omniconductor 0.5.0 → 1.0.1

package/CHANGELOG.md

@@ -5,6 +5,74 @@ Format follows [Keep a Changelog](https://keepachangelog.com/); versioning is [S
 
 ## [Unreleased]
 
+## [1.0.1] — 2026-07-09
+
+### Fixed — manifest safety follow-up
+- **Checksum-protected uninstall on all six adapters** — normal manifest entries now record the emitted file's SHA-256. `--uninstall` removes or restores only an unchanged emitted file; a user-modified file (and legacy manifest entries without a checksum) is preserved with a warning instead of being deleted.
+- **Lossless full-mode re-install** — an unmodified re-install retains the original pre-CONDUCTOR backup rather than replacing it with the prior generated bundle. Backup names are collision-safe within the same second. If a generated file was edited before an update, that edit is backed up before replacement.
+- **Owned marked blocks only** — Gemini/Codex replace an existing `conductor:block` only when exactly one matching marker pair is present, the current manifest owns it, and its content hash is unchanged. Foreign, malformed, duplicate, or customized markers abort without changing the host file.
+- **Regression coverage** — `tools/test-install-modes.sh` now asserts original-baseline restoration after two full installs, preservation of user edits during uninstall for every adapter, and non-destructive foreign-marker rejection for Gemini/Codex.
+- **Private-source/public-mirror policy** — the source repository remains private; a fail-closed filtered snapshot is the only route to the public mirror and npm release. `sync-public.sh HEAD --check` is network-free and runs in CI to reject denied paths or private tokens before merge. See `docs/PUBLICATION-POLICY.md`.
+
+## [1.0.0] — 2026-07-09
+
+### Added — install modes (audit follow-up #4; the final pre-1.0 feature)
+- **`--mode=full|minimal|strict|recipes-only|reflector-only` on all six adapters** (npx CLI forwards it; manifest stamps `"mode"`). `full` = unchanged default. `minimal` = discipline text + docs only (no agents/hooks/Reflector runtime). `strict` = abort (exit 3) instead of touching an existing baseline. `recipes-only` = à la carte (requires `--recipes=`). `reflector-only` = the self-improvement loop standalone — the least-conflicting install for projects already on Spec Kit / BMAD. — **ADR-044**.
+- **Marked append-blocks for single-file tools (Gemini/Codex)** — à-la-carte modes APPEND `<!-- conductor:block … -->` to an existing `GEMINI.md`/`AGENTS.md` instead of overwriting; the manifest tracks `type: block` + content `sha256` + `created_file`, and `--uninstall` strips the block only when unmodified (a customized block is left in place with a warning). Windsurf needed no blocks — its rules are per-file under `.devin/rules/`.
+- **Framework detection** — the installer detects Spec Kit (`.specify/`) / BMAD (`_bmad`/`.bmad-core`) and *suggests* an à-la-carte mode. Suggest only; never auto-switches.
+- **`tools/test-install-modes.sh`** — per-tool mode-behavior harness (strict abort incl. secondary rules surfaces, à-la-carte emission sets, **byte-lossless block round-trips (checksum-asserted)**, cross-mode block cleanup, customized-block preservation, zero-valid-recipes failure); CI job `install-modes` runs it for all six adapters.
+- **`install.ala_carte` in adapter metadata** — the block-vs-per-file à-la-carte strategy is single-sourced in `metadata.json` (new M9 consistency check + a column in the generated outputs table). npm-registry lag now surfaces as a non-fatal `WARN[A3]` in the stale-token check.
+
+### Changed
+- ROADMAP P4 marked **Done** — v1.0.0 is the public release (beta feedback + marketplace listing move post-1.0). COMPARISON's "pre-1.0" maturity framing retired (tokenized per the ADR-039 process rule).
+- Claude adapter: `INSTALLED_HOOKS` initialized before mode branches; recipes step creates `.claude/rules/` itself (à-la-carte no longer depends on step 1).
+
+### Milestone
+- **v1.0.0** — all five features from the 2026-07-09 audit-follow-up plan are shipped (#3 stale-token CI + #2 metadata single-source in 0.7.0; #1 doctor + #5 live-verify + #2 slice 2 doc generation in 0.8.0; #4 install modes here). The anti-drift system is closed-loop: metadata is the single source, CI regenerates and verifies the docs, doctor checks installs, live-verify records reality.
+
+## [0.8.0] — 2026-07-09
+
+### Added — metadata consumers (audit follow-up #1 + #5 + #2 slice 2)
+- **`omniconductor doctor <target>` (3rd CLI command)** — read-only installed-project health check anchored on `.conductor-manifest.json`. Seven groups: manifest validity · version drift (install stamp vs running CLI) · file integrity · stale legacy paths (from adapter `metadata.json`, `--legacy-cursorrules` aware) · hook validity (`.json` parses, `.sh` executable + `bash -n`) · doc-link liveness · stale-claim scan (reuses `tools/stale-tokens.txt` semantics). OK/WARN/FAIL → exit 0/1/2, `--json` for machines. CI runs a positive + negative doctor smoke per adapter. Prior-art differentiated by scope (per-project asset health), not name. — **ADR-041**.
+- **Generated doc regions from metadata (`tools/generate-adapter-docs.js`)** — the live-verification status table (`docs/ADAPTER-LIVE-VERIFICATION.md`) and a new "Adapter outputs at a glance" table (`docs/COMPATIBILITY-MATRIX.md`) are now rendered from `adapters/*/metadata.json`; `--check` fails CI on drift. All remaining hand-written live-verification dates/CLI versions on living surfaces replaced with date-free pointers to the generated table (milestone history keeps "first live-verified" dates). — **ADR-042**.
+- **`tools/live-verify.sh` — automated live rule-loading verification** — per tool: throwaway install → headless probe (read-only) → deterministic grade (≥3/5 universal rule names + CURRENT_WORK; no LLM judge) → writes `live_verification` into `metadata.json` and regenerates the doc tables. Honest SKIP when a CLI isn't installed; >90-day freshness WARN; local-first (CI can't hold six authenticated CLIs). **First run: Claude Code newly live-verified (5/5 rules, Claude Code 2.1.205) and Codex re-verified (4/5, codex-cli 0.144.0), both 2026-07-09.** — **ADR-043**.
