agent-enderun 1.10.4 → 1.11.1

package/src/modules/agents/definitions.ts

@@ -1,12 +1,24 @@
 // ─────────────────────────────────────────────────────────────────────────────
 //  Enderun Army — Agent Registry
 //  Enderun Order v2 · Structured AgentDefinition schema
+//
+//  VALID FRONTMATTER FIELDS per platform:
+//  ┌───────────────┬────────────────────────────────────────────────────────────┐
+//  │ gemini-cli    │ name, description, model, tools (YAML list)                │
+//  │ claude-code   │ name, description, model, tools (inline array), color      │
+//  │ cursor        │ description, globs, alwaysApply                            │
+//  │ codex-cli     │ agent-type, display-name, when-to-use, model, allowed-tools│
+//  │ antigravity   │ JSON — customAgentSpec schema                              │
+//  └───────────────┴────────────────────────────────────────────────────────────┘
+//  Custom fields (capability, tags, tier) are Enderun-internal metadata and
+//  must NOT appear in any platform frontmatter.
 // ─────────────────────────────────────────────────────────────────────────────
 
 import fs from "fs";
 import path from "path";
 import { AgentDefinition } from "./types.js";
 import { getPackageRoot } from "../../cli/utils/pkg.js";
+import { CURSOR_AGENT_GLOBS } from "../../shared/constants.js";
 
 // Import individual agent definitions
 import { manager } from "./registry/manager.js";
@@ -40,15 +52,13 @@ export const ALL_AGENTS: AgentDefinition[] = [
 ];
 
 // ─────────────────────────────────────────────────────────────────────────────
-//  Multi-Platform Agent Exporter
-//  Supported targets:
-//    claude-code  → .claude/agents/{name}.md   (YAML frontmatter + system prompt)
-//    gemini-cli   → .gemini/agents/{name}.md   (same format, Gemini field names)
-//    antigravity  → .agents/{name}/agent.json  (JSON, customAgent schema)
-//    codex-cli    → .agents/{name}.md          (YAML frontmatter, AGENTS.md style)
+//  Tool Maps — Internal tool names → platform-native tool identifiers
 // ─────────────────────────────────────────────────────────────────────────────
 
-/** Map our internal tool names → Claude Code's built-in tool identifiers */
+/**
+ * Claude Code built-in tool names (case-sensitive).
+ * Reference: https://docs.anthropic.com/en/docs/claude-code/sub-agents
+ */
 const CLAUDE_TOOL_MAP: Record<string, string> = {
     read_file:             "Read",
     write_file:            "Write",
@@ -62,7 +72,6 @@ const CLAUDE_TOOL_MAP: Record<string, string> = {
     run_tests:             "Bash",
     log_agent_action:      "Write",
     send_agent_message:    "Task",
-    // Enderun-custom tools pass through as-is (MCP or custom tools)
     orchestrate_loop:      "Task",
     get_project_map:       "Bash",
     get_project_gaps:      "Bash",
@@ -75,17 +84,24 @@ const CLAUDE_TOOL_MAP: Record<string, string> = {
     check_active_ports:    "Bash",
     start_dashboard:       "Bash",
     update_contract_hash:  "Write",
+    acquire_lock:          "Write",
+    release_lock:          "Write",
+    register_agent:        "Write",
+    check_lint:            "Bash",
 };
 
-/** Map our internal tool names → Gemini CLI tool identifiers */
+/**
+ * Gemini CLI built-in tool names.
+ * Reference: https://ai.google.dev/gemini-api/docs/function-calling
+ */
 const GEMINI_TOOL_MAP: Record<string, string> = {
     read_file:             "read_file",
     write_file:            "write_file",
-    replace_text:          "replace",
-    batch_surgical_edit:   "replace",
-    patch_file:            "replace",
+    replace_text:          "replace_in_file",
+    batch_surgical_edit:   "replace_in_file",
+    patch_file:            "replace_in_file",
     list_dir:              "list_directory",
-    grep_search:           "grep_search",
+    grep_search:           "search_file_content",
     run_shell_command:     "run_shell_command",
     view_file:             "read_file",
     run_tests:             "run_shell_command",
@@ -103,77 +119,122 @@ const GEMINI_TOOL_MAP: Record<string, string> = {
     check_active_ports:    "run_shell_command",
     start_dashboard:       "run_shell_command",
     update_contract_hash:  "write_file",
+    acquire_lock:          "write_file",
+    release_lock:          "write_file",
+    register_agent:        "write_file",
+    check_lint:            "run_shell_command",
 };
 
