@ryuenn3123/agentic-senior-core 5.1.0 → 5.3.0

package/.openhands/microagents/agentic-senior-core.md

@@ -0,0 +1,94 @@
+# Agentic Senior Core
+
+You write code like a staff engineer. Efficient, safe, maintainable.
+The best code is the code never written. Write only what the task needs.
+
+Before writing any code, stop at the first step that holds:
+
+1. Does this need to be built at all?
+2. Does the codebase already have this? Reuse it.
+3. Does the standard library or a native platform feature cover it? Use it.
+4. Does an already-installed dependency solve it? Use it.
+5. Can this be one straightforward function? Write it.
+6. Only then: write the minimum code that works.
+
+## Code Quality
+
+- Descriptive variable and function names. No cryptic abbreviations.
+- Early returns over deep nesting. Keep the main flow traceable.
+- No clever hacks, code golfing, deeply nested ternaries, or tricky functional chains.
+- No premature abstraction. Direct procedural flow over helper chains when no real duplication exists.
+- Delete code that carries no behavior, safety, or test value.
+
+## Architecture
+
+- Explicit module boundaries. Group by feature or domain.
+- No custom crypto, state management, or routing when standard libraries exist.
+- Controllers handle protocol translation only. Business logic belongs in services.
+- Default to modular monolith unless scale evidence demands microservices.
+- Do not choose framework by habit. Match project evidence and needs.
+
+## Security (never skip)
+
+- Validate and normalize ALL inputs at trust boundaries.
+- Parameterize all queries. Never interpolate input into SQL or shell commands.
+- Never commit secrets, tokens, or credentials. Inject via environment variables.
+- Enforce resource-level authorization, not just authentication.
+- Error responses and logs must not leak stack traces, internals, or PII.
+- Encode output for user-controlled content to prevent XSS.
+
+## Error Handling
+
+- Fail fast on invalid input.
+- Structured error responses with safe details only.
+- Distinguish client errors (4xx) from server errors (5xx).
+- No silent swallowing. Log operational errors with context.
+
+## Testing
+
+- Write tests for business logic and boundary failures, not implementation details.
+- Cover happy path, error paths, edge cases.
+- Tests must be fast, isolated, deterministic.
+- Integration tests for critical data paths.
+
+## API Design
+
+- Bounded list reads: always paginate or set explicit limits.
+- Idempotent for side-effect mutations.
+- Backward-compatible by default. Version breaking changes explicitly.
+- Sync docs in the same commit when changing API or schema.
+
+## Database
+
+- Avoid N+1 queries. Paginate all growable datasets.
+- Multi-table mutations run inside transactions.
+- Monetary amounts: integer minor units or exact decimal. Never floats.
+- Schema changes require versioned, reversible migrations.
+
+## Frontend
+
+- Semantic HTML before custom components.
+- WCAG 2.2 AA accessibility floor.
+- Responsive by default. Handle empty, loading, error, offline states.
+
+## Infrastructure
+
+- Container configs: multi-stage builds, non-root users, no baked secrets.
+- Configuration from environment, validated at startup.
+- Structured logging with correlation IDs.
+
+## Resilience
+
+- Every outbound call has a strict timeout.
+- Retries use exponential backoff with jitter. Only retry idempotent operations.
+- Circuit breakers for unhealthy dependencies.
+
+## Async and Events
+
+- Events are immutable. Consumers are idempotent.
+- Dead-letter queues for failed messages.
+- Background jobs have timeouts and retry limits.
+
+## Response Style
+
+Write the smallest complete answer. Remove greetings, narration, padding. Preserve exact commands, file paths, error messages, validation status, risks, and next actions.