+
+### Changed
+- Claude adapter manifest now stamps `"adapter": "claude"` (the other five adapters already stamped theirs) — doctor uses it; footprint inference covers pre-0.8 installs.
+- `bin/omniconductor.js` usage/comments: `doctor` added; stale "ADR-018" citation corrected to ADR-002/023/025.
+
+## [0.7.0] — 2026-07-09
+
+### Added — anti-drift guards (audit follow-up #3 + #2 slice 1)
+- **CI stale-token + version-stamp check** — `tools/check-stale-tokens.sh` + data file `tools/stale-tokens.txt` (`pattern⇥reason⇥hint⇥allow_regex`, inline `stale-ok:` waivers) as a new CI job. Class A mechanizes the R7 stamps (README status line must stamp the exact `package.json` version — **now re-stamped on every release, patches included**; CHANGELOG must have the section). Class B fails CI on known-false claims (seeded ~15 tokens from the verified drift inventory: `.codex/codex.md`-as-current, unqualified `.windsurf/rules`, "no npx", "❌ No hooks/sub-agents", "Single model per session", …). Process rule: a change that flips a fact adds the now-false claim to the token list in the same PR. — **ADR-039**.
+- **Adapter metadata single-source** — `adapters/<tool>/metadata.json` ×6 (outputs / reflector outputs / legacy paths / tier / two-axis capabilities per ADR-031 / live-verification / headless CLI) + `tools/check-adapter-metadata.sh` CI job asserting 8 invariants (paths exist in `transform.sh` and the validator; legacy paths handled in code; verified-status dates single-sourced in `docs/ADAPTER-LIVE-VERIFICATION.md`; headless CLIs known to `run-weekly.sh`; matrix tier rows agree). The bash transforms stay dependency-free — metadata validates them, never drives them (ADR-002/023/025). — **ADR-040**.
+
+### Fixed (residual doc drift the 0.6.1 point-fix missed — found by re-verification + the new checker itself)
+- **5 non-Claude adapter READMEs** rewritten to the ADR-031 capability-vs-emission framing (were still "❌ No sub-agent / No hooks / single model" as tool limitations, with pre-P1 rule names in the install trees, "npx not yet available", and a **Codex tier contradiction (README said T3, matrix says T2)**); Reflector emission (`--recipes=self-improvement`) now documented per adapter.
+- **`core/**` reference tables** — `.codex/codex.md` → `AGENTS.md` and `.windsurf/rules/` → `.devin/rules/` in universal-rules/recipes READMEs, spec-as-you-go, anti-pattern examples; meta-discipline cross-tool enforcement table de-staled.
+- **docs/** — ARCHITECTURE (adapter output map, always-loaded row, orchestrator paragraph), INDEX (package row, adapter rows, Codex live-verified, P4 row: npm published), MANUAL-INSTALL (all-6-adapters decision table, "until adapter ships" headers, "No hooks, no sub-agents" limitations), MIGRATION (modern `.mdc` flow, guard-hook phrasing), HOW-IT-WORKS (Gemini/Windsurf lost-feature tables), VISION (`.devin/rules/` tree).
+- **First machine-scan catches** (missed by two human sweeps + a 3-agent verification pass): `adapters/codex/transform-spec.md` body still specced `.codex/codex.md`, `VISION.md` tree, and two "(planned / roadmap — not yet available): npx …" blocks in adapter READMEs — including a claude README pointer to the retired v0.1 archive installer.
+
+### Changed
+- Version-stamp policy: patch releases now re-stamp the README status line (supersedes the 0.6.1 "feature-baseline stamp" stance) — enforced by CI. — **ADR-039**.
+- README's "New in" blockquote now carries only the current release (older summaries drift and were an unguarded second changelog); history lives here.
+
+### Notes
+- **npm registry skips 0.6.1**: 0.6.1 was tagged + released on GitHub but never `npm publish`-ed; the registry goes 0.6.0 → 0.7.0 directly. Everything in 0.6.1 is contained in 0.7.0.
+
+## [0.6.1] — 2026-07-09
+
+### Fixed (documentation + adapter output truth-source; from an external audit)
+- **Manifest version bug** — all 6 adapters hardcoded `"version": "v0.2.0"` in the emitted `.conductor-manifest.json`; now read dynamically from `package.json` (installs stamp the real version). Fixes bogus install-history / rollback / bug-report data.
+- **Adapter capability strings** — Codex/Gemini/Windsurf/Copilot emitted output claimed the tool has "no hooks / no sub-agents / single model"; corrected to the ADR-031 *capability vs CONDUCTOR-emission* framing (the tools support these; CONDUCTOR emits rule text + the Reflector loop, full emission Phase 2).
+- **Doc drift to v0.6.0 reality** — README/ROADMAP/COMPARISON/HOW-IT-WORKS/ARCHITECTURE/VISION/COMPATIBILITY-MATRIX/ADAPTER-LIVE-VERIFICATION/SUPPORTED-FEATURES: all 6 tools have working adapters (not "adapter-less"), npm package exists (no "no npx"), Codex output is `AGENTS.md` (not `.codex/codex.md`), Windsurf emits `.devin/rules/` (not "pending"), Codex is live-verified (single-sourced across docs), Claude hook count reconciled (10 hooks / 5 PreToolUse + 5 Stop).
+- **npm completeness** — `package.json` `files` now ships the docs the README links to (COMPATIBILITY-MATRIX, ADAPTER-LIVE-VERIFICATION, PUBLISH-GUIDE, DESIGN-DECISIONS, COMPARISON), so npm-installed users don't hit dead links.
+
+## [0.6.0] — 2026-07-07
+
+### Added
+- **`loop-engineering` recipe + `pretool-loop-guard` PreToolUse hook** — opt-in discipline for bounded, externally-verified agent loops (G1–G6): explicit done-criterion, iteration+token budget, require-progress, escalate-on-stall, **verify externally never by self-judgment**, oscillation/infinite-loop guard. Grounded in a 5-source verification pass (Huang/DeepMind "Cannot Self-Correct Yet", CRITIC, Reflexion, "When Agents Do Not Stop", Anthropic *Building Effective Agents* — verify hierarchy rules/tests > visual > LLM-judge). The Claude hook is a non-blocking `permissionDecision: ask` soft-warn that self-gates on the recipe, detects same-action-repeat / runaway tool-call budget, is fail-open, and honors `CONDUCTOR_SKIP_LOOP_GUARD` / `CONDUCTOR_LOOP_REPEAT_MAX` / `CONDUCTOR_LOOP_BUDGET` / `CONDUCTOR_LOOP_COOLDOWN_SECONDS`. Recipe count **12 → 13**, hook templates **9 → 10**. Hook is Claude-only (ADR-034); other tools use the rule text. — **ADR-038**.
+
 ## [0.5.0] — 2026-07-07
 
