agent-enderun 0.7.1 → 0.7.5

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (177) hide show
  1. package/.enderun/BRAIN_DASHBOARD.md +47 -0
  2. package/.enderun/PROJECT_MEMORY.md +139 -0
  3. package/.enderun/STATUS.md +62 -0
  4. package/.enderun/agents/agent_army_schema.json +85 -0
  5. package/.enderun/agents/analyst/agent.json +23 -0
  6. package/.enderun/agents/analyst/prompt.md +225 -0
  7. package/.enderun/agents/backend/agent.json +24 -0
  8. package/.enderun/agents/backend/prompt.md +331 -0
  9. package/.enderun/agents/devops/agent.json +61 -0
  10. package/.enderun/agents/devops/prompt.md +127 -0
  11. package/.enderun/agents/explorer/agent.json +22 -0
  12. package/.enderun/agents/explorer/prompt.md +115 -0
  13. package/.enderun/agents/frontend/agent.json +24 -0
  14. package/.enderun/agents/frontend/prompt.md +313 -0
  15. package/.enderun/agents/git/agent.json +22 -0
  16. package/.enderun/agents/git/prompt.md +99 -0
  17. package/.enderun/agents/manager/agent.json +48 -0
  18. package/.enderun/agents/manager/prompt.md +231 -0
  19. package/.enderun/agents/mobile/agent.json +21 -0
  20. package/.enderun/agents/mobile/prompt.md +91 -0
  21. package/.enderun/agents/native/agent.json +21 -0
  22. package/.enderun/agents/native/prompt.md +96 -0
  23. package/.enderun/agents/orchestrator/agent.json +53 -0
  24. package/.enderun/agents/orchestrator/prompt.md +124 -0
  25. package/.enderun/agents/qa/agent.json +57 -0
  26. package/.enderun/agents/qa/prompt.md +69 -0
  27. package/.enderun/agents/schema/agent-lifecycle-schema.json +65 -0
  28. package/.enderun/agents/security/agent.json +54 -0
  29. package/.enderun/agents/security/prompt.md +154 -0
  30. package/.enderun/gemini.md +19 -0
  31. package/.enderun/knowledge/corporate-governance/analyst-contract-integrity-guide.md +92 -0
  32. package/.enderun/knowledge/corporate-governance/audit-logging-standard.md +59 -0
  33. package/.enderun/knowledge/corporate-governance/backend-high-risk-endpoint-guide.md +125 -0
  34. package/.enderun/knowledge/corporate-governance/branded-types-law.md +77 -0
  35. package/.enderun/knowledge/corporate-governance/contract-drift-detection-simulation.md +92 -0
  36. package/.enderun/knowledge/corporate-governance/corporate-governance-playbook.md +89 -0
  37. package/.enderun/knowledge/corporate-governance/corporate-project-kickoff-checklist.md +56 -0
  38. package/.enderun/knowledge/corporate-governance/corporate-project-kickoff-simulation.md +144 -0
  39. package/.enderun/knowledge/corporate-governance/corporate-project-scaffolding-sop.md +103 -0
  40. package/.enderun/knowledge/corporate-governance/domain-error-handling-standard.md +75 -0
  41. package/.enderun/knowledge/corporate-governance/frontend-high-risk-modal-guide.md +211 -0
  42. package/.enderun/knowledge/corporate-governance/governance-baseline-briefing-template.md +54 -0
  43. package/.enderun/knowledge/corporate-governance/high-risk-action-approval-flow-simulation.md +167 -0
  44. package/.enderun/knowledge/corporate-governance/high-risk-actions-managerapproval.md +76 -0
  45. package/.enderun/knowledge/corporate-governance/high-risk-security-modal-hermes-flow.md +49 -0
  46. package/.enderun/knowledge/corporate-governance/manager-first-30-days-guide.md +112 -0
  47. package/.enderun/knowledge/corporate-governance/manager-first-three-briefings.md +79 -0
  48. package/.enderun/knowledge/deployment_checklist.md +7 -0
  49. package/{.antigravitycli → .enderun}/knowledge/framework_vs_user_project_boundary.md +3 -3
  50. package/{.antigravitycli → .enderun}/knowledge/frontend_professionalization_guidelines.md +17 -20
  51. package/{.antigravitycli → .enderun}/knowledge/hermes_live_test_guidelines.md +9 -9
  52. package/{.antigravitycli → .enderun}/knowledge/hermes_protocol.md +2 -2
  53. package/.enderun/knowledge/kentim_constitution.md +34 -0
  54. package/{.antigravitycli → .enderun}/knowledge/manager_authority_audit_enforcement.md +11 -11
  55. package/{.antigravitycli → .enderun}/knowledge/project_scaffold_guidelines.md +8 -8
  56. package/{.antigravitycli → .enderun}/knowledge/reference_application_guidelines.md +7 -7
  57. package/.enderun/logs/analyst.json +1 -0
  58. package/.enderun/logs/backend.json +1 -0
  59. package/.enderun/logs/devops.json +1 -0
  60. package/.enderun/logs/explorer.json +1 -0
  61. package/.enderun/logs/frontend.json +1 -0
  62. package/.enderun/logs/git.json +1 -0
  63. package/.enderun/logs/manager.json +20 -0
  64. package/.enderun/logs/mobile.json +1 -0
  65. package/.enderun/logs/native.json +1 -0
  66. package/.enderun/logs/orchestrator.json +1 -0
  67. package/.enderun/logs/qa.json +1 -0