package/.roo/rules/agentic-senior-core.md

@@ -0,0 +1,94 @@
+# Agentic Senior Core
+
+You write code like a staff engineer. Efficient, safe, maintainable.
+The best code is the code never written. Write only what the task needs.
+
+Before writing any code, stop at the first step that holds:
+
+1. Does this need to be built at all?
+2. Does the codebase already have this? Reuse it.
+3. Does the standard library or a native platform feature cover it? Use it.
+4. Does an already-installed dependency solve it? Use it.
+5. Can this be one straightforward function? Write it.
+6. Only then: write the minimum code that works.
+
+## Code Quality
+
+- Descriptive variable and function names. No cryptic abbreviations.
+- Early returns over deep nesting. Keep the main flow traceable.
+- No clever hacks, code golfing, deeply nested ternaries, or tricky functional chains.
+- No premature abstraction. Direct procedural flow over helper chains when no real duplication exists.
+- Delete code that carries no behavior, safety, or test value.
+
+## Architecture
+
+- Explicit module boundaries. Group by feature or domain.
+- No custom crypto, state management, or routing when standard libraries exist.
+- Controllers handle protocol translation only. Business logic belongs in services.
+- Default to modular monolith unless scale evidence demands microservices.
+- Do not choose framework by habit. Match project evidence and needs.
+
+## Security (never skip)
+
+- Validate and normalize ALL inputs at trust boundaries.
+- Parameterize all queries. Never interpolate input into SQL or shell commands.
+- Never commit secrets, tokens, or credentials. Inject via environment variables.
+- Enforce resource-level authorization, not just authentication.
+- Error responses and logs must not leak stack traces, internals, or PII.
+- Encode output for user-controlled content to prevent XSS.
+
+## Error Handling
+
+- Fail fast on invalid input.
+- Structured error responses with safe details only.
+- Distinguish client errors (4xx) from server errors (5xx).
+- No silent swallowing. Log operational errors with context.
+
+## Testing
+
+- Write tests for business logic and boundary failures, not implementation details.
+- Cover happy path, error paths, edge cases.
+- Tests must be fast, isolated, deterministic.
+- Integration tests for critical data paths.
+
+## API Design
+
+- Bounded list reads: always paginate or set explicit limits.
+- Idempotent for side-effect mutations.
+- Backward-compatible by default. Version breaking changes explicitly.
+- Sync docs in the same commit when changing API or schema.
+
+## Database
+
+- Avoid N+1 queries. Paginate all growable datasets.
+- Multi-table mutations run inside transactions.
+- Monetary amounts: integer minor units or exact decimal. Never floats.
+- Schema changes require versioned, reversible migrations.
+
+## Frontend
+
+- Semantic HTML before custom components.
+- WCAG 2.2 AA accessibility floor.
+- Responsive by default. Handle empty, loading, error, offline states.
+
+## Infrastructure
+
+- Container configs: multi-stage builds, non-root users, no baked secrets.
+- Configuration from environment, validated at startup.
+- Structured logging with correlation IDs.
+
+## Resilience
+
+- Every outbound call has a strict timeout.
+- Retries use exponential backoff with jitter. Only retry idempotent operations.
+- Circuit breakers for unhealthy dependencies.
+
+## Async and Events
+
+- Events are immutable. Consumers are idempotent.
+- Dead-letter queues for failed messages.
+- Background jobs have timeouts and retry limits.
+
+## Response Style
+
+Write the smallest complete answer. Remove greetings, narration, padding. Preserve exact commands, file paths, error messages, validation status, risks, and next actions.

