omniconductor 0.5.0 → 1.0.1

package/adapters/gemini/transform.sh

@@ -26,13 +26,14 @@
 #   core/recipes/coding-conventions →  <target>/.gemini/styleguide.md  (Gemini style-guide convention; opt-in)
 #   core/docs-templates/*.md       →  <target>/docs/*.md          (CURRENT_WORK, REMAINING_TASKS, etc.)
 #   core/hooks/*.sh.template       →  SKIPPED (Reflector hook emitted via --recipes=self-improvement, ADR-032; other guards Claude-only, ADR-034)
-#   core/roles/*.md                →  SKIPPED (Gemini has no sub-agent dispatch)
+#   core/roles/*.md                →  SKIPPED (role emission is Claude-only today; Gemini supports sub-agents natively — ADR-031)
 #
 # Gemini reality (per adapters/gemini/SUPPORTED-FEATURES.md):
 #   - Single always-loaded rule file (GEMINI.md). No per-pattern rule scoping.
-#   - No sub-agents, no per-call model routing, no built-in memory dir. CONDUCTOR
+#   - Gemini CLI supports sub-agents / hooks / per-call model routing natively
+#     (ADR-031), but this adapter does not emit them yet (Phase 2). CONDUCTOR
 #     emits the Reflector hook when --recipes=self-improvement (ADR-032); other
-#     guards remain Claude-only (ADR-034).
+#     guards remain Claude-only emission (ADR-034).
 #   The bundle below carries the rule TEXT honestly; Claude-only enforcement mechanisms
 #   are noted as self-policed for Gemini, never faked.
 
@@ -42,6 +43,7 @@ set -eu
 
 TARGET=""
 RECIPES=""
+MODE="full"
 DRY_RUN="false"
 NO_PROMPT="false"
 UNINSTALL="false"
@@ -53,6 +55,7 @@ WIZARD_APPLY_RULES="true"
 while [ $# -gt 0 ]; do
   case "$1" in
     --recipes=*) RECIPES="${1#--recipes=}" ;;
+    --mode=*)    MODE="${1#--mode=}" ;;
     --dry-run)   DRY_RUN="true" ;;
     --no-prompt) NO_PROMPT="true" ;;
     --uninstall|--rollback) UNINSTALL="true" ;;
@@ -63,6 +66,17 @@ Usage: bash adapters/gemini/transform.sh <target-project> [options]
 
 Options:
   --recipes=A,B,C       Comma-separated list of recipes to install (appended into GEMINI.md)
+  --mode=<m>            Install preset (ADR-044). One of:
+                          full           (default) everything this adapter emits today
+                          minimal        discipline text + session continuity only
+                                         (GEMINI.md + docs/; no styleguide, no Reflector runtime)
+                          strict         full, but ABORT (exit 3) if GEMINI.md already exists
+                                         (never overwrites a baseline, even with backup)
+                          recipes-only   ONLY the selected recipes, appended to GEMINI.md as a
+                                         marked block (requires --recipes=; block-aware uninstall)
+                          reflector-only the self-improvement loop standalone (recipe text as a
+                                         marked block + Reflector runtime; least-conflicting with
+                                         other frameworks like Spec Kit / BMAD)
   --dry-run             Preview only — no files written
   --no-prompt           Skip all interactive prompts; apply sensible defaults (CI-safe)
   --uninstall           Revert a previous install using <target>/.conductor-manifest.json
@@ -71,7 +85,7 @@ Options:
                         manifest are preserved.
   --force               Bypass uninstall safety checks (active worktrees, missing manifest)
 
-Recipes available: web-mobile-parity, i18n, monorepo, branch-strategy, auto-mock-data, coding-conventions, tdd, debugging, database-discipline, design-system, self-improvement, git-hygiene
+Recipes available: web-mobile-parity, i18n, monorepo, branch-strategy, auto-mock-data, coding-conventions, tdd, debugging, database-discipline, design-system, self-improvement, git-hygiene, loop-engineering
 
 Gemini single-file model:
   - All 5 universal rules + selected recipes are bundled into one always-loaded GEMINI.md.
@@ -81,8 +95,8 @@ Gemini single-file model:
 
 What this adapter does NOT install (per ADR-004 honesty + ADR-021):
   - Hook guards (CONDUCTOR emits the Reflector hook when --recipes=self-improvement, ADR-032; other guards remain Claude-only, ADR-034)
-  - Sub-agent personas (Gemini has no sub-agent dispatch — single chat session per task)
-  - Per-call model routing (single model per Gemini session)
+  - Sub-agent personas (not yet emitted for Gemini — the tool supports sub-agents natively, ADR-031; agent emission is Phase 2)
+  - Per-call model routing (supported natively by Gemini CLI, ADR-031; not yet automated by CONDUCTOR)
   - Built-in memory directory (DIY at .memory/ — see the note inside GEMINI.md)
 EOF
       exit 0
@@ -105,11 +119,31 @@ if [ -z "$TARGET" ]; then
   exit 1
 fi
 
