@ikunin/sprintpilot 1.0.0

package/LICENSE

@@ -0,0 +1,201 @@
+                                 Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "[]"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. We also recommend that a
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
+
+   Copyright [yyyy] [name of copyright owner]
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.

package/README.md

@@ -0,0 +1,330 @@
+# Sprintpilot — Autopilot & Multi-Agent Addon for BMad Method
+
+[![npm version](https://img.shields.io/npm/v/@ikunin/sprintpilot.svg?style=flat)](https://www.npmjs.com/package/@ikunin/sprintpilot)
+[![npm downloads](https://img.shields.io/npm/dm/@ikunin/sprintpilot.svg?style=flat)](https://www.npmjs.com/package/@ikunin/sprintpilot)
+[![License Apache 2.0](https://img.shields.io/badge/license-Apache%202.0-blue.svg?style=flat)](LICENSE)
+[![BMad Method](https://img.shields.io/badge/BMad%20Method-v6.2%2B-green.svg?style=flat)](https://github.com/bmad-code-org/BMAD-METHOD)
+[![Node.js](https://img.shields.io/badge/node-%3E%3D18-brightgreen.svg?style=flat)](https://nodejs.org)
+[![Tools](https://img.shields.io/badge/tools-9%20supported-orange.svg?style=flat)](#supported-tools)
+[![GitHub stars](https://img.shields.io/github/stars/ikunin/sprintpilot.svg?style=flat)](https://github.com/ikunin/sprintpilot/stargazers)
+
+Sprintpilot is an autonomous delivery addon **compatible with [BMad Method](https://github.com/bmad-code-org/BMAD-METHOD) v6**. One command takes your project from sprint plan to reviewed, tested, PR-ready code — with full git workflow and multi-agent intelligence.
+
+> **Independent project.** Sprintpilot is not affiliated with or endorsed by BMad Code, LLC. "BMad™", "BMad Method™", and "BMAD-METHOD™" are trademarks of BMad Code, LLC. See [TRADEMARK.md](TRADEMARK.md).
+
+> **Migrating from `bmad-autopilot-addon` v1?** See [MIGRATION.md](MIGRATION.md). `sprintpilot install` auto-detects v1 and cleanly replaces it.
+
+## Included Skills
+
+| Skill | Description |
+|-------|-------------|
+| `/sprint-autopilot-on` | Engage autonomous sprint execution |
+| `/sprint-autopilot-off` | Disengage and show status |
+| `/sprintpilot-update` | Check for updates and install the latest version |
+| `/sprintpilot-code-review` | Parallel 3-layer adversarial code review |
+| `/sprintpilot-codebase-map` | 5-stream brownfield codebase analysis |
+| `/sprintpilot-assess` | Tech debt and dependency audit |
+| `/sprintpilot-reverse-architect` | Extract architecture from existing code |
+| `/sprintpilot-migrate` | Legacy migration planning |
+| `/sprintpilot-research` | Parallel web research fan-out |
+| `/sprintpilot-party-mode` | Multi-persona agent discussions |
+
+## The Problem
+
+BMad Method provides a structured development workflow with 50+ skills and agent personas. But using it manually means invoking each skill one at a time, navigating menus, making routine decisions, and handling git operations yourself. For a sprint with 10 stories across 3 epics, that's dozens of manual steps, context switches, and session restarts.
