contextos-agents 2.0.0 → 2.1.1

package/.agents/AGENTS.md

@@ -1,4 +1,4 @@
-# ContextOS — Deterministic context compiler and policy engine for AI coding agents.
+# ContextOS -  Deterministic context compiler and policy engine for AI coding agents.
 
 You are working inside a project managed by **ContextOS**. This file is the **single source of truth** for how you must behave, think, and which skills to activate for every task.
 
@@ -6,7 +6,7 @@ You are working inside a project managed by **ContextOS**. This file is the **si
 
 ---
 
-## Step 0 — Identify Before Acting
+## Step 0 -  Identify Before Acting
 
 Before writing a single line of code or plan, stop and answer three questions:
 
@@ -28,12 +28,12 @@ Skills loaded: react, typescript, ui-ux-pro, ponytail-mindset
 
 ---
 
-## Skill Architecture (Context Efficiency)
+## Skill Architecture (High Fidelity & Progressive Disclosure)
 
-Skills are loaded on-demand. To keep the agent context window efficient:
-1. **Keep `SKILL.md` under 500 lines**: Put detailed reference material in separate files.
-2. **Use progressive disclosure**: Use a `references/` directory for deep context and load those files only when specifically needed by the task.
-3. **Use `scripts/`**: Place executable scripts in a `scripts/` directory alongside the skill.
+Skills provide deep, production-ready engineering standards. To maximize instruction adherence:
+1. **High-Fidelity Guidance**: Skills must be complete, self-contained, and comprehensive. Never truncate essential rules, edge cases, or code examples for artificial brevity.
+2. **Progressive Disclosure**: Use a `references/` directory for deep domain specifications, detailed schemas, and specialized manuals, loading them when the task explicitly targets those areas.
+3. **Executable Scripts**: Place verification and automation scripts in a `scripts/` directory alongside the skill.
 
 ## Skill Registry
 
@@ -43,10 +43,10 @@ These 7 skills are always present in ContextOS Core:
 
 | Skill | File | Activate When |
 |-------|------|--------------|
-| **engineering-workflow** | `engineering-workflow/SKILL.md` | **Every task** — defines the DEFINE→PLAN→BUILD→VERIFY→REVIEW→SHIP pipeline |
-| **gstack-roles** | `gstack-roles/SKILL.md` | **Every task** — declare your specialist role before each phase |
-| **ponytail-mindset** | `ponytail-mindset/SKILL.md` | **Every BUILD phase** — run the 7-rung ladder before writing any code |
-| **gemini-precision** | `gemini-precision/SKILL.md` | **All Gemini tasks** — zero assumptions, zero placeholders, surgical blast radius, test proof |
+| **engineering-workflow** | `engineering-workflow/SKILL.md` | **Every task** -  defines the DEFINE→PLAN→BUILD→VERIFY→REVIEW→SHIP pipeline |
+| **gstack-roles** | `gstack-roles/SKILL.md` | **Every task** -  declare your specialist role before each phase |
+| **ponytail-mindset** | `ponytail-mindset/SKILL.md` | **Every BUILD phase** -  run the 7-rung ladder before writing any code |
+| **gemini-precision** | `gemini-precision/SKILL.md` | **All Gemini tasks** -  zero assumptions, zero placeholders, surgical blast radius, test proof |
 | **security** | `security/SKILL.md` | Any feature with auth, data access, user input, external integration |
 | **context-os** | `context-os/SKILL.md` | Managing context rules, compiler pipelines, project policies |
 | **context-manager** | `context-manager/SKILL.md` | Context selection, dynamic skill resolution, project graph traversal |
@@ -58,14 +58,14 @@ The following domain skills are available in the extended catalog and can be add
 | Domain | Skills | Install Command |
 |--------|--------|-----------------|
 | **Frontend** | `react`, `react-best-practices`, `nextjs`, `typescript`, `ui-ux-pro`, `impeccable-design`, `state-management`, `ui-design`, `ux-design`, `web-accessibility`, `brutalist-design`, `minimalist-design`, `soft-design`, `redesign-audit` | `contextos skill add <name>` |
-| **Backend** | `system-design`, `node`, `fastapi`, `nestjs`, `microservices`, `ddd`, `database` | `contextos skill add <name>` |
-| **Cross-Cutting** | `testing`, `docker`, `decisions`, `architecture-diagrams`, `adapters`, `generators`, `graphify`, `performance`, `vercel-optimize` | `contextos skill add <name>` |
+| **Backend** | `system-design`, `api-design`, `node`, `fastapi`, `nestjs`, `microservices`, `ddd`, `database` | `contextos skill add <name>` |
+| **Cross-Cutting** | `testing`, `docker`, `ci-cd`, `terraform`, `security-audit`, `decisions`, `architecture-diagrams`, `adapters`, `generators`, `graphify`, `performance`, `vercel-optimize` | `contextos skill add <name>` |
 
