feat: add 16 new specialist agents to agents directory

.github/mergify.yml

@@ -1,4 +1,5 @@
 pull_request_rules:
+  # Keep Dependabot PRs up-to-date by rebasing if develop has moved ahead
   - name: Keep Dependabot dependency updates on develop current
     conditions:
       - author~=^(dependabot\[bot\]|app/dependabot)$
@@ -8,7 +9,9 @@ pull_request_rules:
       - -conflict
       - "#commits-behind > 0"
     actions:
-      update:
+      update: {}
+
+  # Auto-approve and merge Dependabot dependency updates when CI passes
   - name: Auto-approve and merge Dependabot dependency updates on develop
     conditions:
       - author~=^(dependabot\[bot\]|app/dependabot)$
@@ -20,21 +23,25 @@ pull_request_rules:
     actions:
       review:
         type: APPROVE
-      queue:
-        name: dependabot
+      merge:
+        method: squash
+
+  # Keep imgbot image optimizations up-to-date by rebasing if develop has moved ahead
   - name: Keep imgbot image optimizations current on develop
     conditions:
-      # ImgBot has used both identities here, so keep both to avoid breaking auto-merge.
+      # ImgBot has used both identities here, so keep both to avoid breaking auto-merge
       - author~=^(imgbot\[bot\]|app/imgbot)$
       - base=develop
       - -draft
       - -conflict
       - "#commits-behind > 0"
     actions:
-      update:
+      update: {}
+
+  # Auto-merge imgbot image optimizations when CI passes
   - name: Auto-merge imgbot image optimizations on develop
     conditions:
-      # ImgBot has used both identities here, so keep both to avoid breaking auto-merge.
+      # ImgBot has used both identities here, so keep both to avoid breaking auto-merge
       - author~=^(imgbot\[bot\]|app/imgbot)$
       - base=develop
       - check-success=All Checks Passed
@@ -43,22 +50,7 @@ pull_request_rules:
     actions:
       merge:
         method: squash
-queue_rules:
-  - name: dependabot
-    queue_conditions:
-      - author~=^(dependabot\[bot\]|app/dependabot)$
-      - base=develop
-      - label=area:dependencies
-      - -draft
-      - -conflict
-    merge_conditions:
-      - check-success=All Checks Passed
-    merge_method: squash
-    batch_size: 1
-  - name: Merge queue
-    batch_size: 1
-merge_queue:
-  max_parallel_checks: 3
+
 merge_protections_settings:
   reporting_method: check-runs
   auto_merge_conditions: true

.github/scripts/validate-footers.js

@@ -159,7 +159,19 @@ function replaceFooterTail(content, footerTemplate) {
   return `${contentWithoutTail}${footerBlock}`;
 }
 
+// Bundled/vendored skill reference material (third-party snapshots embedded
+// in agent skill folders, not repo-authored) is exempt from footer
+// requirements — mirrors the exclusions in eslint.config.cjs and
+// scripts/validation/validate-mermaid-syntax.js.
+const VENDOR_PATH_PATTERN =
+  /\/(plugin-provided|platform-managed|directory-installed|agentskills-main)\//;
+
 function inferCategory(filePath, frontmatter) {
+  const normalizedForVendorCheck = filePath.replace(/\\/g, "/");
+  if (VENDOR_PATH_PATTERN.test(normalizedForVendorCheck)) {
+    return "";
+  }
+
   if (
     frontmatter?.category &&
     footerConfig.categories?.[frontmatter.category]
@@ -267,6 +279,7 @@ function getChangedMarkdownFiles() {
   try {
     const output = execSync(`git diff --name-only ${diffRange} -- '*.md'`, {
       encoding: "utf8",
+      maxBuffer: 1024 * 1024 * 100,
     }).trim();
 
     return output ? output.split("\n").filter(Boolean) : [];

.github/workflows/changelog-validate.yml

@@ -64,7 +64,10 @@ jobs:
             const baseSha = context.payload.pull_request?.base?.sha;
             const headSha = context.payload.pull_request?.head?.sha;
             const changed = cp
-              .execSync(`git diff --name-only ${baseSha} ${headSha}`, { encoding: "utf8" })
+              .execSync(`git diff --name-only ${baseSha} ${headSha}`, {
+                encoding: "utf8",
+                maxBuffer: 1024 * 1024 * 100,
+              })
               .split("\n")
               .filter(Boolean);
             if (changed.includes("CHANGELOG.md")) {

.github/workflows/meta.yml

@@ -90,18 +90,26 @@ jobs:
           fi
 
           # Get changed markdown files, excluding files with deferred formatting
+          # and bundled/vendored skill reference material (not repo-authored)
           FILES=$(git diff --name-only "$BASE_SHA" "$HEAD_SHA" -- '*.md' '*.mdx' | \
                   sed '/^AWESOME_GITHUB_MAPPING_STRATEGY\.md$/d' | \
                   sed '/^docs\/MIGRATION\.md$/d' | \
                   sed '/^\.github\/reports\//d' | \
-                  tr '\n' ' ')
+                  sed '/\/plugin-provided\//d' | \
+                  sed '/\/platform-managed\//d' | \
+                  sed '/\/directory-installed\//d' | \
+                  sed '/\/tests\/markdown-issues\.md$/d' | \
+                  sed '/\/agentskills-main\//d')
 
           if [ -z "$FILES" ]; then
             echo "No Markdown files to lint (all changed files are in ignore list)."
             exit 0
           fi
 
