feat: add npm-package-bundler-guard persona

README.md

@@ -183,6 +183,7 @@ for the full mount layout and semantics.
 
 ## Personas
 
+- `personas/agent-relay-workflow.json`
 - `personas/frontend-implementer.json`
 - `personas/code-reviewer.json`
 - `personas/architecture-planner.json`
@@ -199,6 +200,11 @@ for the full mount layout and semantics.
 - `personas/posthog.json`
 - `personas/persona-maker.json`
 - `personas/anti-slop-auditor.json`
+- `personas/api-contract-reviewer.json`
+- `personas/docker-stack-wrangler.json`
+- `personas/e2e-validator.json`
+- `personas/integration-test-author.json`
+- `personas/npm-package-bundler-guard.json`
 
 ## Routing profiles
 

packages/workload-router/routing-profiles/default.json

@@ -3,93 +3,33 @@
   "id": "balanced-default",
   "description": "Default routing policy balancing depth/latency and cost while keeping a fixed quality bar.",
   "intents": {
-    "implement-frontend": {
-      "tier": "best-value",
-      "rationale": "Most frontend tasks are iterative and benefit from strong quality-per-dollar defaults."
-    },
-    "review": {
-      "tier": "best-value",
-      "rationale": "Code review usually needs careful reasoning without always requiring max-cost models."
-    },
-    "architecture-plan": {
-      "tier": "best",
-      "rationale": "Architecture decisions are high leverage; prioritize depth and stronger reasoning."
-    },
-    "requirements-analysis": {
-      "tier": "best-value",
-      "rationale": "Most scope clarification work benefits from careful synthesis without needing the slowest tier by default."
-    },
-    "debugging": {
-      "tier": "best",
-      "rationale": "Root-cause debugging is expensive when wrong; default to deeper reasoning and stronger verification."
-    },
-    "security-review": {
-      "tier": "best",
-      "rationale": "Security review has asymmetric downside; favor deeper analysis on default policy."
-    },
-    "documentation": {
-      "tier": "best-value",
-      "rationale": "Most docs work benefits from solid code-grounded synthesis without always needing the top tier."
-    },
-    "verification": {
-      "tier": "best-value",
-      "rationale": "Completion checks need disciplined evidence review, but usually not the most expensive model."
-    },
-    "test-strategy": {
-      "tier": "best-value",
-      "rationale": "Test planning benefits from strong reasoning, but usually does not require the slowest or most expensive tier."
-    },
-    "tdd-enforcement": {
-      "tier": "best-value",
-      "rationale": "TDD coaching needs reliable process enforcement and concise feedback more than maximum-depth output."
-    },
-    "flake-investigation": {
-      "tier": "best",
-      "rationale": "Intermittent failures are expensive and subtle; prioritize deeper reasoning for reproduction and root-cause analysis."
-    },
-    "opencode-workflow-correctness": {
-      "tier": "best",
-      "rationale": "Cross-layer opencode workflow failures are expensive to misdiagnose; default to the deepest tier for end-to-end reproduction and root-cause analysis."
-    },
-    "npm-provenance": {
-      "tier": "best-value",
-      "rationale": "Publishing setup is mostly mechanical workflow configuration; best-value is sufficient when guided by the prpm/npm-trusted-publishing skill."
-    },
-    "cloud-sandbox-infra": {
-      "tier": "best",
-      "rationale": "Cloud infrastructure changes (sandbox provisioning, credential handling, session durability) have high blast radius; prioritize deeper reasoning and thorough verification."
-    },
-    "sage-slack-egress-migration": {
-      "tier": "best-value",
-      "rationale": "Slack egress migration work is mostly mechanical integration plumbing, so best-value is the default tradeoff."
-    },
-    "sage-proactive-rewire": {
-      "tier": "best-value",
-      "rationale": "Proactive rewiring is configuration-heavy coordination work that usually does not need the highest-cost tier by default."
-    },
-    "cloud-slack-proxy-guard": {
-      "tier": "best-value",
-      "rationale": "Proxy guard updates are typically policy and wiring checks, so best-value is a sensible default tier."
-    },
-    "sage-cloud-e2e-conduction": {
-      "tier": "best-value",
-      "rationale": "End-to-end conduction is orchestration-heavy work where strong reasoning is useful without requiring the top tier by default."
-    },
-    "capability-discovery": {
-      "tier": "best-value",
-      "rationale": "Searching skill.sh and prpm.dev for existing skills, agents, and hooks is lightweight research; the balanced default is sufficient when guided by the skill.sh/find-skills and @prpm/self-improving skills."
-    },
-    "posthog": {
-      "tier": "best-value",
-      "rationale": "PostHog queries are interactive analytics lookups; best-value is sufficient and keeps latency low when chatting with the MCP server."
-    },
-    "persona-authoring": {
-      "tier": "best",
-      "rationale": "New personas must satisfy a fixed conventions checklist (five wiring files, model-agnostic prompts, tier-isolation) before they typecheck; missing any step ships a broken routing entry, so depth over speed is the right default."
-    },
-    "slop-audit": {
-      "tier": "best",
-      "rationale": "Slop auditing reads across a diff or subtree and classifies findings into a multi-category taxonomy; missed slop ships unchanged, so depth over speed is the right default."