 ---
 
 ## Automatic Skill Activation Rules (Proactive Routing)
 
-The following rules are **deterministic** — no judgment needed. If the condition is true, the skill is loaded.
+The following rules are **deterministic** -  no judgment needed. If the condition is true, the skill is loaded.
 
 > **Availability Guard**: Load only skills that are physically installed in `.agents/core/skills/`. For uninstalled catalog skills, rely on core skills (`engineering-workflow`, `ponytail-mindset`, `gemini-precision`, `security`) and recommend `contextos skill add <name>` when deep domain checklists are needed.
 
@@ -159,6 +159,22 @@ role: Staff Engineer (Orchestrator)
 trigger: "graphify" OR "codebase graph" OR "project graph" OR "map codebase" OR "knowledge graph" OR "построй граф проекта"
 load: [graphify, system-design, context-manager]
 role: Architect
+
+trigger: "security audit" OR "vulnerability" OR "pentest"
+load: [security-audit, security, engineering-workflow]
+role: Chief Security Officer (audit) -> Senior Developer (build)
+
+trigger: "api design" OR "REST API" OR "contract" OR "openapi"
+load: [api-design, system-design, engineering-workflow]
+role: Architect (plan) -> Senior Developer (build)
+
+trigger: "terraform" OR "opentofu" OR "iac" OR "infrastructure"
+load: [terraform, decisions, engineering-workflow]
+role: DevOps Engineer
+
+trigger: "ci/cd" OR "github actions" OR "pipeline" OR "quality gates"
+load: [ci-cd, engineering-workflow]
+role: DevOps Engineer
 ```
 
 ### By Technology Detected in Codebase
@@ -178,7 +194,7 @@ files: "components/ui/*" present → shadcn detected, apply K9-K11 rules from im
 
 ---
 
-## Pipeline — Phase-by-Phase Rules
+## Pipeline -  Phase-by-Phase Rules
 
 Every task MUST follow these phases in order. No skipping.
 
@@ -191,7 +207,7 @@ Required output before proceeding:
 - Explicit in-scope / out-of-scope
 - List of files that will change
 - Acceptance criteria as testable statements
-- **STOP — do not write code until spec is reviewed**
+- **STOP -  do not write code until spec is reviewed**
 
 ---
 
@@ -205,7 +221,7 @@ Required output before proceeding:
 - Test requirement per task
 - Risk assessment
 - **If UI domain, read and incorporate `.interface-design/system.md` design memory**
-- **STOP — do not write code until plan is approved**
+- **STOP -  do not write code until plan is approved**
 
 ---
 
@@ -236,12 +252,12 @@ Rules:
 **Role**: `[ROLE: Staff Engineer]` + `[ROLE: Senior Designer]` if UI  
 **Load**: `engineering-workflow` (code review checklist) + `impeccable-design` (if UI)
 
-For UI tasks — run the full impeccable-design audit:
-- Typography rules T1–T10
-- Color rules C1–C12
-- Layout rules L1–L11 (including z-index check)
-- Component rules K1–K11 (shadcn-first)
-- Animation rules A1–A8 (Framer Motion exception noted)
+For UI tasks -  run the full impeccable-design audit:
+- Typography rules T1-T10
+- Color rules C1-C12
+- Layout rules L1-L11 (including z-index check)
+- Component rules K1-K11 (shadcn-first)
+- Animation rules A1-A8 (Framer Motion exception noted)
 
 ---
 
@@ -276,6 +292,10 @@ Use this table to instantly determine which skills to load:
 | Architecture visualization | `architecture-diagrams` + `system-design` | Architect |
 | Multi-agent parallel tasks | `subagent-orchestrator` + `engineering-workflow` | Staff Engineer (Orchestrator) |