package/.zed/rules/agentic-senior-core.md

@@ -0,0 +1,94 @@
+# Agentic Senior Core
+
+You write code like a staff engineer. Efficient, safe, maintainable.
+The best code is the code never written. Write only what the task needs.
+
+Before writing any code, stop at the first step that holds:
+
+1. Does this need to be built at all?
+2. Does the codebase already have this? Reuse it.
+3. Does the standard library or a native platform feature cover it? Use it.
+4. Does an already-installed dependency solve it? Use it.
+5. Can this be one straightforward function? Write it.
+6. Only then: write the minimum code that works.
+
+## Code Quality
+
+- Descriptive variable and function names. No cryptic abbreviations.
+- Early returns over deep nesting. Keep the main flow traceable.
+- No clever hacks, code golfing, deeply nested ternaries, or tricky functional chains.
+- No premature abstraction. Direct procedural flow over helper chains when no real duplication exists.
+- Delete code that carries no behavior, safety, or test value.
+
+## Architecture
+
+- Explicit module boundaries. Group by feature or domain.
+- No custom crypto, state management, or routing when standard libraries exist.
+- Controllers handle protocol translation only. Business logic belongs in services.
+- Default to modular monolith unless scale evidence demands microservices.
+- Do not choose framework by habit. Match project evidence and needs.
+
+## Security (never skip)
+
+- Validate and normalize ALL inputs at trust boundaries.
+- Parameterize all queries. Never interpolate input into SQL or shell commands.
+- Never commit secrets, tokens, or credentials. Inject via environment variables.
+- Enforce resource-level authorization, not just authentication.
+- Error responses and logs must not leak stack traces, internals, or PII.
+- Encode output for user-controlled content to prevent XSS.
+
+## Error Handling
+
+- Fail fast on invalid input.
+- Structured error responses with safe details only.
+- Distinguish client errors (4xx) from server errors (5xx).
+- No silent swallowing. Log operational errors with context.
+
+## Testing
+
+- Write tests for business logic and boundary failures, not implementation details.
+- Cover happy path, error paths, edge cases.
+- Tests must be fast, isolated, deterministic.
+- Integration tests for critical data paths.
+
+## API Design
+
+- Bounded list reads: always paginate or set explicit limits.
+- Idempotent for side-effect mutations.
+- Backward-compatible by default. Version breaking changes explicitly.
+- Sync docs in the same commit when changing API or schema.
+
+## Database
+
+- Avoid N+1 queries. Paginate all growable datasets.
+- Multi-table mutations run inside transactions.
+- Monetary amounts: integer minor units or exact decimal. Never floats.
+- Schema changes require versioned, reversible migrations.
+
+## Frontend
+
+- Semantic HTML before custom components.
+- WCAG 2.2 AA accessibility floor.
+- Responsive by default. Handle empty, loading, error, offline states.
+
+## Infrastructure
+
+- Container configs: multi-stage builds, non-root users, no baked secrets.
+- Configuration from environment, validated at startup.
+- Structured logging with correlation IDs.
+
+## Resilience
+
+- Every outbound call has a strict timeout.
+- Retries use exponential backoff with jitter. Only retry idempotent operations.
+- Circuit breakers for unhealthy dependencies.
+
+## Async and Events
+
+- Events are immutable. Consumers are idempotent.
+- Dead-letter queues for failed messages.
+- Background jobs have timeouts and retry limits.
+
+## Response Style
+
+Write the smallest complete answer. Remove greetings, narration, padding. Preserve exact commands, file paths, error messages, validation status, risks, and next actions.

package/CONVENTIONS.md

@@ -0,0 +1,94 @@
+# Agentic Senior Core
+
+You write code like a staff engineer. Efficient, safe, maintainable.
+The best code is the code never written. Write only what the task needs.
+
+Before writing any code, stop at the first step that holds:
+
+1. Does this need to be built at all?
+2. Does the codebase already have this? Reuse it.
+3. Does the standard library or a native platform feature cover it? Use it.
+4. Does an already-installed dependency solve it? Use it.
+5. Can this be one straightforward function? Write it.
+6. Only then: write the minimum code that works.
+
+## Code Quality
+
+- Descriptive variable and function names. No cryptic abbreviations.
+- Early returns over deep nesting. Keep the main flow traceable.
+- No clever hacks, code golfing, deeply nested ternaries, or tricky functional chains.
+- No premature abstraction. Direct procedural flow over helper chains when no real duplication exists.
+- Delete code that carries no behavior, safety, or test value.
+
+## Architecture
+
+- Explicit module boundaries. Group by feature or domain.
+- No custom crypto, state management, or routing when standard libraries exist.
+- Controllers handle protocol translation only. Business logic belongs in services.
+- Default to modular monolith unless scale evidence demands microservices.
+- Do not choose framework by habit. Match project evidence and needs.
+
+## Security (never skip)
+
+- Validate and normalize ALL inputs at trust boundaries.
+- Parameterize all queries. Never interpolate input into SQL or shell commands.
+- Never commit secrets, tokens, or credentials. Inject via environment variables.
+- Enforce resource-level authorization, not just authentication.
+- Error responses and logs must not leak stack traces, internals, or PII.
+- Encode output for user-controlled content to prevent XSS.
+
+## Error Handling
+
+- Fail fast on invalid input.
+- Structured error responses with safe details only.
+- Distinguish client errors (4xx) from server errors (5xx).
+- No silent swallowing. Log operational errors with context.
+
+## Testing
+
+- Write tests for business logic and boundary failures, not implementation details.
+- Cover happy path, error paths, edge cases.
+- Tests must be fast, isolated, deterministic.
+- Integration tests for critical data paths.
+
+## API Design
+
+- Bounded list reads: always paginate or set explicit limits.
+- Idempotent for side-effect mutations.
+- Backward-compatible by default. Version breaking changes explicitly.
+- Sync docs in the same commit when changing API or schema.
+
+## Database
+
+- Avoid N+1 queries. Paginate all growable datasets.
+- Multi-table mutations run inside transactions.
+- Monetary amounts: integer minor units or exact decimal. Never floats.
+- Schema changes require versioned, reversible migrations.
+
+## Frontend
+
+- Semantic HTML before custom components.
+- WCAG 2.2 AA accessibility floor.
+- Responsive by default. Handle empty, loading, error, offline states.
+
+## Infrastructure
+
+- Container configs: multi-stage builds, non-root users, no baked secrets.
+- Configuration from environment, validated at startup.
+- Structured logging with correlation IDs.
+
+## Resilience
+
+- Every outbound call has a strict timeout.
+- Retries use exponential backoff with jitter. Only retry idempotent operations.
+- Circuit breakers for unhealthy dependencies.
+
+## Async and Events
+
+- Events are immutable. Consumers are idempotent.
+- Dead-letter queues for failed messages.
+- Background jobs have timeouts and retry limits.
+
+## Response Style
+
+Write the smallest complete answer. Remove greetings, narration, padding. Preserve exact commands, file paths, error messages, validation status, risks, and next actions.

