fix: enforce native subagent governance

.aiox-core/install-manifest.yaml

@@ -7,8 +7,8 @@
 # - SHA256 hashes for change detection
 # - File types for categorization
 #
-version: 5.1.4
-generated_at: "2026-05-07T11:20:24.845Z"
+version: 5.1.5
+generated_at: "2026-05-07T11:58:48.672Z"
 generator: scripts/generate-install-manifest.js
 file_count: 1103
 files:

.claude/agents/aiox-analyst.md

@@ -17,13 +17,14 @@ permissionMode: bypassPermissions
 memory: project
 hooks:
   PreToolUse:
-    - matcher: "Bash"
+    - matcher: Bash
       hooks:
         - type: command
-          command: ".claude/hooks/enforce-git-push-authority.sh"
+          command: node .claude/hooks/enforce-git-push-authority.cjs
 skills:
   - synapse:tasks:diagnose-synapse
   - tech-search
+color: cyan
 ---
 
 # AIOX Analyst - Autonomous Agent

.claude/agents/aiox-architect.md

@@ -17,13 +17,14 @@ permissionMode: bypassPermissions
 memory: project
 hooks:
   PreToolUse:
-    - matcher: "Bash"
+    - matcher: Bash
       hooks:
         - type: command
-          command: ".claude/hooks/enforce-git-push-authority.sh"
+          command: node .claude/hooks/enforce-git-push-authority.cjs
 skills:
   - synapse:tasks:diagnose-synapse
   - architect-first
+color: purple
 ---
 
 # AIOX Architect - Autonomous Agent

.claude/agents/aiox-data-engineer.md

@@ -15,13 +15,14 @@ permissionMode: bypassPermissions
 memory: project
 hooks:
   PreToolUse:
-    - matcher: "Bash"
+    - matcher: Bash
       hooks:
         - type: command
-          command: ".claude/hooks/enforce-git-push-authority.sh"
+          command: node .claude/hooks/enforce-git-push-authority.cjs
 skills:
   - synapse:tasks:diagnose-synapse
   - checklist-runner
+color: blue
 ---
 
 # AIOX Data Engineer - Autonomous Agent

.claude/agents/aiox-dev.md

@@ -12,19 +12,19 @@ tools:
   - Write
   - Edit
   - Bash
-  - Task
 permissionMode: bypassPermissions
 memory: project
 hooks:
   PreToolUse:
-    - matcher: "Bash"
+    - matcher: Bash
       hooks:
         - type: command
-          command: ".claude/hooks/enforce-git-push-authority.sh"
+          command: node .claude/hooks/enforce-git-push-authority.cjs
 skills:
   - synapse:tasks:diagnose-synapse
   - coderabbit-review
   - checklist-runner
+color: green
 ---
 
 # AIOX Developer - Autonomous Agent

.claude/agents/aiox-devops.md

@@ -18,6 +18,7 @@ skills:
   - synapse:manager
   - coderabbit-review
   - checklist-runner
+color: orange
 ---
 
 # AIOX DevOps - Autonomous Agent

.claude/agents/aiox-pm.md

@@ -15,13 +15,14 @@ permissionMode: bypassPermissions
 memory: project
 hooks:
   PreToolUse:
-    - matcher: "Bash"
+    - matcher: Bash
       hooks:
         - type: command
-          command: ".claude/hooks/enforce-git-push-authority.sh"
+          command: node .claude/hooks/enforce-git-push-authority.cjs
 skills:
   - synapse:tasks:diagnose-synapse
   - checklist-runner
+color: pink
 ---
 
 # AIOX Project Manager - Autonomous Agent

.claude/agents/aiox-po.md

@@ -15,13 +15,14 @@ permissionMode: bypassPermissions
 memory: project
 hooks:
   PreToolUse:
-    - matcher: "Bash"
+    - matcher: Bash
       hooks:
         - type: command
-          command: ".claude/hooks/enforce-git-push-authority.sh"
+          command: node .claude/hooks/enforce-git-push-authority.cjs
 skills:
   - synapse:tasks:diagnose-synapse
   - checklist-runner
+color: yellow
 ---
 