+
+## The Solution: Sprintpilot
+
+```
+/sprint-autopilot-on
+```
+
+That's it. The autopilot takes over and drives your entire sprint to completion:
+
+### What it does, story by story
+
+1. **Reads your sprint plan** — picks the next story from `sprint-status.yaml`
+2. **Creates an isolated worktree** — each story gets its own branch via `git worktree add`, keeping `main` clean
+3. **Implements the story** — invokes `bmad-dev-story` which writes code and tests following TDD (RED then GREEN)
+4. **Lints the code** — auto-detects your language (Python, JS/TS, Rust, Go, Ruby) and runs the appropriate linter on changed files only
+5. **Stages explicitly** — never runs `git add -A`. Stages only changed files with pre-commit checks: secrets scanning, file size limits, binary detection
+6. **Commits with conventional messages** — `feat(epic): story title (story-key)` with all placeholders resolved from your sprint artifacts
+7. **Runs code review** — invokes `bmad-code-review` on the worktree diff
+8. **Applies every patch** — auto-accepts all review findings, commits each fix separately for clean git history
+9. **Pushes and creates a PR** (configurable) — auto-detects your platform (GitHub/GitLab) and creates a PR/MR with a detailed body. With `create_pr: false`, merges directly to main instead.
+10. **Moves to the next story** — syncs status, exits the worktree, commits artifacts to main, picks up the next story
+11. **Runs retrospective** — when all stories in an epic are done, runs `bmad-retrospective` and lists all PR URLs for merge
+
+### What makes it autonomous
+
+The autopilot handles everything that normally requires you to be present:
+
+- **Menu navigation** — BMad Method skills present menus, confirmations, and choices. The autopilot auto-selects "Continue", "Create Mode", and makes context-appropriate decisions from your PRD and architecture docs.
+- **Decision making** — when a skill asks a design question, the autopilot derives the answer from existing project artifacts (PRD, architecture, story specs). Only truly unanswerable questions pause execution.
+- **Session management** — after 3 stories, the autopilot checkpoints state to disk and tells you to start a fresh session. `/sprint-autopilot-on` in the new session resumes exactly where it left off. No work is ever repeated.
+- **Crash recovery** — if a session crashes mid-story, the next boot detects orphaned worktrees, recovers committed work (pushes it), and cleans up stale state.
+
+### When it stops (and only when)
+
+The autopilot runs until the sprint is done or hits one of exactly 5 true blockers:
+
+1. A skill needs **original creative input** not in any project document (e.g., product vision for a PRD)
+2. A **new external dependency** is needed that isn't in the project
+3. **3 consecutive test failures** with no forward progress
+4. A **security vulnerability** requiring architectural decisions beyond the story scope
+5. **Conflicting acceptance criteria** that can't be resolved from project docs
+
+Everything else — it decides, documents the decision in one sentence, and moves on.
+
+### The git workflow in detail
+
+Controlled by `git.push.create_pr` in `_Sprintpilot/modules/git/config.yaml`:
+
+**PR flow** (`create_pr: true`, default) — stories are pushed and PRs are created. No auto-merge. Code reaches `main` only after PR approval.
+
+```
+main ─────────────────────────────────────────────────────────
+  │                                          (artifacts only)
+  ├── story/1-1 ──→ push + PR #42 (→ main)
+  │        │
+  │        └── story/1-2 ──→ push + PR #43 (→ story/1-1)
+  │                 │
+  │                 └── story/1-3 ──→ push + PR #44 (→ story/1-2)
+  │
+  Epic 1 complete → retrospective
+  → "Ready to merge: PR #42, #43, #44"
+```
+
+When previous stories have pending PRs, the autopilot creates **stacked PRs** — each story branches from the previous story's branch and targets it. When a PR is merged on the platform, subsequent PRs automatically retarget.
+
+**Direct merge flow** (`create_pr: false`) — stories are merged to `main` immediately after push:
+
+```
+main ── story/1-1 ──→ merge ── story/1-2 ──→ merge ── story/1-3 ──→ merge
+```
+
+Each story is fully isolated in its own worktree. No half-finished code on `main`. The autopilot tracks git metadata in its own `git-status.yaml` (commit SHA, push status, PR URL, lint results) — it never modifies BMad Method's `sprint-status.yaml`. Implementation artifacts (sprint status, story files, planning docs) are always committed to `main` after each story, regardless of merge strategy.
