@ryuenn3123/agentic-senior-core 3.0.37 → 3.0.39

package/scripts/governance-weekly-report.mjs

@@ -253,7 +253,7 @@ function collectCommitSignals(windowDays) {
   };
 }
 
-async function collectSkillTrustSignals() {
+async function collectGovernanceSurfaceTrustSignals() {
   const trustRows = [];
   const tierCounts = {
     verified: 0,
@@ -265,8 +265,8 @@ async function collectSkillTrustSignals() {
     return leftName.localeCompare(rightName);
   });
 
-  for (const skillDomainName of sortedDomainNames) {
-    const relativeSurfacePath = GOVERNANCE_SURFACE_PATHS[skillDomainName];
+  for (const surfaceDomainName of sortedDomainNames) {
+    const relativeSurfacePath = GOVERNANCE_SURFACE_PATHS[surfaceDomainName];
     const absoluteSurfacePath = join(REPOSITORY_ROOT, relativeSurfacePath);
     const surfaceExists = existsSync(absoluteSurfacePath);
     const trustTier = surfaceExists ? 'verified' : 'experimental';
@@ -277,7 +277,7 @@ async function collectSkillTrustSignals() {
     }
 
     trustRows.push({
-      domain: skillDomainName,
+      domain: surfaceDomainName,
       tier: trustTier,
       score: trustScore,
       sourcePath: relativeSurfacePath,
@@ -297,8 +297,8 @@ async function collectSkillTrustSignals() {
   };
 }
 
-function buildBackendGovernancePosture(skillTrustSignals) {
-  const backendSurfaceRows = skillTrustSignals.domains.filter((trustRow) => {
+function buildBackendGovernancePosture(governanceSurfaceTrustSignals) {
+  const backendSurfaceRows = governanceSurfaceTrustSignals.domains.filter((trustRow) => {
     return BACKEND_REQUIRED_DOMAIN_NAMES.has(trustRow.domain);
   });
   const missingBackendSurfaceNames = backendSurfaceRows
@@ -328,7 +328,7 @@ function buildBackendGovernancePosture(skillTrustSignals) {
   };
 }
 
-function buildBlockers(qualityTrendReport, skillTrustSignals, commitSignals) {
+function buildBlockers(qualityTrendReport, governanceSurfaceTrustSignals, commitSignals) {
   const blockers = [];
 
   const qualityGatePassRatePercent = qualityTrendReport?.governanceHealth?.gatePassRatePercent;
@@ -336,9 +336,9 @@ function buildBlockers(qualityTrendReport, skillTrustSignals, commitSignals) {
     blockers.push('Governance gate pass rate is below 100%.');
   }
 
-  if (!skillTrustSignals.allRequiredVerified) {
+  if (!governanceSurfaceTrustSignals.allRequiredVerified) {
     blockers.push(
-      `Required verified skill domains missing: ${skillTrustSignals.requiredVerifiedDomainFailures.join(', ')}`
+      `Required verified governance surfaces missing: ${governanceSurfaceTrustSignals.requiredVerifiedDomainFailures.join(', ')}`
     );
   }
 
@@ -355,15 +355,37 @@ function buildHistoryEntry(weeklyReport) {
     readinessStatus: weeklyReport.releaseReadiness.isReady ? 'ready' : 'blocked',
     blockerCount: weeklyReport.releaseReadiness.blockers.length,
     gatePassRatePercent: weeklyReport.qualitySignals.governanceHealth.gatePassRatePercent,
-    verifiedSkillDomainCount: weeklyReport.skillTrust.tierCounts.verified,
+    verifiedGovernanceSurfaceCount: weeklyReport.governanceSurfaceTrust.tierCounts.verified,
     backendVerifiedSurfaceCount: weeklyReport.backendGovernance?.verifiedSurfaceCount ?? null,
     releaseFrequencyPercent: weeklyReport.commitSignals.releaseFrequencyPercent,
     rollbackFrequencyPercent: weeklyReport.commitSignals.rollbackFrequencyPercent,
   };
 }
 