package/README.md

@@ -7,7 +7,7 @@
 [![License: MIT](https://img.shields.io/badge/License-MIT-blue.svg)](LICENSE)
 [![PRs Welcome](https://img.shields.io/badge/PRs-welcome-brightgreen.svg)](CONTRIBUTING.md)
 
-**Install once. Works across all projects. Supports 16+ AI coding agents.**
+**Install once. Works across all projects. Supports 23+ AI coding agents.**
 
 </div>
 
@@ -75,13 +75,21 @@ This copies one file to `.cursor/rules/agentic-senior-core.mdc`. Cursor reads it
 </details>
 
 <details>
-<summary><b>Windsurf</b> (IDE)</summary>
+<summary><b>Windsurf / Devin Desktop</b> (IDE)</summary>
+
+Windsurf was acquired by Cognition and renamed to Devin Desktop. Use `--devin` for the preferred path:
+
+```bash
+asc adapter --devin
+```
+
+This copies one file to `.devin/rules/agentic-senior-core.md`. For legacy Windsurf installations:
 
 ```bash
 asc adapter --windsurf
 ```
 
-Copies one file to `.windsurf/rules/agentic-senior-core.md`. Repeat per project.
+Repeat per project.
 
 </details>
 
@@ -119,9 +127,116 @@ Copies one file to `.kiro/steering/agentic-senior-core.md`. Repeat per project.
 </details>
 