+case "$MODE" in
+  full|minimal|strict|recipes-only|reflector-only) : ;;
+  *) echo "Error: unknown --mode '$MODE' (one of: full, minimal, strict, recipes-only, reflector-only)" >&2; exit 1 ;;
+esac
+if [ "$MODE" = "reflector-only" ]; then
+  if [ -n "$RECIPES" ] && [ "$RECIPES" != "self-improvement" ]; then
+    echo "NOTE: --mode=reflector-only ignores --recipes (installs self-improvement only)" >&2
+  fi
+  RECIPES="self-improvement"
+fi
+if [ "$MODE" = "recipes-only" ] && [ -z "$RECIPES" ] && [ "$UNINSTALL" != "true" ]; then
+  echo "Error: --mode=recipes-only requires --recipes=A,B,..." >&2
+  exit 1
+fi
+
 # Resolve CONDUCTOR root (where this script lives: adapters/gemini/).
 CONDUCTOR_ROOT="$(cd "$(dirname "${BASH_SOURCE[0]}")/../.." && pwd)"
 CORE_ROOT="$CONDUCTOR_ROOT/core"
 [ -d "$CORE_ROOT" ] || { echo "Error: core/ not found at $CORE_ROOT" >&2; exit 1; }
 
+# CONDUCTOR package version for the manifest — parsed at runtime from package.json
+# so releases never drift the manifest (falls back to "unknown" on any error).
+CONDUCTOR_VERSION="$(/usr/bin/sed -n -E 's/^[[:space:]]*"version"[[:space:]]*:[[:space:]]*"([^"]+)".*/\1/p' "$CONDUCTOR_ROOT/package.json" 2>/dev/null | /usr/bin/head -n 1)"
+[ -n "$CONDUCTOR_VERSION" ] || CONDUCTOR_VERSION="unknown"
+
 if [ "$DRY_RUN" = "true" ]; then
   mkdir -p "$TARGET"
 fi
@@ -203,6 +237,9 @@ MANIFEST_STAGE_PATH=""
 MANIFEST_TS=""
 MANIFEST_LAST_BACKUP=""
 
+# shellcheck source=../../tools/manifest-safety.sh
+. "$CONDUCTOR_ROOT/tools/manifest-safety.sh"
+
 init_manifest() {
   if [ "$DRY_RUN" = "true" ]; then
     log "would init manifest staging at $MANIFEST_PATH.staging"
@@ -221,12 +258,13 @@ record_emit() {
   local relpath="$1" src="$2" backup="${3:-}"
   local had_backup="false"
   [ -n "$backup" ] && had_backup="true"
-  local esc_path esc_src esc_backup
+  local esc_path esc_src esc_backup emitted_sha
   esc_path="$(printf '%s' "$relpath" | /usr/bin/sed 's/\\/\\\\/g; s/"/\\"/g')"
   esc_src="$(printf '%s' "$src" | /usr/bin/sed 's/\\/\\\\/g; s/"/\\"/g')"
   esc_backup="$(printf '%s' "$backup" | /usr/bin/sed 's/\\/\\\\/g; s/"/\\"/g')"
-  printf '    {"path": "%s", "source": "%s", "had_backup": %s, "backup_path": "%s"},\n' \
-    "$esc_path" "$esc_src" "$had_backup" "$esc_backup" >> "$MANIFEST_STAGE_PATH"
+  emitted_sha="$(conductor_sha256_file "$TARGET_ABS/$relpath")"
+  printf '    {"path": "%s", "source": "%s", "had_backup": %s, "backup_path": "%s", "sha256": "%s"},\n' \
+    "$esc_path" "$esc_src" "$had_backup" "$esc_backup" "$emitted_sha" >> "$MANIFEST_STAGE_PATH"
 }
 
 finalize_manifest() {
@@ -270,8 +308,9 @@ finalize_manifest() {
 
   /bin/cat > "$MANIFEST_PATH" <<EOF
 {
-  "version": "v0.2.0",
+  "version": "v$CONDUCTOR_VERSION",
   "adapter": "gemini",
+  "mode": "$MODE",
   "install_timestamp": "$MANIFEST_TS",
   "conductor_root": "$CONDUCTOR_ROOT",
   "recipes_enabled": $recipes_json,
@@ -285,20 +324,98 @@ EOF
 }
 