-/** Strategy: which model to assign based on capability score */
+// ─────────────────────────────────────────────────────────────────────────────
+//  Model Resolution
+// ─────────────────────────────────────────────────────────────────────────────
+
+/**
+ * Assigns the appropriate model based on capability score.
+ * Only valid, real model identifiers are used here.
+ */
 function resolveModel(
     cap: number,
     platform: "claude-code" | "gemini-cli" | "antigravity" | "codex-cli"
 ): string {
     if (platform === "claude-code") {
-        return cap === 10 ? "claude-opus-4-8"
-            : cap === 9  ? "claude-sonnet-4-6"
-                :              "claude-haiku-4-5";
+        // Verified Claude model names as of 2025-06
+        return cap === 10 ? "claude-opus-4-5"
+            : cap === 9  ? "claude-sonnet-4-5"
+                :              "claude-haiku-3-5";
     }
     if (platform === "gemini-cli" || platform === "antigravity") {
+        // Verified Gemini model names as of 2025-06
         return cap === 10 ? "gemini-2.5-pro"
             : cap === 9  ? "gemini-2.5-flash"
-                :              "gemini-2.5-flash-8b";
+                :              "gemini-2.5-flash-lite";
     }
-    // codex-cli
-    return cap === 10 ? "codex-1" : "o4-mini";
+    // codex-cli / OpenAI
+    return cap === 10 ? "o3" : "o4-mini";
 }
 
-/** Build a flat system prompt string from structured instructions */
-function buildSystemPrompt(ag: AgentDefinition, baseKnowledgeDir: string = path.join(getPackageRoot(), "templates/standards")): string {
+// ─────────────────────────────────────────────────────────────────────────────
+//  System Prompt Builder
+// ─────────────────────────────────────────────────────────────────────────────
+
+/**
+ * Builds a rich, enterprise-grade system prompt from structured instructions.
+ * Embeds governance document contents inline for agents that have knowledgeFiles.
+ */
+function buildSystemPrompt(
+    ag: AgentDefinition,
+    baseKnowledgeDir: string = path.join(getPackageRoot(), "templates/standards")
+): string {
     const lines: string[] = [
-        "# Identity",
+        `# 🎖️ ${ag.displayName} — Agent Enderun`,
+        "",
+        "## Identity",
         ag.instructions.identity,
         "",
-        "# Mission",
+        "## Mission",
         ag.instructions.mission,
         "",
-        "# Chain of Thought Protocol",
+        "## Role Scope",
+        `**Primary Role:** ${ag.role}`,
+        `**Authority Tier:** ${ag.tier} (Capability: ${ag.capability}/10)`,
+        "",
+        "## Chain of Thought Protocol",
+        "> Follow these steps in strict order for every task:",
+        "",
         ag.instructions.chainOfThought,
         "",
-        "# Discipline rules",
-        ...ag.instructions.rules.map(r => `- ${r}`),
+        "## Discipline Rules",
+        "> These are **non-negotiable** governance mandates. Violating any rule triggers an immediate task freeze.",
+        "",
+        ...ag.instructions.rules.map((r: string, i: number) => `${i + 1}. ${r}`),
+        "",
+        "## Enterprise Context",
+        "You are operating within a **multi-agent enterprise system** governed by the Agent Enderun framework.",
+        "All actions are traced, logged, and auditable. Every decision must be defensible and reversible.",
+        "- Always read PROJECT_MEMORY.md at session start for full context.",
+        "- Always pass the active **Trace ID** in all agent-to-agent messages.",
+        "- Never perform irreversible operations (schema drops, bulk deletes) without @manager approval.",
+        "- Prefer surgical edits (`replace_text`, `patch_file`) over full file rewrites.",
+        "- Escalate ambiguity to @manager instead of guessing.",
     ];
-    
+
     if (ag.instructions.knowledgeFiles?.length) {
-        lines.push("", "# Required reading (Standards Enforced)");
-        ag.instructions.knowledgeFiles.forEach(f => {
+        lines.push("", "## Governance Standards (Required Reading)");
+        lines.push("> Read and internalize the following standards before acting on any task.");
+        ag.instructions.knowledgeFiles.forEach((f: string) => {
             const filePath = path.join(baseKnowledgeDir, f);
             if (fs.existsSync(filePath)) {
-                lines.push(`\n## Content of ${f}:\n`, fs.readFileSync(filePath, "utf8"));
+                lines.push("", `### 📘 ${f}`, "", fs.readFileSync(filePath, "utf8").trim());
             } else {
-                lines.push(`- ${f} (File not found)`);
+                lines.push("", `### 📘 ${f}`, `> ⚠️ File not found at \`${filePath}\`. Run \`agent-enderun init\` to scaffold standards.`);
             }
         });
     }
+
     return lines.join("\n");
 }
 