+function normalizeHistoryEntry(historyEntry) {
+  if (!historyEntry || typeof historyEntry !== 'object') {
+    return historyEntry;
+  }
+
+  const {
+    verifiedSkillDomainCount,
+    ...normalizedHistoryEntry
+  } = historyEntry;
+
+  if (
+    typeof normalizedHistoryEntry.verifiedGovernanceSurfaceCount !== 'number'
+    && typeof verifiedSkillDomainCount === 'number'
+  ) {
+    normalizedHistoryEntry.verifiedGovernanceSurfaceCount = verifiedSkillDomainCount;
+  }
+
+  return normalizedHistoryEntry;
+}
+
 function mergeHistory(previousReport, currentHistoryEntry) {
-  const existingHistory = Array.isArray(previousReport?.history) ? previousReport.history : [];
+  const existingHistory = Array.isArray(previousReport?.history)
+    ? previousReport.history.map((historyEntry) => normalizeHistoryEntry(historyEntry))
+    : [];
   const mergedHistory = [...existingHistory, currentHistoryEntry];
 
   if (mergedHistory.length <= HISTORY_LIMIT) {
@@ -377,10 +399,10 @@ async function runWeeklyGovernanceReport() {
   const qualityTrendState = loadQualityTrendReport();
   const qualityTrendReport = qualityTrendState.report;
 
-  const skillTrustSignals = await collectSkillTrustSignals();
-  const backendGovernance = buildBackendGovernancePosture(skillTrustSignals);
+  const governanceSurfaceTrustSignals = await collectGovernanceSurfaceTrustSignals();
+  const backendGovernance = buildBackendGovernancePosture(governanceSurfaceTrustSignals);
   const commitSignals = collectCommitSignals(WEEKLY_WINDOW_DAYS);
-  const blockers = buildBlockers(qualityTrendReport, skillTrustSignals, commitSignals);
+  const blockers = buildBlockers(qualityTrendReport, governanceSurfaceTrustSignals, commitSignals);
 
   const weeklyReportSnapshot = {
     generatedAt: new Date().toISOString(),
@@ -402,7 +424,7 @@ async function runWeeklyGovernanceReport() {
         : [],
       tokenEfficiency: qualityTrendReport?.tokenEfficiency || null,
     },
-    skillTrust: skillTrustSignals,
+    governanceSurfaceTrust: governanceSurfaceTrustSignals,
     backendGovernance,
     commitSignals,
     releaseReadiness: {

package/scripts/single-source-lazy-loading-audit.mjs

@@ -22,8 +22,13 @@ const REPOSITORY_ROOT = resolve(__dirname, '..');
 const CANONICAL_SOURCE_PATH = '.instructions.md';
 const ADAPTER_PATHS = [
   'AGENTS.md',
+  'CLAUDE.md',
+  'GEMINI.md',
   '.github/copilot-instructions.md',
+  '.github/instructions/agentic-senior-core.instructions.md',
   '.gemini/instructions.md',
+  '.cursor/rules/agentic-senior-core.mdc',
+  '.windsurf/rules/agentic-senior-core.md',
 ];
 const COMPILER_PATH = 'lib/cli/compiler.mjs';
 const ONBOARDING_REPORT_PATH = '.agent-context/state/onboarding-report.json';
@@ -31,6 +36,11 @@ const ARCHITECTURE_RULE_PATH = '.agent-context/rules/architecture.md';
 const PR_CHECKLIST_PATH = '.agent-context/review-checklists/pr-checklist.md';
 const REVIEW_PROMPT_PATH = '.agent-context/prompts/review-code.md';
 const COMPILED_RULE_PATHS = ['.cursorrules', '.windsurfrules'];
+const REQUIRED_LEGACY_ROOT_ADAPTER_SNIPPETS = [
+  'Adapter Mode: legacy-thin',
+  'Adapter Source: .agent-instructions.md',
+  'Canonical baseline: .instructions.md',
+];
 
 const DEFAULT_WORKFLOW = 'standard';
 const SUPPORTED_WORKFLOWS = new Set([
@@ -432,6 +442,20 @@ function runAudit() {
 
