agent-enderun 1.0.7 → 1.0.9

package/src/cli/commands/init.ts

@@ -10,7 +10,7 @@ import {
     runAdapterPostInit,
     type AdapterConfig,
 } from "../adapters.js";
-import { getPackageManager, mergePackageJson, deepCleanProtocols, sanitizeJson, getPackageVersion } from "../utils/pkg.js";
+import { mergePackageJson, deepCleanProtocols, sanitizeJson, getPackageVersion, getValidatorPath } from "../utils/pkg.js";
 import { updateGitIgnore, ensureDir, writeJsonFile, copyDir, writeTextFile } from "../utils/fs.js";
 import { initializeMemory } from "../utils/memory.js";
 import { checkCommand } from "./check.js";
@@ -55,511 +55,291 @@ const FRAMEWORK_SUBDIRS = [
     "queue/pipelines",
 ];
 
+const allAgents = [
+    {
+        name: "manager",
+        displayName: "Orchestration & Governance (Team-Lead)",
+        description: "CTO, Lead Architect, and Orchestrator for Agent Enderun.",
+        instructions: "You are the manager agent. Orchestrate workspace tasks, manage DAG dependency graphs, handle phase transitions, and enforce architectural standards.\n\n🛑 NON-NEGOTIABLE CORE RULES:\n- Single Point of Authority: You are the sole entry point. No specialist acts without your briefing.\n- Traceability: Every action MUST inherit the active Trace ID.\n- Memory Discipline: MUST update PROJECT_MEMORY.md and log actions at the end of EVERY turn."
+    },
+    {
+        name: "backend",
+        displayName: "Domain Logic & Databases Specialist",
+        description: "Responsible for core business logic, database migrations, security standards, API contracts, and server architecture.",
+        instructions: "You are the backend agent. Build secure, high-performance, and consistent server architecture.\n\n🛑 NON-NEGOTIABLE CORE RULES:\n- No UI: Never implement UI or frontend logic.\n- Contract-First: Define shared contracts/branded types BEFORE any consumer code.\n- Branded Types Law: ALL IDs must use branded types (e.g., UserID). Plain strings are forbidden.\n- Zero Mock Policy: Use real endpoints/contracts only.\n- Surgical Edits: Use replace_text for all code changes."
+    },
+    {
+        name: "frontend",
+        displayName: "Fluid Responsive UI Specialist",
+        description: "Builds responsive fluid user interfaces, manages styling tokens with Panda CSS, and implements state machines.",
+        instructions: "You are the frontend agent. Build original, high-performance, and responsive user interfaces.\n\n🛑 NON-NEGOTIABLE CORE RULES:\n- Responsive-First: Mobile-First (320px) is mandatory. Fixed-width is forbidden.\n- Zero UI Library Policy: No shadcn/ui, MUI, etc. Build everything with Panda CSS.\n- Zero Mock Policy: Use real endpoints/contracts only.\n- Contract-First: Use branded types from apps/backend/src/types.\n- No Native Alerts: Use integrated Toaster/Modal components."
+    },
+    {
+        name: "quality",
+        displayName: "Automated Testing & Quality Specialist",
+        description: "Verifies test coverage, audits compliance with the constitution, conducts AST scanning, and verifies CI/CD status.",
+        instructions: "You are the quality agent. Ensure no code is merged or deployed without meeting standards.\n\n🛑 NON-NEGOTIABLE CORE RULES:\n- Final Gate: No code merges or deploys proceed without quality sign-off.\n- Verification-First: Audit lint, typecheck, contract drift, and branded types before sign-off.\n- Never Implement: Audit and assess only. Never write application features.\n- Zero Mock Policy: Integration tests must use real/service-compatible backends.\n- Coverage Gate: Reject approvals if coverage falls below >80% threshold in core."
+    },
+    {
+        name: "database",
+        displayName: "Database Migrations & Tuning Specialist",
+        description: "Designs SQL schemas, manages migration scripts via Kysely, optimizes queries, indexes, and seeding logic.",
+        instructions: "You are the database agent. Build secure, optimized, and scalable data layers.\n\n🛑 NON-NEGOTIABLE CORE RULES:\n- Self-Contained DB: Every backend application MUST manage its own schema/migrations/seeds in its own src/database/ directory.\n- Contract-First: All schemas MUST be derived from branded types.\n- Kysely Standard: Use Kysely for application queries. Raw SQL is forbidden.\n- Zero Mock Policy: Realistic, contract-aware seed data only.\n- Surgical Edits: Use replace_text for all schema/migration changes."
+    },
+    {
+        name: "devops",
+        displayName: "Infrastructure & CI/CD Specialist",
+        description: "Handles deployment pipelines, environment variables, system containerization, logging & telemetry integrations.",
+        instructions: "You are the devops agent. Ensure reliable execution in every environment with strict quality gates.\n\n🛑 NON-NEGOTIABLE CORE RULES:\n- Gate Approvals: NEVER deploy to production without quality gate approval.\n- No Docker Policy: Prefer native Node.js unless explicitly overridden by manager.\n- Environment Parity: Identical configs across dev/staging/prod (except secrets).\n- Secrets Security: NEVER hardcode secrets. Use environment variables.\n- Rollback First: Deployment is BLOCKED if no documented rollback plan exists."
+    },
+    {
+        name: "explorer",
+        displayName: "Codebase Discovery Specialist",
+        description: "Maps code dependencies, performs project scans, identifies architectural gaps, and supports legacy onboarding.",
+        instructions: "You are the explorer agent. Map project structure and provide deep context to other agents.\n\n🛑 NON-NEGOTIABLE CORE RULES:\n- Read-Only: Never write production code. Only discover, map, and report.\n- Search-First: Always use search_codebase before reading large files.\n- Surgical Discovery: Focus on entry points and core domain logic.\n- Zero Mock Policy: Analyze real system state only.\n- Traceability: All findings must be linked to a Trace ID."
+    },
+    {
+        name: "git",
+        displayName: "Version Control Specialist",
+        description: "Manages commit histories, branches, Trace ID alignment, semantic tagging, and merge conflicts.",
+        instructions: "You are the git agent. Ensure a clean, atomic, and traceable repository history.\n\n🛑 NON-NEGOTIABLE CORE RULES:\n- Trace ID Tagging: EVERY commit must include the active Trace ID in the message.\n- Atomic Integrity: Every commit must represent exactly one logical change.\n- Health-First: Never commit code that fails build or basic tests.\n- No Push: Do not run git push without explicit USER approval.\n- No Force: Never use git push --force on public branches."
+    },
+    {
+        name: "mobile",
+        displayName: "Mobile App Specialist",
+        description: "Develops cross-platform mobile apps using React Native and Expo with clean component states.",
+        instructions: "You are the mobile agent. Build high-performance, responsive mobile apps (React Native/Expo).\n\n🛑 NON-NEGOTIABLE CORE RULES:\n- Zero UI Library: Same discipline as web. Build UI from scratch.\n- Contract-First: Use shared types from apps/backend/src/types.\n- Responsive-First: Mobile-First approach is mandatory.\n- Safe Area: Handle iOS/Android safe area insets on every screen.\n- Performance: Target 60 FPS."
+    },
+    {
+        name: "native",
+        displayName: "Native OS Integration Specialist",
