agent-enderun 0.4.4 → 0.4.5

package/.enderun/PROJECT_MEMORY.md

@@ -32,7 +32,7 @@ This file is the Single Source of Truth (SSOT) and the persistent memory of the
 
 | Date | Decision | Rationale | Agent |
 | :--- | :--- | :--- | :--- |
-| 2026-05-12 | Framework Unified to v0.4.4 | Absolute version parity across all components | @manager |
+| 2026-05-12 | Framework Unified to v0.4.5 | Inclusion of missing adapter files and installation fix | @manager |
 | 2026-05-09 | Project Initialized | Framework setup via CLI | @manager |
 
 ## DELIVERABLES
@@ -49,7 +49,13 @@ This file is the Single Source of Truth (SSOT) and the persistent memory of the
 
 ## HISTORY (Persistent Memory)
 
-### 2026-05-12 — The Unified Milestone & v0.4.4 Release
+### 2026-05-12 — The Installation Fix & v0.4.5 Release
++
++- **Agent:** @manager
++- **Trace ID:** 01KR6EJA6GG3RPS849097KS37Q
++- **Action:** Bumped version to v0.4.5. Fixed a critical issue where adapter files (gemini.md, cursor.md, claude.md, codex.md) were excluded from the npm package. Verified the fix via local and npx-simulated tests. Cleaned up logs and temporary test files.
++
++### 2026-05-12 — The Unified Milestone & v0.4.4 Release
 
 - **Agent:** @manager
 - **Trace ID:** 01KR6EJA6GG3RPS849097KS37Q

package/README.md

@@ -1,4 +1,4 @@
-# 🏛️ Agent Enderun — v0.4.4
+# 🏛️ Agent Enderun — v0.4.5
 
 **The Supreme AI Governance & Orchestration Framework for Enterprise Development**
 

package/claude.md

@@ -0,0 +1,7 @@
+# Agent Enderun — Claude Adapter
+
+This file is the entry point for Claude. The project's "Supreme Law" and all instructions are located in the following file:
+
+👉 **[{{FRAMEWORK_DIR}}/ENDERUN.md]({{FRAMEWORK_DIR}}/ENDERUN.md)**
+
+Please read that file thoroughly before taking any action.

package/codex.md

@@ -0,0 +1,7 @@
+# Agent Enderun — Codex Adapter
+
+This file is the entry point for Codex. The project's "Supreme Law" and all instructions are located in the following file:
+
+👉 **[{{FRAMEWORK_DIR}}/ENDERUN.md]({{FRAMEWORK_DIR}}/ENDERUN.md)**
+
+Please read that file thoroughly before taking any action.

package/cursor.md

@@ -0,0 +1,7 @@
+# Agent Enderun — Cursor Adapter
+
+This file is the entry point for Cursor. The project's "Supreme Law" and all instructions are located in the following file:
+
+👉 **[{{FRAMEWORK_DIR}}/ENDERUN.md]({{FRAMEWORK_DIR}}/ENDERUN.md)**
+
+Please read that file thoroughly before taking any action.

package/gemini-extension.json

@@ -0,0 +1,5 @@
+{
+  "name": "Agent Enderun",
+  "description": "Enterprise-grade AI orchestration framework for software teams.",
+  "instructions": "{{FRAMEWORK_DIR}}/ENDERUN.md"
+}

package/gemini.md

@@ -0,0 +1,7 @@
+# Agent Enderun — Gemini Adapter
+
+This file is the entry point for Gemini. The project's "Supreme Law" and all instructions are located in the following file:
+
+👉 **[{{FRAMEWORK_DIR}}/ENDERUN.md]({{FRAMEWORK_DIR}}/ENDERUN.md)**
+
+Please read that file thoroughly before taking any action.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "agent-enderun",
-  "version": "0.4.4",
+  "version": "0.4.5",
   "description": "The Supreme AI Governance & Orchestration Framework for Enterprise Development",
   "author": "Yusuf BEKAR",
   "license": "MIT",
@@ -46,7 +46,12 @@
     "mcp.json",
     ".env.example",
     "tsconfig.json",
-    "panda.config.ts"
+    "panda.config.ts",
+    "gemini.md",
+    "gemini-extension.json",
+    "cursor.md",
+    "claude.md",
+    "codex.md"
   ],
   "scripts": {
     "enderun:build": "npm run build --workspaces --if-present",
@@ -71,7 +76,7 @@
     "concurrently": "^9.1.2"
   },
   "enderun": {
-    "version": "0.4.4",
+    "version": "0.4.5",
     "initializedAt": "2026-05-09T13:24:27.472Z"
   }
 }