     const stackMentionCount = countStackMentions(compiledRuleContent);
     const isEagerLoading = stackMentionCount > MAX_EAGER_STACK_MENTIONS;
+    const missingLegacyAdapterSnippets = REQUIRED_LEGACY_ROOT_ADAPTER_SNIPPETS
+      .filter((requiredSnippet) => !compiledRuleContent.includes(requiredSnippet));
+
+    if (missingLegacyAdapterSnippets.length > 0) {
+      failures.push(`${compiledRulePath} must stay a legacy thin adapter`);
+      pushResult(
+        results,
+        false,
+        'legacy-root-adapter-thin-mode',
+        `${compiledRulePath} is missing: ${missingLegacyAdapterSnippets.join(', ')}`
+      );
+    } else {
+      pushResult(results, true, 'legacy-root-adapter-thin-mode', `${compiledRulePath} stays legacy-thin`);
+    }
 
     if (isEagerLoading) {
       eagerLoadingDetected = true;

package/scripts/sync-thin-adapters.mjs

@@ -11,9 +11,9 @@
  * - node scripts/sync-thin-adapters.mjs --check
  */
 
-import { readFile, writeFile } from 'node:fs/promises';
+import { mkdir, readFile, writeFile } from 'node:fs/promises';
 import { createHash } from 'node:crypto';
-import { dirname, join, resolve } from 'node:path';
+import { dirname, join, posix, resolve } from 'node:path';
 import { fileURLToPath } from 'node:url';
 
 const SCRIPT_FILE_PATH = fileURLToPath(import.meta.url);
@@ -26,144 +26,110 @@ function normalizeLineEndings(content) {
   return content.replace(/\r\n/g, '\n').replace(/\r/g, '\n');
 }
 
