breaking: enhance agent creation and skill management

.editorconfig

@@ -0,0 +1,30 @@
+# EditorConfig is awesome: http://EditorConfig.org
+# Uses editorconfig to maintain consistent coding styles
+
+# top-most EditorConfig file
+root = true
+
+# Unix-style newlines with a newline ending every file
+[*]
+charset = utf-8
+end_of_line = lf
+indent_size = 2
+indent_style = space
+insert_final_newline = true
+max_line_length = 80
+trim_trailing_whitespace = true
+
+[*.{tf,tfvars}]
+indent_size = 2
+indent_style = space
+
+[*.md]
+max_line_length = 0
+trim_trailing_whitespace = false
+
+[Makefile]
+tab_width = 2
+indent_style = tab
+
+[COMMIT_EDITMSG]
+max_line_length = 0

.github/CHANGELOG.md

@@ -16,38 +16,38 @@ Use this format for new updates:
 - Annotated `.github/workflows/terraform-pre-commit.yml` image digest references with the corresponding `pre-commit-terraform` release version to make the SHA-based pin self-describing.
 - Strengthened the Copilot baseline so Python guidance prefers hash-locked requirements, Terraform guidance pins external modules as well as providers, GitHub Actions guidance pins container images by digest, and Docker now has dedicated instruction/prompt/skill coverage across `AGENTS.md`, the sync planner, and validation tests.
 - Removed `.github/workflows/github-validate-copilot-customizations.yml` from the source baseline and stopped the sync planner from recommending that workflow to consumer repositories.
-- Updated `.github/scripts/tech-ai-sync-copilot-configs.py` so the default VS Code PR description mode expected during consumer alignment is now `template` instead of `Copilot`.
+- Updated `.github/scripts/internal-sync-copilot-configs.py` so the default VS Code PR description mode expected during consumer alignment is now `template` instead of `Copilot`.
 
 ## 2026-03-12
 - Renamed the canonical PR prompt from `tech-ai-pr-description.prompt.md` / `TechAIPRDescription` to `tech-ai-pr-editor.prompt.md` / `TechAIPREditor`, and updated `AGENTS.md`, the validator, and review notes to use the new canonical name consistently.
-- Updated `scripts/tech-ai-sync-copilot-configs.py` and its tests so sync plans now delete manifest-managed files that were removed from the desired baseline, allowing canonical renames to cleanly remove deprecated managed assets in consumer repositories.
+- Updated `scripts/internal-sync-copilot-configs.py` and its tests so sync plans now delete manifest-managed files that were removed from the desired baseline, allowing canonical renames to cleanly remove deprecated managed assets in consumer repositories.
 
 ## 2026-03-11
-- Updated `scripts/tech-ai-sync-copilot-configs.py` so consumer sync now discovers new instructions from `applyTo`, automatically includes all portable consumer-facing agents, and merges consumer-facing prompt/skill capabilities declared in the source `AGENTS.md` preferred sections. This prevents newly added shared assets such as the PAIR analysis flow from being silently skipped in downstream repos.
-- Updated `scripts/tech-ai-sync-copilot-configs.py` and `tests/test_tech_ai_sync_copilot_configs.py` so consumer alignment now reports a target-side gap when `.vscode/settings.json` is missing or does not set `githubPullRequests.pullRequestDescription` to `Copilot`, making the VS Code PR-form Copilot dependency visible in sync reports.
+- Updated `scripts/internal-sync-copilot-configs.py` so consumer sync now discovers new instructions from `applyTo`, automatically includes all portable consumer-facing agents, and merges consumer-facing prompt/skill capabilities declared in the source `AGENTS.md` preferred sections. This prevents newly added shared assets such as the PAIR analysis flow from being silently skipped in downstream repos.
+- Updated `scripts/internal-sync-copilot-configs.py` and `tests/test_tech_ai_sync_copilot_configs.py` so consumer alignment now reports a target-side gap when `.vscode/settings.json` is missing or does not set `githubPullRequests.pullRequestDescription` to `Copilot`, making the VS Code PR-form Copilot dependency visible in sync reports.
 