+        description: "Builds lightweight desktop wrappers and system integrations using Tauri or Electron.",
+        instructions: "You are the native agent. Build secure, efficient desktop apps (Tauri/Electron).\n\n🛑 NON-NEGOTIABLE CORE RULES:\n- Security-First: No remote code execution. Mandatory sandboxing and strict CSP.\n- Secure Storage: Use Keychain/Credential Manager for sensitive data.\n- IPC Contract: All communication between frontend and native MUST be typed.\n- Contract-First: Define IPC and data contracts before implementation.\n- Surgical Edits: Use replace_text for all code changes."
+    },
+    {
+        name: "security",
+        displayName: "Security & Cryptography Specialist",
+        description: "Enforces authentication flows, CSP policies, credential rotation, RLS constraints, and cryptographic safety.",
+        instructions: "You are the security agent. Ensure all endpoints, database connections, and authentication flows satisfy strict enterprise compliance policies.\n\n🛑 NON-NEGOTIABLE CORE RULES:\n- Sandboxed Security First: Enforce Row Level Security (RLS) on all database tables.\n- Credential Rotation Policy: Credentials, keys, and tokens must never be hardcoded. Use vault/env variables.\n- CSP & CORS Strictness: Never open wildcards (*) for CORS or CSP policies.\n- Surgical Edits: Use replace_text for all security patches."
+    },
+    {
+        name: "analyst",
+        displayName: "Contract Verification & Business Analyst",
+        description: "Validates business specifications, tests database contract integrity, and audits constitutional compliance.",
+        instructions: "You are the analyst agent. Independently verify compliance with contracts and specifications between frontend, backend, and the constitution.\n\n🛑 NON-NEGOTIABLE CORE RULES:\n- Independent Stance: Act as an objective verification gate.\n- Contract-First Law: Ensure contract.version.json perfectly matches types.\n- Escalation Priority: Report all contract drift to manager immediately.\n- Surgical Edits: Use replace_text for all document updates."
+    }
+];
+
+function scaffoldCoreAgents(agentsBaseDir: string, dryRun: boolean) {
+    ensureDir(agentsBaseDir, dryRun);
+    const agentSchemaDir = path.join(agentsBaseDir, "schema");
+    ensureDir(agentSchemaDir, dryRun);
+
+    const agentArmySchema = {
+        "$schema": "http://json-schema.org/draft-07/schema#",
+        "title": "Agent Lifecycle (AL) Agent Army Schema",
+        "description": "Defines the required fields for an AL-compliant agent definition (e.g. agent.json or agent.md YAML frontmatter).",
+        "type": "object",
+        "required": ["name", "description", "role", "capability", "stateMachine", "tags"],
+        "properties": {
+            "name": { "type": "string" },
+            "description": { "type": "string" },
+            "role": { "type": "string" },
+            "capability": { "type": "integer", "minimum": 1, "maximum": 10 },
+            "stateMachine": {
+                "type": "object",
+                "required": ["schemaRef"],
+                "properties": { "schemaRef": { "type": "string" } }
+            },
+            "tags": { "type": "array", "items": { "type": "string" }, "minItems": 1 },
+            "permittedTools": { "type": "array", "items": { "type": "string" } },
+            "hidden": { "type": "boolean" },
+            "displayName": { "type": "string" },
+            "customAgentSpec": {
+                "type": "object",
+                "properties": {
+                    "customAgent": {
+                        "type": "object",
+                        "properties": {
+                            "systemPromptSections": {
+                                "type": "array",
+                                "items": {
+                                    "type": "object",
+                                    "properties": { "title": { "type": "string" }, "content": { "type": "string" } },
+                                    "required": ["title", "content"]
+                                }
+                            },
+                            "toolNames": { "type": "array", "items": { "type": "string" } }
+                        },
+                        "required": ["systemPromptSections", "toolNames"]
+                    }
+                },
+                "required": ["customAgent"]
+            }
+        }
+    };
+    writeJsonFile(path.join(agentsBaseDir, "agent_army_schema.json"), agentArmySchema, dryRun);
+
+    const agentLifecycleSchema = {
+        "$schema": "http://json-schema.org/draft-07/schema#",
+        "title": "Agent Lifecycle State Machine Schema",
+        "type": "object",
+        "required": ["initialState", "states"],
+        "properties": {
+            "initialState": { "type": "string" },
+            "states": {
+                "type": "object",
+                "patternProperties": {
+                    "^[a-zA-Z0-9_]+$": {
+                        "type": "object",
+                        "properties": {
+                            "on": { "type": "object", "patternProperties": { "^[a-zA-Z0-9_]+$": { "type": "string" } } },
+                            "actions": { "type": "array", "items": { "type": "string" } }
+                        },
+                        "required": ["on"]
+                    }
+                }
+            }
+        }
+    };
+    writeJsonFile(path.join(agentSchemaDir, "agent-lifecycle-schema.json"), agentLifecycleSchema, dryRun);
+
+    for (const ag of allAgents) {
+        const payload = {
+            name: ag.name,
+            displayName: ag.displayName,
+            description: ag.description,
+            role: ag.displayName.split(" (")[0],
+            capability: 9,
+            hidden: false,
+            stateMachine: { schemaRef: "../schema/agent-lifecycle-schema.json" },
+            tags: ["core"],
+            customAgentSpec: {
+                customAgent: {
+                    systemPromptSections: [{ title: "Instructions", content: ag.instructions }],
+                    toolNames: ["view_file", "replace_file_content", "write_to_file", "run_command", "grep_search", "list_dir"]
+                }
+            }
+        };
+        writeJsonFile(path.join(agentsBaseDir, `${ag.name}.json`), payload, dryRun);
+    }
+    console.warn(`✅ Scaffolding ${allAgents.length} core agents under ${path.relative(targetDir, agentsBaseDir)}/...`);
+}
+
 function buildDirsToCreate(adapter: AdapterConfig): string[] {
     const dirs = [
         adapter.frameworkDir,
         ...FRAMEWORK_SUBDIRS.map((d) => `${adapter.frameworkDir}/${d}`),
-        "apps/web",
-        "apps/backend",
-        "docs",
-        "framework-mcp",
-        "tests",
+        "apps/web", "apps/backend", "docs", "framework-mcp", "tests",
     ];
     if (adapter.nestedDirs) {
-        for (const nested of adapter.nestedDirs) {
-            dirs.push(`${adapter.frameworkDir}/${nested}`);
-        }
-    }
-    // Add logic for shimFile directory if it's nested (like .cursor/rules/)
-    if (adapter.shimFile.includes("/")) {
-        dirs.push(path.dirname(adapter.shimFile));
+        for (const nested of adapter.nestedDirs) dirs.push(`${adapter.frameworkDir}/${nested}`);
     }
+    if (adapter.shimFile.includes("/")) dirs.push(path.dirname(adapter.shimFile));
     return [...new Set(dirs)];
 }
 
