
  * @type {Readonly<Record<string, string>>}
  */
 const BLOCK_MEANINGS = Object.freeze({
@@ -251,8 +193,6 @@ const BLOCK_MEANINGS = Object.freeze({
 });
 
 /**
- * Is `dottedPath` a secret-bearing key whose value must be redacted?
- *
  * @param {string} dottedPath
  * @returns {boolean}
  */
@@ -265,8 +205,6 @@ export function isSecretKey(dottedPath) {
 }
 
 /**
- * Resolve the one-line meaning for a dotted config key.
- *
  * @param {string} dottedPath
  * @returns {string}
  */
@@ -274,7 +212,6 @@ export function meaningFor(dottedPath) {
   if (Object.hasOwn(KEY_MEANINGS, dottedPath)) {
     return KEY_MEANINGS[dottedPath];
   }
-  // Longest matching prefix wins.
   let best = null;
   for (const [prefix, gloss] of PREFIX_MEANINGS) {
     if (
@@ -291,12 +228,9 @@ export function meaningFor(dottedPath) {
 }
 
 /**
- * Attribute a key's effective value to a source layer and capture the value
- * the resolver actually applies.
- *
  * @param {string} dottedPath
- * @param {object|null} rawAgentrc  The resolver's `raw` (merged agentrc+local), or null.
- * @param {unknown} defaultValue    The framework default for this key.
+ * @param {object|null} rawAgentrc — merged agentrc + local overlay.
+ * @param {unknown} defaultValue
  * @returns {{ source: 'agentrc'|'default', value: unknown }}
  */
 function attribute(dottedPath, rawAgentrc, defaultValue) {
@@ -308,12 +242,7 @@ function attribute(dottedPath, rawAgentrc, defaultValue) {
 }
 
 /**
- * Build the config-explain report: one entry per known config key, each
- * carrying its effective value, source layer, and one-line meaning.
- *
  * @param {{ cwd?: string }} [opts]
- *   - `cwd`: project root whose `.agentrc.json` is resolved (default: the
- *     framework root via `resolveConfig`).
  * @returns {Array<{
  *   key: string,
  *   value: unknown,

package/.agents/scripts/lib/config/gates/coverage.schema.js

@@ -21,18 +21,6 @@ export const COVERAGE_GATE = {
         'Repo-relative path to the Istanbul `coverage-final.json` the capture step writes and the gate reads.',
       default: COVERAGE_GATE_DEFAULTS.coveragePath,
     },
-    // Story #2136 / Task #2142 — bounded timeout for `npm run test:coverage`.
-    // Wired into `runCapture` via `spawnSync({ timeout, killSignal })`. A
-    // SIGKILL fired by the timeout is translated to exit code 124 (the GNU
-    // `timeout` convention) so close-validation can branch on "hang" vs.
-    // "test failed".
-    timeoutMs: {
-      type: 'integer',
-      minimum: 1,
-      description:
-        'Bounded timeout (ms) for the `npm run test:coverage` capture spawn. A SIGKILL at the budget boundary maps to exit 124 so close-validation can tell a hang from a test failure.',
-      default: COVERAGE_GATE_DEFAULTS.timeoutMs,
-    },
   },
   additionalProperties: false,
 };

package/.agents/scripts/lib/config/gates/crap-incremental-coverage.schema.js

@@ -1,31 +1,8 @@
 /* node:coverage ignore file -- AJV schema declaration (data-as-code) */
 