 backup_and_remember() {
-  MANIFEST_LAST_BACKUP=""
-  if [ -f "$1" ]; then
-    if [ "$DRY_RUN" = "true" ]; then
-      log "would back up existing $1 -> $1.conductor-backup-<ts>"
-      MANIFEST_LAST_BACKUP=""
-    else
-      local ts
-      ts="$(/bin/date +%Y%m%d-%H%M%S)"
-      local backup="$1.conductor-backup-$ts"
-      /bin/cp "$1" "$backup"
-      log "  backed up existing $1 -> $backup"
-      MANIFEST_LAST_BACKUP="${backup#$TARGET_ABS/}"
+  conductor_manifest_backup_and_remember "$1"
+}
+
+# ----- marked append-blocks (ADR-044, --mode=recipes-only / reflector-only) ----
+#
+# Single-file tools can't take recipes as separate files, so à-la-carte modes
+# APPEND a marked block to the existing baseline instead of overwriting it:
+#   <!-- conductor:block <name> -->
+#   ...content...
+#   <!-- /conductor:block <name> -->
+# The manifest records {"type": "block", "sha256": <hash of content>, "created_file"}.
+# Uninstall strips the block only when its content hash still matches (a customized
+# block is left in place with a warning — backup ≠ silently destroying user edits).
+
+sha256_of() {
+  if command -v sha256sum >/dev/null 2>&1; then sha256sum | /usr/bin/awk '{print $1}'
+  else /usr/bin/shasum -a 256 | /usr/bin/awk '{print $1}'; fi
+}
+
+# append_block <abs_file> <block_name> <content_file>
+# Sets BLOCK_SHA + BLOCK_CREATED. Replaces the block if markers already exist.
+append_block() {
+  local f="$1" name="$2" content="$3" rel entry expected_sha current_sha open_count close_count
+  local open="<!-- conductor:block $name -->" close="<!-- /conductor:block $name -->"
+  BLOCK_CREATED="false"; BLOCK_SHA=""
+  if [ "$DRY_RUN" = "true" ]; then
+    log "would append marked block '$name' to $f"
+    return
+  fi
+  # Content must never contain the marker syntax itself — a colliding line would
+  # truncate extraction AND stripping while the hash guard computes the same
+  # truncation on both sides (silent data loss). Refuse instead.
+  if /usr/bin/grep -qE '<!-- /?conductor:block ' "$content"; then
+    echo "Error: block content contains the conductor:block marker syntax — refusing to append." >&2
+    /bin/rm -f "${MANIFEST_STAGE_PATH:-}"
+    exit 1
+  fi
+  if [ ! -f "$f" ]; then
+    BLOCK_CREATED="true"
+    : > "$f"
+  else
+    rel="${f#$TARGET_ABS/}"
+    open_count="$(/usr/bin/grep -cF "$open" "$f" || true)"
+    close_count="$(/usr/bin/grep -cF "$close" "$f" || true)"
+    if [ "$open_count" -ne 0 ] || [ "$close_count" -ne 0 ]; then
+      if [ "$open_count" -ne 1 ] || [ "$close_count" -ne 1 ]; then
+        echo "Error: found an unpaired or duplicate '$name' CONDUCTOR marker in $f; refusing to change user content." >&2
+        /bin/rm -f "${MANIFEST_STAGE_PATH:-}"
+        exit 1
+      fi
+      entry="$(conductor_manifest_block_entry "$rel" "$name" 2>/dev/null || true)"
+      if [ -z "$entry" ]; then
+        echo "Error: '$name' marker in $f is not owned by this install manifest; refusing to replace user content." >&2
+        /bin/rm -f "${MANIFEST_STAGE_PATH:-}"
+        exit 1
+      fi
+      expected_sha="$(conductor_manifest_field "$entry" sha256 2>/dev/null || true)"
+      current_sha="$(/usr/bin/awk -v o="$open" -v c="$close" '$0==o{b=1;next} $0==c{b=0;next} b' "$f" | sha256_of)"
+      if [ -z "$expected_sha" ] || [ "$current_sha" != "$expected_sha" ]; then
+        echo "Error: managed '$name' block in $f was customized; refusing to overwrite it." >&2
+        /bin/rm -f "${MANIFEST_STAGE_PATH:-}"
+        exit 1
+      fi
+      # The manifest owns this one, unmodified block, so replacement is safe.
+      /usr/bin/awk -v o="$open" -v c="$close" '$0==o{inb=1; if (heldset && held ~ /^[[:space:]]*$/) heldset=0; next} $0==c{inb=0;next} inb{next} {if (heldset) print held; held=$0; heldset=1} END{if (heldset) print held}' "$f" > "$f.conductor-tmp"
+      /bin/mv "$f.conductor-tmp" "$f"
+      log "  replaced existing block '$name' in $f"
     fi
   fi
+  { echo ""; echo "$open"; /bin/cat "$content"; echo "$close"; } >> "$f"
+  BLOCK_SHA="$(/usr/bin/awk -v o="$open" -v c="$close" '$0==o{b=1;next} $0==c{b=0;next} b' "$f" | sha256_of)"
+  log "  appended block '$name' to $f (sha256 $(printf '%s' "$BLOCK_SHA" | /usr/bin/cut -c1-12)...)"
+}
+
+record_emit_block() {
+  if [ "$DRY_RUN" = "true" ] || [ "$UNINSTALL" = "true" ]; then return; fi
+  local relpath="$1" name="$2" sha="$3" created="$4"
+  printf '    {"path": "%s", "type": "block", "block": "%s", "sha256": "%s", "created_file": %s},\n' \
+    "$relpath" "$name" "$sha" "$created" >> "$MANIFEST_STAGE_PATH"
+}
+
+# ----- framework detection (ADR-044 — suggest, NEVER auto-switch) ----------
+
+detect_coexisting_frameworks() {
+  local found=""
+  [ -d "$TARGET_ABS/.specify" ] && found="$found Spec-Kit"
+  { [ -d "$TARGET_ABS/_bmad" ] || [ -d "$TARGET_ABS/.bmad-core" ]; } && found="$found BMAD"
+  if [ -n "$found" ] && [ "$MODE" = "full" ]; then
+    log "NOTE: detected coexisting framework(s):$found"
+    log "      Consider --mode=recipes-only or --mode=reflector-only to coexist without"
+    log "      overlapping workflow rules (suggestion only — nothing was changed)."
+  fi
 }
 