-/**
- * Scaffold the framework for a specific IDE adapter (separate runtime folder per IDE).
- */
 export async function initCommand(adapterInput?: string, dryRun = false) {
     const adapter = resolveAdapter(adapterInput);
     const { frameworkDir, shimFile, templateDir } = adapter;
     const targetFrameworkDir = path.join(targetDir, frameworkDir);
 
-    if (dryRun) {
-        console.warn("\n🔍 DRY RUN MODE ACTIVE - No changes will be made to the filesystem.\n");
-    }
-
+    if (dryRun) console.warn("\n🔍 DRY RUN MODE ACTIVE\n");
     console.warn(`🚀 Installing Agent Enderun (Adapter: ${adapter.id} → ${frameworkDir}/)...`);
 
     ensureDir(targetFrameworkDir, dryRun);
+    for (const dir of buildDirsToCreate(adapter)) ensureDir(path.join(targetDir, dir), dryRun);
 
-    for (const dir of buildDirsToCreate(adapter)) {
-        ensureDir(path.join(targetDir, dir), dryRun);
-    }
-
-    const filesToProcess = [
-        ...CORE_FILES,
-        shimFile,
-    ].filter(
-        (f) =>
-            CORE_FILES.includes(f) ||
-      f === shimFile ||
-      fs.existsSync(path.join(sourceDir, f)),
-    );
+    const filesToProcess = [...CORE_FILES, shimFile].filter(f => CORE_FILES.includes(f) || f === shimFile || fs.existsSync(path.join(sourceDir, f)));
 
     ensureDir(path.join(targetDir, "apps/backend"), dryRun);
     const initContractPath = path.join(targetDir, "apps/backend/contract.version.json");
     if (!fs.existsSync(initContractPath)) {
-        writeJsonFile(initContractPath, {
-            contract_hash: "initial_hash_placeholder",
-            last_updated: new Date().toISOString(),
-        }, dryRun);
+        writeJsonFile(initContractPath, { contract_hash: "initial_hash_placeholder", last_updated: new Date().toISOString() }, dryRun);
     }
 
