@ikunin/sprintpilot 2.0.8 → 2.0.10

package/_Sprintpilot/manifest.yaml

@@ -1,6 +1,6 @@
 addon:
   name: sprintpilot
-  version: 2.0.8
+  version: 2.0.10
   description: Sprintpilot — autopilot and multi-agent addon for BMad Method (git workflow, parallel agents, autonomous story execution)
   bmad_compatibility: ">=6.2.0"
   modules:

package/_Sprintpilot/scripts/scan.js

@@ -15,6 +15,10 @@
  *               Flags: --include, --exclude, --root
  *   extensions  Extension frequency histogram, descending.
  *               Flags: --exclude, --root, --limit (default 20)
+ *
+ * Ignore files: .gitignore and .aiexclude at the project root are parsed and
+ * applied as additional excludes by default. Pass --no-respect-ignore-files
+ * to disable. Negation patterns (`!pattern`) are logged to stderr and skipped.
  */
 
 const fs = require('fs');
@@ -41,9 +45,74 @@ const DEFAULT_EXCLUDES = [
   '.worktrees',
 ];
 
+const IGNORE_FILES = ['.gitignore', '.aiexclude'];
+
+// Translate one .gitignore / .aiexclude line into zero or more scan.js exclude
+// patterns. Blank lines and `#` comments → []. Negation (`!`) is unsupported
+// and returns []; the caller reports a stderr note. Trailing `/` marks a
+// directory; we expand to both `dir` and `dir/**` so descendant files are also
+// excluded. Leading `/` anchors to the ignore file's directory; we strip it
+// and rely on scan.js's path-anchored exclude semantics for patterns that
+// contain a slash.
+function parseIgnorePattern(line) {
+  let p = line.trim();
+  if (!p || p.startsWith('#')) return { patterns: [], negation: false };
+  if (p.startsWith('!')) return { patterns: [], negation: true };
+  // Unescape leading `\#` and `\!` (gitignore literal escapes).
+  if (p.startsWith('\\#') || p.startsWith('\\!')) p = p.slice(1);
+
+  const isDir = p.endsWith('/');
+  if (isDir) p = p.slice(0, -1);
+
+  const anchored = p.startsWith('/');
+  const body = anchored ? p.slice(1) : p;
+  if (!body) return { patterns: [], negation: false };
+  // compilePatterns handles a leading '/' by anchoring the pattern to the
+  // root, so we keep it intact for anchored patterns.
+  const prefix = anchored ? '/' : '';
+
+  const patterns = [];
+  if (isDir) {
+    patterns.push(`${prefix}${body}`);
+    patterns.push(`${prefix}${body}/**`);
+  } else {
+    patterns.push(`${prefix}${body}`);
+    // A non-anchored pattern that has no slash matches files at any depth as
+    // a basename, which scan.js's matcher already does. If the same name is
+    // also a directory anywhere in the tree, exclude its descendants too.
+    if (!anchored && !body.includes('/')) patterns.push(`**/${body}/**`);
+  }
+  return { patterns, negation: false };
+}
+
+function loadIgnoreFilePatterns(root) {
+  const out = [];
+  let negationCount = 0;
+  for (const name of IGNORE_FILES) {
+    const full = path.join(root, name);
+    let content;
+    try {
+      content = fs.readFileSync(full, 'utf8');
+    } catch {
+      continue;
+    }
+    for (const raw of content.split(/\r?\n/)) {
+      const { patterns, negation } = parseIgnorePattern(raw);
+      if (negation) negationCount++;
+      for (const p of patterns) out.push(p);
+    }
+  }
+  if (negationCount > 0) {
+    log.error(
+      `scan.js: ignored ${negationCount} negation pattern(s) from .gitignore/.aiexclude (not supported)`,
+    );
+  }
+  return out;
+}
+
 function help() {
   log.out(
-    'Usage: scan.js <files|largest|loc|extensions> [--include <globs>] [--exclude <globs>] [--root <path>] [--limit <N>] [--count]',
+    'Usage: scan.js <files|largest|loc|extensions> [--include <globs>] [--exclude <globs>] [--root <path>] [--limit <N>] [--count] [--no-respect-ignore-files]',
   );
 }
 
@@ -183,12 +252,22 @@ function toPosix(p) {
 // pathAnchored = true if the pattern contains a path separator; such patterns
 // only match the full relative path. Basename-only patterns (no '/') match
 // both the full path and the basename, so "*.ts" works at any depth.
+// A leading '/' anchors the pattern to the root (relative paths have no
+// leading slash, so we strip it but keep pathAnchored=true).
 function compilePatterns(patterns) {
-  return patterns.map((p) => ({
-    raw: p,
-    re: globToRegex(p),
-    pathAnchored: p.includes('/'),
-  }));
+  return patterns.map((p) => {
+    let raw = p;
+    let leadingSlash = false;
+    if (raw.startsWith('/')) {
+      raw = raw.slice(1);
+      leadingSlash = true;
+    }
+    return {
+      raw,
+      re: globToRegex(raw),
+      pathAnchored: leadingSlash || raw.includes('/'),
+    };
+  });
 }
 
 function matchesAny(relPath, compiled) {
@@ -335,8 +414,8 @@ function resolveRoot(opts) {
   return root;
 }
 