 # ----- uninstall flow (mirrored from Cursor/Claude adapter) ---------------
@@ -335,24 +452,80 @@ do_uninstall() {
   local restored=0
   local deleted=0
   local missing=0
+  local preserved=0
+
+  local blocks_removed=0
+  local blocks_kept=0
 
   while IFS= read -r line; do
     case "$line" in
+      *'"type": "block"'*)
+        # Marked append-block entry (ADR-044) — strip the block, hash-guarded.
+        entries_count=$((entries_count + 1))
+        local b_rel b_name b_sha b_created b_abs b_open b_close b_cur b_cur_sha
+        b_rel="$(printf '%s' "$line" | /usr/bin/sed -E 's/.*"path": *"([^"]*)".*/\1/')"
+        b_name="$(printf '%s' "$line" | /usr/bin/sed -E 's/.*"block": *"([^"]*)".*/\1/')"
+        b_sha="$(printf '%s' "$line" | /usr/bin/sed -E 's/.*"sha256": *"([^"]*)".*/\1/')"
+        b_created="$(printf '%s' "$line" | /usr/bin/sed -E 's/.*"created_file": *(true|false).*/\1/')"
+        b_abs="$TARGET_ABS/$b_rel"
+        b_open="<!-- conductor:block $b_name -->"
+        b_close="<!-- /conductor:block $b_name -->"
+        if [ ! -f "$b_abs" ]; then
+          log "  skip block '$b_name' ($b_rel already absent)"
+          continue
+        fi
+        if ! /usr/bin/grep -qF "$b_open" "$b_abs"; then
+          log "  skip block '$b_name' (markers already removed from $b_rel)"
+          continue
+        fi
+        # Hash via the same direct pipe as emit-time (a shell-variable roundtrip
+        # strips trailing newlines and breaks the comparison).
+        b_cur_sha="$(/usr/bin/awk -v o="$b_open" -v c="$b_close" '$0==o{b=1;next} $0==c{b=0;next} b' "$b_abs" | sha256_of)"
+        if [ "$b_cur_sha" = "$b_sha" ]; then
+          if [ "$DRY_RUN" = "true" ]; then
+            log "  would strip block '$b_name' from $b_rel"
+          else
+            /usr/bin/awk -v o="$b_open" -v c="$b_close" '$0==o{inb=1; if (heldset && held ~ /^[[:space:]]*$/) heldset=0; next} $0==c{inb=0;next} inb{next} {if (heldset) print held; held=$0; heldset=1} END{if (heldset) print held}' "$b_abs" > "$b_abs.conductor-tmp"
+            /bin/mv "$b_abs.conductor-tmp" "$b_abs"
+            log "  stripped block '$b_name' from $b_rel"
+            if [ "$b_created" = "true" ] && ! /usr/bin/grep -q '[^[:space:]]' "$b_abs"; then
+              /bin/rm -f "$b_abs"
+              log "  deleted $b_rel (file was created by CONDUCTOR and is now empty)"
+            fi
+          fi
+          blocks_removed=$((blocks_removed + 1))
+        else
+          log "  WARNING: block '$b_name' in $b_rel was customized (hash mismatch) — left in place"
+          blocks_kept=$((blocks_kept + 1))
+        fi
+        continue
+        ;;
       *'"path":'*'"source":'*'"had_backup":'*)
         ;;
       *) continue ;;
     esac
     entries_count=$((entries_count + 1))
-    local rel_path src had_backup backup_path
+    local rel_path src had_backup backup_path expected_sha
     rel_path="$(printf '%s' "$line" | /usr/bin/sed -E 's/.*"path": *"([^"]*)".*/\1/')"
     src="$(printf '%s' "$line" | /usr/bin/sed -E 's/.*"source": *"([^"]*)".*/\1/')"
     had_backup="$(printf '%s' "$line" | /usr/bin/sed -E 's/.*"had_backup": *(true|false).*/\1/')"
     backup_path="$(printf '%s' "$line" | /usr/bin/sed -E 's/.*"backup_path": *"([^"]*)".*/\1/')"
+    expected_sha="$(conductor_manifest_field "$line" sha256 2>/dev/null || true)"
 
     local abs_dest="$TARGET_ABS/$rel_path"
     local abs_backup=""
     [ -n "$backup_path" ] && abs_backup="$TARGET_ABS/$backup_path"
 