package/packages/framework-mcp/dist/tools/security.js

@@ -88,32 +88,47 @@ export const securityHandlers = {
         try {
             const safePath = resolveSafePath(projectRoot, parsed.data.path);
             const violations = [];
-            const checkFile = (filePath) => {
-                const content = fs.readFileSync(filePath, "utf-8");
-                const relativePath = path.relative(projectRoot, filePath);
-                const forbiddenLibraries = ["@shadcn", "mui", "@chakra-ui", "antd", "bootstrap", "tailwindcss"];
+            const forbiddenLibraries = ["@shadcn", "mui", "@chakra-ui", "antd", "bootstrap", "tailwindcss"];
+            if (fs.existsSync(safePath) && fs.lstatSync(safePath).isDirectory()) {
+                const tsProject = new Project({ compilerOptions: { allowJs: true } });
+                tsProject.addSourceFilesAtPaths(path.join(safePath, "**/*.{ts,tsx,js,jsx}"));
+                for (const sourceFile of tsProject.getSourceFiles()) {
+                    const relativePath = path.relative(projectRoot, sourceFile.getFilePath());
+                    if (relativePath.includes("node_modules") || relativePath.includes("dist"))
+                        continue;
+                    // AST-based Import Check for Zero UI Policy
+                    sourceFile.getImportDeclarations().forEach(imp => {
+                        const moduleValue = imp.getModuleSpecifierValue();
+                        if (forbiddenLibraries.some(lib => moduleValue.includes(lib))) {
+                            violations.push(`${relativePath}: AST Violation - Zero UI Library Policy (imported '${moduleValue}')`);
+                        }
+                    });
+                    // AST-based String ID Check for Branded Types Law
+                    sourceFile.getInterfaces().forEach(iface => {
+                        const idProp = iface.getProperty("id");
+                        if (idProp && idProp.getType().isString() && !idProp.getType().getText().includes("Brand")) {
+                            violations.push(`${relativePath}: AST Violation - Branded Types Law (interface '${iface.getName()}' uses plain string for ID)`);
+                        }
+                    });
+                    const content = sourceFile.getFullText();
+                    if (content.includes("console.log") && !relativePath.includes("cli.js")) {
+                        violations.push(`${relativePath}: Text Violation - Logging Policy (found 'console.log')`);
+                    }
+                    if (content.includes("sql`")) {
+                        violations.push(`${relativePath}: Text Violation - Potential Kysely Standards (found raw 'sql' tag)`);
+                    }
+                }
+            }
+            else if (fs.existsSync(safePath)) {
+                // Fallback for single files
+                const content = fs.readFileSync(safePath, "utf-8");
+                const relativePath = path.relative(projectRoot, safePath);
                 for (const lib of forbiddenLibraries) {
                     if (content.includes(lib))
                         violations.push(`${relativePath}: Violation of Zero UI Library Policy (found '${lib}')`);
                 }
-                if (content.includes("console.log") && !filePath.includes("cli.js") && !filePath.includes("node_modules")) {
-                    violations.push(`${relativePath}: Violation of Logging Policy (found 'console.log', use proper logger)`);
-                }
-                if (content.includes("sql`") && !filePath.includes("node_modules")) {
-                    violations.push(`${relativePath}: Potential Violation of Kysely Standards (found raw 'sql' tag)`);
-                }
-                if (filePath.endsWith(".ts") && !filePath.includes("shared-types") && !filePath.includes("node_modules")) {
-                    if (content.match(/interface.*ID\s*:\s*string/))
-                        violations.push(`${relativePath}: Violation of Branded Types Law (found ID typed as plain string)`);
-                }
-            };
-            if (fs.lstatSync(safePath).isDirectory()) {
-                collectFilesRecursively(safePath, new Set(["ts", "tsx", "js", "jsx"])).forEach(checkFile);
-            }
-            else {
-                checkFile(safePath);
             }
-            return { content: [{ type: "text", text: `### CONSTITUTION COMPLIANCE REPORT\n\n` + (violations.length > 0 ? `⚠️ **VIOLATIONS FOUND:**\n${violations.map(v => `- ${v}`).join("\n")}` : "✅ **ALL SYSTEMS COMPLIANT:** No violations of ENDERUN.md rules detected.") }] };
+            return { content: [{ type: "text", text: `### CONSTITUTION COMPLIANCE REPORT\n\n` + (violations.length > 0 ? `⚠️ **VIOLATIONS FOUND:**\n${violations.map(v => `- ${v}`).join("\n")}` : "✅ **ALL SYSTEMS COMPLIANT:** AST and Regex scans passed. No rule violations detected.") }] };
         }
         catch (error) {
             return { content: [{ type: "text", text: "Compliance analysis failed." }] };

package/packages/framework-mcp/package.json

@@ -1,6 +1,6 @@
 {
   "name": "ai-enderun-mcp",
-  "version": "0.4.4",
+  "version": "0.4.5",
   "description": "Enterprise-grade MCP Server for AI Agent Framework",
   "author": "Yusuf BEKAR",
   "license": "MIT",

package/packages/shared-types/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ai-enderun/shared-types",
-  "version": "0.4.4",
+  "version": "0.4.5",
   "description": "Shared TypeScript types for AI-Enderun Framework. Ensures Contract-First synchronization between agents.",
   "author": "Yusuf BEKAR",
   "license": "MIT",