skill-author/agent-author's #89 retarget needs to know exactly how each
.apm/ primitive compiles to Claude Code and Copilot CLI output. The
existing microsoft-apm corpus only had a full schema for skills and one
minimal example for agents, and nothing for prompts/instructions/hooks.

Deepened via APM's own Python source (not just docs) where prose was
thin. Key finding for #89: agents have no per-target integrator, so
apm compile does a naive verbatim copy to both Claude and Copilot,
unlike prompts/instructions/hooks which each get real per-target
reconstruction. That means the agent primitive's `tools:` field can't
express both harnesses' incompatible vocabularies at once — a real
upstream gap, not something we can schema our way around.

@@ -29,0 +25,4 @@
+
+## apm-agent-allowlist
+
+name description model

@@ -5,8 +5,10 @@ usage() {
   cat <<EOF

@@ -59,3 +55,3 @@
     sys.exit(2)
 
-# --- Find plugin root ---
+TYPE_RE = re.compile(r'^type:\s*(instructions|skill|hybrid|prompts)\b')

@@ -62,1 +61,4 @@
+# marketplace-only manifest (see monorepo-and-repo-shapes.md) — skip it and
+# keep walking. Stop at a .git boundary or the filesystem root: neither is
+# plugin/APM scope, so this script has nothing to check there.
 def find_plugin_root(start_dir):

@@ -171,0 +146,4 @@
+                return True
+    return False
+
+def detect_scope(start_dir):

@@ -171,0 +158,4 @@
+        # can't shadow user scope by being its own .git repo.
+        if current == home:
+            return 'user', home
+        if os.path.isdir(os.path.join(current, '.git')):

@@ -171,0 +161,4 @@
+        if os.path.isdir(os.path.join(current, '.git')):
+            return 'project', current
+        parent = os.path.dirname(current)
+        if parent == current:

@@ -83,0 +96,4 @@
+#     below, so a dotfiles repo at $HOME can't shadow user scope).
+#   - a .git directory marks the project-scope boundary — stop.
+#   - filesystem root reached with neither found — boundary-reached.
+find_package_root() {

@@ -65,0 +87,4 @@
+# top-level 'type:' field is a marketplace-only manifest — skip it and keep
+# walking up. Prints two lines: the resolved root, then the mode.
+# ---------------------------------------------------------------------------
+find_package_root() {

@@ -65,0 +92,4 @@
+  current="$(cd "$1" && pwd)"
+  while true; do
+    if [[ -f "$current/apm.yml" ]]; then
+      if grep -qE '^type:[[:space:]]*(instructions|skill|hybrid|prompts)\b' "$current/apm.yml"; then

@@ -29,0 +25,4 @@
+
+## apm-agent-allowlist
+
+name description model

@@ -5,8 +5,10 @@ usage() {
   cat <<EOF

@@ -59,3 +55,3 @@
     sys.exit(2)
 
-# --- Find plugin root ---
+TYPE_RE = re.compile(r'^type:\s*(instructions|skill|hybrid|prompts)\b')

@@ -62,1 +61,4 @@
+# marketplace-only manifest (see monorepo-and-repo-shapes.md) — skip it and
+# keep walking. Stop at a .git boundary or the filesystem root: neither is
+# plugin/APM scope, so this script has nothing to check there.
 def find_plugin_root(start_dir):

@@ -171,0 +146,4 @@
+                return True
+    return False
+
+def detect_scope(start_dir):

@@ -171,0 +158,4 @@
+        # can't shadow user scope by being its own .git repo.
+        if current == home:
+            return 'user', home
+        if os.path.isdir(os.path.join(current, '.git')):

@@ -171,0 +161,4 @@
+        if os.path.isdir(os.path.join(current, '.git')):
+            return 'project', current
+        parent = os.path.dirname(current)
+        if parent == current:

@@ -83,0 +96,4 @@
+#     below, so a dotfiles repo at $HOME can't shadow user scope).
+#   - a .git directory marks the project-scope boundary — stop.
+#   - filesystem root reached with neither found — boundary-reached.
+find_package_root() {

@@ -65,0 +87,4 @@
+# top-level 'type:' field is a marketplace-only manifest — skip it and keep
+# walking up. Prints two lines: the resolved root, then the mode.
+# ---------------------------------------------------------------------------
+find_package_root() {

@@ -65,0 +92,4 @@
+  current="$(cd "$1" && pwd)"
+  while true; do
+    if [[ -f "$current/apm.yml" ]]; then
+      if grep -qE '^type:[[:space:]]*(instructions|skill|hybrid|prompts)\b' "$current/apm.yml"; then