+    if [ -f "$abs_dest" ] && ! conductor_manifest_file_matches "$abs_dest" "$expected_sha"; then
+      if [ -z "$expected_sha" ]; then
+        log "  WARNING: preserving $rel_path (legacy manifest has no checksum)"
+      else
+        log "  WARNING: preserving user-modified $rel_path"
+      fi
+      preserved=$((preserved + 1))
+      continue
+    fi
+
     if [ "$had_backup" = "true" ] && [ -n "$abs_backup" ]; then
       if [ -f "$abs_backup" ]; then
         if [ "$DRY_RUN" = "true" ]; then
@@ -425,6 +598,10 @@ do_uninstall() {
   echo "  Backups restored: $restored"
   echo "  Files deleted: $deleted"
   echo "  Backup-missing deletes: $missing"
+  [ "$preserved" -gt 0 ] && echo "  User-modified files preserved: $preserved"
+  if [ "$blocks_removed" -gt 0 ] || [ "$blocks_kept" -gt 0 ]; then
+    echo "  Blocks stripped: $blocks_removed (customized blocks left: $blocks_kept)"
+  fi
   echo "========================================================"
 }
 
@@ -459,6 +636,24 @@ if [ -f "$TARGET_ABS/GEMINI.md" ] || [ -d "$TARGET_ABS/.gemini" ]; then
   IS_ADOPTER_CASE="true"
 fi
 
+detect_coexisting_frameworks
+
+# --mode=strict: never overwrite an existing baseline, even with a backup (ADR-044).
+if [ "$MODE" = "strict" ]; then
+  for _sf in "GEMINI.md" ".gemini/styleguide.md"; do
+    if [ -f "$TARGET_ABS/$_sf" ]; then
+      echo "Error (--mode=strict): $TARGET_ABS/$_sf already exists — strict mode aborts instead of overwriting a baseline." >&2
+      echo "  Use --mode=full (timestamped backup + manifest-based restore), or move the file first." >&2
+      exit 3
+    fi
+  done
+fi
+
+# À-la-carte modes are non-interactive by design (they never touch the universal-rule choice).
+if [ "$MODE" != "full" ] && [ "$MODE" != "strict" ]; then
+  NO_PROMPT="true"
+fi
+
 if [ "$IS_ADOPTER_CASE" = "true" ] && [ "$NO_PROMPT" = "false" ] && [ "$DRY_RUN" = "false" ]; then
   echo ""
   echo "========================================================"
@@ -486,7 +681,7 @@ if [ "$IS_ADOPTER_CASE" = "true" ] && [ "$NO_PROMPT" = "false" ] && [ "$DRY_RUN"
 
   echo ""
   echo "Available recipes:"
-  echo "  web-mobile-parity, i18n, monorepo, branch-strategy, auto-mock-data, coding-conventions, tdd, debugging, database-discipline, design-system, self-improvement, git-hygiene"
+  echo "  web-mobile-parity, i18n, monorepo, branch-strategy, auto-mock-data, coding-conventions, tdd, debugging, database-discipline, design-system, self-improvement, git-hygiene, loop-engineering"
   printf "Select recipes (comma-separated, or leave blank for none): "
   read -r _recipe_answer
   if [ -n "$_recipe_answer" ]; then
@@ -520,6 +715,8 @@ if [ -n "$RECIPES" ]; then
   IFS="$_old_ifs"
 fi
 
+if [ "$MODE" != "recipes-only" ] && [ "$MODE" != "reflector-only" ]; then
+
 log "Step 1/3: GEMINI.md bundle → $GEMINI_DEST"
 
 if [ -f "$GEMINI_DEST" ] && [ "$DRY_RUN" = "false" ]; then
@@ -547,19 +744,22 @@ else
 **EN** — You are the lead orchestrator for **{{PROJECT_NAME}}**. You translate the
 user's intent into a disciplined Plan → Architecture → Tasks → Implementation →
 Review → Spec workflow. The universal rules below are your operating floor; every
-turn inherits them. Gemini CLI runs a single chat session per task — there are no
-sub-agents and no enforcement hooks here, so these rules are **self-policed**: you
-follow them by reading them, not because a hook blocks you.
+turn inherits them. Gemini CLI supports sub-agents and hooks natively (ADR-031),
+but CONDUCTOR's Gemini adapter currently emits rule text (plus the Reflector loop)
+only — full hook/agent emission is Phase 2 — so these rules are **self-policed**:
+you follow them by reading them, not because an emitted hook blocks you.
 
