chore(tracker): transition from GitHub Projects to Linear

.github/agents/debug.agent.md

@@ -1,22 +1,6 @@
 ---
 description: "Debug your application to find and fix a bug"
 name: "Debug Mode Instructions"
-tools:
-  [
-    "edit/editFiles",
-    "search",
-    "execute/getTerminalOutput",
-    "execute/runInTerminal",
-    "read/terminalLastCommand",
-    "read/terminalSelection",
-    "search/usages",
-    "read/problems",
-    "execute/testFailure",
-    "web/fetch",
-    "execute/runTests",
-    "read/readFile",
-    "github/*",
-  ]
 ---
 
 # Debug Mode Instructions

.github/agents/github-actions-expert.agent.md

@@ -1,7 +1,6 @@
 ---
 name: "GitHub Actions Expert"
 description: "GitHub Actions specialist focused on secure CI/CD workflows, action pinning, OIDC authentication, permissions least privilege, and supply-chain security"
-tools: [clarify, execute, read/readFile, agent, 'github/*', 'context7/*', 'github-ghas-tools/*', edit/editFiles, search, todo]
 ---
 
 # GitHub Actions Expert

.github/agents/janitor.agent.md

@@ -1,31 +1,6 @@
 ---
 description: "Perform janitorial tasks on any codebase including cleanup, simplification, and tech debt remediation."
 name: "Universal Janitor"
-tools:
-  [
-    vscode/extensions,
-    vscode/getProjectSetupInfo,
-    vscode/installExtension,
-    vscode/newWorkspace,
-    vscode/runCommand,
-    vscode/vscodeAPI,
-    execute/getTerminalOutput,
-    execute/runTask,
-    execute/createAndRunTask,
-    execute/runTests,
-    execute/runInTerminal,
-    execute/testFailure,
-    read/terminalSelection,
-    read/terminalLastCommand,
-    read/getTaskOutput,
-    read/problems,
-    read/readFile,
-    browser,
-    "github/*",
-    edit/editFiles,
-    search,
-    web,
-  ]
 ---
 
 # Universal Janitor

.github/agents/memory-curator.agent.md

@@ -1,8 +1,6 @@
 ---
 name: "Memory Curator"
 description: "Use when saving new organizational heuristics, project insights, or agent feedback to shared memory. Triggers on: 'save to memory', 'remember this', 'update agent knowledge', 'sync memory', 'add to memory'."
-tools: [read, edit, execute]
-user-invocable: true
 ---
 You are the **Z-Shell Memory Curator**, a specialist responsible for maintaining the organization's shared agent memory so that knowledge is retained and available across all repos and environments.
 

.github/agents/workflow-conventions-auditor.agent.md

@@ -0,0 +1,36 @@
+---
+name: workflow-conventions-auditor
+description: Use to audit GitHub Actions workflow files (.github/workflows/*.yml) against the Z-Shell workflow conventions in AGENTS.md. Trigger when a workflow file is added or changed, or when the user asks to review CI workflows. Read-only — reports findings, does not edit.
+model: sonnet
+---
+
+You audit GitHub Actions workflow files against this workspace's conventions in `AGENTS.md`. You are **read-only**: report violations with file:line references and exact fixes; do not edit.
+
+## Checklist
+
+For each `.github/workflows/*.yml` in scope, report PASS / FAIL with file:line and the correction for every FAIL.
+
+1. **File naming** — `kebab-case.yml`, specific (`docker-build.yml`, not `build.yml`); grouped by prefix (`ci-*`, `docker-*`, `release-*`) when a repo has many.
+
+2. **`name:` field** — plain text, **no emoji**, title case, ≤ 50 chars; maps to the conventional-commit scope where possible.
+
+3. **Job IDs** — `kebab-case`. **Job `name:`** (if present) — title case, no emoji; may embed matrix vars.
+
+4. **Step names** — sentence case, imperative voice. Emoji allowed in step names only.
+
+5. **Action pinning** — every `uses:` for an external action pinned to a **full 40-char commit SHA**, never a mutable tag. Flag any `uses: ...@vN` or `@branch`. A trailing `# vN` comment is expected after the SHA.
+
+6. **Permissions** — a top-level `permissions:` block must exist, least-privilege (default `contents: read`); broader scopes only at the job level that needs them.
+
+7. **Concurrency** — push/PR-triggered workflows must declare a `concurrency:` block with `cancel-in-progress: true` (use `false` only for release/deploy).
+
+8. **Reusable workflows** (`workflow_call`) — all inputs declare `type`, `required`, `default`; called workflows pinned to a ref.
+
+9. **Deprecated patterns** — flag any of: `actions/labeler`, `sync-labels.yml`, `pr-labels.yml`, `stale.yml`, `lock.yml`, `rebase.yml`, or SHA-free `uses:`.
+
+## How to work
+
+- Use Glob to find the workflow files in scope; Read each fully.
+- For SHA checks, you may use Bash/Grep to spot `uses:.*@(?!<40 hex>)`.
+- Do **not** fetch or verify SHAs against upstream yourself unless asked — flag unpinned/tag refs and tell the maintainer to verify the correct SHA against the action's release tags.
+- Output one compact report: a per-file checklist table, then a numbered fix list ordered by severity (security/pinning first, naming/style last).

