@ikunin/sprintpilot 1.0.1 → 1.0.2

package/_Sprintpilot/scripts/lock.js

@@ -1,5 +1,4 @@
 #!/usr/bin/env node
-'use strict';
 
 const fs = require('node:fs');
 const path = require('node:path');
@@ -88,12 +87,20 @@ function writeLockExclusive(lockFile, id) {
     fs.writeSync(fd, content, 0, 'utf8');
     wrote = true;
   } finally {
-    try { fs.closeSync(fd); } catch { /* ignore */ }
+    try {
+      fs.closeSync(fd);
+    } catch {
+      /* ignore */
+    }
     if (!wrote) {
       // writeSync failed (ENOSPC, EIO): leaving an empty lockfile behind
       // would look "corrupt" to the next acquirer and permanently wedge
       // the autopilot. Unlink so the next try can re-create cleanly.
-      try { fs.unlinkSync(lockFile); } catch { /* ignore */ }
+      try {
+        fs.unlinkSync(lockFile);
+      } catch {
+        /* ignore */
+      }
     }
   }
 }
@@ -143,7 +150,11 @@ function main() {
     // of them gets EEXIST.
     const info = readLockInfo(lockFile, staleSeconds);
     if (info.state === 'STALE') {
-      try { fs.unlinkSync(lockFile); } catch { /* ignore */ }
+      try {
+        fs.unlinkSync(lockFile);
+      } catch {
+        /* ignore */
+      }
       try {
         writeLockExclusive(lockFile, id);
         log.out(`ACQUIRED_STALE:${id}`);
@@ -176,7 +187,11 @@ function main() {
 
   if (action === 'release') {
     if (fs.existsSync(lockFile)) {
-      try { fs.unlinkSync(lockFile); } catch { /* ignore */ }
+      try {
+        fs.unlinkSync(lockFile);
+      } catch {
+        /* ignore */
+      }
       log.out('RELEASED');
     } else {
       log.out('NO_LOCK');
@@ -187,7 +202,8 @@ function main() {
   if (action === 'status') {
     const info = readLockInfo(lockFile, staleSeconds);
     if (info.state === 'FREE') log.out('Lock: free (no active session)');
-    else if (info.state === 'LOCKED') log.out(`Lock: ACTIVE — session ${info.id}, age ${info.ageMin}m`);
+    else if (info.state === 'LOCKED')
+      log.out(`Lock: ACTIVE — session ${info.id}, age ${info.ageMin}m`);
     else log.out(`Lock: STALE — session ${info.id}, age ${info.ageMin}m (will auto-remove)`);
   }
 }

package/_Sprintpilot/scripts/sanitize-branch.js

@@ -1,5 +1,4 @@
 #!/usr/bin/env node
-'use strict';
 
 const crypto = require('node:crypto');
 
@@ -54,7 +53,10 @@ async function validateRefFormat(fullName) {
 
 async function main() {
   const { opts, positional } = parseArgs(process.argv.slice(2));
-  if (opts.help) { help(); process.exit(0); }
+  if (opts.help) {
+    help();
+    process.exit(0);
+  }
   const storyKey = positional[0];
   const prefix = opts.prefix ?? 'story/';
   const maxLength = parseInt(opts['max-length'] || '60', 10);

package/_Sprintpilot/scripts/stage-and-commit.js

@@ -1,5 +1,4 @@
 #!/usr/bin/env node
-'use strict';
 
 const fs = require('node:fs');
 const path = require('node:path');
@@ -15,7 +14,9 @@ const {
 const log = require('../lib/runtime/log');
 
 function help() {
-  log.out("Usage: stage-and-commit.js --message 'msg' [--allowlist path] [--max-size-mb 1] [--file-list path] [--dry-run]");
+  log.out(
+    "Usage: stage-and-commit.js --message 'msg' [--allowlist path] [--max-size-mb 1] [--file-list path] [--dry-run]",
+  );
 }
 
 function splitOut(out) {
@@ -34,8 +35,9 @@ async function collectChanges() {
   // add-side list so we don't `git add` a path that no longer exists and
   // emit a spurious warning; the dedicated `git rm` loop handles them.
   const deletedSet = new Set(deleted);
-  const all = dedupeSorted([...splitOut(modified), ...splitOut(untracked)])
-    .filter((f) => !deletedSet.has(f));
+  const all = dedupeSorted([...splitOut(modified), ...splitOut(untracked)]).filter(
+    (f) => !deletedSet.has(f),
+  );
   return { all, deleted };
 }
 