-function buildAgentsAdapter(canonicalHash) {
-  return `# AGENTS.md - Thin Adapter
-
-Adapter Mode: thin
-Adapter Source: .instructions.md
-Canonical Snapshot SHA256: ${canonicalHash}
-
-This file is an adapter entrypoint for agent discovery.
-The canonical policy source is [.instructions.md](.instructions.md).
-
-If your host stops at this file instead of following the full chain, obey the Critical Bootstrap Floor below before coding.
-
-## Critical Bootstrap Floor
-
-- If \`.agent-instructions.md\` exists, prefer it immediately after this file because it is the compiled project-specific snapshot.
-- Memory continuity does not replace bootstrap loading. It is host-dependent project memory, not a guarantee that instructions were reloaded for this session.
-- For UI, UX, layout, screen, tailwind, frontend, or redesign requests: load [.agent-context/prompts/bootstrap-design.md](.agent-context/prompts/bootstrap-design.md) and [.agent-context/rules/frontend-architecture.md](.agent-context/rules/frontend-architecture.md) before editing code.
-- For UI scope, include a one-line Motion/Palette Decision in the Bootstrap Receipt; product categories are heuristics, not style presets.
-- For UI scope: if \`docs/DESIGN.md\` or \`docs/design-intent.json\` is missing, materialize or refine them before implementing UI changes.
-- For documentation-first requests: create or refine required project docs in English by default and do not write application, firmware, or UI code until the user asks or approves.
-- For backend, API, data, auth, error, event, queue, worker, or distributed-system requests: load the relevant global rules from [.agent-context/rules/](.agent-context/rules); do not create stack-specific governance adapters.
-- For refactor, improve, clean up, or fix requests: inspect the active rules and propose a plan before editing.
-- For new project or module requests: clarify constraints, runtime decisions, and required docs before generating code.
-- For ecosystem, framework, dependency, or Docker claims: perform live web research instead of relying on stale local heuristics.
-
-## Mandatory Bootstrap Chain
-
-1. Load [.instructions.md](.instructions.md) first as the canonical baseline.
-2. If \`.agent-instructions.md\` exists, read it next as the compiled project-specific snapshot.
-3. Read baseline governance from [.agent-context/rules/](.agent-context/rules).
-4. Apply request templates from [.agent-context/prompts/](.agent-context/prompts).
-5. Enforce review contracts from [.agent-context/review-checklists/](.agent-context/review-checklists).
-6. Read change-risk maps and continuity state from [.agent-context/state/](.agent-context/state).
-7. Enforce policy thresholds from [.agent-context/policies/](.agent-context/policies).
-8. Use runtime evidence, structure, and live research signals from project context docs.
-
-## Bootstrap Receipt
-
-For non-trivial coding, review, planning, or governance work, produce a short Bootstrap Receipt before implementation output: \`loaded_files\`, \`selected_rules\`, \`skipped_rules\`, \`unreachable_files\`, and \`validation_plan\`.
-
-## Trigger Rules
-
-- New project or module requests: propose scope, constraints, and required docs first, then wait for approval.
-- Refactor or fix requests: propose plan first, then execute safely.
-- Completion: run [.agent-context/review-checklists/pr-checklist.md](.agent-context/review-checklists/pr-checklist.md) before declaring done.
-
-If this adapter drifts from canonical behavior, refresh from [.instructions.md](.instructions.md) and update the hash metadata.
-`;
-}
-
-function buildCopilotAdapter(canonicalHash) {
-  return `# GitHub Copilot Instructions - Thin Adapter
-
-Adapter Mode: thin
-Adapter Source: .instructions.md
-Canonical Snapshot SHA256: ${canonicalHash}
-
-The canonical policy source for this repository is [.instructions.md](../.instructions.md).
-
-If your host stops at this file, follow this minimum floor:
-- Read \`.agent-instructions.md\` next when it exists.
-- For UI or redesign requests, load [.agent-context/prompts/bootstrap-design.md](../.agent-context/prompts/bootstrap-design.md) and [.agent-context/rules/frontend-architecture.md](../.agent-context/rules/frontend-architecture.md) before coding.
-- For UI scope, include a one-line Motion/Palette Decision in the Bootstrap Receipt; product categories are heuristics, not style presets.
-- If UI scope and \`docs/DESIGN.md\` or \`docs/design-intent.json\` is missing, materialize them before UI implementation.
-- For documentation-first requests, create or refine required project docs in English by default and do not write application, firmware, or UI code until the user asks or approves.
-- For backend/API/data/auth/event requests, load relevant global rules from [.agent-context/rules/](../.agent-context/rules) and do not create stack-specific governance adapters.
-- Memory continuity is host-dependent project memory and does not replace bootstrap loading.
-
-## Required Load Order
-
-1. Read [.instructions.md](../.instructions.md) first as the canonical baseline.
-2. If \`.agent-instructions.md\` exists, read it next as the compiled project-specific snapshot.
-3. Read baseline rules in [.agent-context/rules/](../.agent-context/rules).
-4. Load request templates from [.agent-context/prompts/](../.agent-context/prompts).
-5. Apply review contracts from [.agent-context/review-checklists/](../.agent-context/review-checklists).
-6. Apply state awareness from [.agent-context/state/](../.agent-context/state) and thresholds from [.agent-context/policies/](../.agent-context/policies).
-7. Resolve runtime, structure, and dependency choices from project context docs plus live evidence.
-
-## Bootstrap Receipt
-
-For non-trivial coding, review, planning, or governance work, produce a short Bootstrap Receipt before implementation output: \`loaded_files\`, \`selected_rules\`, \`skipped_rules\`, \`unreachable_files\`, and \`validation_plan\`.
-
-## Completion Gate
-
-Run [.agent-context/review-checklists/pr-checklist.md](../.agent-context/review-checklists/pr-checklist.md) before declaring work complete.
-`;
+function buildAdapterLink(adapterRelativePath, targetRelativePath) {
+  const adapterDirectoryPath = posix.dirname(adapterRelativePath);
+  const relativePath = posix.relative(adapterDirectoryPath === '.' ? '' : adapterDirectoryPath, targetRelativePath);
+  return relativePath.startsWith('.') ? relativePath : `./${relativePath}`;
 }
 