 /**
- * `delivery.quality.gates.crap.incrementalCoverage` — the two independent
- * full-suite economies (Story #4981, split by Story #5173).
- *
- * Split into its own module (rather than an inline property literal on
- * `CRAP_GATE`) so the schema addition lands as a new file, not a same-file
- * expansion of `crap.schema.js` — the file this module's sole export is
- * spread into.
- *
- * The two switches are deliberately independent because they are not equally
- * safe:
- *
- *   - **`skipWhenUnchanged`** (default `true`) decides *whether* to capture:
- *     no changed file under `crap.targetDirs` versus `baseRef` means no
- *     capture at all. It is a pure saving — the gates score exactly what they
- *     scored before, because nothing they score moved.
- *   - **`baselineJoin`** (default `false`) loosens gate semantics: the CRAP
- *     join resolves a method in an untouched file from its committed baseline
- *     row instead of requiring fresh coverage for it.
- *
- * Bundling them under one `enabled` switch is what forced the earlier default
- * flip to be reverted. `enabled` survives as a deprecated alias that sets
- * both.
- *
- * Neither switch narrows the capture run itself: a capture that does happen is
- * the ordinary full `npm run test:coverage` (Story #5065).
+ * `delivery.quality.gates.crap.incrementalCoverage`; the two switches stay
+ * independent because only `baselineJoin` loosens the gate.
  */
 export const INCREMENTAL_COVERAGE_SCHEMA = {
   type: 'object',
@@ -44,11 +21,6 @@ export const INCREMENTAL_COVERAGE_SCHEMA = {
         'Let the CRAP join resolve a method in a file the diff did not touch from its committed baseline row instead of requiring fresh coverage for it. A gate loosening, not a saving — defaults to false.',
       default: false,
     },
-    enabled: {
-      type: 'boolean',
-      description:
-        'DEPRECATED alias for setting both `skipWhenUnchanged` and `baselineJoin`. Prefer the two switches: they are not equally safe, and bundling them is why the earlier default flip was reverted. Either explicit switch overrides this alias.',
-    },
     baseRef: {
       type: 'string',
       minLength: 1,

package/.agents/scripts/lib/config/gates/crap.schema.js

@@ -2,11 +2,7 @@
 
 import { CRAP_GATE_DEFAULTS } from '../quality.js';
 import { INCREMENTAL_COVERAGE_SCHEMA } from './crap-incremental-coverage.schema.js';
-import {
-  gateBase,
-  LIST_OR_EXTENDER_OF_STRINGS,
-  SAFE_STRING,
-} from './shared.js';
+import { gateBase, LIST_OR_EXTENDER_OF_STRINGS } from './shared.js';
 
 export const CRAP_GATE = {
   type: 'object',
@@ -38,7 +34,6 @@ export const CRAP_GATE = {
         'When true, the gate refuses to score without a coverage artifact rather than silently reporting complexity-only rows.',
       default: CRAP_GATE_DEFAULTS.requireCoverage,
     },
-    // Story #4775 — fail-closed floor on the per-method coverage JOIN.
     minMethodResolutionRate: {
       type: 'number',
       minimum: 0,
@@ -46,34 +41,6 @@ export const CRAP_GATE = {
       description:
         'Fail-closed floor on the per-method coverage JOIN (Story #4775): the fraction of methods that must resolve a coverage entry, counted only over files that HAVE one, before `update-crap-baseline.js` will persist. A broken join is silent by construction — unresolved methods are simply absent — so the updater refuses rather than writing a thin baseline and logging it as success. Not enforced below 25 joinable methods, where a diff-scoped run’s rate is noise. Default 0.75; a healthy repo resolves ~98%.',
     },
-    friction: {
-      type: 'object',
-      description:
-        'Friction-signal wiring for a CRAP baseline regression, so a recurring one can reach the actionable threshold.',
-      properties: {
-        markerKey: {
-          type: 'string',
-          minLength: 1,
-          description: 'Signal marker key the regression is recorded under.',
-        },
-      },
-      additionalProperties: false,
-      default: { ...CRAP_GATE_DEFAULTS.friction },
-    },
-    refreshTag: {
-      ...SAFE_STRING,
-      minLength: 1,
-      description:
-        'Commit-subject substring that acknowledges a deliberate CRAP baseline refresh in the compared range. A range commit carrying it that also touches the baseline file demotes head-vs-base regressions; floors stay enforced.',
-      default: CRAP_GATE_DEFAULTS.refreshTag,
-    },
-    refreshTimeoutMs: {
-      type: 'integer',
-      minimum: 1,
-      description:
-        'Bounded timeout (ms) for `npm run crap:update` spawned by the baseline-attribution refresh path. Mirrors `coverage.timeoutMs`: a SIGKILL fired at the budget boundary maps to exit 124 so the close orchestrator can flip the Story to `agent::blocked`. Default 60000 (Story #2165).',
-      default: CRAP_GATE_DEFAULTS.refreshTimeoutMs,
-    },
     ignoreGlobs: {
       type: 'array',
       items: { type: 'string', minLength: 1 },