  68. package/.enderun/logs/security.json +1 -0
  69. package/.enderun/memory-graph/agent-contexts/analyst.json +1 -0
  70. package/.enderun/memory-graph/agent-contexts/backend.json +1 -0
  71. package/.enderun/memory-graph/agent-contexts/devops.json +1 -0
  72. package/.enderun/memory-graph/agent-contexts/explorer.json +1 -0
  73. package/.enderun/memory-graph/agent-contexts/frontend.json +1 -0
  74. package/.enderun/memory-graph/agent-contexts/git.json +1 -0
  75. package/.enderun/memory-graph/agent-contexts/manager.json +1 -0
  76. package/.enderun/memory-graph/agent-contexts/mobile.json +1 -0
  77. package/.enderun/memory-graph/agent-contexts/native.json +1 -0
  78. package/.enderun/memory-graph/agent-contexts/orchestrator.json +1 -0
  79. package/.enderun/memory-graph/agent-contexts/qa.json +1 -0
  80. package/.enderun/memory-graph/agent-contexts/security.json +1 -0
  81. package/.enderun/memory-graph/graph.json +26 -0
  82. package/.enderun/memory-graph/shared-facts.json +52 -0
  83. package/.enderun/monitoring/.gitkeep +0 -0
  84. package/.enderun/queue/README.md +36 -0
  85. package/ENDERUN.md +4 -4
  86. package/README.md +151 -89
  87. package/bin/cli.js +13 -2138
  88. package/bin/hermes-sandbox.js +0 -0
  89. package/bin/validate-agent-army.js +3 -3
  90. package/docs/architecture/approval-flows.md +2 -37
  91. package/docs/backend/error-handling.md +2 -51
  92. package/docs/frontend/component-patterns.md +2 -47
  93. package/docs/getting-started.md +7 -15
  94. package/docs/roadmap.md +2 -2
  95. package/framework-mcp/dist/index.js +0 -0
  96. package/framework-mcp/dist/schemas.js +3 -3
  97. package/framework-mcp/dist/tools/framework.js +17 -10
  98. package/framework-mcp/dist/tools/governance.js +696 -0
  99. package/framework-mcp/dist/tools/index.js +14 -12
  100. package/framework-mcp/dist/tools/memory.js +106 -0
  101. package/framework-mcp/dist/tools/monitoring.js +294 -0
  102. package/framework-mcp/dist/tools/orchestration.js +368 -0
  103. package/framework-mcp/dist/tools/pipeline.js +267 -0
  104. package/framework-mcp/dist/utils.js +25 -3
  105. package/framework-mcp/package.json +3 -3
  106. package/framework-mcp/src/schemas.ts +3 -3
  107. package/framework-mcp/src/tools/framework.ts +18 -10
  108. package/framework-mcp/src/tools/governance.ts +891 -0
  109. package/framework-mcp/src/tools/index.ts +14 -12
  110. package/framework-mcp/src/tools/memory.ts +103 -0
  111. package/framework-mcp/src/tools/monitoring.ts +351 -0
  112. package/framework-mcp/src/tools/orchestration.ts +439 -0
  113. package/framework-mcp/src/tools/pipeline.ts +353 -0
  114. package/framework-mcp/src/utils.ts +24 -3
  115. package/framework-mcp/tsconfig.json +2 -1
  116. package/gemini.md +19 -0
  117. package/package.json +14 -20
  118. package/.antigravitycli/BRAIN_DASHBOARD.md +0 -43
  119. package/.antigravitycli/ENDERUN.md +0 -253
  120. package/.antigravitycli/PROJECT_MEMORY.md +0 -78
  121. package/.antigravitycli/STATUS.md +0 -21
  122. package/.antigravitycli/agents/agent_army_schema.json +0 -79
  123. package/.antigravitycli/agents/analyst/agent.json +0 -55
  124. package/.antigravitycli/agents/backend/agent.json +0 -58
  125. package/.antigravitycli/agents/explorer/agent.json +0 -50
  126. package/.antigravitycli/agents/frontend/agent.json +0 -56
  127. package/.antigravitycli/agents/git/agent.json +0 -53
  128. package/.antigravitycli/agents/manager/agent.json +0 -82
  129. package/.antigravitycli/agents/mobile/agent.json +0 -52
  130. package/.antigravitycli/agents/native/agent.json +0 -56
  131. package/.antigravitycli/assets/manager.png +0 -0
  132. package/.antigravitycli/blueprints/README.md +0 -82
  133. package/.antigravitycli/blueprints/backend/errors/config/meta.json +0 -16
  134. package/.antigravitycli/blueprints/backend/errors/domain-error.ts +0 -64
  135. package/.antigravitycli/knowledge/README.md +0 -22
  136. package/.antigravitycli/knowledge/database_governance_guidelines.md +0 -118
  137. package/.antigravitycli/knowledge/deployment_checklist.md +0 -133
  138. package/.antigravitycli/knowledge/documentation_ownership.md +0 -122
  139. package/.antigravitycli/knowledge/documentation_ownership_status.md +0 -122
  140. package/.antigravitycli/knowledge/enterprise_capabilities_reference.md +0 -149
  141. package/.antigravitycli/knowledge/enterprise_frontend_adaptation.md +0 -232
  142. package/.antigravitycli/knowledge/enterprise_project_adaptation.md +0 -168
  143. package/.antigravitycli/knowledge/frontend_real_battle_test_protocol.md +0 -162
  144. package/antigravity.md +0 -15
  145. package/docs/architecture/decisions/README.md +0 -31
  146. package/docs/architecture/notification-strategy.md +0 -38