@@ -52,7 +54,10 @@ function parseFileListMarkdown(filePath) {
 
 async function main() {
   const { opts } = parseArgs(process.argv.slice(2), { booleanFlags: ['dry-run'] });
-  if (opts.help) { help(); process.exit(0); }
+  if (opts.help) {
+    help();
+    process.exit(0);
+  }
 
   const message = opts.message ?? opts.m;
   const allowlist = opts.allowlist;
@@ -95,7 +100,9 @@ async function main() {
 
       if (!isAllowlisted(file, allowPatterns)) {
         if (lstat.size > MAX_SCAN_BYTES) {
-          warnings.push(`secret scan skipped for ${file} (size ${Math.floor(lstat.size / 1024)} KB > ${MAX_SCAN_BYTES / 1024} KB limit)`);
+          warnings.push(
+            `secret scan skipped for ${file} (size ${Math.floor(lstat.size / 1024)} KB > ${MAX_SCAN_BYTES / 1024} KB limit)`,
+          );
         } else if (!isBinary) {
           try {
             const raw = fs.readFileSync(file, 'utf8');
@@ -126,7 +133,8 @@ async function main() {
   if (fs.existsSync('.gitignore')) {
     // Exact line match — substring tests were fooled by the entry appearing
     // inside a comment (e.g. "# .autopilot.lock is auto-created").
-    const entries = fs.readFileSync('.gitignore', 'utf8')
+    const entries = fs
+      .readFileSync('.gitignore', 'utf8')
       .split(/\r?\n/)
       .map((l) => l.trim())
       .filter((l) => l && !l.startsWith('#'));

package/_Sprintpilot/scripts/sync-status.js

@@ -1,5 +1,4 @@
 #!/usr/bin/env node
-'use strict';
 
 const fs = require('node:fs');
 const path = require('node:path');
@@ -40,12 +39,20 @@ function atomicWrite(targetPath, content) {
       try {
         fs.writeFileSync(targetPath, content, 'utf8');
       } finally {
-        try { fs.unlinkSync(tmp); } catch { /* best effort */ }
+        try {
+          fs.unlinkSync(tmp);
+        } catch {
+          /* best effort */
+        }
       }
       return;
     }
     // Any other error: clean up tmp so we don't leak cruft.
-    try { fs.unlinkSync(tmp); } catch { /* best effort */ }
+    try {
+      fs.unlinkSync(tmp);
+    } catch {
+      /* best effort */
+    }
     throw e;
   }
 }
@@ -78,7 +85,10 @@ function buildHeader(baseBranch, platform) {
 
 function main() {
   const { opts } = parseArgs(process.argv.slice(2));
-  if (opts.help) { help(); process.exit(0); }
+  if (opts.help) {
+    help();
+    process.exit(0);
+  }
 
   const story = opts.story;
   const statusFile = opts['git-status-file'];
@@ -102,12 +112,12 @@ function main() {
   // value", so we must NOT emit the field when the flag is absent. The
   // previous logic defaulted to 'false' and overwrote a prior 'true' every
   // call.
-  const hasWorktreeCleaned = Object.prototype.hasOwnProperty.call(opts, 'worktree-cleaned');
+  const hasWorktreeCleaned = Object.hasOwn(opts, 'worktree-cleaned');
   let worktreeCleaned;
   if (hasWorktreeCleaned) {
     const v = opts['worktree-cleaned'];
     // Accept 'true'/'false' strings (any case) and boolean true.
-    worktreeCleaned = (v === true || String(v).toLowerCase() === 'true') ? 'true' : 'false';
+    worktreeCleaned = v === true || String(v).toLowerCase() === 'true' ? 'true' : 'false';
   }
 
   const fields = [

package/bin/sprintpilot.js

@@ -1,5 +1,4 @@
 #!/usr/bin/env node
-'use strict';
 
 const path = require('node:path');
 const { Command } = require('commander');
@@ -42,16 +41,24 @@ async function main() {
 
   program
     .name('sprintpilot')
-    .description('Sprintpilot — autopilot and multi-agent addon for BMad Method: autonomous story execution, parallel agents, git workflow')
+    .description(
+      'Sprintpilot — autopilot and multi-agent addon for BMad Method: autonomous story execution, parallel agents, git workflow',
+    )
     .version(await resolveVersion(), '-v, --version', 'Show version');
 