-function buildGeminiAdapter(canonicalHash) {
-  return `# Gemini Instructions - Thin Adapter
-
-Adapter Mode: thin
-Adapter Source: .instructions.md
-Canonical Snapshot SHA256: ${canonicalHash}
-
-Canonical policy source: [.instructions.md](../.instructions.md).
-
-If your host stops at this file, follow this minimum floor:
-- Read \`.agent-instructions.md\` next when it exists.
-- For UI or redesign requests, load [.agent-context/prompts/bootstrap-design.md](../.agent-context/prompts/bootstrap-design.md) and [.agent-context/rules/frontend-architecture.md](../.agent-context/rules/frontend-architecture.md) before coding.
-- For UI scope, include a one-line Motion/Palette Decision in the Bootstrap Receipt; product categories are heuristics, not style presets.
-- If UI scope and \`docs/DESIGN.md\` or \`docs/design-intent.json\` is missing, materialize them before UI implementation.
-- For documentation-first requests, create or refine required project docs in English by default and do not write application, firmware, or UI code until the user asks or approves.
-- For backend/API/data/auth/event requests, load relevant global rules from [.agent-context/rules/](../.agent-context/rules) and do not create stack-specific governance adapters.
-- Memory continuity is host-dependent project memory and does not replace bootstrap loading.
-
-## Bootstrap Sequence
-
-1. Load [.instructions.md](../.instructions.md) first as the canonical baseline.
-2. If \`.agent-instructions.md\` exists, read it next as the compiled project-specific snapshot.
-3. Apply baseline rules from [.agent-context/rules/](../.agent-context/rules).
-4. Load request templates from [.agent-context/prompts/](../.agent-context/prompts).
-5. Apply review contracts from [.agent-context/review-checklists/](../.agent-context/review-checklists).
-6. Apply state awareness from [.agent-context/state/](../.agent-context/state) and policy thresholds from [.agent-context/policies/](../.agent-context/policies).
-7. Resolve runtime, structure, and dependency choices from project context docs plus live evidence.
-
-## Bootstrap Receipt
-
-For non-trivial coding, review, planning, or governance work, produce a short Bootstrap Receipt before implementation output: \`loaded_files\`, \`selected_rules\`, \`skipped_rules\`, \`unreachable_files\`, and \`validation_plan\`.
-
-## Completion Gate
-
-Run [.agent-context/review-checklists/pr-checklist.md](../.agent-context/review-checklists/pr-checklist.md) before declaring completion.
-`;
+function buildThinAdapter({
+  relativePath,
+  title,
+  canonicalHash,
+  frontmatter = '',
+}) {
+  const canonicalLink = buildAdapterLink(relativePath, '.instructions.md');
+  const rulesLink = buildAdapterLink(relativePath, '.agent-context/rules');
+  const promptsLink = buildAdapterLink(relativePath, '.agent-context/prompts');
+  const designPromptLink = buildAdapterLink(relativePath, '.agent-context/prompts/bootstrap-design.md');
+  const frontendRuleLink = buildAdapterLink(relativePath, '.agent-context/rules/frontend-architecture.md');
+  const checklistLink = buildAdapterLink(relativePath, '.agent-context/review-checklists/pr-checklist.md');
+  const stateLink = buildAdapterLink(relativePath, '.agent-context/state');
+  const policiesLink = buildAdapterLink(relativePath, '.agent-context/policies');
+  const adapterHeader = frontmatter.trim() ? [frontmatter.trim(), ''] : [];
+
+  return [
+    ...adapterHeader,
+    `# ${title}`,
+    '',
+    'Adapter Mode: thin',
+    'Adapter Source: .instructions.md',
+    `Canonical Snapshot SHA256: ${canonicalHash}`,
+    '',
+    'This repository is governed by a strict instruction contract.',
+    `Use [${CANONICAL_SOURCE_PATH}](${canonicalLink}) as the canonical policy source.`,
+    'Use .agent-context/ for technical rules, prompts, checklists, policies, and state.',
+    'Treat README.md as overview/install/user context only when governance files conflict.',
+    '',
+    '## Critical Bootstrap Floor',
+    '',
+    '- If your host stops at this file, continue the chain manually before coding.',
+    '- Read `.agent-instructions.md` next when it exists.',
+    '- Memory continuity does not replace bootstrap loading.',
+    `- For UI, UX, layout, screen, tailwind, frontend, or redesign requests, load [bootstrap-design.md](${designPromptLink}) and [frontend-architecture.md](${frontendRuleLink}) before code edits.`,
+    '- For UI scope, include a one-line Motion/Palette Decision in the Bootstrap Receipt; product categories are heuristics, not style presets.',
+    '- For UI scope, create or refine `docs/DESIGN.md` and `docs/design-intent.json` before UI implementation.',
+    '- For documentation-first requests, create or refine required project docs in English by default and do not write application, firmware, or UI code until the user asks or approves.',
+    `- For backend, API, data, auth, error, event, queue, worker, or distributed-system requests, load only relevant global rules from .agent-context/rules/ ([link](${rulesLink})).`,
+    '- For ecosystem, framework, dependency, or Docker claims, perform live web research.',
+    '- Resolve runtime choices from project evidence and live official documentation; resolve structural planning from constraints and architecture boundaries.',
+    '',
+    '## Mandatory Bootstrap Chain',
+    '',
+    `1. Load [${CANONICAL_SOURCE_PATH}](${canonicalLink}).`,
+    '2. Load `.agent-instructions.md` when present.',
+    `3. Load only relevant files from .agent-context/rules/ ([link](${rulesLink})).`,
+    `4. Apply matching prompts from .agent-context/prompts/ ([link](${promptsLink})).`,
+    `5. Enforce .agent-context/review-checklists/ ([link](${checklistLink})).`,
+    `6. Use .agent-context/state/ ([link](${stateLink})) and .agent-context/policies/ ([link](${policiesLink})) only when relevant.`,
+    '7. Use project docs and live evidence for runtime, dependency, and architecture claims.',
+    '',
+    '## Bootstrap Receipt',
+    '',
+    'For non-trivial coding, review, planning, or governance work, produce a short Bootstrap Receipt before implementation output: `loaded_files`, `selected_rules`, `skipped_rules`, `unreachable_files`, and `validation_plan`.',
+    '',
+    '## Completion Gate',
+    '',
+    `Run [pr-checklist.md](${checklistLink}) before declaring work complete.`,
+    '',
+    `If this adapter drifts from canonical behavior, refresh from [${CANONICAL_SOURCE_PATH}](${canonicalLink}) and update the hash metadata.`,
+  ].join('\n');
 }
 