-function buildExcludes(extra) {
-  const list = [...DEFAULT_EXCLUDES, ...extra];
+function buildExcludes(extra, ignoreFromFiles) {
+  const list = [...DEFAULT_EXCLUDES, ...extra, ...ignoreFromFiles];
   // Patterns: match the basename of a directory OR any path containing it.
   const patterns = [];
   const basenames = new Set();
@@ -352,10 +431,18 @@ function buildExcludes(extra) {
   return { compiled: compilePatterns(patterns), basenames };
 }
 
+function ignoreFilePatternsFor(root, opts) {
+  if (opts['no-respect-ignore-files'] === true) return [];
+  return loadIgnoreFilePatterns(root);
+}
+
 function cmdFiles(opts) {
   const root = resolveRoot(opts);
   const includes = compilePatterns(splitList(opts.include));
-  const { compiled: excludes, basenames } = buildExcludes(splitList(opts.exclude));
+  const { compiled: excludes, basenames } = buildExcludes(
+    splitList(opts.exclude),
+    ignoreFilePatternsFor(root, opts),
+  );
   const limit = opts.limit ? Number(opts.limit) : 0;
   const count = opts.count === true || opts.count === 'true';
 
@@ -378,7 +465,10 @@ function cmdFiles(opts) {
 function cmdLargest(opts) {
   const root = resolveRoot(opts);
   const includes = compilePatterns(splitList(opts.include));
-  const { compiled: excludes, basenames } = buildExcludes(splitList(opts.exclude));
+  const { compiled: excludes, basenames } = buildExcludes(
+    splitList(opts.exclude),
+    ignoreFilePatternsFor(root, opts),
+  );
   const limit = opts.limit ? Number(opts.limit) : 10;
 
   const heap = []; // simple array; N is small so O(files * log N) is fine
@@ -396,7 +486,10 @@ function cmdLargest(opts) {
 function cmdLoc(opts) {
   const root = resolveRoot(opts);
   const includes = compilePatterns(splitList(opts.include));
-  const { compiled: excludes, basenames } = buildExcludes(splitList(opts.exclude));
+  const { compiled: excludes, basenames } = buildExcludes(
+    splitList(opts.exclude),
+    ignoreFilePatternsFor(root, opts),
+  );
 
   let total = 0;
   let fileCount = 0;
@@ -409,7 +502,10 @@ function cmdLoc(opts) {
 
 function cmdExtensions(opts) {
   const root = resolveRoot(opts);
-  const { compiled: excludes, basenames } = buildExcludes(splitList(opts.exclude));
+  const { compiled: excludes, basenames } = buildExcludes(
+    splitList(opts.exclude),
+    ignoreFilePatternsFor(root, opts),
+  );
   const limit = opts.limit ? Number(opts.limit) : 20;
 
   const counts = new Map();
@@ -427,7 +523,7 @@ function cmdExtensions(opts) {
 
 function main() {
   const { opts, positional } = parseArgs(process.argv.slice(2), {
-    booleanFlags: ['count'],
+    booleanFlags: ['count', 'no-respect-ignore-files'],
   });
   if (opts.help || positional.length === 0) {
     help();

package/_Sprintpilot/skills/sprintpilot-codebase-map/agents/architecture-mapper.md

@@ -19,6 +19,15 @@ Scan the project at `{{project_root}}` and write your findings to `{{output_file
 - `*.key`, `*.pem`, `*.p12` (private keys)
 - `credentials.json`, `service-account.json`
 
+## Ignore-file Awareness
+
+Before any Glob or Grep, read `{{project_root}}/.gitignore` and
+`{{project_root}}/.aiexclude` if they exist. Treat every non-comment,
+non-negation pattern as an additional excluded path: skip those files and
+directories entirely, do not Read them, and filter them out of pattern search
+results. `scan.js` applies these patterns automatically. Skip negation (`!`)
+lines.
+
 ## Exploration
 
 Use your native file tools (Read, Glob, Grep). The lists below describe what data to collect; pick the appropriate tool for your CLI.

package/_Sprintpilot/skills/sprintpilot-codebase-map/agents/concerns-hunter.md

@@ -20,6 +20,15 @@ Scan the project at `{{project_root}}` and write your findings to `{{output_file
 - `credentials.json`, `service-account.json`
 - Files in `.git/` directory
 