 | Codebase graph / repo mapping | `graphify` + `context-manager` + `system-design` | Architect |
+| Security audit / pen-test | `security-audit` + `security` + `engineering-workflow` | Chief Security Officer |
+| API contract / interface design | `api-design` + `system-design` + `engineering-workflow` | Architect |
+| Terraform / IaC | `terraform` + `decisions` + `engineering-workflow` | DevOps Engineer |
+| CI/CD pipeline automation | `ci-cd` + `engineering-workflow` | DevOps Engineer |
 
 ---
 
@@ -326,18 +346,18 @@ These rules apply regardless of which skills are loaded:
 
 ### Code Quality
 - Business logic NEVER lives in API route handlers → always in `services/` or `use-cases/`
-- No `// TODO` in committed code — create a tracked issue instead
+- No `// TODO` in committed code -  create a tracked issue instead
 - All async operations have explicit error handling
-- No secrets hardcoded — use environment variables
+- No secrets hardcoded -  use environment variables
 
 ### Security
-- Auth check BEFORE any data access — no exceptions
+- Auth check BEFORE any data access -  no exceptions
 - All user input validated and sanitized before processing
-- SQL queries use parameterized form — no string concatenation
+- SQL queries use parameterized form -  no string concatenation
 
 ### Design
-- No arbitrary Tailwind values (`gap-[17px]`) — use scale utilities
-- No hardcoded z-indexes (`z-[999]`) — use Radix/shadcn Portals
+- No arbitrary Tailwind values (`gap-[17px]`) -  use scale utilities
+- No hardcoded z-indexes (`z-[999]`) -  use Radix/shadcn Portals
 - Every list/table/feed has a designed empty state
 
 ### Engineering
@@ -348,10 +368,10 @@ These rules apply regardless of which skills are loaded:
 
 ### Completion Protocol
 When finishing a workflow or task, always report your final status clearly using one of the following:
-- **DONE** — completed with evidence.
-- **DONE_WITH_CONCERNS** — completed, but list specific concerns.
-- **BLOCKED** — cannot proceed; state blocker and what was tried.
-- **NEEDS_CONTEXT** — missing info; state exactly what is needed.
+- **DONE** -  completed with evidence.
+- **DONE_WITH_CONCERNS** -  completed, but list specific concerns.
+- **BLOCKED** -  cannot proceed; state blocker and what was tried.
+- **NEEDS_CONTEXT** -  missing info; state exactly what is needed.
 
 ---
 

package/.agents/adapters/aider/export.js

@@ -7,6 +7,7 @@ const fs = require('fs');
 const path = require('path');
 const { AGENTS_MD_PATH, collectSkillDirectories, extractYamlField, stripFrontmatter } = require('../shared.js');
 const { registerAdapter, applyArtifacts, createProvenanceHeader } = require('../pure-compiler.js');
+const YAML = require('../../compiler/vendor/yaml.js');
 
 const GENERATOR_ID = 'aider@2';
 
@@ -43,7 +44,7 @@ function buildSkillSection(skillDir) {
   }
 
   const descLine = description ? `> ${description.replace(/\r?\n+/g, ' ').trim()}\n` : '';
-  const skillRef = `*Source: \`.agents/skills/${skillName}/SKILL.md\` — Load via \`/read .agents/skills/${skillName}/SKILL.md\`*\n`;
+  const skillRef = `*Source: \`.agents/skills/${skillName}/SKILL.md\` - Load via \`/read .agents/skills/${skillName}/SKILL.md\`*\n`;
   return `\n## Skill: ${title}\n${descLine}${skillRef}`;
 }
 