 ### Added

package/README.md

@@ -6,11 +6,13 @@ Write your project's rules, workflow, and discipline ONCE. Install into any AI c
 
 > Born from one year of production iteration at LFamily Labs — the rules, agents, hooks, and memory patterns that survived real shipping pressure.
 
-> **Status (v0.5.0 — 2026-07-07)**: All 6 adapters ship a working `transform.sh` — **Claude Code** (full: rules + hooks + sub-agents + per-call model routing), **Cursor**, **GitHub Copilot** (one install covers 5 IDEs), **Gemini CLI** (`GEMINI.md` + `.gemini/styleguide.md`), **Codex** (`AGENTS.md`), **Windsurf / Devin Desktop** (`.windsurfrules` + `.devin/rules/*.md`). Published to npm as [`omniconductor`](https://www.npmjs.com/package/omniconductor) (v0.5.0). Output is emit-verified (format-validator + CI on all 6); live runtime consumption by Gemini / Codex / Windsurf is adopter-pending — see [`docs/ADAPTER-LIVE-VERIFICATION.md`](./docs/ADAPTER-LIVE-VERIFICATION.md). Manual install ([`docs/MANUAL-INSTALL.md`](./docs/MANUAL-INSTALL.md)) remains a fallback.
+> **Status (v1.0.1 — 2026-07-09)**: All 6 adapters ship a working `transform.sh` — **Claude Code** (full: rules + hooks + sub-agents + per-call model routing), **Cursor**, **GitHub Copilot** (one install covers 5 IDEs), **Gemini CLI** (`GEMINI.md` + `.gemini/styleguide.md`), **Codex** (`AGENTS.md`), **Windsurf / Devin Desktop** (`.windsurfrules` + `.devin/rules/*.md`). This release is ready for npm publication as [`omniconductor`](https://www.npmjs.com/package/omniconductor). Output is emit-verified (format-validator + CI on all 6); **Claude Code + Codex are additionally live-verified** by the automated headless probe (`tools/live-verify.sh`), the rest are live-pending — current per-tool status in the generated table in [`docs/ADAPTER-LIVE-VERIFICATION.md`](./docs/ADAPTER-LIVE-VERIFICATION.md). Manual install ([`docs/MANUAL-INSTALL.md`](./docs/MANUAL-INSTALL.md)) remains a fallback.
 >
-> **New in 0.5.0**: an opt-in **`git-hygiene` recipe** — shared-repo discipline (no orphan worktrees, push-don't-hoard, merge=delete-branch, backup≠applied) that stops merged work from *looking* lost; Claude adds a non-blocking Stop-hook reminder, other tools use the rule text (ADR-037). **In 0.4.0**: instruction-fidelity-first **token economy** (lossless context editing before lossy compaction + output-brevity discipline; ADR-035/036, [`docs/CONTEXT-EDITING-GUIDE.md`](./docs/CONTEXT-EDITING-GUIDE.md)). **In 0.3.0**: opt-in **self-improvement / Reflector loop** (propose-only; ADR-030/032/033) + a first-party-verified **compatibility-matrix correction** (all six tools ship hooks / sub-agents / model routing; ADR-031). Full history: [`CHANGELOG.md`](./CHANGELOG.md).
+> **New in 1.0.1**: manifest-backed install/uninstall is now checksum-safe: user-modified emitted files are retained, original baselines survive re-installs, and Gemini/Codex only replace manifest-owned, unmodified marked blocks. 1.0 introduced install modes, anti-drift guards, `doctor`, generated doc tables, and live verification. Earlier releases: [`CHANGELOG.md`](./CHANGELOG.md).
 >
-> Marketplace listing (VSCode Marketplace + Open VSX) remains **Phase 2** (post-0.5) — see ADR-023.
+> **Publication boundary**: development is maintained in a private source repository; users receive a deliberately filtered public mirror and npm package. The private source repository must never be made public. See [`docs/PUBLICATION-POLICY.md`](./docs/PUBLICATION-POLICY.md).
+>
+> Marketplace listing (VSCode Marketplace + Open VSX) remains **Phase 2** (post-0.6) — see ADR-023.
 