   program
     .command('install', { isDefault: true })
     .description('Install Sprintpilot into the current BMad Method project')
-    .option('--tools <list>', 'Comma-separated tools (claude-code,cursor,windsurf,cline,roo,trae,kiro,gemini-cli,github-copilot,all)')
+    .option(
+      '--tools <list>',
+      'Comma-separated tools (claude-code,cursor,windsurf,cline,roo,trae,kiro,gemini-cli,github-copilot,all)',
+    )
     .option('--dry-run', 'Preview without making changes')
     .option('--force', 'Skip backup of existing skills')
-    .option('--migrate-v1', 'Migrate from bmad-autopilot-addon v1 (auto-detected; this flag is for non-interactive CI)')
+    .option(
+      '--migrate-v1',
+      'Migrate from bmad-autopilot-addon v1 (auto-detected; this flag is for non-interactive CI)',
+    )
     .option('-y, --yes', 'Non-interactive mode')
     .action(async (options) => {
       try {

package/lib/commands/check-update.js

@@ -1,5 +1,3 @@
-'use strict';
-
 const path = require('node:path');
 const fs = require('fs-extra');
 

package/lib/commands/install.js

@@ -1,5 +1,3 @@
-'use strict';
-
 const path = require('node:path');
 const { execFile } = require('node:child_process');
 const { promisify } = require('node:util');
@@ -22,7 +20,14 @@ const {
 const { resolveIgnoreFile, addIgnoreEntry } = require('../core/gitignore');
 const { copyDirWithSubstitution, backupSkill, pruneBackups } = require('../core/file-ops');
 const {
-  BEGIN, END, stripBlock, stripLegacyBlock, upsertBlock, writeAtomic, hasBlock, hasLegacyBlock,
+  BEGIN,
+  END,
+  stripBlock,
+  stripLegacyBlock,
+  upsertBlock,
+  writeAtomic,
+  hasBlock,
+  hasLegacyBlock,
 } = require('../core/markers');
 const { renderString, buildContext, isTextFile } = require('../substitute');
 const { fetchLatestVersion, compareVersions } = require('../core/update-check');
@@ -55,15 +60,19 @@ function renderBanner(version) {
   return lines.join('\n');
 }
 
-const {
-  V1_ADDON_DIR_NAME,
-  V1_SKILL_NAMES,
-  detectV1Installation,
-} = require('../core/v1-detect');
+const { V1_ADDON_DIR_NAME, V1_SKILL_NAMES, detectV1Installation } = require('../core/v1-detect');
 
 const ADDON_DIR = path.resolve(__dirname, '..', '..', '_Sprintpilot');
 const PROJECT_ADDON_DIR_NAME = '_Sprintpilot';
-const RUNTIME_RESOURCES = ['Sprintpilot.md', 'manifest.yaml', '.secrets-allowlist', 'lib', 'modules', 'scripts', 'templates'];
+const RUNTIME_RESOURCES = [
+  'Sprintpilot.md',
+  'manifest.yaml',
+  '.secrets-allowlist',
+  'lib',
+  'modules',
+  'scripts',
+  'templates',
+];
 const V1_MODULE_NAMES = ['git', 'ma', 'autopilot'];
 
 // Sentinel thrown by evictV1Installation when the user declines migration.
@@ -81,7 +90,10 @@ function parseToolsArg(value) {
   const trimmed = String(value).trim();
   if (!trimmed) return null;
   if (trimmed === 'all') return ALL_TOOLS.slice();
-  return trimmed.split(',').map((t) => t.trim()).filter(Boolean);
+  return trimmed
+    .split(',')
+    .map((t) => t.trim())
+    .filter(Boolean);
 }
 
 async function detectInstalledTools(projectRoot) {
@@ -100,7 +112,10 @@ async function detectInstalledTools(projectRoot) {
 async function listSkills() {
   const skillsDir = path.join(ADDON_DIR, 'skills');
   const entries = await fs.readdir(skillsDir, { withFileTypes: true });
-  return entries.filter((e) => e.isDirectory()).map((e) => e.name).sort();
+  return entries
+    .filter((e) => e.isDirectory())
+    .map((e) => e.name)
+    .sort();
 }
 
 function timestamp() {
@@ -135,8 +150,8 @@ async function installSystemPrompt(tool, projectRoot, addonDir, ctx, { dryRun =
 