 // ─────────────────────────────────────────────────────────────────────────────
 //  CLAUDE CODE  →  .claude/agents/{name}.md
+//  Valid fields: name, description, model, tools, color
+//  Ref: https://docs.anthropic.com/en/docs/claude-code/sub-agents
 // ─────────────────────────────────────────────────────────────────────────────
 
 export function toClaudeCodeMd(ag: AgentDefinition, baseKnowledgeDir?: string): string {
-    const tools = [...new Set(ag.tools.map(t => CLAUDE_TOOL_MAP[t] ?? t))];
+    const tools = [...new Set(ag.tools.map((t: string) => CLAUDE_TOOL_MAP[t] ?? t))];
     const model = resolveModel(ag.capability, "claude-code");
     const color = ag.tier === "supreme" ? "purple"
         : ag.tier === "recon"   ? "gray"
             :                         "blue";
 
+    // Only officially supported frontmatter fields
     const frontmatter = [
         "---",
         `name: ${ag.name}`,
         "description: >-",
-        `  ${ag.description} Use proactively for ${ag.role.toLowerCase()} tasks.`,
+        `  ${ag.description} Invoke proactively for ${ag.role.toLowerCase()} tasks in enterprise monorepo projects.`,
         `model: ${model}`,
         `tools: [${tools.map(t => `"${t}"`).join(", ")}]`,
-        `capability: ${ag.capability}`,
-        `tags: [${ag.tags.map(t => `"${t}"`).join(", ")}]`,
         `color: ${color}`,
         "---",
     ].join("\n");
@@ -183,20 +244,21 @@ export function toClaudeCodeMd(ag: AgentDefinition, baseKnowledgeDir?: string):
 
 // ─────────────────────────────────────────────────────────────────────────────
 //  GEMINI CLI  →  .gemini/agents/{name}.md
+//  Valid fields: name, description, model, tools (YAML list)
+//  Ref: https://ai.google.dev/gemini-api/docs/agents
 // ─────────────────────────────────────────────────────────────────────────────
 
 export function toGeminiCliMd(ag: AgentDefinition, baseKnowledgeDir?: string): string {
-    const tools = [...new Set(ag.tools.map(t => GEMINI_TOOL_MAP[t] ?? t))];
+    const tools = [...new Set(ag.tools.map((t: string) => GEMINI_TOOL_MAP[t] ?? t))];
     const model = resolveModel(ag.capability, "gemini-cli");
 
+    // Only officially supported frontmatter fields — no capability, no tags
     const frontmatter = [
         "---",
         `name: ${ag.name}`,
         "description: >-",
-        `  ${ag.description}`,
+        `  ${ag.description} Use for ${ag.role.toLowerCase()} tasks.`,
         `model: ${model}`,
-        `capability: ${ag.capability}`,
-        `tags: [${ag.tags.map(t => `"${t}"`).join(", ")}]`,
         "tools:",
         ...tools.map(t => `  - ${t}`),
         "---",
@@ -207,9 +269,21 @@ export function toGeminiCliMd(ag: AgentDefinition, baseKnowledgeDir?: string): s
 
 // ─────────────────────────────────────────────────────────────────────────────
 //  ANTIGRAVITY CLI  →  .agents/{name}/agent.json
+//  Spec: Antigravity customAgentSpec JSON schema
 // ─────────────────────────────────────────────────────────────────────────────
 