-    }
+    "implement-frontend": {"tier": "best-value", "rationale": "Most frontend tasks are iterative and benefit from strong quality-per-dollar defaults."},
+    "review": {"tier": "best-value", "rationale": "Code review usually needs careful reasoning without always requiring max-cost models."},
+    "architecture-plan": {"tier": "best", "rationale": "Architecture decisions are high leverage; prioritize depth and stronger reasoning."},
+    "requirements-analysis": {"tier": "best-value", "rationale": "Most scope clarification work benefits from careful synthesis without needing the slowest tier by default."},
+    "debugging": {"tier": "best", "rationale": "Root-cause debugging is expensive when wrong; default to deeper reasoning and stronger verification."},
+    "security-review": {"tier": "best", "rationale": "Security review has asymmetric downside; favor deeper analysis on default policy."},
+    "documentation": {"tier": "best-value", "rationale": "Most docs work benefits from solid code-grounded synthesis without always needing the top tier."},
+    "verification": {"tier": "best-value", "rationale": "Completion checks need disciplined evidence review, but usually not the most expensive model."},
+    "test-strategy": {"tier": "best-value", "rationale": "Test planning benefits from strong reasoning, but usually does not require the slowest or most expensive tier."},
+    "tdd-enforcement": {"tier": "best-value", "rationale": "TDD coaching needs reliable process enforcement and concise feedback more than maximum-depth output."},
+    "flake-investigation": {"tier": "best", "rationale": "Intermittent failures are expensive and subtle; prioritize deeper reasoning for reproduction and root-cause analysis."},
+    "opencode-workflow-correctness": {"tier": "best", "rationale": "Cross-layer opencode workflow failures are expensive to misdiagnose; default to the deepest tier for end-to-end reproduction and root-cause analysis."},
+    "npm-provenance": {"tier": "best-value", "rationale": "Publishing setup is mostly mechanical workflow configuration; best-value is sufficient when guided by the prpm/npm-trusted-publishing skill."},
+    "cloud-sandbox-infra": {"tier": "best", "rationale": "Cloud infrastructure changes (sandbox provisioning, credential handling, session durability) have high blast radius; prioritize deeper reasoning and thorough verification."},
+    "sage-slack-egress-migration": {"tier": "best-value", "rationale": "Slack egress migration work is mostly mechanical integration plumbing, so best-value is the default tradeoff."},
+    "sage-proactive-rewire": {"tier": "best-value", "rationale": "Proactive rewiring is configuration-heavy coordination work that usually does not need the highest-cost tier by default."},
+    "cloud-slack-proxy-guard": {"tier": "best-value", "rationale": "Proxy guard updates are typically policy and wiring checks, so best-value is a sensible default tier."},
+    "sage-cloud-e2e-conduction": {"tier": "best-value", "rationale": "End-to-end conduction is orchestration-heavy work where strong reasoning is useful without requiring the top tier by default."},
+    "capability-discovery": {"tier": "best-value", "rationale": "Searching skill.sh and prpm.dev for existing skills, agents, and hooks is lightweight research; the balanced default is sufficient when guided by the skill.sh/find-skills and @prpm/self-improving skills."},
+    "npm-package-compat": {"tier": "best-value", "rationale": "Package.json audits are mostly mechanical checks against known rules; best-value provides sufficient reasoning for catching misconfigurations."},
+    "posthog": {"tier": "best-value", "rationale": "PostHog queries are interactive analytics lookups; best-value is sufficient and keeps latency low when chatting with the MCP server."},
+    "persona-authoring": {"tier": "best", "rationale": "New personas must satisfy a fixed conventions checklist (five wiring files, model-agnostic prompts, tier-isolation) before they typecheck; missing any step ships a broken routing entry, so depth over speed is the right default."},
+    "slop-audit": {"tier": "best", "rationale": "Slop auditing reads across a diff or subtree and classifies findings into a multi-category taxonomy; missed slop ships unchanged, so depth over speed is the right default."},
+    "api-contract-review": {"tier": "best", "rationale": "Contract review catches silent breaking changes between deployed services; missing a discriminant collision or enum widening ships incidents, so depth over speed is the right default."},
+    "local-stack-orchestration": {"tier": "best-value", "rationale": "Compose authoring is mostly mechanical wiring once the topology is known; best-value is sufficient when guided by explicit healthcheck and pinning rules."},
+    "e2e-validation": {"tier": "best", "rationale": "End-to-end validation is the last line of defense before merge; missing a hop-level divergence ships broken behavior, so depth over speed is the right default."},
+    "write-integration-tests": {"tier": "best-value", "rationale": "Integration test authoring follows a fixed template (real substitute, wire-shape assertions, failure modes); best-value reasoning is sufficient when guided by the template."},
+    "agent-relay-workflow": {"tier": "best-value", "rationale": "new agent-relay-workflow capability requiring balanced reasoning and tooling"}
   }
 }