 const ADAPTERS = [
   {
     relativePath: 'AGENTS.md',
-    buildContent: buildAgentsAdapter,
+    title: 'AGENTS.md - Thin Adapter',
+  },
+  {
+    relativePath: 'CLAUDE.md',
+    title: 'CLAUDE.md - Thin Adapter',
+  },
+  {
+    relativePath: 'GEMINI.md',
+    title: 'GEMINI.md - Thin Adapter',
   },
   {
     relativePath: '.github/copilot-instructions.md',
-    buildContent: buildCopilotAdapter,
+    title: 'GitHub Copilot Instructions - Thin Adapter',
+  },
+  {
+    relativePath: '.github/instructions/agentic-senior-core.instructions.md',
+    title: 'GitHub Copilot Path Instructions - Thin Adapter',
+    frontmatter: '---\napplyTo: "**"\n---',
   },
   {
     relativePath: '.gemini/instructions.md',
-    buildContent: buildGeminiAdapter,
+    title: 'Gemini Instructions - Thin Adapter',
+  },
+  {
+    relativePath: '.cursor/rules/agentic-senior-core.mdc',
+    title: 'Cursor Rule - Thin Adapter',
+    frontmatter: '---\ndescription: Agentic Senior Core bootstrap adapter\nalwaysApply: true\n---',
+  },
+  {
+    relativePath: '.windsurf/rules/agentic-senior-core.md',
+    title: 'Windsurf Rule - Thin Adapter',
   },
 ];
 
@@ -175,11 +141,14 @@ async function main() {
 
   for (const adapter of ADAPTERS) {
     const adapterAbsolutePath = join(ROOT_DIR, adapter.relativePath);
-    const expectedContent = adapter.buildContent(canonicalHash);
+    const expectedContent = buildThinAdapter({
+      ...adapter,
+      canonicalHash,
+    });
 
     if (IS_CHECK_MODE) {
       const existingContent = normalizeLineEndings(await readFile(adapterAbsolutePath, 'utf8'));
-      const expectedNormalized = normalizeLineEndings(expectedContent);
+      const expectedNormalized = normalizeLineEndings(`${expectedContent.trimEnd()}\n`);
       if (existingContent !== expectedNormalized) {
         hasDrift = true;
         console.error(`[DRIFT] ${adapter.relativePath} does not match canonical adapter output.`);
@@ -189,6 +158,7 @@ async function main() {
       continue;
     }
 