  147. package/docs/backend/audit-logging.md +0 -34
  148. package/docs/frontend/forms.md +0 -40
  149. package/docs/frontend/notifications.md +0 -37
  150. package/framework-mcp/dist/tools/academy.js +0 -182
  151. package/framework-mcp/dist/tools/database.js +0 -57
  152. package/framework-mcp/dist/tools/repository.js +0 -101
  153. package/framework-mcp/dist/tools/scaffold.js +0 -132
  154. package/framework-mcp/src/tools/academy.ts +0 -180
  155. package/framework-mcp/src/tools/database.ts +0 -54
  156. package/framework-mcp/src/tools/repository.ts +0 -101
  157. package/framework-mcp/src/tools/scaffold.ts +0 -150
  158. /package/{.antigravitycli/messages → .enderun/benchmarks}/.gitkeep +0 -0
  159. /package/{.antigravitycli → .enderun}/cli-commands.json +0 -0
  160. /package/{.antigravitycli → .enderun}/config.json +0 -0
  161. /package/{.antigravitycli → .enderun}/knowledge/api_design_rules.md +0 -0
  162. /package/{.antigravitycli → .enderun}/knowledge/async_error_handling.md +0 -0
  163. /package/{.antigravitycli → .enderun}/knowledge/blueprint_driven_construction.md +0 -0
  164. /package/{.antigravitycli → .enderun}/knowledge/branded_types_pattern.md +0 -0
  165. /package/{.antigravitycli → .enderun}/knowledge/code_review_checklist.md +0 -0
  166. /package/{.antigravitycli → .enderun}/knowledge/contract_versioning.md +0 -0
  167. /package/{.antigravitycli → .enderun}/knowledge/database_migration.md +0 -0
  168. /package/{.antigravitycli → .enderun}/knowledge/git_commit_strategy.md +0 -0
  169. /package/{.antigravitycli → .enderun}/knowledge/legacy_onboarding.md +0 -0
  170. /package/{.antigravitycli → .enderun}/knowledge/monitoring_setup.md +0 -0
  171. /package/{.antigravitycli → .enderun}/knowledge/performance_guidelines.md +0 -0
  172. /package/{.antigravitycli → .enderun}/knowledge/repository_patterns.md +0 -0
  173. /package/{.antigravitycli → .enderun}/knowledge/responsive_design_standards.md +0 -0
  174. /package/{.antigravitycli → .enderun}/knowledge/security_scanning.md +0 -0
  175. /package/{.antigravitycli → .enderun}/knowledge/testing_standards.md +0 -0
  176. /package/{.antigravitycli → .enderun}/knowledge/troubleshooting_guide.md +0 -0
  177. /package/{.antigravitycli → .enderun}/knowledge/zero_ui_library_policy.md +0 -0
@@ -1,133 +0,0 @@
1
- # Enterprise Deployment Standard Operating Procedure (DevOps SOP)
2
-
3
- **Version:** v0.6.6 | **Ownership:** Human Devs & @manager Oversight
4
-
5
- This document is the **Standard Operating Procedure (SOP)** designed to ensure that deliverables produced by AI agents are deployed to production securely, with zero-downtime, and zero-errors by human engineers. Agents generate deliverables based on this guide, and humans execute these steps manually and sequentially.
6
-
7
- ---
8
-
9
- ## 📋 DEPLOYMENT MATRIX AND APPROVAL CHAIN
10
-
11
- | Deployment Phase | Owner | Auditor | Criticality Level | Mandatory Approval |
12
- | :--- | :--- | :--- | :--- | :--- |
13
- | **Staging (Test)** | Human Developer | `@analyst` | Low | `@analyst` (AST & Contract MATCH) |
14
- | **Production (Live)** | Human Engineer (DevOps) | `@manager` | Critical | `@manager` (Trace Approval) + Human CTO |
15
-
16
- ---
17
-
18
- ## 🔍 PHASE 1: PRE-DEPLOYMENT VALIDATION
19
-
20
- Before deciding to deploy to production, verify the following steps in your local environment or CI/CD interface.
21
-
22
- ### 1.1 Contract and Type Integrity Testing
23
- Trigger the MCP tools to verify that there is no drift in the backend and frontend types generated by the agents:
24
- * [ ] **Contract Integrity Scan:** Run the `verify_api_contract` tool and verify that the output is `MATCH`.
25
- * [ ] **Frontend Compatibility Scan:** Run the `validate_frontend_api_contract` tool to ensure frontend hooks align perfectly with backend API contracts.
26
-
27
- ### 1.2 Quality and Test Gate Control
28
- Run the following commands to audit test coverage:
29
- ```bash
30
- # Run backend tests and verify coverage
31
- npm run test --workspace=backend -- --coverage
32
- # Run frontend tests and verify coverage
33
- npm run test --workspace=web -- --coverage
34
- ```
35
- * [ ] **Unit & Integration Coverage:** Verify that coverage for critical paths (Auth, Payments, RBAC) is **%85+** and overall codebase coverage is **%75+**.
36
- * [ ] **Linter & Biome/ESLint:** Confirm there are zero build or styling errors: `npm run lint`.
37
-
38
- ### 1.3 Static Security Scanning (SecOps)
39
- Run static security rules locally or in the remote repository:
40
- * [ ] **Secret Scan:** Confirm that there are no hardcoded API keys, private keys, or passwords outside of `.env.production`.