 ---
 
@@ -21,7 +23,7 @@ Write your project's rules, workflow, and discipline ONCE. Install into any AI c
 - [Tool coverage matrix](#tool-coverage-matrix)
 - [Install paths (3 options)](#install-paths)
 - [Cross-platform: Mac and Windows](#cross-platform-mac-and-windows)
-- [Recipes catalog (12)](#recipes-catalog)
+- [Recipes catalog (13)](#recipes-catalog)
 - [`transform.sh` options reference](#transformsh-options-reference)
 - [Update / Maintenance / Uninstall](#update--maintenance--uninstall)
 - [Token measurement & KPI baseline](#token-measurement--kpi-baseline)
@@ -74,7 +76,41 @@ bash ~/conductor/adapters/claude/transform.sh . \
 # 5. Claude Code 재시작 → /agents 로 6 에이전트 확인
 ```
 
-다른 도구는 [Install paths](#install-paths) 참조. Windows 는 [Cross-platform](#cross-platform-mac-and-windows) 참조.
+### 설치 방법 (3가지)
+
+- **Path A — `npx` (권장, 클론 불필요)**: `npx omniconductor init --target=<tool> <dir>` — `<tool>` = `claude` / `cursor` / `copilot` / `gemini` / `codex` / `windsurf`. `list` · `doctor` (설치 상태 진단, 읽기 전용) · `--dry-run` · `--recipes=A,B` · `--mode=<preset>` (v1.0: `full`/`minimal`/`strict`/`recipes-only`/`reflector-only` — Spec Kit·BMAD 와 공존용 à-la-carte 포함) · `--uninstall` 지원.
+- **Path B — bash 어댑터**: CONDUCTOR 클론 후 `bash adapters/<tool>/transform.sh <dir> [--recipes=...] [--dry-run]`.
+- **Path C — 수동 복사**: 스크립트 없이 `cp`/`cat` 으로. [`docs/MANUAL-INSTALL.md`](./docs/MANUAL-INSTALL.md) 참조.
+- **Windows**: Git Bash 또는 WSL2 — [Cross-platform](#cross-platform-mac-and-windows) 참조.
+
+### Recipe 카탈로그 (13개, opt-in)
+
+5개 universal rule 은 항상 설치되고, recipe 는 프로젝트에 맞게 골라 담습니다 (`--recipes=`).
+
+| Recipe | 설치 시점 |
+|---|---|
+| `coding-conventions` | TypeScript/TSX — 네이밍·Result 패턴·에러 처리 규약 |
+| `monorepo` | npm/pnpm workspaces (apps + packages) |
+| `i18n` | 2개 이상 로케일 — 새 텍스트는 모든 로케일 동시 |
+| `branch-strategy` | main/develop/release 3-브랜치 모델 |
+| `web-mobile-parity` | 웹+모바일 로직 공유 — 버그·기능 양쪽 반영 |
+| `auto-mock-data` | DB 스키마 변경 시 mock seed 자동생성 |
+| `tdd` | 테스트 프레임워크 + Red-Green-Refactor |
+| `debugging` | 재현→원인→수정→회귀테스트 (증상 패치 금지) |
+| `database-discipline` | 관계형 DB — 마이그레이션 우선·접근제어·dev/prod 패리티 |
+| `design-system` | 디자인 토큰 시스템 — 토큰 우선·컴포넌트 재사용·접근성 |
+| `self-improvement` | 세션 회고 Reflector (propose-only, 사람이 승인) |
+| `git-hygiene` | git 프로젝트 (특히 멀티세션/공유 repo) — worktree·push·브랜치 위생 |
+| `loop-engineering` | 에이전트 루프 (fix→verify 반복) — 종료조건·예산·**외부검증** |
+
+### 업데이트 / 제거
+
+- **업데이트**: CONDUCTOR 클론을 `git pull` 후 어댑터 재실행 (또는 `npx omniconductor` 최신 버전).
+- **제거**: `bash adapters/<tool>/transform.sh <dir> --uninstall` — manifest 기반으로 CONDUCTOR 가 넣은 파일만 복원/삭제 (직접 커스터마이즈한 건 보존).
+
+### 상세 레퍼런스 (영문)
+
+도구별 지원 매트릭스, `transform.sh` 전체 옵션, 토큰 측정, 트러블슈팅, FAQ 는 아래 영문 섹션을 참조하세요: [Tool coverage matrix](#tool-coverage-matrix) · [transform.sh options](#transformsh-options-reference) · [Troubleshooting](#troubleshooting) · [FAQ](#faq).
 
 ---
 
@@ -143,7 +179,7 @@ The columns below show **CONDUCTOR emission today** (⚠️ = the tool supports
 
 Full per-feature matrix + first-party footnotes: [`docs/COMPATIBILITY-MATRIX.md`](./docs/COMPATIBILITY-MATRIX.md).
 
-> **CLI wrapper**: `npx omniconductor init --target=<tool> <dir>` (published to npm) — or `node bin/omniconductor.js init --target=<tool> <dir>` from a local clone — dispatches to these same adapter scripts, with `list`, `--dry-run`, `--recipes=`, and `--uninstall`.
+> **CLI wrapper**: `npx omniconductor init --target=<tool> <dir>` (published to npm) — or `node bin/omniconductor.js init --target=<tool> <dir>` from a local clone — dispatches to these same adapter scripts, with `list`, `--dry-run`, `--recipes=`, and `--uninstall`. **`npx omniconductor doctor <dir>`** (v0.8+) health-checks an existing install read-only — manifest validity, version drift, file integrity, stale legacy paths, hook validity, doc links, stale claims — exit 0/1/2 (`--json` for machines).
 
 > **What you keep going Claude → other tools**: all rule text, doc templates, the 4-type memory pattern, the workflow phases, and the opt-in Reflector loop (emitted on all six). **What is still Claude-only in CONDUCTOR's *emission* today**: auto-blocking hooks, per-call model routing, sub-agent dispatch — a Phase-2 emission gap, **not** a tool limitation (the tools support them; Windsurf is the one real exception, for Stop-style hooks). The discipline is portable; the enforcement is becoming portable as adapter emission catches up.
 
@@ -214,7 +250,7 @@ bash ~/conductor/adapters/claude/transform.sh . --recipes=monorepo,coding-conven
 
 ### Path C — Manual file copy (no script, fully manual)
 
-For tools without an adapter (Gemini / Codex / Windsurf), or for adopters in constrained environments. Step-by-step `cp` / `cat` commands per tool, with frontmatter conversion cheat sheet, are in:
+All 6 tools have a working adapter (Path A/B), so this path is a fallback — for adopters in constrained environments (no bash / no Node) or those who want to see every file before it lands. Step-by-step `cp` / `cat` commands per tool, with frontmatter conversion cheat sheet, are in:
 
 → **[`docs/MANUAL-INSTALL.md`](./docs/MANUAL-INSTALL.md)**
 
@@ -248,7 +284,7 @@ For tools without an adapter (Gemini / Codex / Windsurf), or for adopters in con
 
 ## Recipes catalog
 
-12 opt-in recipes layer project-specific discipline on top of the 5 universal rule bundles. Universal rules always install; recipes are pick-and-mix.
+13 opt-in recipes layer project-specific discipline on top of the 5 universal rule bundles. Universal rules always install; recipes are pick-and-mix.
 
 | Recipe | Install when | Adds |
 |---|---|---|
@@ -264,6 +300,7 @@ For tools without an adapter (Gemini / Codex / Windsurf), or for adopters in con
 | `design-system` | Design-token system in use | Tokens over raw hex, component reuse, accessibility + spacing scale adherence |
 | `self-improvement` | Want periodic, human-approved review of your sessions | A **Reflector** reads recent session trajectories + git and **proposes** lessons-learned to `docs/REFLECTION-PROPOSALS.md` (propose-only; you apply). Emits a session-end trajectory hook, a `/reflect` command, a reflector agent, a deterministic prune, and a weekly runner + scheduling guide — on all six tools. See ADR-030/032/033. |
 | `git-hygiene` | Any git project — esp. multi-session/agent repos or protected branches | Shared-repo discipline (G1–G7): no unrequested worktrees, push-don't-hoard, merge=delete-branch, backup≠applied (verify by real code), no reckless force/rebase on shared repos, bundle PRs for CI, session-end hygiene check. Claude adds a non-blocking Stop-hook reminder; other tools use the rule text. See ADR-037. |
+| `loop-engineering` | Any agentic loop (generate→verify→fix→re-verify, test-fix, multi-step) | Bounded, externally-verified loops (G1–G6): explicit done-criterion, iteration+token budget, require-progress, escalate-on-stall, **verify externally never by self-judgment**, oscillation guard. Grounded in the research that self-correction without an external check is unreliable. Claude adds a non-blocking PreToolUse loop-guard (repeat/runaway detection); other tools use the rule text. See ADR-038. |
 
 #### Decision tree
 
@@ -280,6 +317,7 @@ Relational DB + migrations? YES → database-discipline
 Design-token system?      YES → design-system
 Want weekly session self-review? YES → self-improvement
 Use git (esp. shared/multi-session)? YES → git-hygiene
+Agent loops / iterative fix-verify?  YES → loop-engineering
 ```
 