 ## 2026-03-09
 - Added the repo-only `TechAIRepoCopilotExtender` agent, prompt, and skill for creating consumer-repository `internal-*` Copilot assets without duplicating the shared baseline, and excluded the trio from consumer sync.
 - Tightened `TechAIRepoCopilotExtender` so it must ground repo-local prompts, examples, schema snippets, and naming rules on concrete target files instead of generic remembered patterns.
-- Deprecated `.github/scripts/bootstrap-copilot-config.sh` in favor of `.github/scripts/tech-ai-sync-copilot-configs.py`, updated lifecycle docs, and made quickstart plus `.github/README.md` prefer sync-first alignment.
+- Deprecated `.github/scripts/bootstrap-copilot-config.sh` in favor of `.github/scripts/internal-sync-copilot-configs.py`, updated lifecycle docs, and made quickstart plus `.github/README.md` prefer sync-first alignment.
 - Added source release metadata with root `VERSION`, contributor workflow documentation, and manifest provenance fields for source version and commit.
 - Tightened consumer alignment: improved composite-action detection, enabled data-registry selection for JSON-heavy repositories, slimmed generated `AGENTS.md`, removed spurious `pytest` recommendations for repos without pytest tests, and added sync recommendations for missing Copilot validation workflows plus legacy source-only residues.
 - Reduced source maintenance noise by trimming Dependabot ecosystems, updating the GitHub Actions checkout example, adding explicit `.github/` CODEOWNERS coverage, and documenting security-control enforcement status.
 - Expanded validator and sync tests to cover new recommendation, rendering, provenance, and validation paths.
 
 ## 2026-03-08
 - Updated the PR-writing prompt, skill, and agent guidance to derive required sections from the resolved repository PR template instead of hardcoding older headings such as `Security and Compliance` or `Related Links`.
-- Updated `scripts/tech-ai-sync-copilot-configs.py` and `scripts/validate-copilot-customizations.sh` so repository-owned prompt, skill, and agent assets outside the synced global baseline must use `internal-*` in both filenames and `name:` values, making internal customizations visibly distinct from synced `tech-ai-*` assets.
-- Updated `scripts/tech-ai-sync-copilot-configs.py` so target-only skill detection compares full relative paths instead of the shared `SKILL.md` filename, fixing missed unmanaged skill assets in consumer repositories.
+- Updated `scripts/internal-sync-copilot-configs.py` and `scripts/validate-copilot-customizations.sh` so repository-owned prompt, skill, and agent assets outside the synced global baseline must use `internal-*` in both filenames and `name:` values, making internal customizations visibly distinct from synced `tech-ai-*` assets.
+- Updated `scripts/internal-sync-copilot-configs.py` so target-only skill detection compares full relative paths instead of the shared `SKILL.md` filename, fixing missed unmanaged skill assets in consumer repositories.
 - Expanded sync planning to audit unmanaged target-local instructions, prompts, skills, and agents for strict validation gaps and legacy alias drift, and added the new report section in both markdown and JSON outputs.
 - Updated sync planning so legacy aliases such as `cs-*`, unprefixed prompt names, and legacy skill directories are reported even when the canonical family is outside the selected minimum baseline.
 - Updated generated `AGENTS.md` inventory rendering and `.github/templates/AGENTS.template.md` so inventory reflects the desired managed baseline plus target-local Copilot assets already present in the consumer repository.
-- Added source-side redundancy auditing to `scripts/tech-ai-sync-copilot-configs.py`, including canonical asset inventory, legacy alias detection, triad role-overlap checks, and `AGENTS.md` inventory-repeat detection in both markdown and JSON reports.
+- Added source-side redundancy auditing to `scripts/internal-sync-copilot-configs.py`, including canonical asset inventory, legacy alias detection, triad role-overlap checks, and `AGENTS.md` inventory-repeat detection in both markdown and JSON reports.
 - Refactored `agents/tech-ai-sync-global-copilot-configs-into-repo.agent.md`, `skills/tech-ai-sync-global-copilot-configs-into-repo/SKILL.md`, and `prompts/tech-ai-sync-global-copilot-configs-into-repo.prompt.md` so workflow detail lives in the skill while the agent and prompt stay thin.
 - Simplified root `AGENTS.md` and `.github/templates/AGENTS.template.md` to keep asset paths in the inventory section only and remove descriptive prompt or skill catalogs.
 - Expanded sync and validator tests to cover source audit behavior, slimmer AGENTS structure, and JSON report sections.
 - Updated `agents/tech-ai-sync-global-copilot-configs-into-repo.agent.md`, `skills/tech-ai-sync-global-copilot-configs-into-repo/SKILL.md`, and `prompts/tech-ai-sync-global-copilot-configs-into-repo.prompt.md` so the sync workflow explicitly detects redundant legacy aliases before apply.
-- Updated `scripts/tech-ai-sync-copilot-configs.py` to recognize legacy `cs-*`, unprefixed prompt names, and legacy agent or skill aliases, report them as redundant target assets, and raise sync conflicts instead of creating duplicate canonical `tech-ai-*` assets.
+- Updated `scripts/internal-sync-copilot-configs.py` to recognize legacy `cs-*`, unprefixed prompt names, and legacy agent or skill aliases, report them as redundant target assets, and raise sync conflicts instead of creating duplicate canonical `tech-ai-*` assets.
 - Updated `tests/test_tech_ai_sync_copilot_configs.py` to cover duplicate-alias detection and conflict behavior during sync planning.
 