     let targetPkg: Record<string, unknown> = {};
     try {
         const targetPkgPath = path.join(targetDir, "package.json");
-        if (fs.existsSync(targetPkgPath)) {
-            targetPkg = JSON.parse(fs.readFileSync(targetPkgPath, "utf8"));
-        }
-    } catch {
-    // ignore
-    }
+        if (fs.existsSync(targetPkgPath)) targetPkg = JSON.parse(fs.readFileSync(targetPkgPath, "utf8"));
+    } catch { /* ignore */ }
 
     const pkgName = typeof targetPkg.name === "string" ? targetPkg.name : "";
-    const targetScope = pkgName
-        ? pkgName.startsWith("@")
-            ? pkgName.split("/")[0]
-            : `@${pkgName}`
-        : `@${path.basename(targetDir)}`;
+    const targetScope = pkgName ? (pkgName.startsWith("@") ? pkgName.split("/")[0] : `@${pkgName}`) : `@${path.basename(targetDir)}`;
 
     for (const item of filesToProcess) {
         const src = path.join(sourceDir, item);
         let dest = path.join(targetDir, item);
-
-        // Safeguard: Do not delete or overwrite if we are in the framework's own development directory
         const isDevMode = src === dest;
 
         if (item === "framework-mcp" && fs.existsSync(dest) && !isDevMode) {
-            try {
-                if (dryRun) {
-                    console.warn(`[DRY RUN] Would remove existing directory: ${dest}`);
-                } else {
-                    fs.rmSync(dest, { recursive: true, force: true });
-                }
-            } catch {
-                // ignore
-            }
+            if (!dryRun) fs.rmSync(dest, { recursive: true, force: true });
         }
 
         if (item === templateDir || item.startsWith(`${templateDir}/`)) {
             let relativePath = item.replace(templateDir, "").replace(/^\//, "");
-            
-            // Adapter-specific agent/skill folder remapping
             if (relativePath.startsWith("agents")) {
-                if (adapter.id === "antigravity") {
-                    relativePath = relativePath.replace("agents", "skills");
-                } else if (adapter.id === "grok") {
-                    relativePath = relativePath.replace("agents", "plugins");
-                }
-            } else if (relativePath.startsWith("knowledge")) {
-                if (adapter.id === "antigravity") {
-                    relativePath = relativePath.replace("knowledge", "rules");
-                }
+                if (adapter.id === "antigravity") relativePath = relativePath.replace("agents", "skills");
+                else if (adapter.id === "grok") relativePath = relativePath.replace("agents", "plugins");
+            } else if (relativePath.startsWith("knowledge") && adapter.id === "antigravity") {
+                relativePath = relativePath.replace("knowledge", "rules");
             }
-
             dest = path.join(targetDir, frameworkDir, relativePath);
         }
-        
-        // Skip if src and dest are same and it's not a shim or specific file that needs re-mapping
-        if (isDevMode && !isAdapterShimFile(item) && item !== "package.json") {
-            continue;
-        }
-        if (item === "ENDERUN.md") {
-            dest = path.join(targetFrameworkDir, "ENDERUN.md");
-        }
-        if (isAdapterShimFile(item)) {
-            dest = path.join(targetDir, item);
-        }
 
-        if (!fs.existsSync(src)) {
-            continue;
-        }
+        if (isDevMode && !isAdapterShimFile(item) && item !== "package.json") continue;
+        if (item === "ENDERUN.md") dest = path.join(targetFrameworkDir, "ENDERUN.md");
+        if (isAdapterShimFile(item)) dest = path.join(targetDir, item);
 
-        if (fs.lstatSync(src).isDirectory()) {
-            const skipFiles =
-        item === templateDir ? ["logs", "PROJECT_MEMORY.md", "PROJECT_MEMORY.lock"] : [];
-            const nonDestructive = ["docs", templateDir].includes(item);
+        if (!fs.existsSync(src)) continue;
 
-            if (item === templateDir) {
-                // the destination path (dest) is already mapped correctly above.
-            }
-
-            copyDir(
-                src,
-                dest,
-                new Set(skipFiles),
-                nonDestructive,
-                frameworkDir,
-                targetScope,
-                sanitizeJson,
-                adapter.id,
-                dryRun,
-            );
-
-            if (item === templateDir && adapter.id === "grok") {
-                const grokAgentsDest = path.join(targetDir, frameworkDir, "agents");
-                ensureDir(grokAgentsDest, dryRun);
-                copyDir(
-                    path.join(src, "agents"),
-                    grokAgentsDest,
-                    new Set(skipFiles),
-                    nonDestructive,
-                    frameworkDir,
-                    targetScope,
-                    sanitizeJson,
-                    adapter.id,
-                    dryRun,
-                );
-            }
+        if (fs.lstatSync(src).isDirectory()) {
+            const skipFiles = item === templateDir ? ["logs", "PROJECT_MEMORY.md", "PROJECT_MEMORY.lock"] : [];
+            copyDir(src, dest, new Set(skipFiles), ["docs", templateDir].includes(item), frameworkDir, targetScope, sanitizeJson, adapter.id, dryRun);
         } else {
             if (item === "package.json") continue;
-
-            if (fs.existsSync(dest) && !isAdapterShimFile(item)) {
-                console.warn(`ℹ️  Skipping existing file: ${item}`);
-                continue;
-            }
+            if (fs.existsSync(dest) && !isAdapterShimFile(item)) continue;
 