   if (mode === 'claude-code') {
     const agentsFile = path.join(projectRoot, 'AGENTS.md');
-    let existed = await fs.pathExists(agentsFile);
-    let existing = existed ? await fs.readFile(agentsFile, 'utf8') : '';
+    const existed = await fs.pathExists(agentsFile);
+    const existing = existed ? await fs.readFile(agentsFile, 'utf8') : '';
     const updated = upsertBlock(existing, rulesContent);
     await writeAtomic(agentsFile, updated);
     if (!existed) {
@@ -154,7 +169,11 @@ async function installSystemPrompt(tool, projectRoot, addonDir, ctx, { dryRun =
       console.log(`  System prompt: CLAUDE.md (already has @AGENTS.md)`);
     } else if (claudeExists) {
       const needsNewline = claudeContent.length && !claudeContent.endsWith('\n');
-      await fs.writeFile(claudeFile, `${claudeContent}${needsNewline ? '\n' : ''}@AGENTS.md\n`, 'utf8');
+      await fs.writeFile(
+        claudeFile,
+        `${claudeContent}${needsNewline ? '\n' : ''}@AGENTS.md\n`,
+        'utf8',
+      );
       console.log(`  System prompt: CLAUDE.md (appended @AGENTS.md)`);
     } else {
       await fs.writeFile(claudeFile, '@AGENTS.md\n', 'utf8');
@@ -275,11 +294,15 @@ async function persistSnapshotForRecovery(projectRoot, snapshot) {
       contentBase64: f.buffer.toString('base64'),
     }));
   }
-  const body = JSON.stringify({
-    note: 'v1 module-config snapshot — restore manually under _Sprintpilot/modules/ and delete this file. Each file.contentBase64 is base64-encoded.',
-    capturedAt: new Date().toISOString(),
-    modules: serialized,
-  }, null, 2);
+  const body = JSON.stringify(
+    {
+      note: 'v1 module-config snapshot — restore manually under _Sprintpilot/modules/ and delete this file. Each file.contentBase64 is base64-encoded.',
+      capturedAt: new Date().toISOString(),
+      modules: serialized,
+    },
+    null,
+    2,
+  );
   await writeAtomic(recoveryFile, body);
   return recoveryFile;
 }
@@ -321,10 +344,14 @@ async function stripLegacyMarkers(projectRoot) {
     await writeAtomic(backup, content);
     if (!stripped.trim()) {
       await writeAtomic(file, '');
-      touched.push(`emptied ${path.relative(projectRoot, file)} (was legacy-only) — backup at ${path.relative(projectRoot, backup)}`);
+      touched.push(
+        `emptied ${path.relative(projectRoot, file)} (was legacy-only) — backup at ${path.relative(projectRoot, backup)}`,
+      );
     } else {
       await writeAtomic(file, stripped.endsWith('\n') ? stripped : `${stripped}\n`);
-      touched.push(`stripped legacy block from ${path.relative(projectRoot, file)} — backup at ${path.relative(projectRoot, backup)}`);
+      touched.push(
+        `stripped legacy block from ${path.relative(projectRoot, file)} — backup at ${path.relative(projectRoot, backup)}`,
+      );
     }
   }
   // Dedicated-file tools (cursor, roo, kiro, trae): the whole file is ours;
@@ -367,14 +394,16 @@ async function detectOldGlobalNpmPackage() {
     try {
       const data = JSON.parse(out);
       const deps = (data && data.dependencies) || {};
-      return Object.prototype.hasOwnProperty.call(deps, 'bmad-autopilot-addon');
+      return Object.hasOwn(deps, 'bmad-autopilot-addon');
     } catch {
       return null;
     }
   };
 