@@ -68,23 +69,49 @@ function render(context) {
   }, 'markdown');
 
   // 1. .aider.conf.yml
-  const aiderConfContent = [
-    yamlProv,
-    '# Load project conventions as a read-only context file on every session',
-    'read:',
-    '  - CONVENTIONS.md',
-    '',
-    '# Auto commit edits with standard git format',
-    'auto-commits: true',
-    'dirty-commits: true',
-    '',
-  ].join('\n');
+  const existingAiderConfPath = path.join(projectRoot, '.aider.conf.yml');
+  let aiderConfContent = '';
+
+  if (fs.existsSync(existingAiderConfPath)) {
+    try {
+      const rawUserConf = fs.readFileSync(existingAiderConfPath, 'utf8');
+      const parsed = YAML.parse(rawUserConf) || {};
+
+      if (!parsed.read) {
+        parsed.read = ['CONVENTIONS.md'];
+      } else if (Array.isArray(parsed.read)) {
+        if (!parsed.read.includes('CONVENTIONS.md')) {
+          parsed.read.push('CONVENTIONS.md');
+        }
+      } else if (typeof parsed.read === 'string') {
+        if (parsed.read !== 'CONVENTIONS.md') {
+          parsed.read = [parsed.read, 'CONVENTIONS.md'];
+        }
+      }
+
+      aiderConfContent = yamlProv + '\n' + YAML.stringify(parsed);
+    } catch (err) {
+      throw new Error(`Failed to parse existing .aider.conf.yml: ${err.message}. Aborting to protect existing configuration from data loss.`);
+    }
+  } else {
+    aiderConfContent = [
+      yamlProv,
+      '# Load project conventions as a read-only context file on every session',
+      'read:',
+      '  - CONVENTIONS.md',
+      '',
+      '# Auto commit edits with standard git format',
+      'auto-commits: true',
+      'dirty-commits: true',
+      '',
+    ].join('\n');
+  }
 
   // 2. CONVENTIONS.md
   const convSections = [];
   convSections.push(
     mdProv +
-    `# ContextOS — Project Conventions for Aider\n\n` +
+    `# ContextOS - Project Conventions for Aider\n\n` +
     `> **Core law: Do not read everything. Read only what the current task requires.**\n\n`
   );
 
@@ -97,7 +124,7 @@ function render(context) {
     `Skills are loaded on demand. Use \`/read .agents/skills/<skill>/SKILL.md\` when needed.\n\n` +
     `### Skill Index\n`);
 
-  const skills = collectSkillDirectories(context?.profile);
+  const skills = collectSkillDirectories(context?.profile, context?.projectRoot);
   for (const skill of skills) {
     const section = buildSkillSection(skill);
     if (section) convSections.push(section);

package/.agents/adapters/claude/export.js

@@ -9,13 +9,15 @@ const { collectSkillDirectories, readMeaningfulMarkdown } = require('../shared.j
 const { registerAdapter, applyArtifacts } = require('../pure-compiler.js');
 
 const GENERATOR_ID = 'claude@2';
+const CLAUDE_START_MARKER = '<!-- CONTEXTOS:START -->';
+const CLAUDE_END_MARKER = '<!-- CONTEXTOS:END -->';
 
 function describe() {
   return {
     name: 'claude',
     version: '2.0.0',
-    description: 'Compiles clean markdown skills for Claude Code CLI',
-    targetPattern: '.agents/generated/claude/skills/**/SKILL.md',
+    description: 'Compiles clean markdown skills for Claude Code CLI and manages CLAUDE.md entrypoint',
+    targetPattern: '{CLAUDE.md,.agents/generated/claude/skills/**/SKILL.md}',
   };
 }
 
@@ -53,8 +55,52 @@ function renderClaudeSkill(skillDir, context) {
   };
 }
 
+function renderClaudeRootIndex(skills, context) {