-export function toAntigravityJson(ag: AgentDefinition): string {
+export function toAntigravityJson(ag: AgentDefinition, baseKnowledgeDir?: string): string {
+    const knowledgeBase = baseKnowledgeDir ?? path.join(getPackageRoot(), "templates/standards");
+
+    // Embed actual file contents so the agent can read governance docs
+    const knowledgeSections = (ag.instructions.knowledgeFiles ?? []).map((f: string) => {
+        const filePath = path.join(knowledgeBase, f);
+        const content = fs.existsSync(filePath)
+            ? fs.readFileSync(filePath, "utf8").trim()
+            : `(${f} — file not found at build time)`;
+        return { title: `Required Reading — ${f}`, content };
+    });
+
     const payload = {
         name: ag.name,
         displayName: ag.displayName,
@@ -220,7 +294,7 @@ export function toAntigravityJson(ag: AgentDefinition): string {
                 systemPromptSections: [
                     {
                         title: "Identity & Mission",
-                        content: `${ag.instructions.identity}\n\n${ag.instructions.mission}`,
+                        content: `${ag.instructions.identity}\n\n**Mission:** ${ag.instructions.mission}`,
                     },
                     {
                         title: "Chain of Thought Protocol",
@@ -228,14 +302,19 @@ export function toAntigravityJson(ag: AgentDefinition): string {
                     },
                     {
                         title: "Discipline Rules",
-                        content: ag.instructions.rules.join("\n"),
+                        content: ag.instructions.rules.map((r: string, i: number) => `${i + 1}. ${r}`).join("\n"),
+                    },
+                    {
+                        title: "Enterprise Context",
+                        content: [
+                            "You are part of a multi-agent enterprise governance system.",
+                            "- Always include active Trace ID in all messages.",
+                            "- Read PROJECT_MEMORY.md at session start.",
+                            "- Prefer surgical edits over full file rewrites.",
+                            "- Escalate high-risk operations to @manager.",
+                        ].join("\n"),
                     },
-                    ...(ag.instructions.knowledgeFiles?.length
-                        ? [{
-                            title: "Required Reading",
-                            content: ag.instructions.knowledgeFiles.join("\n"),
-                        }]
-                        : []),
+                    ...knowledgeSections,
                 ],
                 toolNames: ag.tools,
             },
@@ -249,26 +328,26 @@ export const buildAgentJson = toAntigravityJson;
 
 // ─────────────────────────────────────────────────────────────────────────────
 //  CODEX CLI (OpenAI)  →  .agents/{name}.md
+//  Valid fields: agent-type, display-name, when-to-use, model, allowed-tools
 // ─────────────────────────────────────────────────────────────────────────────
 
 export function toCodexMd(ag: AgentDefinition, baseKnowledgeDir?: string): string {
     const model = resolveModel(ag.capability, "codex-cli");
-    const tools = [...new Set(ag.tools.map(t => {
-        if (["read_file","view_file","list_dir","grep_search","get_memory_insights","read_project_memory"].includes(t)) return "read";
-        if (["write_file","replace_text","batch_surgical_edit","patch_file","update_project_memory","log_agent_action"].includes(t)) return "write";
-        return "shell"; 
+    const tools = [...new Set(ag.tools.map((t: string) => {
+        if (["read_file","view_file","list_dir","grep_search","get_memory_insights","read_project_memory","get_project_map","get_project_gaps","get_framework_status"].includes(t)) return "read";
+        if (["write_file","replace_text","batch_surgical_edit","patch_file","update_project_memory","log_agent_action","acquire_lock","release_lock","register_agent","update_contract_hash"].includes(t)) return "write";
+        return "shell";
     }))];
 
+    // Only officially supported Codex CLI frontmatter fields — no tier, no capability
     const frontmatter = [
         "---",
         `agent-type: "${ag.name}"`,
         `display-name: "${ag.displayName}"`,
         "when-to-use: >-",
-        `  Use for ${ag.role.toLowerCase()}. ${ag.description}`,
+        `  Invoke for ${ag.role.toLowerCase()} tasks. ${ag.description}`,
         `model: ${model}`,
         `allowed-tools: [${tools.map(t => `"${t}"`).join(", ")}]`,
-        `tier: ${ag.tier}`,
-        `capability: ${ag.capability}`,
         "---",
     ].join("\n");
 
@@ -277,28 +356,16 @@ export function toCodexMd(ag: AgentDefinition, baseKnowledgeDir?: string): strin
 
 // ─────────────────────────────────────────────────────────────────────────────
 //  CURSOR IDE  →  .cursor/rules/{name}.mdc
+//  Valid fields: description, globs, alwaysApply
+//  Ref: https://docs.cursor.com/context/rules
 // ─────────────────────────────────────────────────────────────────────────────
 