   try {
-    const { stdout } = await execFileAsync('npm', ['ls', '-g', '--depth=0', '--json'], { timeout: 10_000 });
+    const { stdout } = await execFileAsync('npm', ['ls', '-g', '--depth=0', '--json'], {
+      timeout: 10_000,
+    });
     const result = parseOutput(stdout);
     return result === null ? false : result;
   } catch (err) {
@@ -405,15 +434,23 @@ async function evictV1Installation(projectRoot, { dryRun, migrateV1, yes }) {
       console.log(pc.yellow('  (v1 manifest missing — detected via v1-named skill directories)'));
       break;
     case 'skills-unreadable-manifest':
-      console.log(pc.yellow('  (v1 manifest unreadable — detected via v1-named skill directories)'));
+      console.log(
+        pc.yellow('  (v1 manifest unreadable — detected via v1-named skill directories)'),
+      );
       break;
     case 'skills-other-addon':
-      console.log(pc.yellow(`  (manifest names addon "${v1.manifestAddonName}" — NOT bmad-ma-git — but v1-named skill directories are present)`));
+      console.log(
+        pc.yellow(
+          `  (manifest names addon "${v1.manifestAddonName}" — NOT bmad-ma-git — but v1-named skill directories are present)`,
+        ),
+      );
       break;
     default:
       // Fail-closed: an unknown detection reason means we don't fully
       // understand what we're about to migrate. Require explicit opt-in.
-      console.error(pc.red(`ERROR: unknown v1 detection reason "${v1.detectedVia}". Refusing to auto-migrate.`));
+      console.error(
+        pc.red(`ERROR: unknown v1 detection reason "${v1.detectedVia}". Refusing to auto-migrate.`),
+      );
       console.error(pc.red('  Pass --migrate-v1 explicitly if you want to proceed anyway.'));
       if (!migrateV1) throw new V1MigrationDeclinedError();
       break;
@@ -425,9 +462,17 @@ async function evictV1Installation(projectRoot, { dryRun, migrateV1, yes }) {
   // confirmation or an explicit --migrate-v1.
   if (v1.detectedVia === 'skills-other-addon' && !migrateV1) {
     console.error(pc.red('ERROR: ambiguous v1 signature.'));
-    console.error(pc.red(`  The manifest at ${path.relative(projectRoot, v1.v1Manifest)} names "${v1.manifestAddonName}", not "bmad-ma-git",`));
-    console.error(pc.red('  but v1-named skill directories are present. This might be a custom install.'));
-    console.error(pc.red('  If you want Sprintpilot to migrate it anyway, pass --migrate-v1 explicitly:'));
+    console.error(
+      pc.red(
+        `  The manifest at ${path.relative(projectRoot, v1.v1Manifest)} names "${v1.manifestAddonName}", not "bmad-ma-git",`,
+      ),
+    );
+    console.error(
+      pc.red('  but v1-named skill directories are present. This might be a custom install.'),
+    );
+    console.error(
+      pc.red('  If you want Sprintpilot to migrate it anyway, pass --migrate-v1 explicitly:'),
+    );
     console.error('      sprintpilot install --migrate-v1' + (yes ? ' --yes' : ''));
     throw new V1MigrationDeclinedError();
   }
@@ -440,9 +485,13 @@ async function evictV1Installation(projectRoot, { dryRun, migrateV1, yes }) {
   let isTTY = false;
   try {
     isTTY = process.stdin && process.stdin.isTTY === true && !process.stdin.destroyed;
-  } catch { /* treat as non-TTY */ }
+  } catch {
+    /* treat as non-TTY */
+  }
   if (!migrateV1 && !yes && !isTTY) {
-    console.error(pc.red('ERROR: v1 install detected but stdin is not a TTY — cannot prompt for confirmation.'));
+    console.error(
+      pc.red('ERROR: v1 install detected but stdin is not a TTY — cannot prompt for confirmation.'),
+    );
     console.error(pc.red('Re-run with --migrate-v1 --yes to migrate non-interactively:'));
     console.error('    sprintpilot install --migrate-v1 --yes');
     throw new V1MigrationDeclinedError();
@@ -462,7 +511,8 @@ async function evictV1Installation(projectRoot, { dryRun, migrateV1, yes }) {
 
   if (!migrateV1 && !yes) {
     const proceed = await prompts.confirm({
-      message: 'Migrate this project from bmad-autopilot-addon to Sprintpilot? (preserves module configs, removes legacy artifacts, backs up rule files)',
+      message:
+        'Migrate this project from bmad-autopilot-addon to Sprintpilot? (preserves module configs, removes legacy artifacts, backs up rule files)',
       initialValue: false,
     });
     if (!proceed) {
@@ -472,7 +522,11 @@ async function evictV1Installation(projectRoot, { dryRun, migrateV1, yes }) {
   }
 
   if (dryRun) {
-    console.log(pc.dim('[DRY RUN] Would snapshot legacy module configs, strip legacy markers (with backups), evict legacy skills from project tool dirs, remove _bmad-addons/, then re-apply snapshot after Sprintpilot install.'));
+    console.log(
+      pc.dim(
+        '[DRY RUN] Would snapshot legacy module configs, strip legacy markers (with backups), evict legacy skills from project tool dirs, remove _bmad-addons/, then re-apply snapshot after Sprintpilot install.',
+      ),
+    );
     return { migrated: true, moduleConfigSnapshot: {} };
   }
 