packages/workload-router/routing-profiles/schema.json

@@ -10,7 +10,7 @@
     "intents": {
       "type": "object",
       "additionalProperties": false,
-      "required": ["implement-frontend", "review", "architecture-plan", "requirements-analysis", "debugging", "security-review", "documentation", "verification", "test-strategy", "tdd-enforcement", "flake-investigation", "opencode-workflow-correctness", "npm-provenance", "cloud-sandbox-infra"],
+      "required": ["implement-frontend", "review", "architecture-plan", "requirements-analysis", "debugging", "security-review", "documentation", "verification", "test-strategy", "tdd-enforcement", "flake-investigation", "opencode-workflow-correctness", "npm-provenance", "cloud-sandbox-infra", "sage-slack-egress-migration", "sage-proactive-rewire", "cloud-slack-proxy-guard", "sage-cloud-e2e-conduction", "capability-discovery", "npm-package-compat", "posthog", "persona-authoring", "agent-relay-workflow", "slop-audit", "api-contract-review", "local-stack-orchestration", "e2e-validation", "write-integration-tests"],
       "properties": {
         "implement-frontend": { "$ref": "#/definitions/rule" },
         "review": { "$ref": "#/definitions/rule" },
@@ -25,7 +25,21 @@
         "flake-investigation": { "$ref": "#/definitions/rule" },
         "opencode-workflow-correctness": { "$ref": "#/definitions/rule" },
         "npm-provenance": { "$ref": "#/definitions/rule" },
-        "cloud-sandbox-infra": { "$ref": "#/definitions/rule" }
+        "cloud-sandbox-infra": { "$ref": "#/definitions/rule" },
+        "sage-slack-egress-migration": { "$ref": "#/definitions/rule" },
+        "sage-proactive-rewire": { "$ref": "#/definitions/rule" },
+        "cloud-slack-proxy-guard": { "$ref": "#/definitions/rule" },
+        "sage-cloud-e2e-conduction": { "$ref": "#/definitions/rule" },
+        "capability-discovery": { "$ref": "#/definitions/rule" },
+        "npm-package-compat": { "$ref": "#/definitions/rule" },
+        "posthog": { "$ref": "#/definitions/rule" },
+        "persona-authoring": { "$ref": "#/definitions/rule" },
+        "agent-relay-workflow": { "$ref": "#/definitions/rule" },
+        "slop-audit": { "$ref": "#/definitions/rule" },
+        "api-contract-review": { "$ref": "#/definitions/rule" },
+        "local-stack-orchestration": { "$ref": "#/definitions/rule" },
+        "e2e-validation": { "$ref": "#/definitions/rule" },
+        "write-integration-tests": { "$ref": "#/definitions/rule" }
       }
     }
   },

packages/workload-router/scripts/generate-personas.mjs

@@ -29,9 +29,15 @@ const exportNameMap = new Map([
   ['cloud-slack-proxy-guard', 'cloudSlackProxyGuard'],
   ['agent-relay-e2e-conductor', 'agentRelayE2eConductor'],
   ['capability-discoverer', 'capabilityDiscoverer'],
+  ['npm-package-bundler-guard', 'npmPackageBundlerGuard'],
   ['posthog', 'posthogAgent'],
   ['persona-maker', 'personaMaker'],
-  ['anti-slop-auditor', 'antiSlopAuditor']
+  ['agent-relay-workflow', 'agentRelayWorkflow'],
+  ['anti-slop-auditor', 'antiSlopAuditor'],
+  ['api-contract-reviewer', 'apiContractReviewer'],
+  ['docker-stack-wrangler', 'dockerStackWrangler'],
+  ['e2e-validator', 'e2eValidator'],
+  ['integration-test-author', 'integrationTestAuthor']
 ]);
 
 async function generate() {