             const ext = path.extname(item);
-            const textExtensions = [".md", ".json", ".js", ".ts", ".txt", ""];
-            if (textExtensions.includes(ext)) {
+            if ([".md", ".json", ".js", ".ts", ".txt", ""].includes(ext)) {
                 let content = fs.readFileSync(src, "utf8");
                 content = remapFrameworkContent(content, frameworkDir, adapter.id);
-
                 if (ext === ".json") {
                     try {
                         const json = JSON.parse(content);
                         content = JSON.stringify(sanitizeJson(json, targetScope), null, 2);
                         content = remapFrameworkContent(content, frameworkDir, adapter.id);
-                    } catch {
-                        content = content.replace(/workspace:[^"'\s]*/g, "*");
-                    }
+                    } catch { content = content.replace(/workspace:[^"'\s]*/g, "*"); }
                 }
-
                 writeTextFile(dest, content, dryRun);
-            } else {
-                if (dryRun) {
-                    console.warn(`[DRY RUN] Would copy binary file: ${dest}`);
-                } else {
-                    fs.copyFileSync(src, dest);
-                }
+            } else if (!dryRun) {
+                fs.copyFileSync(src, dest);
             }
         }
-        console.warn(`✅ ${item} processed -> ${path.relative(targetDir, dest)}`);
     }
 
-    if (!dryRun) {
-        mergePackageJson(path.join(targetDir, "package.json"), path.join(sourceDir, "package.json"));
-    } else {
-        console.warn("[DRY RUN] Would merge package.json content.");
-    }
-    
+    if (!dryRun) mergePackageJson(path.join(targetDir, "package.json"), path.join(sourceDir, "package.json"));
     updateGitIgnore(path.join(targetDir, ".gitignore"), frameworkDir, dryRun);
+    initializeMemory(path.join(targetFrameworkDir, "memory/PROJECT_MEMORY.md"), frameworkDir, dryRun);
+    if (!dryRun) deepCleanProtocols(targetDir, targetScope);
 
-    const finalMemoryPath = path.join(targetFrameworkDir, "memory/PROJECT_MEMORY.md");
-    initializeMemory(finalMemoryPath, frameworkDir, dryRun);
+    // Scaffold core agents under the central framework directory
+    scaffoldCoreAgents(path.join(targetFrameworkDir, "agents"), dryRun);
 
-    if (!dryRun) {
-        deepCleanProtocols(targetDir, targetScope);
-    } else {
-        console.warn("[DRY RUN] Would clean specific workspace protocols.");
-    }
-
-    const sampleTestPath = path.join(targetDir, "tests/initial.test.ts");
-    if (!fs.existsSync(sampleTestPath)) {
-        writeTextFile(
-            sampleTestPath,
-            `import { describe, it, expect } from "vitest";
-
-describe("Initial Setup", () => {
-  it("should verify the testing environment is active", () => {
-    expect(true).toBe(true);
-  });
-});
-`,
-            dryRun,
-        );
-    }
-
-    const cursorRulesPath = path.join(targetDir, ".cursorrules");
-    if (!fs.existsSync(cursorRulesPath)) {
-        writeTextFile(
-            cursorRulesPath,
-            `# Agent Enderun — Cursor IDE Rules
-
-This is the primary entry point when using Agent Enderun within the Cursor IDE (Chat & Composer).
-
-The framework operates under a unified governance structure located in the ${frameworkDir}/ directory.
-
-### Primary Constitution
-All governance rules, agent checklists, and project memory live here:
-
-👉 **[${frameworkDir}/ENDERUN.md](${frameworkDir}/ENDERUN.md)**
-
-### 🤖 Agent Directive
-You are operating under the Agent Enderun governance framework.
-
-At the **start of every session**, before any work:
-1. **Restore Memory:** Read ${frameworkDir}/PROJECT_MEMORY.md to restore state, active Trace ID, and history.
-2. **Load Identity:** Read the relevant agent definition under ${frameworkDir}/agents/{agent}.md (default to @manager).
-3. **Internalize Knowledge:** Reference the ${frameworkDir}/knowledge/ base for architectural and coding standards.
-
-### 💾 Memory Tiers
-- **Project Memory (Shared):** ${frameworkDir}/PROJECT_MEMORY.md is the source of truth for task history, Trace IDs, and architectural decisions. **Update this at the end of every turn.**
-- **Private Memory (User-Specific):** Use the local .gitignored memory directory (e.g. ${frameworkDir}/memory/) for personal workflows or user-specific notes that should not be committed to Git. Never use the system's /tmp directory.
-- **Project Instructions:** This .cursorrules file contains the "Supreme Law" and coding standards.
-
-### 🛡️ Core Mandates
-- **Surgical Edits:** Use replace_text or patch_file via MCP for precise changes.
-- **Traceability:** Every action must inherit the active Trace ID from memory.
-- **Contract First:** No implementation without verified types.
-- **NEVER FORGET:** @manager MUST update ${frameworkDir}/PROJECT_MEMORY.md at the end of EVERY session without exception. This is a non-negotiable process integrity rule.
-
-All paths and references inside the project must comply with the Supreme Constitution located at ${frameworkDir}/ENDERUN.md`.trim() + "\n",
-            dryRun,
-        );
-    }
-
-    if (!fs.existsSync(path.join(targetDir, ".git"))) {
-        try {
-            if (dryRun) {
-                console.warn("[DRY RUN] Would initialize git repository.");
-            } else {
-                execSync("git init", { cwd: targetDir, stdio: "ignore" });
-                console.warn("✅ Git repository initialized.");
-            }
-        } catch {
-            // ignore
-        }
+    if (!fs.existsSync(path.join(targetDir, ".git")) && !dryRun) {
+        try { execSync("git init", { cwd: targetDir, stdio: "ignore" }); } catch { /* ignore */ }
     }
 