@@ -487,7 +541,9 @@ async function evictV1Installation(projectRoot, { dryRun, migrateV1, yes }) {
     const ignore = await resolveIgnoreFile(projectRoot);
     await addIgnoreEntry(ignore.path, '*.bak-sprintpilot-migration', { dryRun: false });
     await addIgnoreEntry(ignore.path, '.sprintpilot-v1-snapshot*.json', { dryRun: false });
-  } catch { /* non-blocking: the migration must not fail if .gitignore is unwritable */ }
+  } catch {
+    /* non-blocking: the migration must not fail if .gitignore is unwritable */
+  }
 
   // 1. Snapshot the full v1 modules/ tree into memory BEFORE any
   //    destructive operation. Templates (commit-story.txt, pr-body.md,
@@ -495,14 +551,18 @@ async function evictV1Installation(projectRoot, { dryRun, migrateV1, yes }) {
   //    survive. If any read fails, abort before removing the original.
   const { snapshot, failures } = await snapshotV1ModuleConfigs(projectRoot);
   if (failures.length) {
-    console.error(pc.red('ERROR: failed to read v1 module files — aborting migration to avoid data loss:'));
+    console.error(
+      pc.red('ERROR: failed to read v1 module files — aborting migration to avoid data loss:'),
+    );
     for (const { mod, err } of failures) {
       console.error(`  modules/${mod}/ — ${err.message || err}`);
     }
     throw new Error('v1 config snapshot failed');
   }
   for (const mod of Object.keys(snapshot)) {
-    console.log(`  Captured v1 modules/${mod}/ (${snapshot[mod].length} file${snapshot[mod].length === 1 ? '' : 's'})`);
+    console.log(
+      `  Captured v1 modules/${mod}/ (${snapshot[mod].length} file${snapshot[mod].length === 1 ? '' : 's'})`,
+    );
   }
 
   // 2. Strip legacy marker blocks from user rule files (with backups).
@@ -520,7 +580,9 @@ async function evictV1Installation(projectRoot, { dryRun, migrateV1, yes }) {
     await fs.remove(v1.v1Dir);
     console.log('  Removed ' + V1_ADDON_DIR_NAME + '/');
   } catch (err) {
-    console.warn(pc.yellow(`  WARNING: failed to remove ${V1_ADDON_DIR_NAME}/ — ${err.message || err}`));
+    console.warn(
+      pc.yellow(`  WARNING: failed to remove ${V1_ADDON_DIR_NAME}/ — ${err.message || err}`),
+    );
     console.warn(pc.yellow('  Remove it manually after install: rm -rf ' + V1_ADDON_DIR_NAME));
   }
 
@@ -528,7 +590,9 @@ async function evictV1Installation(projectRoot, { dryRun, migrateV1, yes }) {
   const hasOldGlobal = await detectOldGlobalNpmPackage();
   if (hasOldGlobal) {
     console.log('');
-    console.log(pc.yellow('Legacy npm package detected: bmad-autopilot-addon is installed globally.'));
+    console.log(
+      pc.yellow('Legacy npm package detected: bmad-autopilot-addon is installed globally.'),
+    );
     console.log(pc.yellow('Run this to remove it:'));
     console.log('    npm uninstall -g bmad-autopilot-addon');
   }
@@ -568,7 +632,7 @@ async function runInstall(options = {}) {
   const addonVersion = await readAddonManifestVersion(path.join(ADDON_DIR, 'manifest.yaml'));
 
   // Non-blocking update check
-  let latestVersionPromise = fetchLatestVersion().catch(() => null);
+  const latestVersionPromise = fetchLatestVersion().catch(() => null);
 
   process.stdout.write(pc.cyan(renderBanner(addonVersion)));
   console.log('');
@@ -610,7 +674,7 @@ async function runInstall(options = {}) {
   // 3. Detect + select tools
   const detected = await detectInstalledTools(projectRoot);
 