-const GLOB_MAP: Record<string, string> = {
-    backend: "apps/backend/**/*",
-    frontend: "apps/web/**/*",
-    database: "apps/backend/src/database/**/*",
-    mobile: "apps/mobile/**/*",
-    native: "apps/native/**/*",
-    quality: "*",
-    security: "*",
-    devops: "*",
-    explorer: "*",
-    git: "*",
-    analyst: "*",
-    manager: "*",
-};
-
 export function toCursorMdc(ag: AgentDefinition, baseKnowledgeDir?: string): string {
-    const glob = GLOB_MAP[ag.name] || "**/*";
+    const glob = CURSOR_AGENT_GLOBS[ag.name] || "**/*";
+    // Only officially supported Cursor MDC frontmatter fields
     const frontmatter = [
         "---",
-        `description: Agent Enderun — @${ag.name} rules for ${ag.displayName}. ${ag.description.slice(0, 100)}`,
+        `description: "${ag.displayName} — ${ag.description.slice(0, 120).replace(/"/g, "'")}"`,
         `globs: ${glob}`,
         "alwaysApply: false",
         "---",

package/src/modules/agents/registry/analyst.ts

@@ -10,7 +10,7 @@ export const analyst: AgentDefinition = {
   "Specs verification and Contract Audit specialist. " +
   "Audits truth and contracts within the Army.",
     capability: 9,
-    tier: "core",
+    tier: "recon",
     tags: ["core", "strategy"],
     stateMachine: STATE_MACHINE,
     tools: [
@@ -18,8 +18,11 @@ export const analyst: AgentDefinition = {
         "list_dir",
         "grep_search",
         "get_project_map",
+        "get_project_gaps",
         "read_project_memory",
         "get_memory_insights",
+        "send_agent_message",
+        "update_contract_hash",
     ],
     instructions: {
         identity: "Strategy Analyst and Contract-First Compliance Auditor",
@@ -36,5 +39,6 @@ export const analyst: AgentDefinition = {
             "VERSIONING INTEGRITY: Validate that all API versioning changes are correctly registered in 'contract.version.json'.",
             "LIVE AUDIT: Continuously audit business rules against the live implementation for drift.",
         ],
+        knowledgeFiles: ["architecture-standards.md", "crud-governance.md"],
     },
 };

package/src/modules/agents/registry/backend.ts

@@ -28,20 +28,21 @@ export const backend: AgentDefinition = {
     instructions: {
         identity: "Backend Domain Engineer and Database Management Owner",
         mission:
-    "Deliver reliable, type-safe server logic that upholds Kysley-only " +
+    "Deliver reliable, type-safe server logic that upholds Kysely/TypeORM " +
     "data access and strict repository/service separation.",
         chainOfThought: "1. Analyze: Read the task, context, and relevant governance documents.\n" +
                         "2. Validate: Cross-reference with project rules, contracts, and architecture standards.\n" +
                         "3. Plan: Break down the task into small, atomic, and verifiable steps.\n" +
                         "4. Execute: Perform the task using approved tools, adhering to quality and security constraints.",
         rules: [
-            "BRANDED TYPES: Use branded types for all domain IDs — never raw string or number.",
-            "KYSELY ONLY: All database access via Kysely — raw SQL strings are unconditionally forbidden.",
+            "STRICT BRANDED TYPES: Absolute enforcement of branded types for ALL domain IDs (e.g., UserId, ProjectId). Raw 'string' or 'number' for IDs is a Nizam violation and will cause task rejection.",
+            "KYSELY ONLY: All database access via Kysely — raw SQL strings are unconditionally forbidden. No exceptions.",
             "LAYER SEPARATION: Isolate queries in repository/service layers — direct DB calls in controllers are forbidden.",
             "ERROR HANDLING: Wrap all async logic in robust try/catch blocks with typed error responses.",
+            "PII PROTECTION: Never log or store real user data. Use anonymized hashes for debugging tasks.",
             "HIGH-RISK OPS: Refuse User/Role management, bulk deletes, schema alterations, and billing changes autonomously. " +
       "Return a standard refusal, send a managerApproval request to @manager, and shift to WAITING status.",
         ],
-        knowledgeFiles: ["crud-governance.md"],
+        knowledgeFiles: ["crud-governance.md", "kysely-standards.md", "typeorm-standards.md"],
     },
 };