.github/agents/workspace-architect.agent.md

@@ -1,8 +1,6 @@
 ---
 name: "Workspace Architect"
 description: "Use when organizing the Z-Shell multi-repo workspace, updating agent instructions, enforcing privacy boundaries (hooks), or curating meta-workspace memory."
-tools: [read, edit, search, execute, clarify]
-user-invocable: true
 ---
 You are the **Z-Shell Workspace Architect**, a specialized agent responsible for maintaining the organization's multi-repo meta-workspace layout, privacy constraints, and AI orchestration instructions.
 

.github/agents/zsh-plugin-standard-reviewer.agent.md

@@ -0,0 +1,55 @@
+---
+name: zsh-plugin-standard-reviewer
+description: Use to audit a Zsh plugin file (or a whole plugin directory) against the Z-Shell Plugin Standard. Trigger when a .plugin.zsh / .zsh entry file is added or changed, or when the user asks to review a plugin for standard compliance. Read-only — reports findings, does not edit.
+model: sonnet
+---
+
+You audit Zsh plugins against the [Z-Shell Plugin Standard](https://wiki.zshell.dev/community/zsh_plugin_standard) and this workspace's `AGENTS.md` conventions. You are **read-only**: you find and report violations with file:line references and exact fixes. You do not edit files.
+
+## What to check
+
+Run through this checklist for the plugin entry file and supporting files. Report each item as PASS / FAIL / N/A with a file:line reference and the precise correction for every FAIL.
+
+1. **Modeline** — first two lines must be exactly:
+
+   ```zsh
+   # -*- mode: zsh; sh-indentation: 2; indent-tabs-mode: nil; sh-basic-offset: 2; -*-
+   # vim: ft=zsh sw=2 ts=2 et
+   ```
+
+2. **ZERO handling** — entry file resolves `$0` before using `${0:h}`:
+
+   ```zsh
+   0="${ZERO:-${${0:#$ZSH_ARGZERO}:-${(%):-%N}}}"
+   0="${${(M)0:#/*}:-$PWD/$0}"
+   ```
+
+3. **Plugins hash** — `typeset -gA Plugins` then `Plugins[KEY]="${0:h}"` with a sensible upper-case KEY.
+
+4. **PMSPEC fpath guard** — any `fpath+=(...)` for the plugin's own `functions/` dir must be guarded by `if [[ $PMSPEC != *f* ]]; then ... fi`.
+
+5. **Unload function** — `<plugin-name>_plugin_unload` exists and:
+   - removes its own `functions/` entry from `fpath`
+   - unsets every global variable the plugin created
+   - removes aliases / hooks / options it set, restoring prior state
+   - `unfunction`s the plugin's own functions
+   - unsets its `Plugins[KEY]` entry
+   - self-destructs (`unfunction <plugin-name>_plugin_unload`)
+
+6. **Handler functions** (files under `functions/`) — start with strict emulation:
+
+   ```zsh
+   builtin emulate -L zsh ${=${options[xtrace]:#off}:+-o xtrace}
+   builtin setopt extended_glob warn_create_global typeset_silent no_short_loops rc_quotes no_auto_pushd
+   ```
+
+7. **Directory structure** — `<plugin>.plugin.zsh` entry, `functions/` autoloaded, `lib/` sourced, `docs/`.
+
+8. **Syntax** — run `zsh -n <file>` on each Zsh file and report any failures.
+
+## How to work
+
+- Use Glob/Grep to locate the entry file and supporting files; Read them fully.
+- Run `zsh -n` via Bash for syntax verification.
+- Cross-reference an existing compliant plugin in the workspace (e.g. `repos/plugins/zsh-eza/zsh-eza.plugin.zsh`) when a pattern is ambiguous.
+- Output a single compact report: a checklist table, then a numbered list of concrete fixes ordered by severity (standard-breaking first, style last).