     console.warn(`\n🛠️  Running ${adapter.id} adapter configuration...`);
-    if (!dryRun) {
-        runAdapterPostInit(adapter, targetDir);
-    } else {
-        console.warn(`[DRY RUN] Would run post-init steps for ${adapter.id}`);
-    }
-
-    // Always scaffold Antigravity (.agents/) workspace directory for cross-compatibility with agy CLI
-    if (adapter.id === "antigravity" || adapter.id === "antigravity-cli" || adapter.id === "gemini") {
-        const agentsFrameworkDir = path.join(targetDir, ".agents");
-        if (!dryRun) {
-            try {
-                fs.mkdirSync(agentsFrameworkDir, { recursive: true });
-                const agentsSubdir = path.join(agentsFrameworkDir, "agents");
-                fs.mkdirSync(agentsSubdir, { recursive: true });
-
-                // Create other standard Antigravity directories for custom workspace customizations
-                fs.mkdirSync(path.join(agentsFrameworkDir, "skills"), { recursive: true });
-                fs.mkdirSync(path.join(agentsFrameworkDir, "rules"), { recursive: true });
-                fs.mkdirSync(path.join(agentsFrameworkDir, "workflows"), { recursive: true });
-
-                // Write workspace-specific MCP config
-                const mcpBlock = {
-                    mcpServers: {
-                        "agent-enderun": {
-                            command: "node",
-                            args: [path.join(targetDir, "framework-mcp/dist/index.js")],
-                            env: {
-                                "ENDERUN_PROJECT_ROOT": targetDir
-                            }
-                        }
-                    }
-                };
-                fs.writeFileSync(
-                    path.join(agentsFrameworkDir, "mcp_config.json"),
-                    JSON.stringify(mcpBlock, null, 2),
-                    "utf8"
-                );
-
-                // Write AGENTS.md at the project root for prepended global rules
-                const agentsMdPath = path.join(targetDir, "AGENTS.md");
-                if (!fs.existsSync(agentsMdPath)) {
-                    fs.writeFileSync(
-                        agentsMdPath,
-                        `# Agent Enderun Workspace Instructions
-
-You are operating under the Agent Enderun AI governance and orchestration framework.
-
-### 🛡️ Critical Guidelines
-1. **Traceability First:** Every action or execution MUST inherit the active Trace ID from \`${frameworkDir}/PROJECT_MEMORY.md\`.
-2. **Surgical Operations:** Use precise file replacements or patches. NEVER rewrite entire source files unnecessarily.
-3. **Contract-First Design:** Backend models and type contracts must be locked and verified before frontend components are created.
-4. **Memory Synchronization:** All agent runs must update the project memory logs before concluding the session.
-
-All rules and constraints defined in \`${frameworkDir}/ENDERUN.md\` are strictly binding.
-`.trim() + "\n",
-                        "utf8"
-                    );
-                }
-            
-                // Write the 12 agent folders and agent.json files
-                const allAgents = [
-                    {
-                        name: "manager",
-                        displayName: "Orchestration & Governance (Team-Lead)",
-                        description: "CTO, Lead Architect, and Orchestrator for Agent Enderun.",
-                        instructions: "You are the manager agent. Orchestrate workspace tasks, manage DAG dependency graphs, handle phase transitions, and enforce architectural standards.\n\n🛑 NON-NEGOTIABLE CORE RULES:\n- Single Point of Authority: You are the sole entry point. No specialist acts without your briefing.\n- Traceability: Every action MUST inherit the active Trace ID.\n- Memory Discipline: MUST update PROJECT_MEMORY.md and log actions at the end of EVERY turn."
-                    },
-                    {
-                        name: "backend",
-                        displayName: "Domain Logic & Databases Specialist",
-                        description: "Responsible for core business logic, database migrations, security standards, API contracts, and server architecture.",
-                        instructions: "You are the backend agent. Build secure, high-performance, and consistent server architecture.\n\n🛑 NON-NEGOTIABLE CORE RULES:\n- No UI: Never implement UI or frontend logic.\n- Contract-First: Define shared contracts/branded types BEFORE any consumer code.\n- Branded Types Law: ALL IDs must use branded types (e.g., UserID). Plain strings are forbidden.\n- Zero Mock Policy: Use real endpoints/contracts only.\n- Surgical Edits: Use replace_text for all code changes."
-                    },
-                    {
-                        name: "frontend",
-                        displayName: "Fluid Responsive UI Specialist",
-                        description: "Builds responsive fluid user interfaces, manages styling tokens with Panda CSS, and implements state machines.",
-                        instructions: "You are the frontend agent. Build original, high-performance, and responsive user interfaces.\n\n🛑 NON-NEGOTIABLE CORE RULES:\n- Responsive-First: Mobile-First (320px) is mandatory. Fixed-width is forbidden.\n- Zero UI Library Policy: No shadcn/ui, MUI, etc. Build everything with Panda CSS.\n- Zero Mock Policy: Use real endpoints/contracts only.\n- Contract-First: Use branded types from apps/backend/src/types.\n- No Native Alerts: Use integrated Toaster/Modal components."
-                    },
-                    {
-                        name: "quality",
-                        displayName: "Automated Testing & Quality Specialist",
-                        description: "Verifies test coverage, audits compliance with the constitution, conducts AST scanning, and verifies CI/CD status.",
-                        instructions: "You are the quality agent. Ensure no code is merged or deployed without meeting standards.\n\n🛑 NON-NEGOTIABLE CORE RULES:\n- Final Gate: No code merges or deploys proceed without quality sign-off.\n- Verification-First: Audit lint, typecheck, contract drift, and branded types before sign-off.\n- Never Implement: Audit and assess only. Never write application features.\n- Zero Mock Policy: Integration tests must use real/service-compatible backends.\n- Coverage Gate: Reject approvals if coverage falls below >80% threshold in core."
-                    },
-                    {
-                        name: "database",
-                        displayName: "Database Migrations & Tuning Specialist",
-                        description: "Designs SQL schemas, manages migration scripts via Kysely, optimizes queries, indexes, and seeding logic.",
-                        instructions: "You are the database agent. Build secure, optimized, and scalable data layers.\n\n🛑 NON-NEGOTIABLE CORE RULES:\n- Self-Contained DB: Every backend application MUST manage its own schema/migrations/seeds in its own src/database/ directory.\n- Contract-First: All schemas MUST be derived from branded types.\n- Kysely Standard: Use Kysely for application queries. Raw SQL is forbidden.\n- Zero Mock Policy: Realistic, contract-aware seed data only.\n- Surgical Edits: Use replace_text for all schema/migration changes."
-                    },
-                    {
-                        name: "devops",
-                        displayName: "Infrastructure & CI/CD Specialist",
-                        description: "Handles deployment pipelines, environment variables, system containerization, logging & telemetry integrations.",
