@ojokesusu/lintasai 1.1.2

package/kit.ps1

@@ -0,0 +1,508 @@
+<#
+.SYNOPSIS
+  kit.ps1 - Single entry point untuk operasi kit lintasAI
+
+.DESCRIPTION
+  Router yang delegate ke script per-operation. Tujuan: 1 command yang gampang
+  diingat staff IT, daripada hafal 3 nama script berbeda.
+
+  Subcommand yang tersedia:
+    setup     - Setup Pola B di proyek (delegate ke setup-pola-b.ps1)
+    update    - Update kit ke versi terbaru via re-clone (delegate ke update-kit.ps1)
+    uninstall - Hapus kit dari proyek dengan AMAN (manifest-based, delegate ke uninstall.ps1)
+    doctor    - Diagnostic: cek versi + file utuh + broken cross-ref + integrity (sha256)
+    scan      - Re-run scan project (tanpa setup) — generate ringkasan kandidat CRITICAL
+    version   - Print versi kit aktif (dari manifest)
+    rollback  - Rollback kit ke snapshot sebelum update (delegate ke lib\rollback.ps1)
+    help      - Tampilkan usage
+
+.PARAMETER Command
+  Subcommand yang mau dijalankan. Required.
+
+.PARAMETER Args
+  Arguments yang di-pass ke subcommand. Optional.
+
+.EXAMPLE
+  .\.claude-kit\kit.ps1 setup
+  .\.claude-kit\kit.ps1 setup -Force
+  .\.claude-kit\kit.ps1 update
+  .\.claude-kit\kit.ps1 update -NoBackup
+  .\.claude-kit\kit.ps1 uninstall -DryRun
+  .\.claude-kit\kit.ps1 uninstall -Force
+  .\.claude-kit\kit.ps1 doctor
+  .\.claude-kit\kit.ps1 scan
+  .\.claude-kit\kit.ps1 version
+  .\.claude-kit\kit.ps1 help
+
+.NOTES
+  Versi  : 1.0
+  Tanggal: 2026-06-03
+  Run    : .\.claude-kit\kit.ps1 <command>
+  Atau   : powershell -ExecutionPolicy Bypass -File .\.claude-kit\kit.ps1 <command>
+
+  Backward compatibility: setup-pola-b.ps1 + update-kit.ps1 tetap bisa dipanggil
+  langsung (tidak deprecated). kit.ps1 cuma alternative entry point yang lebih ringkas.
+#>
+
+[CmdletBinding()]
+param(
+    [Parameter(Position = 0)]
+    [ValidateSet('setup', 'update', 'uninstall', 'doctor', 'scan', 'version', 'rollback', 'help', '')]
+    [string]$Command = '',
+
+    [Parameter(ValueFromRemainingArguments = $true)]
+    [string[]]$ExtraArgs
+)
+
+$ErrorActionPreference = 'Stop'
+
+# ---- Resolve paths ----
+$KitDir = if ($PSScriptRoot) { $PSScriptRoot } elseif ($MyInvocation.MyCommand.Path) { Split-Path -Parent $MyInvocation.MyCommand.Path } else { (Get-Location).Path }
+$ProjectRoot = Split-Path -Parent $KitDir
+
+# ---- Resolve lib paths (optional dependencies) ----
+$libRollback = Join-Path $PSScriptRoot 'lib\rollback.ps1'
+$libSafety = Join-Path $PSScriptRoot 'lib\safety.ps1'
+
+# ---- Helper: detect kit version (defense-in-depth fallback chain) ----
+# Source 1: .install-manifest.json -> metadata.kit_version (PRIMARY — what was installed)
+# Source 2: $script:KIT_VERSION constant (kit.ps1's own version awareness)
+# Source 3: CHANGELOG.md first "## v X.Y.Z" line, or "## [X.Y.Z]" entry
+# Last resort: "unknown" (NOT "not installed" — misleading; the kit itself is present)
+function Get-KitVersion {
+    $ver = $null
+
+    # Source 1: manifest
+    $manifestPath = Join-Path $KitDir '.install-manifest.json'
+    if (Test-Path $manifestPath) {
+        try {
+            $json = [System.IO.File]::ReadAllText($manifestPath, [System.Text.Encoding]::UTF8)
+            $m = ConvertFrom-Json $json -ErrorAction Stop
+            if ($m.metadata -and $m.metadata.kit_version) {
+                $ver = $m.metadata.kit_version
+            }
+        } catch { }
+    }
+