 #### Recommended combos
@@ -304,7 +342,8 @@ Usage: bash adapters/<tool>/transform.sh <target-project> [options]
 | Option | Description |
 |---|---|
 | `<target-project>` | Project directory to install into (required). `.` for current dir. |
-| `--recipes=A,B,C` | Comma-separated recipes from the 12 in `core/recipes/`. |
+| `--recipes=A,B,C` | Comma-separated recipes from the 13 in `core/recipes/`. |
+| `--mode=<m>` | Install preset (v1.0, ADR-044): `full` (default) · `minimal` (rule text + docs only — no agents/hooks/Reflector runtime) · `strict` (abort with exit 3 instead of touching an existing baseline) · `recipes-only` (à la carte: ONLY the selected recipes; single-file tools get a hash-tracked marked block appended, stripped losslessly on uninstall) · `reflector-only` (the self-improvement loop standalone — least-conflicting when coexisting with Spec Kit / BMAD, which the installer detects and suggests, never auto-switches). |
 | `--dry-run` | Preview only — no files written. |
 | `--measure-baseline` | Run `tools/measure-tokens.sh --latest` after install; save CSV; auto-show anti-patterns if cache hit < 95%. |
 | `--no-prompt` | Skip wizard, apply defaults (CI-safe). Combine with `--recipes` and `--measure-baseline` as needed. |
@@ -313,13 +352,13 @@ Usage: bash adapters/<tool>/transform.sh <target-project> [options]
 | `--force` | Bypass uninstall safety gates (active rebase/merge, missing manifest). |
 | `-h` `--help` | Print usage. |
 
-**Recipe names** (12): `web-mobile-parity`, `i18n`, `monorepo`, `branch-strategy`, `auto-mock-data`, `coding-conventions`, `tdd`, `debugging`, `database-discipline`, `design-system`, `self-improvement`, `git-hygiene`.
+**Recipe names** (13): `web-mobile-parity`, `i18n`, `monorepo`, `branch-strategy`, `auto-mock-data`, `coding-conventions`, `tdd`, `debugging`, `database-discipline`, `design-system`, `self-improvement`, `git-hygiene`, `loop-engineering`.
 