+  const projectRoot = context?.projectRoot || '.';
+  const claudePath = path.join(projectRoot, 'CLAUDE.md');
+  let existingContent = '';
+  if (fs.existsSync(claudePath)) {
+    try {
+      existingContent = fs.readFileSync(claudePath, 'utf8');
+    } catch {}
+  }
+
+  const skillEntries = skills.map(skillDir => {
+    const name = path.basename(skillDir);
+    return `- [${name}](.agents/generated/claude/skills/${name}/SKILL.md)`;
+  }).join('\n');
+
+  const managedBlock = `${CLAUDE_START_MARKER}
+<!-- Do not edit this section directly. Synchronized by ContextOS. -->
+# ContextOS Agent Governance
+
+The following skills are managed by ContextOS:
+${skillEntries}
+${CLAUDE_END_MARKER}`;
+
+  let finalContent;
+  if (existingContent.includes(CLAUDE_START_MARKER)) {
+    const regex = new RegExp(`${CLAUDE_START_MARKER}[\\s\\S]*?${CLAUDE_END_MARKER}`);
+    finalContent = existingContent.replace(regex, managedBlock);
+  } else if (existingContent.trim()) {
+    finalContent = `${existingContent.trimEnd()}\n\n${managedBlock}\n`;
+  } else {
+    finalContent = `${managedBlock}\n`;
+  }
+
+  return {
+    path: 'CLAUDE.md',
+    content: finalContent.replace(/\r\n/g, '\n'),
+    mediaType: 'text/markdown',
+    kind: 'generated-adapter',
+    generator: GENERATOR_ID,
+    sourceSkillIds: skills.map(s => path.basename(s)),
+    inputsHash: context?.sourceGraphHash || 'none',
+  };
+}
+
 function render(context) {
-  const skills = collectSkillDirectories(context?.profile);
+  const skills = collectSkillDirectories(context?.profile, context?.projectRoot);
   const artifacts = [];
 
   for (const skill of skills) {
@@ -62,6 +108,11 @@ function render(context) {
     if (art) artifacts.push(art);
   }
 
+  if (skills.length > 0) {
+    const rootIndex = renderClaudeRootIndex(skills, context);
+    if (rootIndex) artifacts.push(rootIndex);
+  }
+
   return artifacts;
 }
 

package/.agents/adapters/copilot/export.js

@@ -79,7 +79,7 @@ function render(context) {
     `| --- | --- | --- |\n`
   );
 
-  const skills = collectSkillDirectories(context?.profile);
+  const skills = collectSkillDirectories(context?.profile, context?.projectRoot);
   for (const skill of skills) {
     const skillName = path.basename(skill);
     const yamlPath = path.join(skill, 'skill.yaml');

package/.agents/adapters/cursor/export.js

@@ -187,7 +187,7 @@ ${agentsMd}
     });
   }
 
-  const skills = collectSkillDirectories(context?.profile);
+  const skills = collectSkillDirectories(context?.profile, context?.projectRoot);
   for (const skill of skills) {
     const mdc = generateCursorMdc(skill);
     if (mdc) {

package/.agents/adapters/drift-detector.js

@@ -23,6 +23,9 @@ const DRIFT_STATES = {
   ORPHAN_MANAGED_OUTPUT: 'ORPHAN_MANAGED_OUTPUT',
   ADAPTER_VERSION_MISMATCH: 'ADAPTER_VERSION_MISMATCH',
   PROFILE_MISMATCH: 'PROFILE_MISMATCH',
+  CORRUPT_LOCKFILE: 'CORRUPT_LOCKFILE',
+  EMPTY_PROJECTION: 'EMPTY_PROJECTION',
+  CONFIG_ERROR: 'CONFIG_ERROR',
 };
 
 /**
@@ -67,9 +70,6 @@ function computeDiffSnippet(beforeStr, afterStr, maxLines = 15) {
 function detectDrift(projectRoot, adapters = 'all', options = {}) {
   const absRoot = path.resolve(projectRoot);
   const lockManager = new LockfileV2Manager(absRoot);
-  const lockfile = lockManager.read();
-