+    await mkdir(dirname(adapterAbsolutePath), { recursive: true });
     await writeFile(adapterAbsolutePath, `${expectedContent.trimEnd()}\n`, 'utf8');
     console.log(`[SYNC] ${adapter.relativePath}`);
   }

package/scripts/v3-purge-audit.mjs

@@ -27,9 +27,14 @@ const NON_BLOCKING_REFERENCE_FILE_PATHS = new Set([
 
 const RUNTIME_BLOCKING_PATH_PATTERNS = [
   /^AGENTS\.md$/,
+  /^CLAUDE\.md$/,
+  /^GEMINI\.md$/,
   /^\.instructions\.md$/,
   /^\.github\/copilot-instructions\.md$/,
+  /^\.github\/instructions\/agentic-senior-core\.instructions\.md$/,
   /^\.gemini\/instructions\.md$/,
+  /^\.cursor\/rules\/agentic-senior-core\.mdc$/,
+  /^\.windsurf\/rules\/agentic-senior-core\.md$/,
   /^mcp\.json$/,
   /^lib\//,
   /^scripts\//,

package/scripts/validate/config.mjs

@@ -2,8 +2,13 @@ export const ALLOWED_SEVERITIES = new Set(['critical', 'high', 'medium', 'low'])
 export const OVERRIDE_WARNING_WINDOW_DAYS = 30;
 export const THIN_ADAPTER_PATHS = [
   'AGENTS.md',
+  'CLAUDE.md',
+  'GEMINI.md',
   '.github/copilot-instructions.md',
+  '.github/instructions/agentic-senior-core.instructions.md',
   '.gemini/instructions.md',
+  '.cursor/rules/agentic-senior-core.mdc',
+  '.windsurf/rules/agentic-senior-core.md',
 ];
 export const FORMAL_ARTIFACT_PATHS = [
   '.instructions.md',
@@ -14,8 +19,13 @@ export const FORMAL_ARTIFACT_PATHS = [
   '.agent-context/review-checklists/pr-checklist.md',
   '.agent-context/prompts/review-code.md',
   'AGENTS.md',
+  'CLAUDE.md',
+  'GEMINI.md',
   '.github/copilot-instructions.md',
+  '.github/instructions/agentic-senior-core.instructions.md',
   '.gemini/instructions.md',
+  '.cursor/rules/agentic-senior-core.mdc',
+  '.windsurf/rules/agentic-senior-core.md',
 ];
 export const REQUIRED_HUMAN_WRITING_SNIPPETS = [
   {

package/scripts/validate/coverage-checks.mjs

@@ -396,6 +396,12 @@ export async function validateInstructionAdapters(context) {
     'Motion/Palette Decision',
     'product categories are heuristics',
   ];
+  const instructionFootprintLimits = [
+    { path: '.instructions.md', maxLines: 220 },
+    { path: '.agent-context/prompts/bootstrap-design.md', maxLines: 180 },
+    { path: '.agent-context/rules/frontend-architecture.md', maxLines: 110 },
+  ];
+  const legacyRootAdapterPaths = ['.cursorrules', '.windsurfrules'];
 
   for (const requiredBootstrapReceiptSnippet of requiredBootstrapReceiptSnippets) {
     if (canonicalInstructionContent.includes(requiredBootstrapReceiptSnippet)) {
@@ -413,6 +419,22 @@ export async function validateInstructionAdapters(context) {
     }
   }
 
+  for (const footprintLimit of instructionFootprintLimits) {
+    const absoluteFootprintPath = join(ROOT_DIR, footprintLimit.path);
+    if (!(await fileExists(absoluteFootprintPath))) {
+      fail(`Missing instruction footprint source: ${footprintLimit.path}`);
+      continue;
+    }
+
+    const footprintContent = await readTextFile(absoluteFootprintPath);
+    const footprintLineCount = footprintContent.split(/\r?\n/u).length;
+    if (footprintLineCount <= footprintLimit.maxLines) {
+      pass(`${footprintLimit.path} stays compact (${footprintLineCount}/${footprintLimit.maxLines} lines)`);
+    } else {
+      fail(`${footprintLimit.path} is too long for the active instruction surface (${footprintLineCount}/${footprintLimit.maxLines} lines)`);
+    }
+  }
+
   for (const thinAdapterPath of THIN_ADAPTER_PATHS) {
     const absoluteAdapterPath = join(ROOT_DIR, thinAdapterPath);
 