 #### File overwrite behavior
 
 | File | Already exists |
 |---|---|
-| `CLAUDE.md` / `.cursorrules` / `.github/instructions/all.instructions.md` | Backed up to `.conductor-backup-YYYYMMDD-HHMMSS`, then overwritten |
+| `CLAUDE.md` / `GEMINI.md` / `AGENTS.md` / `.github/copilot-instructions.md` | Backed up to `.conductor-backup-YYYYMMDD-HHMMSS`, then overwritten (`--mode=strict`: aborts instead) |
 | `.claude/rules/*.md` / `.cursor/rules/*.mdc` / `.github/instructions/*.instructions.md` | Backed up + overwritten |
 | `.claude/agents/*.md` | Backed up + overwritten |
 | `.claude/hooks/*.sh` | Overwritten |
@@ -336,7 +375,7 @@ Usage: bash adapters/<tool>/transform.sh <target-project> [options]
 cd ~/conductor && git pull
 ```
 
-Then re-run `transform.sh` on each target — installs are idempotent. Existing files get fresh timestamped backups before overwrite (manifest tracks every emitted file, see ADR-020).
+Then re-run `transform.sh` on each target — installs are idempotent. An unchanged CONDUCTOR file retains its original pre-install backup; a user-edited emitted file is backed up before replacement. Manifest entries record the emitted SHA-256 to make uninstall non-destructive.
 
 ### Re-measure cache hit (1 week after install)
 
@@ -359,9 +398,10 @@ bash ~/conductor/adapters/claude/transform.sh ~/your-project --uninstall
 ```
 
 Behavior:
-- For each manifested file: restore backup if one exists, otherwise delete.
-- Adopter-customized files (anything not in the manifest) are preserved.
-- `.conductor-backup-*` siblings cleaned up.
+- For each unchanged manifested file: restore its original backup if one exists, otherwise delete it.
+- A manifested file whose SHA-256 differs (or a legacy manifest without a checksum) is treated as user-modified and left in place with a warning; any original backup is retained for recovery.
+- Adopter-customized files outside the manifest are preserved.
+- Manifest-history backup siblings are cleaned up; retained original backups are never deleted when a user-modified file needs them.
 - Best-effort `rmdir` of empty `.claude/{rules,agents,hooks}/`.
 
 ---
@@ -412,7 +452,7 @@ diff CLAUDE.md.conductor-backup-* CLAUDE.md
 
 #### "recipe not found" warning
 
-Check recipe name spelling. Available: `web-mobile-parity`, `i18n`, `monorepo`, `branch-strategy`, `auto-mock-data`, `coding-conventions`, `tdd`, `debugging`, `database-discipline`, `design-system`, `self-improvement`, `git-hygiene`.
+Check recipe name spelling. Available: `web-mobile-parity`, `i18n`, `monorepo`, `branch-strategy`, `auto-mock-data`, `coding-conventions`, `tdd`, `debugging`, `database-discipline`, `design-system`, `self-improvement`, `git-hygiene`, `loop-engineering`.
 
 #### "Tool doesn't recognize the new rules"
 
@@ -461,7 +501,7 @@ Claude Code uses `~/.claude/projects/.../memory/`; other tools use `docs/memory/
 
 #### Architecture Decision Records (`docs/DESIGN-DECISIONS.md`)
 
-36 ADRs cover the foundational decisions. Highlights:
+44 ADRs cover the foundational decisions. Highlights:
 
 | ADR | Topic | Why it matters |
 |---|---|---|
@@ -495,7 +535,7 @@ A: Open VSX. Cursor is a VSCode fork but cannot pull from Microsoft's marketplac
 
 **Q: My project uses Go / Python / Rust, not TypeScript.**
 
-A: Skip `coding-conventions` (TypeScript-specific). The 5 universal rule bundles and the other 11 recipes are stack-agnostic.
+A: Skip `coding-conventions` (TypeScript-specific). The 5 universal rule bundles and the other 12 recipes are stack-agnostic.
 
 **Q: Windows native PowerShell?**
 
@@ -511,7 +551,7 @@ A: See `docs/COMPARISON.md` for the conflict-resolution decision tree (3 pattern
 
 **Q: Idempotent re-install? Will it clobber my edits?**
 
-A: Re-running `transform.sh` is safe. Every overwrite creates a timestamped backup (`.conductor-backup-YYYYMMDD-HHMMSS`); your prior state is recoverable. `docs/CURRENT_WORK.md` and other doc templates are NEVER overwritten if they already exist.
+A: Re-running `transform.sh` is safe. An unchanged emitted file keeps its first pre-CONDUCTOR backup; an edited emitted file is snapshotted before replacement. `--uninstall` preserves any file whose emitted SHA-256 no longer matches, rather than deleting it. `docs/CURRENT_WORK.md` and other doc templates are NEVER overwritten if they already exist.
 
 **Q: Use Conductor before all 6 adapters ship?**
 

package/VISION.md

@@ -32,7 +32,7 @@ This is the problem CONDUCTOR solves.
 