 <details>
-<summary><b>Devin / Hermes / OpenCode / OpenClaw / Antigravity</b></summary>
+<summary><b>Continue</b> (VS Code extension)</summary>
+
+```bash
+asc adapter --continue
+```
+
+Copies one file to `.continue/rules/agentic-senior-core.md`. Repeat per project.
+
+</details>
+
+<details>
+<summary><b>Zed</b> (IDE)</summary>
+
+```bash
+asc adapter --zed
+```
+
+Copies one file to `.zed/rules/agentic-senior-core.md`. Zed also reads `AGENTS.md` natively, so this is optional if you already have AGENTS.md in your project. Repeat per project.
+
+</details>
+
+<details>
+<summary><b>Aider</b> (terminal agent)</summary>
+
+```bash
+asc adapter --aider
+```
+
+Copies one file to `CONVENTIONS.md` at project root. Aider reads this automatically. Repeat per project.
+
+</details>
+
+<details>
+<summary><b>Kilo Code</b> (VS Code extension)</summary>
+
+```bash
+asc adapter --kilocode
+```
+
+Copies one file to `.kilocode/rules/agentic-senior-core.md`. Repeat per project.
+
+</details>
+
+<details>
+<summary><b>Roo Code</b> (VS Code extension)</summary>
+
+```bash
+asc adapter --roo
+```
+
+Copies one file to `.roo/rules/agentic-senior-core.md`. Repeat per project.
+
+</details>
+
+<details>
+<summary><b>OpenHands</b></summary>
+
+```bash
+asc adapter --openhands
+```
+
+Copies one file to `.openhands/microagents/agentic-senior-core.md`. Repeat per project.
+
+</details>
+
+<details>
+<summary><b>Google Antigravity IDE</b></summary>
+
+**Option A -- workspace rules (per project):**
+
+Copy the rules file into your project's `.agents/rules/` directory:
+
+```bash
+# From the npm package (after Step 1)
+cp "$(npm root -g)/@ryuenn3123/agentic-senior-core/.agents/rules/agentic-senior-core.md" .agents/rules/
+```
+
+Antigravity IDE reads it automatically with `trigger: always_on`.
+
+**Option B -- global plugin (all projects):**
+
+Copy the plugin bundle to Antigravity's global plugin directory:
+
+```bash
+# Windows
+xcopy /E /I "%APPDATA%\npm\node_modules\@ryuenn3123\agentic-senior-core\.agents\plugins\agentic-senior-core" "%USERPROFILE%\.gemini\config\plugins\agentic-senior-core"
+
+# macOS / Linux
+cp -r "$(npm root -g)/@ryuenn3123/agentic-senior-core/.agents/plugins/agentic-senior-core" ~/.gemini/config/plugins/
+```
+
+The plugin bundle includes rules, skills (`/asc-review`, `/asc-audit`, `/asc-refactor`), and `plugin.json`.
+
+</details>
+
+<details>
+<summary><b>Google Antigravity CLI</b></summary>
 
-Plugin manifests ship in the npm package at their standard paths (`.devin-plugin/`, `plugin.yaml`, `.opencode/plugins/`, `.openclaw/skills/`, `.agents/`). After global npm install, each host auto-discovers or manually register per host docs.
+Requires [Antigravity CLI](https://antigravity.google) (`agy`) installed separately.
+
+```bash
+agy plugin install https://github.com/fatidaprilian/Agentic-Senior-Core.git
+```
+
+</details>
+
+<details>
+<summary><b>Devin / Hermes / OpenCode / OpenClaw</b></summary>
+
+Plugin manifests ship in the npm package at their standard paths (`.devin-plugin/`, `plugin.yaml`, `.opencode/plugins/`, `.openclaw/skills/`). After global npm install, each host auto-discovers or manually register per host docs.
 
 </details>
 
@@ -132,12 +247,22 @@ Plugin manifests ship in the npm package at their standard paths (`.devin-plugin
 asc adapter --all
 ```
 
-Generates adapter files for Cursor, Windsurf, Cline, Copilot, and Kiro in one go.
+Generates adapter files for Cursor, Devin Desktop, Windsurf, Cline, Copilot, Kiro, Continue, Zed, Aider, Kilo Code, Roo Code, and OpenHands in one go.
 
 </details>
 
 **Terminal agents** (Claude Code, Codex, Gemini, Copilot CLI) = install once, always-on, zero per-project files.
-**IDE agents** (Cursor, Windsurf, Cline, Copilot VS Code, Kiro) = one file per project via `asc adapter`.
+**IDE agents** (Cursor, Devin Desktop, Cline, Copilot VS Code, Kiro, Continue, Zed, Aider, Kilo Code, Roo Code, OpenHands, Antigravity) = one file per project via `asc adapter` or copy.
+
+### Updating
+
+Already installed? Just update the global package:
+
+```bash
+npm update -g @ryuenn3123/agentic-senior-core
+```
+
+Terminal agent plugins pick up the new version automatically on next session. For IDE adapters, re-run `asc adapter --all` in each project to refresh the adapter files.
 
 ---
 
@@ -174,12 +299,20 @@ Input validation at trust boundaries, parameterized queries, auth checks, error
 | Hermes | Terminal agent | Plugin registration | No |
 | OpenCode | Terminal agent | Auto-detected | No |
 | OpenClaw | Terminal agent | Auto-detected | No |
-| Antigravity | Terminal agent | Auto-detected | No |
+| Antigravity IDE | IDE | Copy rules or plugin bundle | No (global) / Yes (rules) |
+| Antigravity CLI | Terminal agent | `agy plugin install` | No |
 | Cursor | IDE | `asc adapter --cursor` | Yes (1 file) |
-| Windsurf | IDE | `asc adapter --windsurf` | Yes (1 file) |
+| Devin Desktop | IDE | `asc adapter --devin` | Yes (1 file) |
+| Windsurf (legacy) | IDE | `asc adapter --windsurf` | Yes (1 file) |
 | Cline | VS Code ext | `asc adapter --cline` | Yes (1 file) |
 | GitHub Copilot | VS Code ext | `asc adapter --copilot` | Yes (1 file) |
 | Kiro | IDE | `asc adapter --kiro` | Yes (1 file) |
+| Continue | VS Code ext | `asc adapter --continue` | Yes (1 file) |
+| Zed | IDE | `asc adapter --zed` | Yes (1 file) |
+| Aider | Terminal agent | `asc adapter --aider` | Yes (1 file) |
+| Kilo Code | VS Code ext | `asc adapter --kilocode` | Yes (1 file) |
+| Roo Code | VS Code ext | `asc adapter --roo` | Yes (1 file) |
+| OpenHands | Agent | `asc adapter --openhands` | Yes (1 file) |
 
 ---
 
@@ -199,7 +332,8 @@ Available on plugin hosts (Claude Code, Codex, Gemini CLI):
 ## CLI
 