package/.agents/scripts/lib/config/gates/duplication.schema.js

@@ -5,7 +5,7 @@ import { gateBase, LIST_OR_EXTENDER_OF_STRINGS } from './shared.js';
 export const DUPLICATION_GATE = {
   type: 'object',
   description:
-    'Code-duplication (DRY) gate (Story #3664). Shares the gate base and adds the scan-scope extras: the `targetDirs` the duplication scanner walks, a bounded refresh timeout mirroring crap/MI, and `ignoreGlobs` to exclude files from the scan.',
+    'Code-duplication (DRY) gate (Story #3664). Shares the gate base and adds the scan-scope extras: the `targetDirs` the duplication scanner walks and `ignoreGlobs` to exclude files from the scan.',
   properties: {
     ...gateBase({
       enabled: false,
@@ -19,13 +19,6 @@ export const DUPLICATION_GATE = {
         "Directories whose JS sources the duplication (DRY) gate scans for copy-paste clones. Mandrel ships a `src/`-centric default; projects whose executable code lives elsewhere (e.g. this repo's `.agents/scripts/`) override here. The framework default is intentionally not auto-discovered, so an override is the explicit, auditable signal (Story #3664).",
       default: ['src'],
     },
-    refreshTimeoutMs: {
-      type: 'integer',
-      minimum: 1,
-      description:
-        'Bounded timeout (ms) for `npm run duplication:update` spawned by the baseline-attribution refresh path. Mirrors `crap.refreshTimeoutMs` / `coverage.timeoutMs`: a SIGKILL fired at the budget boundary maps to exit 124. Default 60000 (Story #3664).',
-      default: 60000,
-    },
     ignoreGlobs: {
       type: 'array',
       items: { type: 'string', minLength: 1 },

package/.agents/scripts/lib/config/gates/index.js

@@ -4,34 +4,19 @@ import { BUNDLE_SIZE_GATE } from './bundle-size.schema.js';
 import { COVERAGE_GATE } from './coverage.schema.js';
 import { CRAP_GATE } from './crap.schema.js';
 import { DUPLICATION_GATE } from './duplication.schema.js';
-import { LIGHTHOUSE_GATE } from './lighthouse.schema.js';
-import { LINT_GATE } from './lint.schema.js';
 import { MAINTAINABILITY_GATE } from './maintainability.schema.js';
 import { MUTATION_GATE } from './mutation.schema.js';
 