 ## The solution
 
-> **한글:** 프로젝트의 규율을 도구 독립적인 포맷으로 **단 한 번** 작성하세요. 도구별로 명령어 하나만 실행하면, CONDUCTOR 가 해당 도구에 맞는 파일을 올바른 경로·올바른 포맷으로 생성합니다 (`core/` 에 룰을 한 번 쓰면 → `.claude/` / `.cursor/rules/` / `.github/instructions/` / `GEMINI.md` / `.codex/codex.md` / `.windsurfrules` 로 변환). 같은 Plan → Architecture → Tasks 워크플로가, 그날 개발자가 어떤 도구를 쓰든 프로젝트의 모든 에이전트를 동일하게 지배하게 됩니다.
+> **한글:** 프로젝트의 규율을 도구 독립적인 포맷으로 **단 한 번** 작성하세요. 도구별로 명령어 하나만 실행하면, CONDUCTOR 가 해당 도구에 맞는 파일을 올바른 경로·올바른 포맷으로 생성합니다 (`core/` 에 룰을 한 번 쓰면 → `.claude/` / `.cursor/rules/` / `.github/instructions/` / `GEMINI.md` / `AGENTS.md` / `.windsurfrules` 로 변환). 같은 Plan → Architecture → Tasks 워크플로가, 그날 개발자가 어떤 도구를 쓰든 프로젝트의 모든 에이전트를 동일하게 지배하게 됩니다.
 
 Write your project's discipline ONCE in a tool-agnostic format. Run a single command per tool, and CONDUCTOR generates the right files at the right paths in the right format for that specific tool.
 
@@ -51,7 +51,7 @@ target-project/
   ├── .github/instructions/ (if --target=copilot)
   ├── GEMINI.md             (if --target=gemini)
   ├── AGENTS.md             (if --target=codex)
-  └── .windsurf/rules/      (if --target=windsurf)
+  └── .devin/rules/         (if --target=windsurf)
 ```
 
 The same Plan → Architecture → Tasks workflow now governs every agent in the project, regardless of which tool the developer happens to be using that day.

package/adapters/README.md

@@ -6,12 +6,12 @@ One adapter per supported tool. Each reads the tool-agnostic content under `core
 
 ```
 adapters/
-├── claude/        # Claude Code (T1 — full support)
-├── cursor/        # Cursor (T1 — partial; no sub-agents/hooks)
+├── claude/        # Claude Code (T1 — reference implementation, full emission)
+├── cursor/        # Cursor (T1)
 ├── copilot/       # GitHub Copilot (T2)
 ├── gemini/        # Gemini CLI (T2)
-├── codex/         # OpenAI Codex (T3)
-└── windsurf/      # Windsurf (T3)
+├── codex/         # OpenAI Codex (T2)
+└── windsurf/      # Windsurf / Devin Desktop (T3)
 ```
 
 Each adapter directory contains:
@@ -75,11 +75,11 @@ The Layer-1 universal-rules use `applies_to:` front-matter for routing hints. Ea
 | (Cursor) | `globs:\n  - "**/*.ts"\n  - "**/*.tsx"` |
 | (Copilot) | `applyTo: '**/*.ts,**/*.tsx'` |
 | (Gemini / Codex) | (bundled — no per-pattern routing) |
-| (Windsurf) | (bundled into `.windsurf/rules/`) |
+| (Windsurf) | (bundled into `.devin/rules/`; legacy `.windsurf/rules/` still read) |
 
 | `core/` front-matter | Adapter behavior |
 |---|---|
-| `always_loaded: true` | Merge content into the always-loaded baseline file (`CLAUDE.md`, `.cursorrules`, `applyTo: '**'`, `GEMINI.md`, `.codex/codex.md`, `.windsurfrules`) |
+| `always_loaded: true` | Merge content into the always-loaded baseline (`CLAUDE.md`, `.cursor/rules/*.mdc` `alwaysApply: true`, `.github/copilot-instructions.md`, `GEMINI.md`, `AGENTS.md`, `.windsurfrules`) |
 | `always_loaded: false` (or absent) | Emit as a separate rule file with appropriate per-pattern scoping |
 
 ## Adapter-specific extensions
@@ -105,8 +105,8 @@ bash adapters/<tool>/transform.sh <target> [--dry-run]
 # Or by absolute path:
 /path/to/conductor/adapters/<tool>/transform.sh /path/to/target [--dry-run]
 
-# (planned / roadmap — not yet available):
-# npx omniconductor init --target=<tool> [target-dir]
+# Or via the npm CLI (no clone needed):
+npx omniconductor init --target=<tool> [target-dir]
 ```
 
 ## Status (P0 foundation)

package/adapters/claude/README.md

@@ -19,11 +19,8 @@ bash adapters/claude/transform.sh <target> [--dry-run]
 # Or by absolute path:
 /path/to/conductor/adapters/claude/transform.sh /path/to/target [--dry-run]
 