-                        instructions: "You are the devops agent. Ensure reliable execution in every environment with strict quality gates.\n\n🛑 NON-NEGOTIABLE CORE RULES:\n- Gate Approvals: NEVER deploy to production without quality gate approval.\n- No Docker Policy: Prefer native Node.js unless explicitly overridden by manager.\n- Environment Parity: Identical configs across dev/staging/prod (except secrets).\n- Secrets Security: NEVER hardcode secrets. Use environment variables.\n- Rollback First: Deployment is BLOCKED if no documented rollback plan exists."
-                    },
-                    {
-                        name: "explorer",
-                        displayName: "Codebase Discovery Specialist",
-                        description: "Maps code dependencies, performs project scans, identifies architectural gaps, and supports legacy onboarding.",
-                        instructions: "You are the explorer agent. Map project structure and provide deep context to other agents.\n\n🛑 NON-NEGOTIABLE CORE RULES:\n- Read-Only: Never write production code. Only discover, map, and report.\n- Search-First: Always use search_codebase before reading large files.\n- Surgical Discovery: Focus on entry points and core domain logic.\n- Zero Mock Policy: Analyze real system state only.\n- Traceability: All findings must be linked to a Trace ID."
-                    },
-                    {
-                        name: "git",
-                        displayName: "Version Control Specialist",
-                        description: "Manages commit histories, branches, Trace ID alignment, semantic tagging, and merge conflicts.",
-                        instructions: "You are the git agent. Ensure a clean, atomic, and traceable repository history.\n\n🛑 NON-NEGOTIABLE CORE RULES:\n- Trace ID Tagging: EVERY commit must include the active Trace ID in the message.\n- Atomic Integrity: Every commit must represent exactly one logical change.\n- Health-First: Never commit code that fails build or basic tests.\n- No Push: Do not run git push without explicit USER approval.\n- No Force: Never use git push --force on public branches."
-                    },
-                    {
-                        name: "mobile",
-                        displayName: "Mobile App Specialist",
-                        description: "Develops cross-platform mobile apps using React Native and Expo with clean component states.",
-                        instructions: "You are the mobile agent. Build high-performance, responsive mobile apps (React Native/Expo).\n\n🛑 NON-NEGOTIABLE CORE RULES:\n- Zero UI Library: Same discipline as web. Build UI from scratch.\n- Contract-First: Use shared types from apps/backend/src/types.\n- Responsive-First: Mobile-First approach is mandatory.\n- Safe Area: Handle iOS/Android safe area insets on every screen.\n- Performance: Target 60 FPS."
-                    },
-                    {
-                        name: "native",
-                        displayName: "Native OS Integration Specialist",
-                        description: "Builds lightweight desktop wrappers and system integrations using Tauri or Electron.",
-                        instructions: "You are the native agent. Build secure, efficient desktop apps (Tauri/Electron).\n\n🛑 NON-NEGOTIABLE CORE RULES:\n- Security-First: No remote code execution. Mandatory sandboxing and strict CSP.\n- Secure Storage: Use Keychain/Credential Manager for sensitive data.\n- IPC Contract: All communication between frontend and native MUST be typed.\n- Contract-First: Define IPC and data contracts before implementation.\n- Surgical Edits: Use replace_text for all code changes."
-                    },
-                    {
-                        name: "security",
-                        displayName: "Security & Cryptography Specialist",
-                        description: "Enforces authentication flows, CSP policies, credential rotation, RLS constraints, and cryptographic safety.",
-                        instructions: "You are the security agent. Ensure all endpoints, database connections, and authentication flows satisfy strict enterprise compliance policies.\n\n🛑 NON-NEGOTIABLE CORE RULES:\n- Sandboxed Security First: Enforce Row Level Security (RLS) on all database tables.\n- Credential Rotation Policy: Credentials, keys, and tokens must never be hardcoded. Use vault/env variables.\n- CSP & CORS Strictness: Never open wildcards (*) for CORS or CSP policies.\n- Surgical Edits: Use replace_text for all security patches."
-                    },
-                    {
-                        name: "analyst",
-                        displayName: "Contract Verification & Business Analyst",
-                        description: "Validates business specifications, tests database contract integrity, and audits constitutional compliance.",
-                        instructions: "You are the analyst agent. Independently verify compliance with contracts and specifications between frontend, backend, and the constitution.\n\n🛑 NON-NEGOTIABLE CORE RULES:\n- Independent Stance: Act as an objective verification gate.\n- Contract-First Law: Ensure contract.version.json perfectly matches types.\n- Escalation Priority: Report all contract drift to manager immediately.\n- Surgical Edits: Use replace_text for all document updates."
-                    }
-                ];
-
-                for (const ag of allAgents) {
-                    const agentDir = path.join(agentsSubdir, ag.name);
-                    fs.mkdirSync(agentDir, { recursive: true });
-                
-                    const payload = {
-                        name: ag.name,
-                        displayName: ag.displayName,
-                        description: ag.description,
-                        hidden: false,
-                        customAgentSpec: {
-                            customAgent: {
-                                systemPromptSections: [
-                                    {
-                                        title: "Instructions",
-                                        content: ag.instructions
-                                    }
-                                ],
-                                toolNames: [
-                                    "view_file",
-                                    "replace_file_content",
-                                    "write_to_file",
-                                    "run_command",
-                                    "grep_search",
-                                    "list_dir"
-                                ]
-                            }
-                        }
-                    };
-                
-                    fs.writeFileSync(
-                        path.join(agentDir, "agent.json"),
-                        JSON.stringify(payload, null, 2),
-                        "utf8"
-                    );
-                }
-                console.warn(`✅ Scaffolding ${allAgents.length} Antigravity agents under .agents/agents/...`);
-            } catch {
-            // fallback
-            }
-        }
-    }
-
-    console.warn(`\n♊ ${adapter.id.toUpperCase()}: Setup complete.`);
-    console.warn(`   • Framework runtime: ${frameworkDir}/`);
-    console.warn(`   • Entrypoint shim: ${shimFile}`);
-    if (adapter.nestedDirs?.length) {
-        console.warn(`   • Nested: ${adapter.nestedDirs.map((d) => `${frameworkDir}/${d}/`).join(", ")}`);
-    }
-
-    const pkgMgr = getPackageManager();
-    const installCmd = pkgMgr === "npm" ? "npm install" : `${pkgMgr} install`;
-    const buildCmd = pkgMgr === "npm" ? "npm run enderun:build" : `${pkgMgr} run enderun:build`;
+    if (!dryRun) runAdapterPostInit(adapter, targetDir);
 