+## Ignore-file Awareness
+
+Before any Glob or Grep, read `{{project_root}}/.gitignore` and
+`{{project_root}}/.aiexclude` if they exist. Treat every non-comment,
+non-negation pattern as an additional excluded path: skip those files and
+directories entirely, do not Read them, and filter them out of pattern search
+results. `scan.js` applies these patterns automatically. Skip negation (`!`)
+lines.
+
 ## Exploration
 
 Use Grep for pattern searches and `scan.js` for aggregations. All Grep calls below should filter to code file types (e.g., `*.ts`, `*.js`, `*.py`, `*.java`, `*.go`, `*.rs`, `*.rb`, `*.cs`, `*.sql`, `*.sps`, `*.spb`, `*.xml`, `*.sh`, `*.c`, `*.h`, `*.cpp`, `*.hpp`, `*.cc`, `*.cxx`, `*.hxx`) and cap each result set (~20-50).

package/_Sprintpilot/skills/sprintpilot-codebase-map/agents/integration-mapper.md

@@ -21,6 +21,15 @@ Scan the project at `{{project_root}}` and write your findings to `{{output_file
 
 **DO read**: `.env.example`, `.env.sample`, `.env.template` (safe — contain variable names only)
 
+## Ignore-file Awareness
+
+Before any Glob or Grep, read `{{project_root}}/.gitignore` and
+`{{project_root}}/.aiexclude` if they exist. Treat every non-comment,
+non-negation pattern as an additional excluded path: skip those files and
+directories entirely, do not Read them, and filter them out of pattern search
+results. `scan.js` applies these patterns automatically. Skip negation (`!`)
+lines.
+
 ## Exploration
 
 Use Grep and Read. Below are the patterns to search for — file-type filters match the original language coverage (`*.ts`, `*.js`, `*.py`, `*.rb`, `*.go`, `*.rs`, `*.java`, `*.sh`, `*.c`, `*.h`, `*.cpp`, `*.hpp`, `*.cc`, `*.cxx`, `*.hxx`, `*.sql`, `*.sps`, `*.spb`, `*.xml`). Cap each result set (~15-30 matches).

package/_Sprintpilot/skills/sprintpilot-codebase-map/agents/quality-assessor.md

@@ -19,6 +19,15 @@ Scan the project at `{{project_root}}` and write your findings to `{{output_file
 - `*.key`, `*.pem`, `*.p12` (private keys)
 - `credentials.json`, `service-account.json`
 
+## Ignore-file Awareness
+
+Before any Glob or Grep, read `{{project_root}}/.gitignore` and
+`{{project_root}}/.aiexclude` if they exist. Treat every non-comment,
+non-negation pattern as an additional excluded path: skip those files and
+directories entirely, do not Read them, and filter them out of pattern search
+results. `scan.js` applies these patterns automatically. Skip negation (`!`)
+lines.
+
 ## Exploration
 
 Use your native file tools (Read, Glob, Grep) plus the `scan.js` helper for aggregations.

package/_Sprintpilot/skills/sprintpilot-codebase-map/agents/stack-analyzer.md

@@ -20,6 +20,16 @@ Scan the project at `{{project_root}}` and write your findings to `{{output_file
 - `credentials.json`, `service-account.json`
 - `*.secret`, `*password*`, `*token*` (in filenames)
 
+## Ignore-file Awareness
+
+Before any Glob or Grep, read `{{project_root}}/.gitignore` and
+`{{project_root}}/.aiexclude` if they exist. Treat every non-comment,
+non-negation pattern as an additional excluded path: skip those files and
+directories entirely, do not Read them, and filter them out of any pattern
+search results. `scan.js` already applies these patterns automatically — pass
+`--no-respect-ignore-files` only if you have a deliberate reason. Skip negation
+(`!`) lines.
+
 ## Exploration
 
 Gather data using your native file tools (Read, Glob, Grep). The commands below are illustrative — use the equivalent tool from your CLI. Skip files that don't exist; do not fail the task on missing manifests.

package/_Sprintpilot/skills/sprintpilot-codebase-map/workflow.md

@@ -21,6 +21,8 @@ Complementary, not a replacement. `bmad-document-project` generates comprehensiv
 <action>Create output directory `{output_folder}/codebase-analysis` (use your native file-create tool; it will create parent directories as needed). The first `Write` tool call targeting a file inside this directory will auto-create it, so no explicit mkdir is required in practice.</action>
 <action>Determine project root absolute path: `{{project_root}}`</action>
 
+<action>Note: each agent reads `{{project_root}}/.gitignore` and `{{project_root}}/.aiexclude` (if present) and treats every listed file/directory as off-limits. The `scan.js` helper applies these patterns automatically; agents apply them to their Glob/Grep operations as well. This prevents inclusion of build artifacts, vendored code, secrets, and explicitly AI-excluded paths in the analysis.</action>
+
 ---
 
 ## Step 2 — Launch 5 Analysis Agents in Parallel

package/_Sprintpilot/skills/sprintpilot-reverse-architect/agents/component-mapper.md

@@ -6,6 +6,13 @@ You are extracting module boundaries and component contracts from an existing co
 
 Using the architecture-analysis.md analysis as a starting point, go deeper: trace actual imports, identify public APIs, and map the internal dependency graph.
 