package/src/modules/agents/registry/database.ts

@@ -21,6 +21,7 @@ export const database: AgentDefinition = {
         "list_dir",
         "grep_search",
         "read_project_memory",
+        "send_agent_message",
     ],
     instructions: {
         identity: "Database Architect and Migration Integrity Owner",
@@ -37,6 +38,6 @@ export const database: AgentDefinition = {
             "DETERMINISTIC MIGRATIONS: Every migration must be reversible and produce identical results across environments.",
             "PERFORMANCE FIRST: Design indexes proactively — never retroactively after a performance incident.",
         ],
-        knowledgeFiles: ["performance-standards.md", "quality-standards.md"],
+        knowledgeFiles: ["kysely-standards.md", "typeorm-standards.md", "quality-standards.md"],
     },
 };

package/src/modules/agents/registry/devops.ts

@@ -16,11 +16,13 @@ export const devops: AgentDefinition = {
     tools: [
         "run_shell_command",
         "read_file",
+        "write_file",
         "list_dir",
         "get_system_health",
         "check_active_ports",
         "read_project_memory",
         "send_agent_message",
+        "log_agent_action",
     ],
     instructions: {
         identity: "Infrastructure Engineer and Environment Integrity Guardian",

package/src/modules/agents/registry/explorer.ts

@@ -36,5 +36,6 @@ export const explorer: AgentDefinition = {
             "DEPENDENCY MAP: Map all file dependencies and surface them to @manager in a structured report.",
             "RECON FIRST: No specialist should act on an unexplored codebase — flag absence of ADP as a phase blocker.",
         ],
+        knowledgeFiles: ["architecture-standards.md"],
     },
 };

package/src/modules/agents/registry/git.ts

@@ -10,11 +10,12 @@ export const git: AgentDefinition = {
   "Git flow, Branching, and Atomic Commit master. " +
   "Manages the scrolls of history.",
     capability: 9,
-    tier: "core",
+    tier: "recon",
     tags: ["core", "logistics"],
     stateMachine: STATE_MACHINE,
     tools: [
         "run_shell_command",
+        "read_file",
         "list_dir",
         "grep_search",
         "read_project_memory",
@@ -35,5 +36,6 @@ export const git: AgentDefinition = {
             "NO FORCE PUSH: Force-pushing to any shared branch is unconditionally forbidden.",
             "GIT FLOW: Strictly follow git-flow branching conventions — feature, hotfix, release naming enforced.",
         ],
+        knowledgeFiles: ["logging-and-secrets.md"],
     },
 };

package/src/modules/agents/registry/manager.ts

@@ -19,6 +19,9 @@ export const manager: AgentDefinition = {
         "read_project_memory",
         "get_memory_insights",
         "update_project_memory",
+        "acquire_lock",
+        "release_lock",
+        "log_agent_action",
         "get_project_gaps",
         "get_project_map",
         "audit_dependencies",
@@ -40,14 +43,17 @@ export const manager: AgentDefinition = {
                         "4. Execute: Delegate sub-tasks to appropriate specialists and verify compliance at each step.",
         rules: [
             "ABSOLUTE COMPLIANCE: Freeze project and block task on any Nizam violation " +
-      "(e.g. 'any' type, 'console.log', file overwrite). No further action until breach is purged.",
-            "PHASE WALL: Gate every phase transition — reject if even one TODO or lint error exists in scope.",
+      "(e.g. 'any' type, 'console.log', PII leakage, or raw ID usage). No further action until breach is purged.",
+            "PII AUDIT: Proactively scan all specialist logs and memories for PII (Emails, Names). Purge immediately if detected.",
+            "PHASE WALL: Gate every phase transition — reject if even one TODO, lint error, or unbranded ID exists in scope.",
             "ORCHESTRATION AUDIT: Audit every specialist message for constitutional compliance before delegating next sub-task.",
             "STRATEGIC RECIPES: Direct specialists to '.enderun/prompts/' for all refactor, bug-fix, or feature tasks.",
             "SURGICAL PRECISION: Reject any full-file overwrite proposal unless the file is under 50 lines.",
             "GAP ANALYSIS: Run 'get_project_gaps' after each phase — unfinished logic is a breach of discipline.",
             "SYSTEM OBSERVABILITY: Periodically invoke 'get_system_health' and 'check_active_ports' to verify environment stability.",
             "MEMORY INTEGRITY: Synchronize 'PROJECT_MEMORY.md' after every single turn. Memory drift is treason.",
+            "LOCKING PROTOCOL: Always acquire a lock via 'acquire_lock' on 'memory' resource before writing to PROJECT_MEMORY.md. Release immediately after write.",
         ],
+        knowledgeFiles: ["governance-standards.md"],
     },
 };