     console.warn(`\n✨ Framework scaffolded! (v${FRAMEWORK_VERSION})`);
-    console.warn("\n🛡️  AL (Agent Lifecycle) Note: Your init is now configured for full army compliance.");
-    console.warn("   Run `agent-enderun check` (or the validate script) to confirm all agents have proper stateMachine + tags.");
-
-    if (dryRun || process.env.ENDERUN_SKIP_INSTALL === "1") {
-        console.warn(`\n⏭️  Skipping install steps (${dryRun ? "Dry-Run" : "ENDERUN_SKIP_INSTALL=1"}).`);
-        return;
-    }
-
-    try {
-        console.warn("\n🔍 Step 3/3: Running 'agent-enderun check' (includes AL validation)...");
-        checkCommand();
-
-        // Automatic dedicated AL (Agent Lifecycle) check after init
-        console.warn("\n🛡️  Automatic post-init AL Army Validation (validate-agent-army)...");
+    if (!dryRun && process.env.ENDERUN_SKIP_INSTALL !== "1") {
         try {
-          execSync("node bin/validate-agent-army.js", { stdio: "inherit" });
-          console.warn("✅ Automatic AL validation PASSED - all agents are lifecycle compliant (stateMachine + tags)!");
-        } catch (alErr) {
-          console.warn("⚠️  Automatic AL validation reported issues (see above in check output).");
-          console.warn("   You can re-run manually: node bin/validate-agent-army.js or agent-enderun check");
-        }
-
-        console.warn("\n🚀 Agent Enderun is fully installed and verified!");
-    } catch (e: unknown) {
-        const message = e instanceof Error ? e.message : String(e);
-        console.error("\n❌ Automatic installation failed. Run manually:");
-        console.warn(`👉 ${installCmd} && ${buildCmd}`);
-        console.error(message);
+            console.warn("\n🔍 Running health check...");
+            checkCommand();
+            const validatorPath = getValidatorPath();
+            execSync(`node "${validatorPath}"`, { stdio: "inherit" });
+        } catch { /* ignore validation report */ }
     }
 }