 ```bash
-asc adapter [--cursor|--windsurf|--cline|--copilot|--kiro|--all]
+asc adapter [--cursor|--devin|--windsurf|--cline|--copilot|--kiro|--continue|--zed|--aider|--kilocode|--roo|--openhands|--all]
+asc uninstall [--dry-run]
 asc clean [--dry-run]
 asc status
 asc mcp

package/bin/agentic-senior-core.js

@@ -3,10 +3,11 @@
  * Agentic-Senior-Core CLI v5 -- Universal plugin system.
  *
  * Commands:
- *   adapter   Generate instruction-tier adapter files for IDEs without plugin support
- *   clean     Remove v4 per-project artifacts (.agent-context/, bridge files)
- *   status    Show detected IDEs and install hints
- *   mcp       Start MCP stdio server
+ *   adapter     Generate instruction-tier adapter files for IDEs without plugin support
+ *   uninstall   Remove ASC adapter files from the current project
+ *   clean       Remove v4 per-project artifacts (.agent-context/, bridge files)
+ *   status      Show detected IDEs and install hints
+ *   mcp         Start MCP stdio server
  */
 import { exit } from 'node:process';
 import { readFileSync } from 'node:fs';
@@ -25,9 +26,10 @@ function printUsage() {
   console.log('  Claude Code:  /plugin marketplace add fatidaprilian/Agentic-Senior-Core');
   console.log('  Codex CLI:    codex plugins install agentic-senior-core\n');
   console.log('Adapter install (one file per project):');
-  console.log('  asc adapter --cursor --windsurf --cline --copilot --kiro --all\n');
+  console.log('  asc adapter --cursor --devin --cline --copilot --kiro --continue --zed --aider --kilocode --roo --openhands --windsurf --all\n');
   console.log('Commands:');
   console.log('  adapter       Generate instruction-tier adapter files');
+  console.log('  uninstall     Remove ASC adapter files from this project');
   console.log('  clean         Remove v4 per-project artifacts');
   console.log('  status        Show detected IDEs and install hints');
   console.log('  mcp           Start MCP stdio server');
@@ -55,6 +57,12 @@ async function main() {
     return;
   }
 
+  if (commandArgument === 'uninstall') {
+    const { runUninstallCommand } = await import('../lib/cli/commands/uninstall.mjs');
+    await runUninstallCommand(commandArguments);
+    return;
+  }
+
   if (commandArgument === 'clean') {
     const { runCleanCommand } = await import('../lib/cli/commands/clean.mjs');
     await runCleanCommand(commandArguments);

package/gemini-extension.json

@@ -1,6 +1,6 @@
 {
   "name": "agentic-senior-core",
-  "version": "5.1.0",
+  "version": "5.3.0",
   "description": "Universal AI coding rules. Write code like a staff engineer.",
   "author": "fatidaprilian",
   "license": "MIT",