+## Ignore-file Awareness
+
+Before any Glob or Grep, read the project's `.gitignore` and `.aiexclude` if
+they exist. Treat every non-comment, non-negation pattern as an additional
+excluded path: skip those files and directories entirely, do not Read them,
+and filter them out of pattern search results. Skip negation (`!`) lines.
+
 ## Method
 
 1. For each module/directory identified in architecture-analysis.md:

package/_Sprintpilot/skills/sprintpilot-reverse-architect/agents/data-flow-tracer.md

@@ -6,6 +6,13 @@ You are tracing how data flows through the system — from entry points to stora
 
 Using architecture-analysis.md and integrations-analysis.md as context, trace the actual request/data paths through the code.
 
+## Ignore-file Awareness
+
+Before any Glob or Grep, read the project's `.gitignore` and `.aiexclude` if
+they exist. Treat every non-comment, non-negation pattern as an additional
+excluded path: skip those files and directories entirely, do not Read them,
+and filter them out of pattern search results. Skip negation (`!`) lines.
+
 ## Method
 
 1. Start from entry points (routes, CLI handlers, event listeners)

package/_Sprintpilot/skills/sprintpilot-reverse-architect/agents/pattern-extractor.md

@@ -6,6 +6,13 @@ You are identifying design patterns, conventions, and architectural decisions em
 
 Using architecture-analysis.md and stack-analysis.md as context, identify the actual patterns the codebase follows (not what it claims to follow).
 
+## Ignore-file Awareness
+
+Before any Glob or Grep, read the project's `.gitignore` and `.aiexclude` if
+they exist. Treat every non-comment, non-negation pattern as an additional
+excluded path: skip those files and directories entirely, do not Read them,
+and filter them out of pattern search results. Skip negation (`!`) lines.
+
 ## Method
 
 1. Look for structural patterns: Factory, Repository, Observer, Middleware, Decorator

package/lib/commands/install.js

@@ -368,7 +368,7 @@ async function stripLegacyMarkers(projectRoot) {
 // Evict v1 skill dirs from tool skill dirs INSIDE projectRoot only. We
 // deliberately do NOT touch user-global ~/.claude/skills/ — a project-level
 // install must not reach across projects on the same machine.
-async function evictV1SkillsFromToolDirs(projectRoot) {
+async function evictV1SkillsFromToolDirs(projectRoot, { dryRun = false } = {}) {
   const removed = [];
   const toolSkillDirs = [];
   for (const tool of ALL_TOOLS) {
@@ -382,7 +382,7 @@ async function evictV1SkillsFromToolDirs(projectRoot) {
     for (const v1Name of V1_SKILL_NAMES) {
       const target = path.join(dir, v1Name);
       if (await fs.pathExists(target)) {
-        await fs.remove(target);
+        if (!dryRun) await fs.remove(target);
         removed.push(path.relative(projectRoot, target));
       }
     }
@@ -1001,6 +1001,22 @@ async function runInstall(options = {}) {
     throw err;
   }
 
+  // 1b. Sweep orphaned v1-named skill dirs from tool dirs unconditionally.
+  //     evictV1Installation only fires when _bmad-addons/ is present, so a
+  //     user who upgraded long ago (and removed _bmad-addons/) never gets
+  //     stale .claude/skills/bmad-ma-* cleaned up — they linger as live
+  //     duplicates of the new sprintpilot-* skills. Idempotent, no-op when
+  //     nothing matches.
+  const orphanedV1Skills = await evictV1SkillsFromToolDirs(projectRoot, { dryRun });
+  if (orphanedV1Skills.length > 0) {
+    console.log('');
+    console.log(pc.yellow('Orphaned v1 skill directories found:'));
+    for (const e of orphanedV1Skills) {
+      console.log(`  ${dryRun ? 'Would remove' : 'Removed'} legacy skill: ${e}`);
+    }
+    console.log('');
+  }
+
   // 2. Resolve output_folder
   const outputFolder = await readOutputFolder(projectRoot);
   if (outputFolder !== '_bmad-output') {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ikunin/sprintpilot",
-  "version": "2.0.8",
+  "version": "2.0.10",
   "description": "Sprintpilot — autopilot and multi-agent addon for BMad Method v6: git workflow, parallel agents, autonomous story execution",
   "license": "Apache-2.0",
   "repository": {