 **KO** — 당신은 **{{PROJECT_NAME}}** 의 리드 오케스트레이터입니다. 사용자의 의도를
 Plan → Architecture → Tasks → Implementation → Review → Spec 워크플로로 옮깁니다.
-아래 universal rule 은 모든 턴이 상속하는 기본 규칙입니다. Gemini CLI 는 작업당 단일
-세션으로 동작하며 sub-agent 나 enforcement hook 이 없습니다 — 따라서 이 규칙들은
+아래 universal rule 은 모든 턴이 상속하는 기본 규칙입니다. Gemini CLI 는 sub-agent 와
+hook 을 네이티브로 지원하지만 (ADR-031), CONDUCTOR 의 Gemini adapter 는 현재 rule 텍스트
+(+ Reflector loop) 만 생성합니다 (hook/agent 자동 생성은 Phase 2) — 따라서 이 규칙들은
 **자기 규율(self-policed)** 로 지켜야 합니다.
 
 > **Note (Gemini)**: Claude Code enforces parts of these rules with PreToolUse / Stop
-> hooks and sub-agent dispatch. Gemini CLI has none of those surfaces. Where a rule
-> mentions a Claude-only mechanism, treat it as self-policed: read the rule, follow it.
+> hooks and sub-agent dispatch. Gemini CLI has those surfaces natively too (ADR-031),
+> but CONDUCTOR does not emit hooks/agents here yet (Phase 2). Where a rule mentions a
+> Claude-only mechanism, treat it as self-policed: read the rule, follow it.
 
 ## ABSOLUTE rules (summary) / 절대 규칙 요약
 
@@ -699,8 +899,68 @@ FOOTER_EOF
 fi
 record_emit "GEMINI.md" "<synthesized:5-universal-rules+workflow>" "$MANIFEST_LAST_BACKUP"
 
+else
+  # ----- à-la-carte modes: marked block appended to GEMINI.md (ADR-044) ------
+  BLOCK_NAME="recipes"; [ "$MODE" = "reflector-only" ] && BLOCK_NAME="reflector"
+  log "Step 1/3: --mode=$MODE — '$BLOCK_NAME' marked block → $GEMINI_DEST (no full bundle)"
+  if [ "$DRY_RUN" = "true" ]; then
+    log "would append marked block '$BLOCK_NAME' (selected recipes: $RECIPES) to $GEMINI_DEST"
+  else
+    _blk="$(/usr/bin/mktemp "${TMPDIR:-/tmp}/conductor-block.XXXXXX")"
+    {
+      echo "# CONDUCTOR — à la carte (--mode=$MODE)"
+      echo ""
+      echo "> Installed by CONDUCTOR WITHOUT the universal-rule bundle. This is a managed"
+      echo "> block: --uninstall strips it when unmodified. Full workflow: --mode=full."
+      echo ""
+      IFS=',' read -ra RECIPE_LIST <<< "$RECIPES"
+      for r in "${RECIPE_LIST[@]}"; do
+        r="$(printf '%s' "$r" | /usr/bin/sed 's/^ *//; s/ *$//')"
+        [ -z "$r" ] && continue
+        src="$CORE_ROOT/recipes/$r.md"
+        if [ ! -f "$src" ]; then
+          echo "Warning: recipe '$r' not found at $src; skipping" >&2
+          continue
+        fi
+        echo "## Recipe — $r"
+        echo ""
+        emit_rule_body "$src"
+        echo ""
+        INSTALLED_RECIPES="$INSTALLED_RECIPES $r"
+      done
+    } > "$_blk"
+    if [ -z "${INSTALLED_RECIPES// /}" ]; then
+      /bin/rm -f "$_blk"
+      echo "Error: --mode=$MODE resolved ZERO valid recipes from '--recipes=$RECIPES' — nothing to install (check the names)." >&2
+      /bin/rm -f "$MANIFEST_STAGE_PATH"
+      exit 1
+    fi
+    append_block "$GEMINI_DEST" "$BLOCK_NAME" "$_blk"
+    /bin/rm -f "$_blk"
+    record_emit_block "GEMINI.md" "$BLOCK_NAME" "$BLOCK_SHA" "$BLOCK_CREATED"
+    # Preserve OTHER à-la-carte blocks from a previous install (e.g. recipes-only
+    # then reflector-only): carry their manifest entries forward so uninstall can
+    # still strip them (ADR-044 review fix — cross-mode orphaned block).
+    if [ -f "$MANIFEST_PATH" ]; then
+      while IFS= read -r _prev; do
+        case "$_prev" in *'"type": "block"'*) : ;; *) continue ;; esac
+        _pname="$(printf '%s' "$_prev" | /usr/bin/sed -E 's/.*"block": *"([^"]*)".*/\1/')"
+        [ "$_pname" = "$BLOCK_NAME" ] && continue
+        if /usr/bin/grep -qF "<!-- conductor:block $_pname -->" "$GEMINI_DEST" 2>/dev/null; then
+          printf '%s\n' "$_prev" | /usr/bin/sed 's/,*$/,/' >> "$MANIFEST_STAGE_PATH"
+          log "  preserved previous block '$_pname' in manifest"
+        fi
+      done < "$MANIFEST_PATH"
+    fi
+  fi
+fi
+
 # ----- step 2: .gemini/styleguide.md (opt-in: coding-conventions) ---------
 
