kungfu-agent-onboarding

name	kungfu-agent-onboarding
key	kungfu-agent-onboarding
title	Kungfu Agent Onboarding
description	Discover the exact Kungfu Project, WorkConsole, WorkRef, Skill catalog, and Core Work state admitted to this Amp process.
triggers	["kungfu","work console","workref","skill catalog"]

Kungfu Agent Onboarding

When KUNGFU_AGENT_ENVIRONMENT=native-interactive, use the in-process environment envelopes before acting:

• KUNGFU_AGENT_CONSOLE_ENVELOPE identifies the exact Project, WorkConsole, SessionAttempt, runtime Profile, and optional WorkRef.
• KUNGFU_SKILL_CONTEXT advertises the compact Skill catalog. Load full Skill instructions only through the declared Kungfu entrypoint.
• KUNGFU_AGENT_CONTEXT and its entrypoints are discovery pointers, not a prior chat transcript.
• KUNGFU_PRIOR_TRANSCRIPT_BYTES=0 means continuity comes from Core evidence, never hidden provider conversation state.

Confirm current facts with read-only commands when needed:

"$KUNGFU_CLI_BIN" agent console current --json
"$KUNGFU_CLI_BIN" agent bootstrap-status --json
"$KUNGFU_CLI_BIN" agent capabilities --json
"$KUNGFU_CLI_BIN" skill catalog --json
"$KUNGFU_CLI_BIN" work status --workspace <path> --initiative-id <id> --assignment-id <id>
"$KUNGFU_CLI_BIN" agent session list --json

A bare kungfu run amp launch is intentionally Work-unbound so many terminal windows can start in the same Project. As soon as you choose or accept one Assignment, and before editing files or invoking a Work mutation, run:

"$KUNGFU_CLI_BIN" agent console bind-work --initiative-id <id> --assignment-id <id> --json

Keep the provider UI available when bootstrap is pending or degraded, but do not create, bind, or mutate Work until kungfu agent bootstrap-status --json reports state: verified.

The plan-native-bind-work and bind-native-work capability names are internal Session protocol operations, not public CLI entrypoints; never invoke them through kungfu agent session.

When durable Work may reduce continuity, handoff, evidence, duplicate retry, or external-write risk, submit only bounded structured signals to kungfu agent work-advisory --signals <signals.json> --json. Never include a transcript, hidden reasoning, credentials, or unrelated context. For recommend, show the returned preview and ask its single confirmation. Only after confirmation use the returned existing kungfu.work.capture, kungfu.work.admit, and kungfu.agent.console.bind-work path, cite its receipts, and continue the original task. Suppress a decline for the returned evidence root until the structured evidence changes. Advice grants no external authority.

For Skill reuse or creation, send only rooted catalog/Work/requirements evidence, candidate roots, enums, and booleans to kungfu agent skill-advisory --signals <signals.json> --json. Consume its shared policy root sha256:dc8ebb873760e55c40ef19b8354ba1e2b91706064a48dec00b1eb8dac0479267; do not reproduce the decision policy in provider prose. The result is read-only.

Do not continue unless it returns status: bound. If Kungfu reports native_work_already_active, stop this Work in the current terminal and follow the returned guidance; never bypass the guard or become a second writer.

Do not infer Work completion from terminal output or process exit. Mutate Work only through public Profile/KFD actions and their receipts. The Kungfu TUI is an observer of this native UI and never owns Amp input or transcript bytes.