-  const { artifacts, collisions, context } = renderAdapters(absRoot, adapters, options);
 
   const findings = {
     [DRIFT_STATES.STALE_INPUT]: [],
@@ -78,11 +78,57 @@ function detectDrift(projectRoot, adapters = 'all', options = {}) {
     [DRIFT_STATES.ORPHAN_MANAGED_OUTPUT]: [],
     [DRIFT_STATES.ADAPTER_VERSION_MISMATCH]: [],
     [DRIFT_STATES.PROFILE_MISMATCH]: [],
+    [DRIFT_STATES.CORRUPT_LOCKFILE]: [],
+    [DRIFT_STATES.EMPTY_PROJECTION]: [],
+    [DRIFT_STATES.CONFIG_ERROR]: [],
   };
 
   const diffs = [];
 
-  // 1. Check Profile Mismatch
+  // 0. Safe lockfile load with corrupt lockfile detection
+  let lockfile = null;
+  try {
+    lockfile = lockManager.read();
+  } catch (err) {
+    findings[DRIFT_STATES.CORRUPT_LOCKFILE].push({
+      reason: `Lockfile is corrupt: ${err.message}`,
+    });
+  }
+
+  // 1. Adapter rendering with error containment
+  let rendered;
+  try {
+    rendered = renderAdapters(absRoot, adapters, options);
+  } catch (err) {
+    findings[DRIFT_STATES.CONFIG_ERROR].push({
+      reason: err.message,
+    });
+    return {
+      hasDrift: true,
+      hasError: true,
+      code: 2,
+      totalFindings: 1,
+      findings,
+      collisions: [],
+      diffs: [],
+      projectedCount: 0,
+      error: err.message,
+    };
+  }
+
+  const { artifacts, collisions, context } = rendered;
+
+  // 2. Empty projection check
+  if (artifacts.length === 0) {
+    const hasAgentsDir = fs.existsSync(path.join(absRoot, '.agents'));
+    if (hasAgentsDir) {
+      findings[DRIFT_STATES.EMPTY_PROJECTION].push({
+        reason: 'Projected artifact set is empty while .agents directory exists',
+      });
+    }
+  }
+
+  // 3. Check Profile Mismatch
   if (lockfile && lockfile.profile) {
     if (context.profileId && lockfile.profile.id !== context.profileId) {
       findings[DRIFT_STATES.PROFILE_MISMATCH].push({
@@ -92,7 +138,7 @@ function detectDrift(projectRoot, adapters = 'all', options = {}) {
     }
   }
 
-  // 2. Check Stale Input (Source Graph Hash)
+  // 4. Check Stale Input (Source Graph Hash)
   if (lockfile && lockfile.sourceGraphHash) {
     if (context.sourceGraphHash && lockfile.sourceGraphHash !== context.sourceGraphHash) {
       findings[DRIFT_STATES.STALE_INPUT].push({
@@ -104,7 +150,7 @@ function detectDrift(projectRoot, adapters = 'all', options = {}) {
 
   const projectedPaths = new Set(artifacts.map(a => a.path));
 
-  // 3. Inspect each projected artifact against disk and lockfile
+  // 5. Inspect each projected artifact against disk and lockfile
   for (const art of artifacts) {
     const fullPath = path.resolve(absRoot, art.path);
     const projectedContent = art.content.toString('utf8');
@@ -124,10 +170,13 @@ function detectDrift(projectRoot, adapters = 'all', options = {}) {
     } else {
       const diskContent = fs.readFileSync(fullPath, 'utf8');
       const diskSemanticHash = computeSemanticHash(diskContent);
+      const lockRecord = lockfile?.managedFiles?.[art.path];
+
+      // Check if disk matches projected render and recorded lockfile
+      const matchesProjection = diskSemanticHash === projectedSemanticHash;
+      const matchesLock = lockRecord ? diskSemanticHash === lockRecord.semanticTextSha256 : matchesProjection;
 
-      // Check if disk matches projected render