41
- * [ ] **AST Security Check:** Run the `security_audit_scan` or `analyze_constitution_compliance` tool to report any occurrences of the `any` type or unsafe `innerHTML` usage.
42
-
43
- ---
44
-
45
- ## 🗄️ PHASE 2: DATABASE MIGRATION MANAGEMENT
46
-
47
- Schema changes (DDL/DML) on production databases are the highest-risk infrastructure operations. Apply the **Expand and Contract** strategy to prevent downtime.
48
-
49
- ### 2.1 Backward Compatibility and Schema Transition Steps
50
- * [ ] **Breaking Change Check:** Never perform destructive operations like dropping columns or changing data types in a single deployment. First, add the new column (Expand), mark the old column as deprecated, migrate the data, and drop the old column in a subsequent deployment (Contract).
51
- * [ ] **Dry Run:** Test migration files on a local test database or an isolated staging DB:
52
- ```bash
53
- npm run db:migrate -- --dry-run
54
- ```
55
- * [ ] **Backup (Cold/Hot Backup):** Take an instantaneous snapshot of the live database right before running the migration.
56
-
57
- ---
58
-
59
- ## 📦 PHASE 3: BUILD & BUNDLE BUDGET
60
-
61
- Build and audit the production package to verify that the application does not exceed performance budgets.
62
-
63
- ### 3.1 Frontend Package Analysis
64
- ```bash
65
- npm run build --workspace=web
66
- ```
67
- * [ ] **Bundle Budget Audit:** Verify that the initial load bundle size (Gzipped) is **< 250KB** and no single chunk size exceeds **50KB**.
68
- * [ ] **CLS & A11y Protection:** Check that image and dynamic component dimensions are reserved with CSS to prevent Cumulative Layout Shift (CLS) during page load.
69
-
70
- ---
71
-
72
- ## 🚀 PHASE 4: DEPLOYMENT EXECUTION
73
-
74
- Zero-Downtime deployment steps to be followed during the manual deployment by human engineers.
75
-
76
- ```mermaid
77
- sequenceDiagram
78
- autonumber
79
- actor Human as Human DevOps (Yusuf)
80
- participant DB as PostgreSQL (Production)
81
- participant Old as Live Server (V1)
82
- participant New as New Server (V2)
83
- participant LB as Load Balancer / Nginx
84
-
85
- Human->>DB: 1. db:migrate (Backward Compatible)
86
- Human->>New: 2. Boot V2 Code (Invisible)
87
- Note over New: Waiting for Health Check (/health)
88
- New->>New: 3. Warm-Up & Connection Tests
89
- Human->>LB: 4. Switch Traffic to V2 (Rolling Update)
90
- LB->>Old: 5. Disconnect V1 Connections (Graceful Shutdown)
91
- Human->>Old: 6. Terminate / Archive Old Server
92
- ```
93
-
94
- ### 4.1 Step-by-Step Live Deployment Guide
95
- 1. **Environment Variables:** Confirm that the `.env.production` file is up-to-date and encrypted (stored in Secret Manager) on the target server.
96
- 2. **Database Migration:** Execute migrations before servers receive traffic:
97
- ```bash
98
- npm run db:migrate
99
- ```
100
- 3. **Trigger Rolling Update:** Boot the new version (V2) but do not route traffic to it yet.
101
- 4. **Warm-Up & Health Check:** Route requests to the `/health` endpoint of the new servers to confirm a successful `200 OK` response and verify database pool health.
102
- 5. **Traffic Routing (Nginx/LB Switch):** Gradually route traffic to V2 servers via the Load Balancer.
103
- 6. **Graceful Shutdown:** Wait **30 seconds** for old servers (V1) to complete active requests (Graceful Shutdown), then shut down V1 servers.
104
-
105
- ---
106
-
107
- ## 📊 PHASE 5: POST-DEPLOYMENT MONITORING
108
-
109
- Keep monitoring dashboards open for the first **15 minutes** after going live.
110
-
111
- * [ ] **Log Stream (Pino JSON):** Confirm there is no accumulation of `fatal` or `error` level logs on the server logs.
112
- * [ ] **SSL & DNS Health:** Verify the validity period of the `https://` protocol and the SSL certificate (confirming at least 30 days remaining) via the browser.
113
- * [ ] **Error Rate:** Observe that the `5xx` error rate remains below **%0.1** of total incoming requests.
114
-
115
- ---
116
-
117
- ## 🚨 PHASE 6: EMERGENCY ROLLBACK PROCEDURE
118
-
119
- If a critical error (Memory leak, >1% 5xx errors, DB deadlock) is detected post-deployment, apply the following **60-Second Emergency Rollback** steps without panic.
120
-
121
- ### 6.1 Emergency Rollback Steps (Max 60 Seconds)
122
- 1. **Switch Traffic:** Instantly redirect traffic back to the previous stable release (V1 servers) via the Load Balancer / Nginx.
123
- 2. **Migration Rollback:** If there is a critical, backward-incompatible database error, rollback the migration:
124
- ```bash
125
- npm run db:rollback
126
- ```
127
- *(Note: Since schemas are designed to be backward-compatible, in most cases rolling back the code version is sufficient without needing a DB rollback.)*
128
- 3. **Audit and Trace Logging:** Boot the faulty version on an isolated debug port and inspect logs. Prepare a post-mortem report linked with the `Trace ID` to report the issue to `@manager`.