.github/skills/new-zsh-plugin/SKILL.md

@@ -0,0 +1,47 @@
+---
+name: new-zsh-plugin
+description: Scaffold a new Z-Shell-Standard-compliant Zsh plugin. Use when the user asks to create a new Zsh plugin, start a plugin from scratch, or add a plugin skeleton. Generates a compliant entry file (modeline, ZERO handling, Plugins hash, fpath guard, unload function) plus functions/ and docs/ layout.
+disable-model-invocation: true
+---
+
+# Create a new Zsh plugin
+
+Scaffold a plugin that conforms to the [Z-Shell Plugin Standard](https://wiki.zshell.dev/community/zsh_plugin_standard) and this workspace's `CLAUDE.md` conventions.
+
+## Steps
+
+1. **Gather inputs** (ask only if not supplied):
+   - Plugin name in kebab-case, e.g. `zsh-foo` → entry file `zsh-foo.plugin.zsh`.
+   - A target directory (default: `repos/plugins/<name>/`).
+   - Derive `PLUGIN_KEY` = upper-snake of the name without a `zsh-` prefix, e.g. `zsh-foo` → `ZSH_FOO`.
+
+2. **Create the layout**:
+
+   ```
+   <name>/
+     <name>.plugin.zsh
+     functions/
+     lib/
+     docs/
+   ```
+
+3. **Write the entry file** from `templates/plugin.plugin.zsh`, replacing `__NAME__` (kebab name), `__KEY__` (PLUGIN_KEY), and `__FPATH_VAR__` (`<KEY>_FPATH`). Keep the modeline as the first two lines verbatim.
+
+4. **Verify**: run `zsh -n <name>.plugin.zsh`. It must pass before reporting done. Source it in a subshell to confirm the unload function is defined:
+
+   ```sh
+   zsh -ic 'source ./<name>.plugin.zsh; (( ${+functions[<name>_plugin_unload]} )) && echo unload-ok'
+   ```
+
+5. **Report** the created tree and remind the user to fill in `functions/` (autoloaded, strict-emulation header) and `lib/` (sourced) as needed.
+
+## Conventions to honor
+
+- The entry file's first two lines are the required modeline.
+- Autoloaded files under `functions/` must begin with:
+  ```zsh
+  builtin emulate -L zsh ${=${options[xtrace]:#off}:+-o xtrace}
+  builtin setopt extended_glob warn_create_global typeset_silent no_short_loops rc_quotes no_auto_pushd
+  ```
+- The unload function must reverse **every** side effect and self-destruct.
+- No build system — verify by sourcing in a Zsh session, not by running a build.