 ## 2026-03-07
@@ -57,7 +57,7 @@ Use this format for new updates:
 - Added `.gitignore` coverage for Python caches/virtualenvs and macOS Finder artifacts so local validation runs stop creating noisy untracked files.
 - Added canonical low-duplication script prompts: `prompts/tech-ai-bash-script.prompt.md` (`TechAIBashScript`) and `prompts/tech-ai-python-script.prompt.md` (`TechAIPythonScript`).
 - Reduced the legacy `cs-*` and `script-*` Bash/Python prompts to thin compatibility aliases that now point to the canonical TechAI prompts.
-- Updated `scripts/tech-ai-sync-copilot-configs.py`, `AGENTS.md`, and tests to prefer the new `tech-ai-*` canonical script prompts.
+- Updated `scripts/internal-sync-copilot-configs.py`, `AGENTS.md`, and tests to prefer the new `tech-ai-*` canonical script prompts.
 - Reduced token overlap by trimming repository-specific catalog content out of `copilot-instructions.md` and keeping `AGENTS.md` as the single repository-specific source of truth.
 - Normalized the `name:` frontmatter for the TechAI sync prompt and skill to `TechAISyncGlobalCopilotConfigsIntoRepo`.
 - Renamed the remaining canonical `cs-*` prompt files to `tech-ai-*` and updated profile, AGENTS, sync, and test references accordingly.
@@ -66,10 +66,10 @@ Use this format for new updates:
 ## 2026-03-06
 - Added `agents/tech-ai-sync-global-copilot-configs-into-repo.agent.md`: `TechAISyncGlobalCopilotConfigsIntoRepo` for local repository analysis and conservative Copilot-core alignment.
 - Added `prompts/tech-ai-sync-global-copilot-configs-into-repo.prompt.md` and `skills/tech-ai-sync-global-copilot-configs-into-repo/SKILL.md` for repeatable alignment workflows.
-- Added `scripts/tech-ai-sync-copilot-configs.py` plus `tests/test_tech_ai_sync_copilot_configs.py` for deterministic analysis, manifest-based sync planning, and reporting.
+- Added `scripts/internal-sync-copilot-configs.py` plus `tests/test_tech_ai_sync_copilot_configs.py` for deterministic analysis, manifest-based sync planning, and reporting.
 - Updated `AGENTS.md` with `TechAISyncGlobalCopilotConfigsIntoRepo` routing, inventory, and preferred asset references.
 - Reduced `copilot-code-review-instructions.md` to a lighter-weight review protocol that delegates the detailed anti-pattern catalog to `skills/tech-ai-code-review/SKILL.md`.
-- Updated `scripts/tech-ai-sync-copilot-configs.py` to prefer canonical `cs-*` script prompts during consumer alignment, reducing prompt duplication and token footprint without removing legacy source assets.
+- Updated `scripts/internal-sync-copilot-configs.py` to prefer canonical `cs-*` script prompts during consumer alignment, reducing prompt duplication and token footprint without removing legacy source assets.
 - Added `.github/tech-ai-requirements-dev.txt`, CI pytest execution, `shellcheck` pre-commit coverage, and validator integration tests for stronger local and CI validation.
 
 ## 2026-03-04

.github/DEPRECATION.md

@@ -25,6 +25,6 @@ Define a predictable process for deprecating Copilot customization assets (`inst
 Immediate removal is allowed only for security or compliance issues. The removal reason must be documented in `.github/CHANGELOG.md`.
 
 ## Current deprecations
-- `scripts/bootstrap-copilot-config.sh`: **Removed**. Replaced by `scripts/tech-ai-sync-copilot-configs.py`.
-- `skills/tech-ai-terraform-feature/SKILL.md`: **Removed**. Merged into `skills/tech-ai-terraform/SKILL.md`.
-- `skills/tech-ai-terraform-module/SKILL.md`: **Removed**. Merged into `skills/tech-ai-terraform/SKILL.md`.
+- `scripts/bootstrap-copilot-config.sh`: **Removed**. Replaced by `scripts/internal-sync-copilot-configs.py`.
+- `skills/internal-terraform-feature/SKILL.md`: **Removed**. Merged into `skills/internal-terraform/SKILL.md`.
+- `skills/internal-terraform-module/SKILL.md`: **Removed**. Merged into `skills/internal-terraform/SKILL.md`.