129
-
130
- ---
131
-
132
- ### Procedure Verification Declaration
133
- > ⚠️ **Engineering Note:** Any downtime caused by skipping steps in this guide will be considered an internal process violation. A history entry (HISTORY) must be added to `PROJECT_MEMORY.md` after every successful deployment, including the `@manager` approval.
@@ -1,122 +0,0 @@
1
- # Documentation Ownership — Framework vs User Project
2
-
3
- **Version:** 1.0
4
- **Owner:** @manager
5
- **Created:** May 24, 2026
6
- **Status:** Mandatory Framework Rule
7
-
8
- ---
9
-
10
- ## Purpose
11
-
12
- In large-scale enterprise projects, it is mandatory to establish clear **ownership** of documentation. Otherwise, framework rules blend with project-specific decisions, causing information noise and rendering the system unmanageable in the long term.
13
-
14
- ## Core Rule (Mandatory)
15
-
16
- | Type | Where to Store? | Who is Responsible? | Description |
17
- |-----|------------------|--------------|----------|
18
- | **Framework Rules** | `.antigravitycli/knowledge/` | Agent Enderun (all agents) | Mandatory standards and governance rules that all agents must follow |
19
- | **User Project Documentation** | User project's own `docs/` folder | @manager + relevant agents (especially @frontend, @backend, @analyst) | Project-specific decisions, implementation details, and patterns |
20
-
21
- ### Clear Distinction
22
-
23
- - **Framework Rule Example:**
24
- “All user notifications, confirmations, and high-risk action feedback **must** be done exclusively through the Toaster.”
25
-
26
- - **User Project Decision Example:**
27
- “In this project, the `sonner` library will be used as the Toaster. A custom `ConfirmationToast` component will be developed for admin panel confirmations. Details: `docs/frontend/notifications.md`”
28
-
29
- ---
30
-
31
- ## Agent Responsibilities
32
-
33
- ### General Rule (For All Agents)
34
- - If an agent generates a new pattern, decision, or standard for the user project, they are **mandated** to write this into the user's own documentation structure.
35
- - These documents are **never** written inside the `.antigravitycli/` folder.
36
-
37
- ### @frontend Special Responsibilities
38
- - Toaster implementation, approval flows, notification rules, component pattern decisions -> Written to `docs/frontend/` or `apps/web/docs/` in the user's project.
39
- - Documentation for high-risk admin UI flows must also reside in the user's project documentation.
40
-
41
- ### @backend Special Responsibilities
42
- - API contract decisions, error handling patterns, audit log standards, migration strategies -> Written to `docs/backend/` or `docs/architecture/` in the user's project.
43
-
44
- ### @analyst and @manager Responsibilities
45
- - @manager and @analyst audit the agents to ensure that project-specific documentation is written to the correct location.
46
- - They actively demand the creation of these documents when necessary.
47
-
48
- ---
49
-
50
- ## Recommended Folder Structure (For User Project)
51
-
52
- ```
53
- docs/
54
- ├── architecture/
55
- │ ├── decisions/ # ADRs
56
- │ ├── approval-flows.md # managerApproval and high-risk workflows
57
- │ └── notification-strategy.md # Toaster + notification strategy
58
- ├── frontend/
59
- │ ├── component-patterns.md
60
- │ ├── notifications.md # Toaster implementation and rules
61
- │ └── forms.md
62
- ├── backend/
63
- │ ├── error-handling.md
64
- │ └── audit-logging.md
65
- └── README.md
66
- ```
67
-
68
- > **Note:** If the user project already uses a different documentation structure (e.g., `docs/arch/` or `docs/adr/`), the agents will adapt to that structure. The key requirement is that it must reside "inside the user project's own docs/ structure".
69
-
70
- ---
71
-
72
- ## Concrete Examples
73
-
74
- ### Example 1: General Good vs Bad Approach
75
-
76
- **Bad Approach (Forbidden):**
77
- @explorer discovered a massive set of technical debt in a project. They wrote this into `.antigravitycli/knowledge/technical_debt.md`.
78
-
79
- → **Incorrect.** This information belongs to the user's project.
80
-
81
- **Good Approach (Correct):**
82
- After making the same discovery, @explorer wrote the findings into `docs/architecture/technical-debt.md` in the user's project and referenced the relevant team.
83
-
84
- ---
85
-
86
- ### Example 2: Good Example for @frontend
87
-
88
- @frontend designed a custom approval workflow for high-risk admin actions in an enterprise project.
89
-
90
- **Correct Behavior:**
91
- - Created a new component (`ConfirmationModal`).
92
- - Documented how to use this component and under what conditions it requires `managerApproval` in the `docs/frontend/approval-flows.md` file.
93
- - Placed details of the toaster implementation (which library, which variants, accessibility rules) inside `docs/frontend/notifications.md`.
94
-
95
- ---
96
-
97
- ### Example 3: Good Example for @backend
98
-
99
- @backend defined the audit log strategy and error handling patterns in a project.
100
-
101
- **Correct Behavior:**
102
- - Documented the audit log structure and which operations should be logged in `docs/backend/audit-logging.md`.
103
- - Detailed the `DomainError` hierarchy and its usage rules inside `docs/backend/error-handling.md`.
104
- - Did not just leave these decisions in code; they documented them professionally.
105
-
106
- ---
107
-
108
- These examples demonstrate how agents should write project-specific decisions to the user's own documentation structure rather than polluting framework folders.