+if [ "$MODE" != "full" ] && [ "$MODE" != "strict" ]; then
+  # À la carte: the marked block is the sole carrier (no side files); minimal ships text only.
+  WANT_STYLEGUIDE="false"
+fi
 log "Step 2/3: .gemini/styleguide.md (opt-in via --recipes=coding-conventions)"
 if [ "$WANT_STYLEGUIDE" = "true" ]; then
   STYLE_SRC="$CORE_ROOT/recipes/coding-conventions.md"
@@ -732,7 +992,13 @@ fi
 
 # ----- self-improvement (opt-in: self-improvement recipe) ------------------
 
-case ",$RECIPES," in
+if [ "$MODE" = "minimal" ]; then
+  RECIPES_FOR_RUNTIME=""
+  log "Step: self-improvement runtime — skipped (--mode=minimal ships text only)"
+else
+  RECIPES_FOR_RUNTIME="$RECIPES"
+fi
+case ",$RECIPES_FOR_RUNTIME," in
   *",self-improvement,"*)
     log "Step: self-improvement (Reflector) → .gemini hooks/command/agent"
     if [ "$DRY_RUN" != "true" ]; then
@@ -781,6 +1047,9 @@ esac
 
 # ----- step 3: docs templates --------------------------------------------
 
+if [ "$MODE" = "recipes-only" ] || [ "$MODE" = "reflector-only" ]; then
+  log "Step 3/3: docs templates — skipped (--mode=$MODE is à la carte; docs ship with full/minimal)"
+else
 log "Step 3/3: docs templates → docs/"
 mkdir_if_real "$TARGET_ABS/docs"
 mkdir_if_real "$TARGET_ABS/docs/specs"
@@ -815,6 +1084,8 @@ if [ -f "$CORE_ROOT/docs-templates/specs/_example.md" ]; then
 fi
 
 # Finalize manifest after all emits.
+fi
+
 finalize_manifest
 
 # ----- completion summary -------------------------------------------------
@@ -824,14 +1095,19 @@ echo "========================================================"
 echo " Done."
 echo "  Target: $TARGET_ABS"
 echo "  Adapter: gemini"
-echo "  GEMINI.md: 1 bundled file (5 universal rules + workflow, always-loaded)"
+echo "  Mode: $MODE"
+if [ "$MODE" = "recipes-only" ] || [ "$MODE" = "reflector-only" ]; then
+  echo "  GEMINI.md: marked à-la-carte block appended (no universal-rule bundle)"
+else
+  echo "  GEMINI.md: 1 bundled file (5 universal rules + workflow, always-loaded)"
+fi
 echo "  Style guide: $([ "$WANT_STYLEGUIDE" = "true" ] && echo ".gemini/styleguide.md emitted" || echo "(not emitted — select coding-conventions)")"
 echo "  Recipes installed:${INSTALLED_RECIPES:- (none)}"
 echo ""
 echo " Skipped (per ADR-004 honesty):"
 echo "  - Hooks: CONDUCTOR emits the Reflector hook when --recipes=self-improvement (ADR-032); other guards remain Claude-only (ADR-034)."
-echo "  - Sub-agent personas: Gemini has no sub-agent dispatch — single chat session per task."
-echo "  - Per-call model routing: single model per Gemini session."
+echo "  - Sub-agent personas: not yet emitted for Gemini (tool supports sub-agents natively — ADR-031; Phase 2)."
+echo "  - Per-call model routing: supported natively by Gemini CLI (ADR-031); not yet automated by CONDUCTOR."
 echo "  - Built-in memory: DIY at .memory/ (see the note inside GEMINI.md)."
 echo ""
 echo " Activation: open $TARGET_ABS with Gemini CLI — it loads GEMINI.md automatically."
@@ -839,6 +1115,6 @@ echo "========================================================"
 echo ""
 echo "Next steps for the project:"
 echo "  1. Replace {{PROJECT_NAME}} in GEMINI.md (and .gemini/styleguide.md if present)."
-echo "  2. Edit docs/CURRENT_WORK.md with your project's current state."
+[ -d "$TARGET_ABS/docs" ] && echo "  2. Edit docs/CURRENT_WORK.md with your project's current state."
 echo "  3. Add .memory/ to .gitignore if you adopt the DIY memory pattern."
 echo "  4. Rename docs/specs/_example.md → docs/specs/<your-area>.md."

package/adapters/windsurf/README.md

@@ -6,15 +6,12 @@ Windsurf (the AI-IDE) is a T3 target because:
 - It supports a directory of additional rules at `.devin/rules/*.md` (preferred; legacy `.windsurf/rules/` is still read).
 - Its workflow is similar to Cursor's but with less per-pattern scoping.
 