-          npx markdownlint-cli2 $FILES
+          # Pipe through xargs (rather than unquoted word-splitting) so very
+          # large changed-file counts are chunked instead of overflowing the
+          # shell's argument-list limit (E2BIG).
+          echo "$FILES" | xargs -r npx markdownlint-cli2
 
       - name: Collect Link Targets
         id: link_targets
@@ -127,22 +135,35 @@ jobs:
           fi
 
           LINK_FILES=""
+          LINK_FILE_COUNT=0
+          # Cap the file count passed to lychee-action's `args:` input — that
+          # string is substituted into an environment variable at process
+          # start, so an unbounded count can exceed the runner's
+          # argv/environment size limit (E2BIG) on exceptionally large PRs.
+          MAX_LINK_FILES=300
           while IFS= read -r file; do
             [ -z "$file" ] && continue
             if grep -Eq 'https?://|www\.|mailto:|^\[[^]]+\]:\s*https?://' "$file"; then
-              LINK_FILES="${LINK_FILES}${file} "
+              LINK_FILE_COUNT=$((LINK_FILE_COUNT + 1))
+              if [ "$LINK_FILE_COUNT" -le "$MAX_LINK_FILES" ]; then
+                LINK_FILES="${LINK_FILES}${file} "
+              fi
             fi
           done <<EOF
           $CHANGED_FILES
           EOF
 
+          if [ "$LINK_FILE_COUNT" -gt "$MAX_LINK_FILES" ]; then
+            echo "::warning::Changed files with URLs ($LINK_FILE_COUNT) exceed the $MAX_LINK_FILES-file link-check cap; only the first $MAX_LINK_FILES were checked. Remaining $((LINK_FILE_COUNT - MAX_LINK_FILES)) file(s) were not link-checked."
+          fi
+
           echo "files=${LINK_FILES}" >> "$GITHUB_OUTPUT"
 
       - name: Check Links
         if: steps.link_targets.outputs.files != ''
         uses: lycheeverse/lychee-action@v2
         with:
-          args: --no-progress --verbose ${{ steps.link_targets.outputs.files }}
+          args: --no-progress --verbose --config lychee.toml ${{ steps.link_targets.outputs.files }}
 
   apply-meta:
     if: ${{ github.event_name != 'pull_request' }}

.github/workflows/validate-mermaid-pr.yml

@@ -109,12 +109,17 @@ jobs:
       - name: Validate colour contrast (WCAG 2.2 AA)
         id: contrast
         if: steps.has_diagrams.outputs.result == 'true'
-        env:
-          CHANGED_FILES: ${{ steps.changed.outputs.files }}
         run: |
-          CHANGED="$CHANGED_FILES"
-          CHANGED_CSV=$(echo "$CHANGED" | tr '\n' ',' | sed 's/,$//')
-          node scripts/validation/validate-mermaid-colour-contrast.js --changed-files="$CHANGED_CSV"
+          # Write the changed-file list to disk rather than an env var or CLI
+          # arg — with this many changed files, either would exceed the
+          # runner's argv/environment size limit (E2BIG) before the process
+          # even starts. ${{ }} is substituted directly into this script's
+          # body at compile time, not passed through process creation, so it
+          # isn't subject to that limit here.
+          cat > "$RUNNER_TEMP/changed-md-files.txt" << 'CHANGED_FILES_EOF'
+          ${{ steps.changed.outputs.files }}
+          CHANGED_FILES_EOF
+          node scripts/validation/validate-mermaid-colour-contrast.js --changed-files-list="$RUNNER_TEMP/changed-md-files.txt"
         continue-on-error: true
 
       - name: Collect results

.lintstagedrc.cjs

@@ -0,0 +1,45 @@
+/**
+ * Dedicated lint-staged configuration (takes precedence over package.json's
+ * "lint-staged" field).
+ *
+ * All tasks filter out bundled/vendored skill reference material and
+ * intentionally-invalid test fixtures before invoking eslint/markdownlint,
+ * since those tools do not honour ignore globs against explicitly passed
+ * file paths (only against their own glob expansion). This mirrors the
+ * exclusions already applied in eslint.config.cjs, package.json's `lint:md`
+ * script, and .github/workflows/meta.yml's `lint-and-links` job.
+ */
+const EXCLUDED_PATTERNS = [
+  /\/plugin-provided\//,
+  /\/platform-managed\//,
+  /\/directory-installed\//,
+  /\/tests\/markdown-issues\.md$/,
+  /\/agentskills-main\//,
+];
+
+function isExcluded(filename) {
+  return EXCLUDED_PATTERNS.some((pattern) => pattern.test(filename));
+}
+
+function quoteAll(filenames) {
+  return filenames.map((f) => `"${f}"`).join(" ");
+}
+
+module.exports = {
+  "*.{js,jsx,ts,tsx}": (filenames) => {
+    const included = filenames.filter((f) => !isExcluded(f));
+    if (!included.length) return [];
+    return [
+      `eslint --fix ${quoteAll(included)}`,
+      `prettier --write ${quoteAll(included)}`,
+    ];
+  },
+  "*.{md,mdx}": (filenames) => {
+    const included = filenames.filter((f) => !isExcluded(f));
+    return included.length
+      ? [`markdownlint-cli2 --fix ${quoteAll(included)}`]
+      : [];
+  },
+  "*.json": ["prettier --write"],
+  "*.{yml,yaml}": ["prettier --write"],
+};