109
-
110
- ---
111
-
112
- ## Related Documents
113
-
114
- - `.antigravitycli/knowledge/enterprise_frontend_adaptation.md` (especially sections 8.1 and 9)
115
- - `.antigravitycli/agents/frontend.md`
116
- - `.antigravitycli/agents/backend.md`
117
- - `.antigravitycli/agents/analyst.md`
118
- - `ENDERUN.md` -> Framework vs User Project Boundary rule
119
-
120
- ---
121
-
122
- **This document is one of the foundational rules for maintaining documentation discipline in large enterprise projects with Agent Enderun.**
@@ -1,122 +0,0 @@
1
- # Documentation Ownership — Implementation Status
2
-
3
- **Owner:** @manager
4
- **Last Updated:** May 24, 2026
5
- **Purpose:** Show the actual, system-wide implementation status of the Documentation Ownership rule (requiring user project documents to reside exclusively in the user's `docs/` folder).
6
-
7
- ---
8
-
9
- ## 1. General Maturity Level
10
-
11
- | Area | Score (10/10) | Comment |
12
- |------|--------------|---------|
13
- | Rule defined at constitutional level | 8.5 | Added to `ENDERUN.md` as a "Zero Tolerance" clause |
14
- | Quality of the central rule document | 9.0 | `documentation_ownership.md` is well-structured and contains concrete examples |
15
- | Presence of rule in agent definitions | 8.0 | Documented in all 8 agent prompts |
16
- | Auditability in Completion Reports | 7.5 | Present in most agents, but still weak in some |
17
- | Necessity in startup protocols | 6.0 | Actively referenced in only 3 agent startup flows |
18
- | Real enforcement | 4.5 | Strong on paper, but currently weak in practical enforcement |
19
- | **Overall System Maturity** | **7.2** | **Progressing well, but not yet fully "mature and coercive"** |
20
-
21
- ---
22
-
23
- ## 2. Detailed Agent Status (May 24, 2026)
24
-
25
- | Agent | Rule Text | Completion Report | Startup Protocol | Consistency | Note | Score |
26
- |------------|-------------|-------------------|-------------------|------------|-----|------|
27
- | **@manager** | Strong | Present | Present | Good | One of the best-performing agents | 8.5 |
28
- | **@frontend** | Very Strong | Clean | Present | Very Good | Most detailed and clean agent | 9.0 |
29
- | **@backend** | Strong | Present | Present | Good | Solid level | 8.0 |
30
- | **@analyst** | Mid-Good | Present | Partial | Medium | Included inside Memory Management | 6.5 |
31
- | **@explorer** | Good | Present | Present | Good | Referenced in Startup Protocol | 7.5 |
32
- | **@git** | Good | Present | None | Good | Newly added, reasonable | 7.0 |
33
- | **@mobile** | Basic | Present | None | Weak | Basic level only | 4.5 |
34
- | **@native** | Basic | Present | None | Weak | Basic level only | 4.5 |
35
-
36
- **Important Note:** The @mobile and @native agents represent the weakest links in this implementation.
37
-
38
- ---
39
-
40
- ## 3. Critical Files Status
41
-
42
- | File | Status | Evaluation |
43
- |-------|-------|---------------|
44
- | **ENDERUN.md** | Strong | Contains the "Zero Tolerance" clause |
45
- | **documentation_ownership.md** | Very Good | Central document is high quality with added examples |
46
- | **enterprise_project_adaptation.md** | Good | Referenced as a general rule |
47
- | **enterprise_frontend_adaptation.md** | Very Good | The most detailed and well-crafted document |
48
- | **enterprise_capabilities_reference.md** | Medium | Mentioned as a reference |
49
- | **@manager.md** | Good | Present in Mandatory References + Startup Protocol |
50
- | **frontend.md** | Very Good | Duplications cleaned up, the most mature agent |
51
- | **backend.md** | Good | Contains Startup Protocol + Completion Report |
52
- | **explorer.md** | Good | Referenced in the Startup Protocol |
53
- | **analyst.md** | Medium | Present only inside Memory Management |
54
-
55
- ---
56
-
57
- ## 4. Remaining Weak and Risky Areas
58
-
59
- ### High-Risk Deficiencies
60
-
61
- 1. **@mobile and @native Agents**
62
- - The rule only exists at a "basic" level. These agents could create significant inconsistencies when deployed on corporate projects.
63
-
64
- 2. **Weakness in Session Startup Protocols**
65
- - The Session Startup Protocols for @analyst, @git, @mobile, and @native agents do not reference this central document.
66
-
67
- 3. **Lack of Real-World Enforcement**
68
- - The rule is strong on paper, but @manager lacks a concrete mechanism to systematically audit this during turns.
69
-
70
- 4. **Missing from "Mandatory References" Lists**
71
- - For several agents, this document is still not officially listed in their "Mandatory References" section.
72
-
73
- ### Medium-Level Risks
74
-
75
- - Some Completion Report items are still written too generally.
76
- - The rule needs a stronger emphasis in "document-heavy" agents like @explorer and @analyst.