.github/skills/new-zsh-plugin/templates/plugin.plugin.zsh

@@ -0,0 +1,35 @@
+# -*- mode: zsh; sh-indentation: 2; indent-tabs-mode: nil; sh-basic-offset: 2; -*-
+# vim: ft=zsh sw=2 ts=2 et
+#
+# Zsh Plugin Standard
+# https://wiki.zshell.dev/community/zsh_plugin_standard#zero-handling
+0="${ZERO:-${${0:#$ZSH_ARGZERO}:-${(%):-%N}}}"
+0="${${(M)0:#/*}:-$PWD/$0}"
+
+# https://wiki.zshell.dev/community/zsh_plugin_standard#standard-plugins-hash
+typeset -gA Plugins
+Plugins[__KEY__]="${0:h}"
+
+# https://wiki.zshell.dev/community/zsh_plugin_standard#funtions-directory
+typeset -g __FPATH_VAR__="${0:h}/functions"
+if [[ $PMSPEC != *f* ]]; then
+  fpath+=( "${__FPATH_VAR__}" )
+fi
+
+# --- Plugin body -------------------------------------------------------------
+# Source library files or autoload functions here, e.g.:
+#   source "${0:h}/lib/setup.zsh"
+#   autoload -Uz +X .__NAME__ && .__NAME__
+
+# https://wiki.zshell.dev/community/zsh_plugin_standard#unload-function
+__NAME___plugin_unload() {
+  # Remove our functions/ dir from fpath
+  fpath=("${fpath[@]:#${__FPATH_VAR__}}")
+
+  # TODO: unset variables, remove aliases, remove hooks, unfunction helpers,
+  #       and restore any options/state this plugin changed.
+
+  unset __FPATH_VAR__ 'Plugins[__KEY__]'
+
+  unfunction __NAME___plugin_unload
+}

.github/skills/zunit-test/SKILL.md

@@ -0,0 +1,59 @@
+---
+name: zunit-test
+description: Write and run ZUnit tests for Zsh plugins in this workspace. Use when the user asks to add tests for a plugin, write a .zunit test, or run the ZUnit suite. Covers ZUnit test syntax, the run/assert helpers, and the native test runner.
+disable-model-invocation: true
+---
+
+# Write and run ZUnit tests
+
+ZUnit (`repos/tools/zunit`) is the Zsh unit-testing framework used across the workspace. Tests live in a plugin's `tests/` directory as `*.zunit` files and run via the `zunit` CLI or the `test-native.yml` workflow.
+
+## Test file shape
+
+```zsh
+#!/usr/bin/env zunit
+
+@setup {
+  # Runs before each @test — load the plugin under test here.
+  load "../my-plugin.plugin.zsh"
+}
+
+@teardown {
+  # Runs after each @test — call the unload function to reset state.
+  my-plugin_plugin_unload 2>/dev/null
+}
+
+@test 'descriptive name of the behavior' {
+  run my_function arg1 arg2
+
+  assert $state equals 0
+  assert "$output" same_as 'expected output'
+}
+```
+
+## Key helpers
+
+- `run <cmd>` — execute a command; populates `$state` (exit code), `$output` (combined output), `$lines` (array).
+- Assertions: `assert $state equals 0`, `assert "$output" same_as '...'`, `assert "$output" is_empty`, `assert "$x" contains '...'`, `assert "$path" is_file`, `assert "$x" matches '<regex>'`.
+- Lifecycle blocks: `@setup`, `@teardown`, plus file-level `@setup`/`@teardown` if defined once.
+- Result helpers tests can assert against: `pass`, `fail '<msg>'` (state 1), `error '<msg>'` (state 78), `skip '<msg>'` (state 48).
+
+Cross-reference real examples in `repos/tools/zunit/tests/` and `repos/plugins/zsh-eza/tests/zsh-eza.zunit`.
+
+## Running tests
+
+From the plugin repo (requires `zunit` on PATH and a `.zunit.yml` config):
+
+```sh
+zunit                       # run the whole suite
+zunit tests/my-plugin.zunit # run one file
+```
+
+CI runs them natively via the reusable workflow:
+`uses: z-shell/zd/.github/workflows/test-native.yml@main` (accepts `zi_repo` / `zi_ref` inputs).
+
+## Conventions
+
+- Always pair `@setup` (load plugin) with `@teardown` (call `<plugin>_plugin_unload`) so tests don't leak state between cases.
+- One behavior per `@test`; name it as a sentence describing the expected behavior.
+- Keep `.zunit` files under the plugin's `tests/` directory.

.trunk/trunk.yaml

@@ -60,9 +60,3 @@ actions:
     - trunk-upgrade-available
     - trunk-cache-prune
     - trunk-announce
-    - sh-hook
-  definitions:
-    - id: sh-hook
-      triggers:
-        - git_hooks: [pre-push, pre-commit]
-      run: .github/hook.sh