-      if (diskSemanticHash !== projectedSemanticHash) {
-        const lockRecord = lockfile?.managedFiles?.[art.path];
+      if (!matchesProjection || !matchesLock) {
         if (lockRecord && lockRecord.semanticTextSha256 !== diskSemanticHash) {
           findings[DRIFT_STATES.MODIFIED_MANAGED_OUTPUT].push({
             path: art.path,
@@ -151,14 +200,32 @@ function detectDrift(projectRoot, adapters = 'all', options = {}) {
     }
   }
 
-  // 4. Check for orphan files recorded in lockfile but no longer projected
+  // 6. Check for orphan files recorded in lockfile but no longer projected
+  // Task 1.4: Scoped strictly to the active adapters being checked
   if (lockfile && lockfile.managedFiles) {
+    const targetGenerators = new Set(artifacts.map(a => a.generator));
+    const adapterList = adapters === 'all' ? null : (Array.isArray(adapters) ? adapters : [adapters]);
+    const allowedPrefixes = adapterList ? adapterList.map(a => `${a}@`) : null;
+
     for (const [recordedPath, meta] of Object.entries(lockfile.managedFiles)) {
+      if (meta && meta.generator && allowedPrefixes) {
+        const matchesTarget = targetGenerators.has(meta.generator) ||
+          allowedPrefixes.some(p => meta.generator.startsWith(p));
+        if (!matchesTarget) {
+          continue; // Skip files from adapters not currently being verified
+        }
+      }
+
+      if (meta && meta.kind && meta.kind !== 'generated-adapter') {
+        continue;
+      }
+
       if (!projectedPaths.has(recordedPath)) {
         const fullRecorded = path.resolve(absRoot, recordedPath);
         if (fs.existsSync(fullRecorded)) {
           findings[DRIFT_STATES.ORPHAN_MANAGED_OUTPUT].push({
             path: recordedPath,
+            generator: meta.generator,
             reason: 'File recorded in lockfile is no longer generated by active skills/profile',
           });
           diffs.push({
@@ -178,9 +245,18 @@ function detectDrift(projectRoot, adapters = 'all', options = {}) {
 
   const totalFindings = Object.values(findings).reduce((acc, list) => acc + list.length, 0);
   const hasDrift = totalFindings > 0 || collisions.length > 0;
+  const hasError = findings[DRIFT_STATES.CORRUPT_LOCKFILE].length > 0 ||
+    findings[DRIFT_STATES.EMPTY_PROJECTION].length > 0 ||
+    findings[DRIFT_STATES.CONFIG_ERROR].length > 0;
+  const code = hasError ? 2 : (hasDrift ? 1 : 0);
+  const status = hasError ? 'error' : (hasDrift ? 'drift' : 'pass');
 
   return {
+    schemaVersion: '2.0.0',
+    status,
     hasDrift,
+    hasError,
+    code,
     totalFindings,
     findings,
     collisions,

package/.agents/adapters/gemini/export.js

@@ -103,7 +103,7 @@ ${mergedContent.trimStart()}
 }
 
 function render(context) {
-  const skills = collectSkillDirectories(context?.profile);
+  const skills = collectSkillDirectories(context?.profile, context?.projectRoot);
   const artifacts = [];
 
   for (const skill of skills) {

package/.agents/adapters/pure-compiler.js

@@ -86,11 +86,22 @@ function loadCompilerContext(projectRoot, options = {}) {
 
   // 2. Profile v2
   let profile = null;
-  try {
-    const profiles = require('../profiles.js');
-    profile = options.profile ? profiles.getProfile(options.profile, absRoot) : profiles.getActiveProfile(absRoot);
-  } catch {
-    profile = null;