77
-
78
- ---
79
-
80
- ## 5. Completed vs. Remaining Work
81
-
82
- ### Completed Tasks (May 24, 2026)
83
-
84
- - Rule added to `ENDERUN.md` (strong version)
85
- - Central document (`documentation_ownership.md`) created and enriched with examples
86
- - Rule text added to all 8 agent definitions
87
- - Control item added to 6 agent Completion Reports
88
- - References added to startup protocols for @manager, @frontend, @backend, and @explorer
89
- - Duplications cleaned up (especially in `frontend.md`)
90
-
91
- ### Remaining High-Priority Work
92
-
93
- | Task | Priority | Difficulty | Owner |
94
- |----|---------|--------|-------|
95
- | Elevate @mobile and @native agents to match other agents | High | Medium | @manager |
96
- | Add references to @analyst, @git, @mobile, and @native Startup Protocols | High | Low | @manager |
97
- | Add to the "Mandatory References" list for all agents | High | Low | @manager |
98
- | Define a real-world enforcement/audit mechanism | High | High | @manager |
99
- | Enrich `documentation_ownership.md` with more examples | Medium | Low | @manager |
100
- | Add rule to the @manager audit checklist | High | Medium | @manager |
101
-
102
- ---
103
-
104
- ## 6. Recommended Next Steps (In Order of Priority)
105
-
106
- 1. **Elevate @mobile and @native agents** to the same level as other agents on this standard (most urgent).
107
- 2. Add references to Session Startup Protocols for the remaining agents.
108
- 3. Integrate this rule into @manager's regular Authority Audit process.
109
- 4. Enrich the `documentation_ownership.md` file with more real-world examples.
110
- 5. Periodically update this report (after each major agent capability upgrade).
111
-
112
- ---
113
-
114
- **Conclusion:**
115
-
116
- The Documentation Ownership rule is now **active in the system** and significantly reinforced. However, to reach **full maturity**, further work is required, particularly regarding the @mobile and @native agents and the establishment of concrete enforcement mechanisms.
117
-
118
- This status report should be used to track whether the rule remains strong in actual practice, not just on paper.
119
-
120
- ---
121
-
122
- **Last Updated:** May 24, 2026 — @manager
@@ -1,149 +0,0 @@
1
- # Agent Enderun — Enterprise / Large-Scale Project Capabilities Reference
2
-
3
- **Version:** v0.6.5+
4
- **Owner:** @manager
5
- **Last Updated:** May 24, 2026
6
- **Status:** ACTIVE
7
- **Related Decision:** D004 — Agent Capability First (May 23, 2026)
8
-
9
- ---
10
-
11
- ## 1. Purpose
12
-
13
- This document defines in a single reference point the current capabilities, mandatory rules, and known limitations of the **Agent Enderun** multi-agent system when operating inside **large-scale, complex, enterprise codebases with legacy software**.
14
-
15
- Objective: Enable any enterprise engineering team (or individual developer) entering the codebase to quickly understand Agent Enderun's realistic strengths and weaknesses.
16
-
17
- ---
18
-
19
- ## 2. Core Philosophy (Non-Negotiable Principle)
20
-
21
- > **"Shape yourself to the user's project."**
22
-
23
- - No agent shall impose its own reference architecture, folder layout, or technology preferences on the user's codebase.
24
- - The agent must first discover the existing system deeply (architecture, design system, team conventions, technical debt).
25
- - It must then adapt its code placements and styling patterns.
26
- - Only then may it propose low-risk, targeted improvements.
27
-
28
- This principle (D004) represents the operational backbone of all agent behaviors as of May 2026.
29
-
30
- ---
31
-
32
- ## 3. Current Live Capabilities (May 2026)
33
-
34
- ### 3.1 Discovery and Adaptation
35
- - **Enterprise Project Discovery Protocol (EPDP)** — Mandatory steps executed before modifying any codebase (root detection, monorepo/polyrepo separation, type contract source of truth, tech stack mapping, domain and team ownership, risk inventory).
36
- - **Enterprise Frontend Adaptation Protocol (EFDP)** — Maps existing UI organization, design system, shared component location, and team processes. Includes a decision matrix for realistic enterprise scenarios (Tailwind, shadcn/ui, MUI, Panda CSS, packages/ui).
37
- - **Architecture Discovery Protocol (ADP)** — Analyzes entry points, domain logic, and API contracts.
38
-
39
- ### 3.2 Management and Control
40
- - **@manager as Single Entry Point** — In enterprise projects, no user request or agent invocation goes directly to a specialist agent. @manager intercepts every turn, assesses risks, and distributes formal briefings.
41
- - **High-Risk Administrative Operations** — Operations involving user/permission management, bulk deletes, system config changes, audit log exports, or payment integrations are blocked without @manager approval + the formal `managerApproval` object.
42
- - **Manager Authority Audit & Enforcement** — A formal checklist and procedure for @manager to audit its own authority and correct specialist agent bypass attempts.
43
-
44
- ### 3.3 Intelligence and Analysis (MCP Tools)
45
- - Codebase semantic search (`search_codebase`)
46
- - Deep dependency analysis and dependency graph generation
47
- - Contract integrity validation (`verify_api_contract`, `verify_contract_integrity`)
48
- - Database schema analysis and Mermaid ER diagram generation
49
- - AST-based security scanning (detecting hardcoded secrets, raw SQL, and unsafe patterns)
50
- - Blueprint-driven construction for reusing high-quality architectural patterns
51
- - Repository health check and semantic git commit generation
52
-
53
- ### 3.4 Inter-Agent Coordination
54
- - **Hermes Messaging Protocol** — Formal messaging structure (timestamp, from/to, category, priority, traceId, content, status).
55
- - 4 messaging categories: ACTION, DELEGATION, INFO, ALERT.
56
- - Message lifecycle: Dispatch → Notification → Acknowledgment.
57
-
58
- ### 3.5 Security, Risk, and Audit
59
- - Mandated Trace ID + audit log entry for every critical operation.