package/src/modules/agents/registry/native.ts

@@ -10,7 +10,7 @@ export const native: AgentDefinition = {
   "Desktop apps and system-level logic specialist. " +
   "Handles OS deep layers with paramount security.",
     capability: 9,
-    tier: "core",
+    tier: "recon",
     tags: ["core", "native"],
     stateMachine: STATE_MACHINE,
     tools: [
@@ -21,6 +21,8 @@ export const native: AgentDefinition = {
         "grep_search",
         "read_project_memory",
         "run_shell_command",
+        "send_agent_message",
+        "log_agent_action",
     ],
     instructions: {
         identity: "Native Integration Engineer and OS-Layer Security Enforcer",
@@ -35,6 +37,8 @@ export const native: AgentDefinition = {
             "SECURITY PARAMOUNT: Handle all OS-layer operations with rigorous input validation.",
             "PLATFORM ISOLATION: Strictly separate platform-specific code from shared business logic.",
             "SYSTEM CALL AUDITING: Validate all native module inputs and log elevated-privilege operations.",
+            "ESCALATION PROTOCOL: Any destructive or elevated-privilege operation requires prior @manager approval via send_agent_message.",
         ],
+        knowledgeFiles: ["security-standards.md", "logging-and-secrets.md"],
     },
 };

package/src/modules/agents/registry/security.ts

@@ -17,6 +17,7 @@ export const security: AgentDefinition = {
         "read_file",
         "replace_text",
         "grep_search",
+        "send_agent_message",
         "read_project_memory",
         "get_memory_insights",
         "log_agent_action",

package/src/shared/constants.ts

@@ -134,20 +134,21 @@ export const DEFAULT_MONOREPO_PATHS = {
     tests: "tests",
 } as const;
 
-/** Cursor rule globs per agent role (monorepo layout). */
+/** Cursor rule globs per agent role (enterprise monorepo layout). */
 export const CURSOR_AGENT_GLOBS: Record<string, string> = {
-    backend: `${DEFAULT_MONOREPO_PATHS.backend}/**/*`,
-    frontend: `${DEFAULT_MONOREPO_PATHS.frontend}/**/*`,
-    database: `${DEFAULT_MONOREPO_PATHS.backend}/src/database/**/*`,
-    mobile: `${DEFAULT_MONOREPO_PATHS.mobile}/**/*`,
-    native: "apps/native/**/*",
-    quality: "*",
-    security: "*",
-    devops: "*",
-    explorer: "*",
-    git: "*",
-    analyst: "*",
-    manager: "*",
+    manager:   "**/*",
+    security:  "**/*",
+    architect: "**/*",
+    backend:   `${DEFAULT_MONOREPO_PATHS.backend}/**/*`,
+    frontend:  `${DEFAULT_MONOREPO_PATHS.frontend}/**/*`,
+    mobile:    `${DEFAULT_MONOREPO_PATHS.mobile}/**/*`,
+    native:    "apps/native/**/*",
+    database:  `${DEFAULT_MONOREPO_PATHS.backend}/src/database/**/*`,
+    devops:    "{.github,docker,infra,scripts,*.yml,*.yaml,Dockerfile*}",
+    quality:   "**/*",
+    analyst:   "{docs,specs,contracts}/**/*",
+    explorer:  "**/*",
+    git:       "**/*",
 };
 
 // ─── MCP & environment ──────────────────────────────────────────────────────

package/templates/prompts/bug-fix-recipe.md

@@ -0,0 +1,20 @@
+# 🐞 Scientific Debugging (Bug-Fix) Recipe
+
+This recipe defines how to autonomously detect and permanently resolve a bug.
+
+## 1. Reproduction
+- Analyze the logs (`audit_log.md`) that reported the error.
+- Write the smallest test case (failing test) that triggers the error.
+
+## 2. Root Cause Analysis
+- Check system resources with `get_system_health`.
+- Verify the status of services with `check_active_ports`.
+- Examine relevant code blocks line by line using `read_file`.
+
+## 3. Surgical Fix
+- Perform only the surgical intervention that will fix the error.
+- Check if there is a missing variable in ".env".
+
+## 4. Permanent Solution
+- Verify that the test you wrote passes.
+- If `quality-standards.md` needs to be updated to prevent similar errors, submit a proposal.