 # AIOX Product Owner - Autonomous Agent

.claude/agents/aiox-qa.md

@@ -15,14 +15,15 @@ permissionMode: bypassPermissions
 memory: project
 hooks:
   PreToolUse:
-    - matcher: "Bash"
+    - matcher: Bash
       hooks:
         - type: command
-          command: ".claude/hooks/enforce-git-push-authority.sh"
+          command: node .claude/hooks/enforce-git-push-authority.cjs
 skills:
   - synapse:tasks:diagnose-synapse
   - coderabbit-review
   - checklist-runner
+color: red
 ---
 
 # AIOX QA - Autonomous Agent

.claude/agents/aiox-sm.md

@@ -15,13 +15,14 @@ permissionMode: bypassPermissions
 memory: project
 hooks:
   PreToolUse:
-    - matcher: "Bash"
+    - matcher: Bash
       hooks:
         - type: command
-          command: ".claude/hooks/enforce-git-push-authority.sh"
+          command: node .claude/hooks/enforce-git-push-authority.cjs
 skills:
   - synapse:tasks:diagnose-synapse
   - checklist-runner
+color: cyan
 ---
 
 # AIOX Scrum Master - Autonomous Agent

.claude/agents/aiox-ux.md

@@ -15,13 +15,14 @@ permissionMode: bypassPermissions
 memory: project
 hooks:
   PreToolUse:
-    - matcher: "Bash"
+    - matcher: Bash
       hooks:
         - type: command
-          command: ".claude/hooks/enforce-git-push-authority.sh"
+          command: node .claude/hooks/enforce-git-push-authority.cjs
 skills:
   - synapse:tasks:diagnose-synapse
   - checklist-runner
+color: purple
 ---
 
 # AIOX UX Design Expert - Autonomous Agent

.claude/agents/brad-frost.md

@@ -1,7 +1,8 @@
 ---
 name: brad-frost
-description: |
-  design/brad-frost: Use for complete design system workflow - brownfield audit, pattern consolidation, token extraction, migration planning, component building, or greenfield setup
+description: >
+  design/brad-frost: Use for complete design system workflow - brownfield audit, pattern
+  consolidation, token extraction, migration planning, component building, or greenfield setup
 model: sonnet
 tools:
   - Read
@@ -12,9 +13,15 @@ tools:
   - Bash
   - WebSearch
   - WebFetch
-  - Task
 permissionMode: bypassPermissions
 memory: project
+color: green
+hooks:
+  PreToolUse:
+    - matcher: Bash
+      hooks:
+        - type: command
+          command: node .claude/hooks/enforce-git-push-authority.cjs
 ---
 
 # Brad Frost - Design Squad

.claude/agents/copy-chief.md

@@ -15,6 +15,13 @@ tools:
   - WebFetch
 permissionMode: bypassPermissions
 memory: project
+color: pink
+hooks:
+  PreToolUse:
+    - matcher: Bash
+      hooks:
+        - type: command
+          command: node .claude/hooks/enforce-git-push-authority.cjs
 ---
 
 # Copy Chief - Autonomous Agent

.claude/agents/cyber-chief.md

@@ -15,6 +15,13 @@ tools:
   - WebFetch
 permissionMode: bypassPermissions
 memory: project
+color: red
+hooks:
+  PreToolUse:
+    - matcher: Bash
+      hooks:
+        - type: command
+          command: node .claude/hooks/enforce-git-push-authority.cjs
 ---
 
 # Cyber Chief - Autonomous Agent

.claude/agents/dan-mall.md

@@ -1,7 +1,8 @@
 ---
 name: dan-mall
-description: |
-  design/dan-mall: Use for design system adoption - stakeholder buy-in, ROI calculation, shock reports, adoption narrative, documentation
+description: >
+  design/dan-mall: Use for design system adoption - stakeholder buy-in, ROI calculation, shock
+  reports, adoption narrative, documentation
 model: sonnet
 tools:
   - Read
@@ -14,6 +15,13 @@ tools:
   - WebFetch
 permissionMode: bypassPermissions
 memory: project
+color: cyan
+hooks:
+  PreToolUse:
+    - matcher: Bash
+      hooks:
+        - type: command
+          command: node .claude/hooks/enforce-git-push-authority.cjs
 ---
 