-  let parsedTools = parseToolsArg(options.tools);
+  const parsedTools = parseToolsArg(options.tools);
   let selectedTools;
 
   if (parsedTools) {
@@ -641,12 +705,16 @@ async function runInstall(options = {}) {
   console.log('');
 
   // 4. .gitignore maintenance
-  let ignore = await resolveIgnoreFile(projectRoot);
+  const ignore = await resolveIgnoreFile(projectRoot);
   const lockResult = await addIgnoreEntry(ignore.path, '.autopilot.lock', { dryRun });
   if (lockResult.added) {
     const name = path.basename(ignore.path);
     if (dryRun) {
-      console.log(pc.dim(`[DRY RUN] Would ${lockResult.created ? 'create' : 'add'} '.autopilot.lock' in ${name}`));
+      console.log(
+        pc.dim(
+          `[DRY RUN] Would ${lockResult.created ? 'create' : 'add'} '.autopilot.lock' in ${name}`,
+        ),
+      );
     } else if (lockResult.created) {
       console.log(`Created ${name} with '.autopilot.lock'`);
     } else {
@@ -728,7 +796,11 @@ async function runInstall(options = {}) {
             // Swap failed — put the old target back so the tool still has
             // a skill present, then re-raise.
             if (targetExistsNow) {
-              try { await fs.rename(oldTarget, target); } catch { /* best effort */ }
+              try {
+                await fs.rename(oldTarget, target);
+              } catch {
+                /* best effort */
+              }
             }
             throw e;
           }
@@ -736,7 +808,11 @@ async function runInstall(options = {}) {
             await fs.remove(oldTarget);
           }
         } catch (e) {
-          try { await fs.remove(stagingTarget); } catch { /* best effort */ }
+          try {
+            await fs.remove(stagingTarget);
+          } catch {
+            /* best effort */
+          }
           throw e;
         }
         toolInstalled++;
@@ -787,13 +863,23 @@ async function runInstall(options = {}) {
         const reapplied = await applyV1ModuleConfigs(projectRoot, v1ConfigSnapshot);
         for (const r of reapplied) console.log(`  Preserved v1 ${r}`);
       } catch (err) {
-        console.error(pc.red('ERROR: failed to re-apply legacy module snapshot after Sprintpilot install.'));
+        console.error(
+          pc.red('ERROR: failed to re-apply legacy module snapshot after Sprintpilot install.'),
+        );
         console.error(pc.red(`  ${err.message || err}`));
         try {
           const recoveryFile = await persistSnapshotForRecovery(projectRoot, v1ConfigSnapshot);
-          console.error(pc.yellow(`  Snapshot persisted to ${path.relative(projectRoot, recoveryFile)} — restore manually.`));
+          console.error(
+            pc.yellow(
+              `  Snapshot persisted to ${path.relative(projectRoot, recoveryFile)} — restore manually.`,
+            ),
+          );
         } catch (persistErr) {
-          console.error(pc.red(`  Additionally failed to persist snapshot: ${persistErr.message || persistErr}`));
+          console.error(
+            pc.red(
+              `  Additionally failed to persist snapshot: ${persistErr.message || persistErr}`,
+            ),
+          );
         }
         throw err;
       }
@@ -819,7 +905,9 @@ async function runInstall(options = {}) {
   console.log(pc.green(`=== Sprintpilot v${addonVersion || 'unknown'} installed ===`));
   console.log('');
   console.log(`Tools configured: ${selectedTools.join(' ')}`);
-  console.log(`Total skills installed: ${totalInstalled} (${skillCount} skills x ${selectedTools.length} tools)`);
+  console.log(
+    `Total skills installed: ${totalInstalled} (${skillCount} skills x ${selectedTools.length} tools)`,
+  );
   console.log('');
   console.log('Skills:');
   for (const skill of allSkills) console.log(`  - ${skill}`);
@@ -848,7 +936,9 @@ async function runInstall(options = {}) {
   console.log('    multi_agent.max_parallel_analysis  5      Codebase analysis agents');
   console.log('');
   console.log('  _Sprintpilot/modules/autopilot/config.yaml');
-  console.log('    autopilot.session_story_limit    3      Stories to fully implement per run (0 = unlimited)');
+  console.log(
+    '    autopilot.session_story_limit    3      Stories to fully implement per run (0 = unlimited)',
+  );
   console.log('');
   console.log('Multi-agent skills — run parallel subagents for faster analysis:');
   console.log('  /sprintpilot-code-review       Parallel 3-layer adversarial review');