.github/PULL_REQUEST_TEMPLATE.md

@@ -49,6 +49,6 @@
 
 - [ ] No secrets/tokens/credentials committed
 - [ ] Repository artifacts remain in English
-- [ ] `validate-copilot-customizations.sh --mode strict` executed successfully
+- [ ] `validate-copilot-customizations.py --mode strict` executed successfully
 - [ ] Workflow action pins use full SHA with adjacent release/tag reference
 - [ ] References remain repository-agnostic and reusable

.github/README.md

@@ -188,9 +188,9 @@ These agents manage the **lifecycle** of Copilot customization assets. They are
 
 | Script | Purpose | Use when | Do NOT use when |
 | --- | --- | --- | --- |
-| `validate-copilot-customizations.sh` | Validates frontmatter, section structure, agent metadata, inventory consistency, and SHA-pinning across all customization assets. | After any change to `.github/` — run with `--scope root --mode strict`. | Validating application code (run linters instead). |
-| `tech-ai-sync-copilot-configs.py` | Manifest-based conservative sync with conflict detection, SHA256 checksums, and reporting. Preferred tool for aligning consumer repos. | Propagating config updates to consumer repos — run with `--mode plan` first, then `--mode apply`. | This repo itself — it's the source, not a target. |
-| `bootstrap-copilot-config.sh` | ⚠️ **Deprecated** — rsync-based simple copy. See `DEPRECATION.md`. | Only as a legacy fallback for consumers not yet migrated to the sync script. | New consumers — use `tech-ai-sync-copilot-configs.py` instead. |
+| `validate-copilot-customizations.py` | Validates frontmatter, section structure, agent metadata, inventory consistency, and SHA-pinning across all customization assets. | After any change to `.github/` — run with `--scope root --mode strict`. | Validating application code (run linters instead). |
+| `internal-sync-copilot-configs.py` | Manifest-based conservative sync with conflict detection, SHA256 checksums, and reporting. Preferred tool for aligning consumer repos. | Propagating config updates to consumer repos — run with `--mode plan` first, then `--mode apply`. | This repo itself — it's the source, not a target. |
+| `bootstrap-copilot-config.sh` | ⚠️ **Deprecated** — rsync-based simple copy. See `DEPRECATION.md`. | Only as a legacy fallback for consumers not yet migrated to the sync script. | New consumers — use `internal-sync-copilot-configs.py` instead. |
 
 ### Templates (`templates/`)
 
@@ -210,10 +210,10 @@ These agents manage the **lifecycle** of Copilot customization assets. They are
 ## Maintenance workflow
 
 1. Edit files under `.github/`.
-2. Run validation: `./scripts/validate-copilot-customizations.sh --scope root --mode strict`.
-3. Optional JSON report: `./scripts/validate-copilot-customizations.sh --scope root --mode strict --report json --report-file /tmp/copilot-report.json`.
-4. Cross-repo alignment: `python scripts/tech-ai-sync-copilot-configs.py --target <repo-path> --mode plan` → review → `--mode apply`.
-5. Optional cross-repo assessment: `./scripts/validate-copilot-customizations.sh --scope all --mode legacy-compatible`.
+2. Run validation: `python3 .github/scripts/validate-copilot-customizations.py --scope root --mode strict`.
+3. Optional JSON report: `python3 .github/scripts/validate-copilot-customizations.py --scope root --mode strict --report json --report-file /tmp/copilot-report.json`.
+4. Cross-repo alignment: `python scripts/internal-sync-copilot-configs.py --target <repo-path> --mode plan` → review → `--mode apply`.
+5. Optional cross-repo assessment: `python3 .github/scripts/validate-copilot-customizations.py --scope all --mode legacy-compatible`.
 6. Ensure CI workflow passes.
 7. Update `CHANGELOG.md` for notable changes.
 
@@ -233,4 +233,4 @@ These agents manage the **lifecycle** of Copilot customization assets. They are
 
 | Asset | Deprecated in favor of | Status | Notes |
 | --- | --- | --- | --- |
-| `scripts/bootstrap-copilot-config.sh` | `scripts/tech-ai-sync-copilot-configs.py` | Deprecated — pending removal after migration window | See `DEPRECATION.md` for timeline. |
+| `scripts/bootstrap-copilot-config.sh` | `scripts/internal-sync-copilot-configs.py` | Deprecated — pending removal after migration window | See `DEPRECATION.md` for timeline. |