+
+See [`modules/git/branching-and-pr-strategy.md`](_Sprintpilot/modules/git/branching-and-pr-strategy.md) for the full branching and PR decision matrix.
+
+---
+
+## Multi-Agent Intelligence
+
+Beyond the autopilot, Sprintpilot includes 7 multi-agent skills that launch parallel subagents for tasks that benefit from diverse perspectives:
+
+### Parallel Code Review (`/sprintpilot-code-review`)
+
+Three independent reviewers run simultaneously on the same diff:
+
+| Agent | Perspective | Access |
+|-------|------------|--------|
+| **Blind Hunter** | Pure adversarial — finds bugs from code alone | Diff only, no project context |
+| **Edge Case Hunter** | Boundary conditions, race conditions, missing validation | Full codebase access |
+| **Acceptance Auditor** | Verifies every acceptance criterion is met | Diff + story spec |
+
+Results are triaged: duplicates merged, contradictions flagged, findings classified as PATCH / WARN / DISMISS.
+
+### Brownfield Analysis Pipeline
+
+> Codebase mapping inspired by [GSD's map-codebase](https://github.com/gsd-build/get-shit-done). Adapted with distinct output format, enriched agent prompts, and BMad Method-specific downstream integration.
+
+For existing codebases, three skills chain together:
+
+**`/sprintpilot-codebase-map`** — 5 parallel agents scan the codebase simultaneously:
+- Stack Analyzer (languages, frameworks, versions)
+- Architecture Mapper (modules, patterns, data flow)
+- Quality Assessor (tests, CI/CD, conventions)
+- Concerns Hunter (TODOs, deprecated APIs, security issues, dead code)
+- Integration Mapper (external APIs, databases, env vars)
+
+Output files (`_bmad-output/codebase-analysis/`):
+
+| File | Content |
+|------|---------|
+| `stack-analysis.md` | Languages, frameworks, versions, runtime requirements, package health |
+| `architecture-analysis.md` | Project structure, architectural pattern, module boundaries, data flow |
+| `quality-analysis.md` | Test coverage, CI/CD pipeline, code conventions, complexity metrics |
+| `concerns-analysis.md` | TODOs/FIXMEs, security issues, dead code, deprecated patterns, error handling gaps |
+| `integrations-analysis.md` | External APIs, databases, message queues, cloud services, env vars |
+
+Scanned file types: TypeScript, JavaScript, Python, Java, Go, Rust, Ruby, C#, SQL, PL/SQL (`.sps`, `.spb`), XML, Shell.
+
+**`/sprintpilot-assess`** — 3 parallel agents produce actionable findings:
+- Dependency Auditor (CVEs, outdated packages, upgrade paths)
+- Debt Classifier (prioritized tech debt with effort estimates)
+- Migration Analyzer (framework upgrade paths and phased roadmap)
+
+Output file: `_bmad-output/codebase-analysis/brownfield-assessment.md` — prioritized findings with severity, confidence, effort, and migration paths.
+
+**`/sprintpilot-reverse-architect`** — 3 parallel agents extract architecture from code:
+- Component Mapper (module boundaries, dependency graph)
+- Data Flow Tracer (request lifecycle, state management)
+- Pattern Extractor (design patterns, conventions, error handling)
+
+Output file: `{planning_artifacts}/architecture.md` — architecture document compatible with BMad Method that feeds directly into `bmad-create-epics-and-stories`.