+    # Source 2: $script:KIT_VERSION constant (optional — may not be defined)
+    if (-not $ver -and $script:KIT_VERSION) {
+        $ver = $script:KIT_VERSION
+    }
+
+    # Source 3: CHANGELOG.md — try "## v1.2.3" first, then "## [1.2.3]"
+    if (-not $ver) {
+        $changelogPath = Join-Path $KitDir 'CHANGELOG.md'
+        if (Test-Path $changelogPath) {
+            try {
+                $first = Get-Content $changelogPath -Encoding UTF8 -ErrorAction Stop |
+                    Where-Object { $_ -match '^##\s+v\d+\.' } |
+                    Select-Object -First 1
+                if ($first -and ($first -match '(v\d+\.\d+\.\d+)')) {
+                    $ver = $matches[1]
+                } else {
+                    $bracket = Select-String -Path $changelogPath -Pattern '## \[(\d+\.\d+\.\d+)\]' -List -ErrorAction SilentlyContinue
+                    if ($bracket) { $ver = 'v' + $bracket.Matches[0].Groups[1].Value }
+                }
+            } catch { }
+        }
+    }
+
+    # Last resort
+    if (-not $ver) { $ver = 'unknown' }
+
+    return $ver
+}
+
+# ---- Helper: print usage ----
+function Show-Help {
+    Write-Host ""
+    Write-Host "kit.ps1 - Single entry point untuk kit lintasAI (v$(Get-KitVersion))" -ForegroundColor Cyan
+    Write-Host ""
+    Write-Host "USAGE:" -ForegroundColor Cyan
+    Write-Host "  .\.claude-kit\kit.ps1 <command> [args]"
+    Write-Host ""
+    Write-Host "COMMANDS:" -ForegroundColor Cyan
+    Write-Host "  setup     - Setup Pola B di proyek (copy AGENTS.md, docs skeleton, file tim)"
+    Write-Host "              Args: -Force, -DryRun, -SkipTeamFiles"
+    Write-Host ""
+    Write-Host "  update    - Update kit ke versi terbaru via re-clone fresh dari GitHub"
+    Write-Host "              Args: -NoBackup, -RepoUrl <url>, -Branch <name>, -DryRun"
+    Write-Host ""
+    Write-Host "  uninstall - Hapus kit dari proyek dengan AMAN (manifest-based diff)"
+    Write-Host "              Args: -DryRun, -Force, -DeleteAgents, -KeepKit, -Yes, -AllowProjectRootMismatch"
+    Write-Host "              File project (yang BUKAN dari kit) AMAN tidak terhapus."
+    Write-Host "              Path traversal + symlink protection aktif by default."
+    Write-Host ""
+    Write-Host "  doctor    - Diagnostic: cek versi + file inti utuh + cross-ref"
+    Write-Host "              (no args)"
+    Write-Host ""
+    Write-Host "  scan      - Re-run scan project untuk identifikasi kandidat CRITICAL"
+    Write-Host "              (tanpa setup ulang)"
+    Write-Host ""
+    Write-Host "  version   - Print versi kit aktif (dari .install-manifest.json)"
+    Write-Host ""
+    Write-Host "  rollback  - Rollback kit ke snapshot sebelum update terakhir"
+    Write-Host "              (delegate ke lib\rollback.ps1)"
+    Write-Host ""
+    Write-Host "  help      - Tampilkan help ini"
+    Write-Host ""
+    Write-Host "EXAMPLES:" -ForegroundColor Cyan
+    Write-Host "  .\.claude-kit\kit.ps1 setup -Force"
+    Write-Host "  .\.claude-kit\kit.ps1 update"
+    Write-Host "  .\.claude-kit\kit.ps1 doctor"
+    Write-Host ""
+    Write-Host "BACKWARD COMPATIBILITY:" -ForegroundColor Cyan
+    Write-Host "  Setup script lama tetap bisa dipanggil langsung:"
+    Write-Host "    .\.claude-kit\setup-pola-b.ps1 -Force"
+    Write-Host "    .\.claude-kit\update-kit.ps1"
+    Write-Host ""
+    Write-Host "  kit.ps1 cuma alternative entry point yang lebih ringkas."