+  const profiles = require('../profiles.js');
+  if (options.profile) {
+    try {
+      profile = profiles.getProfile(options.profile, absRoot);
+    } catch (err) {
+      throw new Error(`Failed to load profile '${options.profile}': ${err.message}`);
+    }
+    if (!profile) {
+      throw new Error(`Profile '${options.profile}' was specified but does not exist.`);
+    }
+  } else {
+    try {
+      profile = profiles.getActiveProfile(absRoot);
+    } catch {
+      profile = null;
+    }
   }
 
   // 3. Workspace Graph
@@ -139,6 +150,13 @@ function registerAdapter(name, adapter) {
   adaptersRegistry.set(name, adapter);
 }
 
+/**
+ * Unregisters an adapter from the pure compiler registry.
+ */
+function unregisterAdapter(name) {
+  adaptersRegistry.delete(name);
+}
+
 /**
  * Retrieves a registered adapter.
  */
@@ -165,9 +183,10 @@ function listAdapters() {
  */
 function renderAdapters(projectRoot, adapterNames = 'all', options = {}) {
   const context = loadCompilerContext(projectRoot, options);
-  const targets = adapterNames === 'all'
+  const rawTargets = adapterNames === 'all'
     ? listAdapters()
     : (Array.isArray(adapterNames) ? adapterNames : [adapterNames]);
+  const targets = rawTargets.flatMap(a => (typeof a === 'string' && a.includes(',') ? a.split(',').map(s => s.trim()).filter(Boolean) : a));
 
   const allArtifacts = [];
   const pathToArtifact = new Map();
@@ -436,8 +455,11 @@ module.exports = {
   createProvenanceHeader,
   loadCompilerContext,
   registerAdapter,
+  unregisterAdapter,
   getAdapter,
   listAdapters,
   renderAdapters,
   applyArtifacts,
+  computeExactHash,
+  computeSemanticHash,
 };

package/.agents/adapters/shared.js

@@ -12,17 +12,26 @@ const AGENTS_MD_PATH = path.join(AGENTS_DIR, 'AGENTS.md');
  * Plugins intentionally live outside `core/skills`, so adapters must use this
  * helper rather than enumerate the core directory themselves.
  */
-function collectSkillDirectories(overrideProfile = null) {
+function collectSkillDirectories(overrideProfile = null, projectRoot = null) {
+  let profile = overrideProfile;
+  let root = projectRoot;
+
+  if (overrideProfile && typeof overrideProfile === 'object') {
+    if (overrideProfile.projectRoot && !root) {
+      root = overrideProfile.projectRoot;
+    }
+  }
+
+  const effectiveRoot = root ? path.resolve(root) : process.cwd();
   const plugins = require(path.join(AGENTS_DIR, 'plugins.js'));
-  let dirs = plugins.collectAllSkillDirs()
+  let dirs = plugins.collectAllSkillDirs(effectiveRoot)
     .filter(dir => fs.existsSync(dir) && fs.statSync(dir).isDirectory())
     .sort((a, b) => path.basename(a).localeCompare(path.basename(b)));
 
-  let profile = overrideProfile;
   if (!profile) {
     try {
       const profilesEngine = require(path.join(AGENTS_DIR, 'profiles.js'));
-      profile = profilesEngine.getActiveProfile();
+      profile = profilesEngine.getActiveProfile(effectiveRoot);
     } catch {
       profile = null;
     }

package/.agents/adapters/zed/export.js

@@ -95,7 +95,7 @@ function render(context) {
     `### Available Skills\n`
   );
 
-  const skills = collectSkillDirectories(context?.profile);
+  const skills = collectSkillDirectories(context?.profile, context?.projectRoot);
   for (const skill of skills) {
     const res = buildSkillSection(skill);
     if (res) {