-# (planned / roadmap — not yet available):
-# npx omniconductor init --target=claude [target-dir]
-
-# Today (P0 foundation): use the v0.1 archive:
-/path/to/conductor/archive/v0.1/install.sh /path/to/target
+# Or via the npm CLI (no clone needed):
+npx omniconductor init --target=claude [target-dir]
 ```
 
 ## What gets installed
@@ -45,7 +42,7 @@ bash adapters/claude/transform.sh <target> [--dry-run]
 │   │   ├── quality-gates.md
 │   │   ├── operations.md
 │   │   └── meta-discipline.md
-│   ├── hooks/                                 # 9 hook scripts
+│   ├── hooks/                                 # 10 hook scripts
 │   │   ├── pretool-agent-routing.sh
 │   │   ├── pretool-commit-current-work-check.sh
 │   │   ├── pretool-commit-test-coverage-check.sh

package/adapters/claude/SUPPORTED-FEATURES.md

@@ -32,7 +32,7 @@ CONDUCTOR's universal `meta-discipline.md` rubric (token economy + model routing
 
 ## Hook execution model
 
-CONDUCTOR ships 9 hooks, all registered in the generated `.claude/settings.json` (written directly by `transform.sh` — there is no `settings.template.json`):
+CONDUCTOR ships 10 hooks, all registered in the generated `.claude/settings.json` (written directly by `transform.sh` — there is no `settings.template.json`):
 
 | Hook | Event | Purpose |
 |---|---|---|
@@ -44,7 +44,7 @@ CONDUCTOR ships 9 hooks, all registered in the generated `.claude/settings.json`
 | `stop-r6-review-check.sh` | `Stop` (session end) | Inject reminder to run Stage B `/code-review` slash command if a feature/fix branch has open PR + cool-down. |
 | `stop-cache-hit-baseline-check.sh` | `Stop` | Flag prompt-cache baseline regressions at session end. |
 
-`transform.sh` registers all 7 in `.claude/settings.json` (4 `PreToolUse` + 3 `Stop`). Users customize paths and conditions in that generated file, or override per-user in `settings.local.json` (gitignored).
+`transform.sh` registers all 10 in `.claude/settings.json` (5 `PreToolUse` + 5 `Stop`). Users customize paths and conditions in that generated file, or override per-user in `settings.local.json` (gitignored).
 
 ## What Claude DOES NOT support that CONDUCTOR doesn't try to compensate for
 
@@ -58,9 +58,9 @@ The Claude adapter ships a working `transform.sh`. Verified by fresh-target inst
 
 | Feature claim | Verified-by-real-install | Verification command / observation |
 |---|---|---|
-| `transform.sh` emits 6 roles, 5 rules, 9 hooks, settings.json, docs | ✅ | `bash adapters/claude/transform.sh <tmp>` then inspect `<tmp>/.claude/` |
+| `transform.sh` emits 6 roles, 5 rules, 10 hooks, settings.json, docs | ✅ | `bash adapters/claude/transform.sh <tmp>` then inspect `<tmp>/.claude/` |
 | Sub-agent dispatch works | ✅ | `.claude/agents/{planner,builder,reviewer,helper,designer,scribe}.md` recognized by `/help` |
 | Lazy / always-loaded rules present | ✅ | `.claude/rules/{workflow,spec-as-you-go,quality-gates,operations,meta-discipline}.md` |
-| Hooks registered in settings.json | ✅ | `.claude/settings.json` `hooks:` block lists 4 PreToolUse + 5 Stop |
+| Hooks registered in settings.json | ✅ | `.claude/settings.json` `hooks:` block lists 5 PreToolUse + 5 Stop |
 | Stop hook blocks on missing spec update | ✅ | commit code without spec → `stop-session-log-check.sh` fires |
 | Idempotent re-run | ✅ | second run reports "SKIP (exists)" for every emitted file |

package/adapters/claude/metadata.json

@@ -0,0 +1,39 @@
+{
+  "_comment": "Single source for enumerable adapter facts (ADR-040). CI asserts transform.sh / validator / matrix agree with this file. Update HERE first; docs follow.",
+  "tool": "claude",
+  "display_name": "Claude Code",
+  "tier": "T1",
+  "outputs": [
+    { "path": "CLAUDE.md", "kind": "always_loaded", "validated": false },
+    { "path": ".claude/rules", "kind": "rules", "validated": true },
+    { "path": ".claude/agents", "kind": "agents", "validated": false },
+    { "path": ".claude/hooks", "kind": "hooks", "validated": false },
+    { "path": ".claude/settings.json", "kind": "config", "validated": false },
+    { "path": "docs/CURRENT_WORK.md", "kind": "docs", "validated": false }
+  ],
+  "reflector_outputs": [
+    { "path": ".claude/commands", "note": "/reflect command (recipe-gated)" },
+    { "path": ".conductor/reflect", "note": "runner + brief + scheduling (recipe-gated)" }
+  ],
+  "install": { "ala_carte": "per-file" },
+  "legacy_paths": [],
+  "capabilities": {
+    "tool_native": {
+      "hooks": "yes",
+      "sub_agents": "yes",
+      "model_routing": "yes",
+      "commands": "yes",
+      "glob_scoping": "yes",
+      "scheduler": "local"
+    },
+    "conductor_emitted": {
+      "rules": "full",
+      "guard_hooks": "full",
+      "reflector_loop": "recipe",
+      "role_agents": "full",
+      "model_routing": "full"
+    }
+  },
+  "live_verification": { "status": "verified", "date": "2026-07-09", "cli": "2.1.205 (Claude Code)", "note": "headless probe listed 5/5 rules + read-CURRENT_WORK-first" },
+  "headless_cli": { "command": "claude", "invocation": "claude -p" }
+}

package/adapters/claude/transform-spec.md

@@ -31,7 +31,7 @@ core/docs-templates/specs/_example.md
 core/memory-pattern/README.md
 core/memory-pattern/EXAMPLES.md
 core/roles/*.md                                        # 6 role personas → .claude/agents/ (planner/builder/reviewer/helper/designer/scribe)
-core/hooks/*.sh.template                               # 9 hook templates
+core/hooks/*.sh.template                               # 10 hook templates
 adapters/claude/_native/CLAUDE.md.tpl                  # Claude-specific orchestrator manual template
 ```