-It is **T3** because:
+**Tool capability vs CONDUCTOR emission (ADR-031):** as of 2026 Windsurf / Devin Desktop ships hooks (12 events — but **no session/stop events**, the one real Stop-style-enforcement gap), sub-agent dispatch (Devin Local), custom agents, per-task model routing, commands, and built-in memory. What is limited today is what CONDUCTOR **emits** for it — rule text + docs + the opt-in Reflector loop; the enforcement guard hooks, role agents, and model-routing config are Phase-2 emission (ADR-034). Real tool-side caveats: no glob rule-scoping (all `.devin/rules/*.md` load together) and no desktop scheduler.
 
-- ❌ No per-pattern rule scoping (rules in `.devin/rules/` all load together; no glob filtering).
-- ❌ No sub-agent dispatch.
-- ❌ No hooks.
-- ❌ No per-call model routing.
-- ❌ No built-in memory directory.
+**Tier**: T3 (see `docs/COMPATIBILITY-MATRIX.md` — the missing session/stop hook events keep it below T2).
+
+> Enumerable facts about this adapter (output paths / tier / capabilities / live verification / headless CLI) are machine-readable in [`metadata.json`](./metadata.json) and CI-checked against `transform.sh` + the validator (ADR-040).
 
-**Tier**: T3 — Basic. Rule TEXT installs and groups well, but enforcement and scoping are minimal.
 
 ## Installation path
 
@@ -39,11 +36,12 @@ bash adapters/windsurf/transform.sh <target> --uninstall
 ├── .windsurfrules                              # Always-loaded baseline (orchestrator manual + ABSOLUTE rules)
 ├── .devin/                                     # Preferred rules dir (legacy .windsurf/rules/ still read)
 │   └── rules/
-│       ├── operations.md
-│       ├── coding-conventions.md
-│       ├── token-economy.md
+│       ├── workflow.md
 │       ├── spec-as-you-go.md
-│       └── model-routing.md
+│       ├── quality-gates.md
+│       ├── operations.md
+│       ├── meta-discipline.md
+│       └── <recipe>.md                          # per --recipes=
 └── docs/
     ├── CURRENT_WORK.md                         # Universal templates
     ├── REMAINING_TASKS.md
@@ -53,22 +51,25 @@ bash adapters/windsurf/transform.sh <target> --uninstall
     └── specs/_example.md
 ```
 
-## Native features supported
+- `--recipes=self-improvement` additionally emits the Reflector loop: trajectory hook config (`.windsurf/hooks.json`, riding `post_cascade_response_with_transcript` — Windsurf has no session/stop event), the `/reflect` workflow (`.windsurf/workflows/reflect.md`), a reflector persona rule (`.devin/rules/reflector.md`, `trigger: manual`), prune script, and the `.conductor/reflect/` weekly runner (ADR-032/033).
+
+## Native features supported (emitted today)
 
 - ✅ Always-loaded baseline (`.windsurfrules`).
 - ✅ Directory-based rule loading (`.devin/rules/`; legacy `.windsurf/rules/` still read).
 - ✅ All universal rule TEXT.
 - ✅ All doc templates.
+- ✅ Reflector loop (opt-in recipe).
 
-## Features NOT supported
+## Not emitted yet (Phase 2 — Windsurf supports most of these natively, ADR-031/034)
 
-| Feature | Workaround |
+| Feature | Interim workaround |
 |---|---|
-| Per-pattern rule scoping | All rules in `.devin/rules/` load together. No glob filtering. |
-| Sub-agent dispatch | Human plays orchestrator. |
-| Hooks | Pair with project pre-commit git hooks. |
-| Per-call model routing | Single model per session. |
-| Built-in memory directory | DIY at `.memory/`. |
+| Per-pattern rule scoping | All rules in `.devin/rules/` load together. No glob filtering (tool-side). |
+| Enforcement guard hooks | Windsurf has hooks but **no session/stop events** (tool-side gap) — Stop-style enforcement isn't possible; self-police or pair with pre-commit git hooks. |
+| The 6 role agents (sub-agent dispatch) | Devin Local has native sub-agents; CONDUCTOR doesn't emit its role definitions yet. Human plays orchestrator. |
+| Per-call model-routing config | Pick the model per task via the tool's own model selection. |
+| 4-type memory pattern | Self-managed at `.memory/` (gitignored); the tool's built-in memory is separate. |
 
 ## After install — first steps