-/**
- * Composite `delivery.quality.gates` schema — closed shape.
- *
- * Split from the former `lib/config-gates-schema.js` aggregate
- * (Story #2987) into per-gate sub-schema files under
- * `lib/config/gates/`. Shared fragments (`gateBase()`, `SAFE_STRING`,
- * `TOLERANCE_SCHEMA`, `FLOORS_SCHEMA`, `COMPONENTS_SCHEMA`,
- * `LIST_OR_EXTENDER_OF_STRINGS`, `NULLABLE_NONEMPTY_SAFE_STRING`) live
- * in `./shared.js`. Each per-gate file exports one sub-schema literal
- * with the gate-specific extras layered on top of `gateBase()`, passing
- * that gate's own base-field defaults (Story #5007).
- */
+/** Composite `delivery.quality.gates` schema — closed shape. */
 export const GATES_SCHEMA = {
   type: 'object',
   description:
-    'The eight quality gates, each sharing the `{ enabled, baselinePath, tolerance, floors, components }` base.',
+    'The six quality gates, each sharing the `{ enabled, baselinePath, tolerance, floors, components }` base.',
   properties: {
-    lint: LINT_GATE,
     coverage: COVERAGE_GATE,
     crap: CRAP_GATE,
     maintainability: MAINTAINABILITY_GATE,
     mutation: MUTATION_GATE,
-    lighthouse: LIGHTHOUSE_GATE,
     'bundle-size': BUNDLE_SIZE_GATE,
     duplication: DUPLICATION_GATE,
   },

package/.agents/scripts/lib/config/gates/maintainability.schema.js

@@ -1,11 +1,7 @@
 /* node:coverage ignore file -- AJV schema declaration (data-as-code) */
 
 import { MAINTAINABILITY_GATE_DEFAULTS } from '../quality.js';
-import {
-  gateBase,
-  LIST_OR_EXTENDER_OF_STRINGS,
-  SAFE_STRING,
-} from './shared.js';
+import { gateBase, LIST_OR_EXTENDER_OF_STRINGS } from './shared.js';
 
 export const MAINTAINABILITY_GATE = {
   type: 'object',
@@ -24,21 +20,6 @@ export const MAINTAINABILITY_GATE = {
         "Directories whose JS sources the maintainability gate scores. Mandrel ships a `src/`-centric default; projects whose executable code lives elsewhere (e.g. this repo's `.agents/scripts/` plus `tests/`) override here. The framework default is intentionally not auto-discovered, so an override is the explicit, auditable signal.",
       default: [...MAINTAINABILITY_GATE_DEFAULTS.targetDirs],
     },
-    // Story #4731 — commit-subject substring that acknowledges a deliberate
-    // maintainability baseline refresh in the compared range.
-    refreshTag: {
-      ...SAFE_STRING,
-      minLength: 1,
-      description:
-        "Commit-subject substring that acknowledges a deliberate maintainability baseline refresh in the compared range. Mirrors the CRAP gate's `refreshTag`; a range commit carrying it that touches the baseline file demotes head-vs-base regressions (floors still enforced).",
-    },
-    refreshTimeoutMs: {
-      type: 'integer',
-      minimum: 1,
-      description:
-        'Bounded timeout (ms) for `npm run maintainability:update` spawned by the baseline-attribution refresh path. Mirrors `coverage.timeoutMs`: a SIGKILL fired at the budget boundary maps to exit 124 so the close orchestrator can flip the Story to `agent::blocked`. Default 60000 (Story #2165).',
-      default: MAINTAINABILITY_GATE_DEFAULTS.refreshTimeoutMs,
-    },
     ignoreGlobs: {
       type: 'array',
       items: { type: 'string', minLength: 1 },

package/.agents/scripts/lib/config/gates/mutation.schema.js

@@ -1,6 +1,6 @@
 /* node:coverage ignore file -- AJV schema declaration (data-as-code) */
 
-import { gateBase, NULLABLE_NONEMPTY_SAFE_STRING } from './shared.js';
+import { gateBase } from './shared.js';
 
 export const MUTATION_GATE = {
   type: 'object',
@@ -13,12 +13,6 @@ export const MUTATION_GATE = {
       tolerance: { kind: 'percent', value: 0 },
       floors: { '*': { score: 60 } },
     }),
-    strykerConfigPath: {
-      ...NULLABLE_NONEMPTY_SAFE_STRING,
-      description:
-        'Repo-relative path to the Stryker config. `null` lets Stryker resolve its own default.',
-      default: null,
-    },
   },
   additionalProperties: false,
 };