@@ -467,6 +489,39 @@ export async function validateInstructionAdapters(context) {
       fail(`${thinAdapterPath} is too large for thin-adapter mode (${thinAdapterLineCount} lines)`);
     }
   }
+
+  for (const legacyRootAdapterPath of legacyRootAdapterPaths) {
+    const absoluteLegacyRootAdapterPath = join(ROOT_DIR, legacyRootAdapterPath);
+    if (!(await fileExists(absoluteLegacyRootAdapterPath))) {
+      fail(`Missing legacy root adapter file: ${legacyRootAdapterPath}`);
+      continue;
+    }
+
+    const legacyRootAdapterContent = await readTextFile(absoluteLegacyRootAdapterPath);
+    const requiredLegacyRootAdapterSnippets = [
+      'Generated by Agentic-Senior-Core CLI v',
+      'Adapter Mode: legacy-thin',
+      'Adapter Source: .agent-instructions.md',
+      'Canonical baseline: .instructions.md',
+      '.agent-instructions.md',
+      '.agent-context/rules/',
+    ];
+
+    for (const requiredLegacyRootAdapterSnippet of requiredLegacyRootAdapterSnippets) {
+      if (legacyRootAdapterContent.includes(requiredLegacyRootAdapterSnippet)) {
+        pass(`${legacyRootAdapterPath} includes legacy-thin snippet: ${requiredLegacyRootAdapterSnippet}`);
+      } else {
+        fail(`${legacyRootAdapterPath} is missing legacy-thin snippet: ${requiredLegacyRootAdapterSnippet}`);
+      }
+    }
+
+    const legacyRootAdapterLineCount = legacyRootAdapterContent.split(/\r?\n/u).length;
+    if (legacyRootAdapterLineCount <= 40) {
+      pass(`${legacyRootAdapterPath} remains thin (${legacyRootAdapterLineCount} lines)`);
+    } else {
+      fail(`${legacyRootAdapterPath} is too large for legacy-thin mode (${legacyRootAdapterLineCount} lines)`);
+    }
+  }
 }
 
 export async function validateSkillPurgeSurface(context) {

package/scripts/validate.mjs

@@ -42,6 +42,8 @@ const ROOT_DIR = resolve(dirname(SCRIPT_FILE_PATH), '..');
 const AGENT_CONTEXT_DIR = join(ROOT_DIR, '.agent-context');
 const CANONICAL_INSTRUCTION_PATH = join(ROOT_DIR, '.instructions.md');
 const PACKAGE_JSON_PATH = join(ROOT_DIR, 'package.json');
+const PACKAGE_LOCK_PATH = join(ROOT_DIR, 'package-lock.json');
+const BUN_LOCK_PATH = join(ROOT_DIR, 'bun.lock');
 const CHANGELOG_PATH = join(ROOT_DIR, 'CHANGELOG.md');
 const README_PATH = join(ROOT_DIR, 'README.md');
 const POLICY_FILE_PATH = join(ROOT_DIR, '.agent-context', 'policies', 'llm-judge-threshold.json');
@@ -473,6 +475,12 @@ async function validatePackageMetadata() {
   } else {
     fail('package.json must publish .instructions.md so init and upgrade can copy the canonical root instructions file');
   }
+
+  if (await fileExists(BUN_LOCK_PATH)) {
+    fail('bun.lock must not be tracked while npm is the package manager source of truth');
+  } else {
+    pass('No bun.lock drift file present');
+  }
 }
 
 async function validatePolicyFile() {
@@ -529,6 +537,18 @@ async function validateVersionConsistency() {
     fail(`CHANGELOG.md is missing a ## ${packageVersion} heading`);
   }
 
+  if (await fileExists(PACKAGE_LOCK_PATH)) {
+    const packageLock = JSON.parse(await readTextFile(PACKAGE_LOCK_PATH));
+    const rootLockVersion = packageLock.packages?.['']?.version;
+    if (packageLock.version === packageVersion && rootLockVersion === packageVersion) {
+      pass(`package-lock.json matches package version ${packageVersion}`);
+    } else {
+      fail(`package-lock.json version drift: expected ${packageVersion}, found ${packageLock.version || 'missing'} / ${rootLockVersion || 'missing'}`);
+    }
+  } else {
+    fail('package-lock.json is required for npm release consistency');
+  }
+
   for (const generatedRuleFileName of GENERATED_RULE_FILES) {
     const generatedRuleContent = await readTextFile(join(ROOT_DIR, generatedRuleFileName));