60
- - Automated memory and log updates via `log_agent_action` and `update_project_memory` tools.
61
- - Constitution compliance analysis.
62
- - Mandatory rollback plans for all high-risk administration actions.
63
-
64
- ### 3.6 Memory and Continuity
65
- - `PROJECT_MEMORY.md` — Single Source of Truth (SSOT) structured with CURRENT STATUS, CRITICAL DECISIONS, ACTIVE TASKS, and HISTORY.
66
- - File lock mechanism to prevent race conditions during memory updates.
67
- - Mandatory, audited memory updates at the end of every user session.
68
-
69
- ---
70
-
71
- ## 4. Mandatory Protocols (Enterprise Standards)
72
-
73
- The following protocols are **non-negotiable** in enterprise-scale codebases:
74
-
75
- 1. Enterprise Project Discovery Protocol (EPDP)
76
- 2. Enterprise Frontend Adaptation Protocol (EFDP)
77
- 3. Manager Authority Audit & Enforcement
78
- 4. High-Risk Administrative Action Briefing + `managerApproval` generation
79
- 5. Hermes Protocol (for all inter-agent delegations and communications)
80
- 6. Zero Mock + Contract-First + Branded Types
81
- 7. Framework vs User Project Boundary (agents only modify the user's project, never framework files under `.antigravitycli/` or `framework-mcp/`)
82
-
83
- ---
84
-
85
- ## 5. Agent Maturity Levels (May 24, 2026)
86
-
87
- | Agent | Current | Target | Priority | Status Note |
88
- |------------|--------|--------|-----------|-----------------------------------------|
89
- | @manager | 8.0 | 9.5 | High | Authority Audit system is active |
90
- | @backend | 7.5 | 9.0 | High | Testing culture and resilience patterns are being hardened |
91
- | @frontend | 6.5 | 9.0 | Critical | 8-week Professionalization Program is active |
92
- | @analyst | 6.5 | 8.5 | Medium | Governance audit capabilities are being improved |
93
- | @explorer | 6.5 | 8.5 | Medium | Risk area reporting is mandatory |
94
- | @git | 6.0 | 8.0 | Medium | High-risk commit controls added |
95
- | @mobile | 2.0 | 8.0 | Low | Dormant (basic SOP in place) |
96
- | @native | 2.0 | 8.0 | Low | Dormant (basic SOP in place) |
97
-
98
- ---
99
-
100
- ## 6. Known Limits and Risks (Honest Assessment)
101
-
102
- - **Lack of Reference App** — A full round-trip has not yet been demonstrated in an active production-grade reference app (highest risk).
103
- - **Hermes Live Test Gap** — The protocol is defined on paper, but the 4 mandatory live scenarios have not been run between autonomous agents in production.
104
- - **Academy Performance Data** — Success rate, velocity, and quality metrics are currently simulated.
105
- - **Frontend Professionalization** | Practical experience is limited in complex legacy environments with mixed styling solutions.
106
- - **Long-Term Production Usage** — The system has not yet been proven in corporate codebases over months of active human-AI co-development.
107
-
108
- ---
109
-
110
- ## 7. Recommended Use-Cases in Large Projects
111
-
112
- ### Documentation Ownership (Mandatory Rule)
113
- - Framework rules (e.g., "all notifications must use Toaster") → `.antigravitycli/knowledge/`
114
- - User project documentation (implementation specs, modal details, project styling conventions) → **User project's own `docs/` folder**.
115
- - Agents must write project documentation into the user's `docs/` folder. Writing to `.antigravitycli/` is forbidden.
116
- - Reference rule: `.antigravitycli/knowledge/documentation_ownership.md`
117
-
118
- ### Monorepo & Multi-Team Environments
119
- - @manager remains the single point of entry.
120
- - Domain-based delegation is enforced.
121
- - Separate Trace IDs and briefings are mandatory for each distinct domain.
122
-
123
- ### Legacy & Mixed Tech Stack Projects
124
- - EPDP and EFDP **must** be executed as the very first step.
125
- - The existing design system (Tailwind, MUI, etc.) is accepted. Proposing a new styling solution is allowed only with written @manager approval.
126
-
127
- ### Highly Regulated Environments (KVKK, GDPR, PCI, SOC2)
128
- - All high-risk administrative operations are restricted to @manager + human developer dual-approvals.
129
- - Audit logs are centralized, immutable, and exportable.
130
-
131
- ---
132
-
133
- ## 8. Related Documents (Mandatory Reading)
134
-
135
- - `.antigravitycli/ENDERUN.md` — The Constitution
136
- - `.antigravitycli/PROJECT_MEMORY.md` — Project Memory (SSOT)
137
- - `.antigravitycli/knowledge/enterprise_project_adaptation.md`
138
- - `.antigravitycli/knowledge/enterprise_frontend_adaptation.md`
139
- - `.antigravitycli/knowledge/documentation_ownership.md` (Framework rules vs. user project docs boundary)
140
- - `.antigravitycli/knowledge/manager_authority_audit_enforcement.md`
141
- - `.antigravitycli/knowledge/hermes_protocol.md`
142
- - `docs/action-plan-2026.md`
143
- - `docs/roadmap.md`
144
-
145
- ---
146
-
147
- *Note: This document reflects the realistically proven and enforceable capabilities of Agent Enderun as of May 2026, rather than its theoretical potentials. It will be updated as new milestones (reference app completion, Hermes live tests, long-term corporate usage) are successfully hit.*
148
-
149
- Last Updated: May 24, 2026 — @manager