+
+### Migration Planning (`/sprintpilot-migrate`)
+
+A 12-step workflow for taking a codebase from one stack to another. 4 subagent fan-outs across the process:
+
+1. Validate prerequisites and get target stack from user
+2. Auto-recommend migration strategy (strangler fig / big bang / branch-by-abstraction / parallel run)
+3. **Parallel**: Stack Mapper + Dependency Analyzer produce compatibility matrix
+4. Design coexistence layer (old + new code running together)
+5. Build phased roadmap ordered by dependency graph
+6. Generate per-component migration cards with effort/risk
+7. Plan data migration (schema changes, dual-write, backfill)
+8. Design API compatibility (versioning, deprecation timeline)
+9. **Parallel**: Test Parity Analyzer maps old tests to new equivalents
+10. **Parallel**: Risk Assessor produces per-phase risk matrix with rollback triggers
+11. Generate BMad Method-compatible epics for sprint planning
+12. Finalize migration plan, epics, and tracking artifacts
+
+Output files:
+
+| File | Location | Content |
+|------|----------|---------|
+| `migration-plan.md` | `{planning_artifacts}/` | Full plan: strategy, compatibility matrix, coexistence design, phased roadmap, component cards, data/API migration, risk matrix |
+| `migration-epics.md` | `{planning_artifacts}/` | Epics with stories, acceptance criteria, and effort estimates (BMad Method-compatible) |
+| `migration-tracking.yaml` | `{implementation_artifacts}/` | Phase-by-phase progress tracking for sprint execution |
+
+### Research and Discussion
+
+**`/sprintpilot-research`** — Fan out research across multiple topics in parallel, each with web search access. Results synthesized into a unified report.
+
+**`/sprintpilot-party-mode`** — Launch 2-3 BMad Method personas (architect, PM, QA, dev, etc.) as parallel agents debating a topic. Multiple rounds where personas respond to each other. Produces consensus points, disagreements, and action items.
+
+---
+
+## Quick Start
+
+```bash
+# 1. Install BMad Method with the core method and Test Architect module
+#    (interactive — you'll be prompted to pick your tool)
+npx bmad-method install --modules bmm,tea
+```
+
+This installs:
+- **BMM** (BMad Method core) — the core development workflow with 34+ skills
+- **TEA** (Test Architect Enterprise) — risk-based test strategy, ATDD, CI quality gates, test framework scaffolding
+
+For full interactive setup (module *and* tool selection):
+```bash
+npx bmad-method install
+```
+
+```bash
+# 2. Install Sprintpilot (interactive — select your tool when prompted)
+npx @ikunin/sprintpilot@latest
+
+# 3. Start the autopilot in your IDE
+/sprint-autopilot-on
+```
+
+See [Supported Tools](#supported-tools) below for the full list of `--tools` values if you prefer non-interactive installs.
+
+## Supported Tools
+
+Sprintpilot uses the universal SKILL.md format — same skills work across all 9 tools:
+
+| Tool | Directory |
+|------|-----------|
+| Claude Code | `.claude/skills/` |
+| Cursor | `.cursor/skills/` |
+| Windsurf | `.windsurf/skills/` |
+| Gemini CLI | `.gemini/skills/` |
+| Cline | `.cline/skills/` |
+| Roo Code | `.roo/skills/` |
+| Trae | `.trae/skills/` |
+| Kiro | `.kiro/skills/` |
+| GitHub Copilot | `.github/copilot/skills/` |
+
+For non-interactive installs, pass one or more tool keys via `--tools`:
+```bash
+npx @ikunin/sprintpilot@latest install --tools <tool1>,<tool2> --yes
+```
+Valid values: `claude-code`, `cursor`, `windsurf`, `gemini-cli`, `cline`, `roo`, `trae`, `kiro`, `github-copilot`, or `all`.
+
+## Git Platforms
+
+| Platform | CLI | Auto-Detect | API Fallback |
+|----------|-----|-------------|-------------|
+| GitHub | `gh` | `github.com` | No |
+| GitLab | `glab` | `gitlab.*` | No |
+| Bitbucket | `bb` | `bitbucket.org` | Yes (`BITBUCKET_TOKEN`) |
+| Gitea | `tea` | Explicit config | Yes (`GITEA_TOKEN` + `base_url`) |
+
+No CLI installed? The addon falls back to **git_only mode** (direct merge, no PRs).