 # Dan Mall - Design Squad

.claude/agents/data-chief.md

@@ -15,6 +15,13 @@ tools:
   - WebFetch
 permissionMode: bypassPermissions
 memory: project
+color: blue
+hooks:
+  PreToolUse:
+    - matcher: Bash
+      hooks:
+        - type: command
+          command: node .claude/hooks/enforce-git-push-authority.cjs
 ---
 
 # Data Chief - Autonomous Agent

.claude/agents/dave-malouf.md

@@ -1,7 +1,8 @@
 ---
 name: dave-malouf
-description: |
-  design/dave-malouf: Use for DesignOps - maturity assessment, process optimization, metrics setup, team scaling, tooling audit, triage, review orchestration
+description: >
+  design/dave-malouf: Use for DesignOps - maturity assessment, process optimization, metrics setup,
+  team scaling, tooling audit, triage, review orchestration
 model: sonnet
 tools:
   - Read
@@ -14,6 +15,13 @@ tools:
   - WebFetch
 permissionMode: bypassPermissions
 memory: project
+color: purple
+hooks:
+  PreToolUse:
+    - matcher: Bash
+      hooks:
+        - type: command
+          command: node .claude/hooks/enforce-git-push-authority.cjs
 ---
 
 # Dave Malouf - Design Squad

.claude/agents/db-sage.md

@@ -13,6 +13,13 @@ tools:
   - Bash
 permissionMode: bypassPermissions
 memory: project
+color: blue
+hooks:
+  PreToolUse:
+    - matcher: Bash
+      hooks:
+        - type: command
+          command: node .claude/hooks/enforce-git-push-authority.cjs
 ---
 
 # DB Sage - Autonomous Agent

.claude/agents/design-chief.md

@@ -15,6 +15,13 @@ tools:
   - WebFetch
 permissionMode: bypassPermissions
 memory: project
+color: purple
+hooks:
+  PreToolUse:
+    - matcher: Bash
+      hooks:
+        - type: command
+          command: node .claude/hooks/enforce-git-push-authority.cjs
 ---
 
 # Design Chief - Autonomous Agent

.claude/agents/design-system.md

@@ -11,9 +11,15 @@ tools:
   - Write
   - Edit
   - Bash
-  - Task
 permissionMode: bypassPermissions
 memory: project
+color: green
+hooks:
+  PreToolUse:
+    - matcher: Bash
+      hooks:
+        - type: command
+          command: node .claude/hooks/enforce-git-push-authority.cjs
 ---
 
 # Design System (Brad Frost) - Autonomous Agent

.claude/agents/legal-chief.md

@@ -15,6 +15,13 @@ tools:
   - WebFetch
 permissionMode: bypassPermissions
 memory: project
+color: yellow
+hooks:
+  PreToolUse:
+    - matcher: Bash
+      hooks:
+        - type: command
+          command: node .claude/hooks/enforce-git-push-authority.cjs
 ---
 
 # Legal Chief - Autonomous Agent

.claude/agents/nano-banana-generator.md

@@ -1,7 +1,8 @@
 ---
 name: nano-banana-generator
-description: |
-  design/nano-banana-generator: Use for visual artifact generation - thumbnails, icons, illustrations, AI image prompts, brand-aligned assets
+description: >
+  design/nano-banana-generator: Use for visual artifact generation - thumbnails, icons,
+  illustrations, AI image prompts, brand-aligned assets
 model: haiku
 tools:
   - Read
@@ -14,6 +15,13 @@ tools:
   - WebFetch
 permissionMode: bypassPermissions
 memory: project
+color: orange
+hooks:
+  PreToolUse:
+    - matcher: Bash
+      hooks:
+        - type: command
+          command: node .claude/hooks/enforce-git-push-authority.cjs
 ---
 
 # Nano Banana Generator - Design Squad