+
+To explicitly choose between PR and direct merge regardless of platform:
+```yaml
+# _Sprintpilot/modules/git/config.yaml
+git:
+  push:
+    create_pr: true   # PR flow (default) — push + PR, no auto-merge
+    create_pr: false  # Direct merge — merge to main after each story
+```
+
+## Supported Languages (Linting)
+
+| Language | Linters | Language | Linters |
+|----------|---------|----------|---------|
+| Python | ruff, flake8, pylint | Java | checkstyle, pmd |
+| JavaScript/TS | eslint, biome | C/C++ | cppcheck, clang-tidy |
+| Rust | cargo clippy | C# | dotnet format |
+| Go | golangci-lint | Swift | swiftlint |
+| Ruby | rubocop | PL/SQL | sqlfluff |
+| Kotlin | ktlint, detekt | PHP | phpstan, phpcs |
+
+First found wins per language. Multi-language projects (monorepos) lint all languages in one pass. See [Extending](docs/EXTENDING.md) to add more.
+
+## Configuration
+
+All settings live in two YAML files — edit after install to customize behavior.
+
+### Git Workflow (`_Sprintpilot/modules/git/config.yaml`)
+
+| Setting | Default | Description |
+|---------|---------|-------------|
+| `git.enabled` | `true` | Enable/disable all git operations |
+| `git.base_branch` | `main` | Branch PRs target |
+| `git.branch_prefix` | `story/` | Story branch naming (e.g., `story/1-2-user-auth`) |
+| `git.lint.enabled` | `true` | Lint changed files after implementation |
+| `git.lint.blocking` | `false` | `true` = lint errors halt autopilot |
+| `git.push.auto` | `true` | Auto-push branches after commit |
+| `git.push.create_pr` | `true` | Create PR (`false` = direct merge to base branch) |
+| `git.platform.provider` | `auto` | `auto` \| `github` \| `gitlab` \| `bitbucket` \| `gitea` \| `git_only` |
+| `git.lock.stale_timeout_minutes` | `30` | Auto-remove orphaned lock files |
+| `git.worktree.cleanup_on_merge` | `true` | Delete worktrees after merge |
+
+### Multi-Agent (`_Sprintpilot/modules/ma/config.yaml`)
+
+| Setting | Default | Description |
+|---------|---------|-------------|
+| `multi_agent.enabled` | `true` | Enable parallel agent skills |
+| `multi_agent.max_parallel_research` | `3` | Concurrent research agents per batch |
+| `multi_agent.max_parallel_analysis` | `5` | Concurrent codebase analysis agents |
+
+See the [Configuration Reference](docs/CONFIGURATION.md) for the full list.
+
+## Requirements
+
+- [BMad Method](https://github.com/bmad-code-org/BMAD-METHOD) v6.2.0+
+- A supported AI code agent (see table above)
+- Git repository with at least one commit
+- Platform CLI for PR creation (optional — see table above)
+
+## Documentation
+
+- [Installation Guide](docs/INSTALLATION.md)
+- [Usage Guide](docs/USAGE.md)
+- [Architecture](docs/ARCHITECTURE.md)
+- [Configuration Reference](docs/CONFIGURATION.md)
+- [Extending (Platforms & Languages)](docs/EXTENDING.md)
+- [Contributing](docs/CONTRIBUTING.md)
+- [Changelog](CHANGELOG.md)
+
+## License
+
+Apache 2.0

package/_Sprintpilot/.secrets-allowlist

@@ -0,0 +1,26 @@
+# Patterns and paths exempt from secrets scanning
+# One pattern per line. Supports glob syntax.
+
+# Test files commonly contain mock secrets
+test/**
+tests/**
+**/test_*
+**/*_test.*
+**/*_spec.*
+spec/**
+
+# Example/template files
+*.example
+*.sample
+*.template
+.env.example
+.env.sample
+
+# Documentation
+docs/**
+*.md
+
+# Fixture/mock data
+**/fixtures/**
+**/mocks/**
+**/testdata/**