+    Write-Host ""
+}
+
+# ---- Helper: doctor diagnostic ----
+function Invoke-Doctor {
+    Write-Host ""
+    Write-Host "=== Kit Doctor (diagnostic) ===" -ForegroundColor Cyan
+    Write-Host ""
+
+    $ok = 0
+    $warn = 0
+    $err = 0
+
+    # 1. Kit version
+    $version = Get-KitVersion
+    if ($version -match '^v?\d+\.\d+\.\d+') {
+        $display = if ($version -match '^v') { $version } else { "v$version" }
+        Write-Host ("OK    Kit version: {0}" -f $display) -ForegroundColor Green
+        $ok++
+    } elseif ($version -eq 'unknown') {
+        Write-Host "WARN  Kit version: unknown (manifest hilang, `$script:KIT_VERSION kosong, CHANGELOG.md tidak parseable)" -ForegroundColor Yellow
+        $warn++
+    } else {
+        Write-Host ("ERROR Kit version: format tidak dikenali ('{0}')" -f $version) -ForegroundColor Red
+        $err++
+    }
+
+    # 2. File inti check
+    # Source of truth: lib\kit-files.psd1 (single manifest, di-load semua konsumen)
+    $kitFilesPsd1 = Join-Path $KitDir 'lib\kit-files.psd1'
+    if (-not (Test-Path $kitFilesPsd1)) {
+        Write-Host "ERROR lib\kit-files.psd1 hilang (manifest single-source-of-truth)" -ForegroundColor Red
+        $err++
+        $wajibAda = @()
+    } else {
+        $kitFiles = Import-PowerShellDataFile -Path $kitFilesPsd1
+        $wajibAda = @(
+            $kitFiles.core_prompts +
+            $kitFiles.universal_rules +
+            $kitFiles.scripts +
+            $kitFiles.lib_files +
+            $kitFiles.templates +
+            $kitFiles.docs +
+            $kitFiles.tests +
+            $kitFiles.ci +
+            $kitFiles.meta
+        ) | ForEach-Object { $_ -replace '/', '\' }
+    }
+
+    if ($wajibAda.Count -gt 0) {
+        $missing = @()
+        foreach ($f in $wajibAda) {
+            $p = Join-Path $KitDir $f
+            if (-not (Test-Path $p)) { $missing += $f }
+        }
+        if ($missing.Count -eq 0) {
+            Write-Host ("OK    {0} file inti utuh" -f $wajibAda.Count) -ForegroundColor Green
+            $ok++
+        } else {
+            Write-Host ("ERROR {0} file missing:" -f $missing.Count) -ForegroundColor Red
+            $missing | ForEach-Object { Write-Host ("        - {0}" -f $_) -ForegroundColor Red }
+            $err++
+            Write-Host "      Saran: .\.claude-kit\kit.ps1 update (re-clone fresh)" -ForegroundColor Yellow
+        }
+    }
+
+    # 2b. Integrity check (sha256) — verifies files haven't been modified since install
+    $manifestPath = Join-Path $KitDir '.install-manifest.json'
+    if (Test-Path $manifestPath) {
+        try {
+            $manifestRaw = Get-Content -Path $manifestPath -Raw -ErrorAction Stop
+            $manifest = $manifestRaw | ConvertFrom-Json -ErrorAction Stop
+        } catch {
+            Write-Host ("WARN  Integrity check skipped: gagal parse manifest ({0})" -f $_.Exception.Message) -ForegroundColor Yellow
+            $warn++
+            $manifest = $null
+        }
+
+        if ($manifest -ne $null) {
+            $pristine = 0
+            $modifiedList = @()
+            $integrityMissing = 0
+
+            $entries = @()
+            if ($manifest.files) { $entries = $manifest.files }
+            elseif ($manifest.entries) { $entries = $manifest.entries }
+
+            foreach ($entry in $entries) {
+                $relPath = $null
+                if ($entry.path) { $relPath = $entry.path }
+                elseif ($entry.file) { $relPath = $entry.file }
+                if (-not $relPath) { continue }
+
+                $expectedSha = $null
+                if ($entry.sha256) { $expectedSha = $entry.sha256 }
+                if (-not $expectedSha) { continue }
+
+                $relPathNorm = $relPath -replace '/', '\'
+                # Manifest stores paths relative to PROJECT ROOT (e.g. ".claude-kit/lib/rollback.ps1",
+                # "AGENTS.md"), bukan relative ke $KitDir. Lihat setup-pola-b.ps1 Add-ToManifest:
+                # `$relPath = $FilePath.Replace($script:ProjectRoot, '')`. Pakai $ProjectRoot
+                # (sudah didefine di line ~61) supaya tidak double-prefix ".claude-kit/.claude-kit/...".
+                $absPath = Join-Path $ProjectRoot $relPathNorm
+
+                if (-not (Test-Path $absPath)) {
+                    $integrityMissing++
+                    continue
+                }
+
+                try {
+                    $actualSha = (Get-FileHash -Path $absPath -Algorithm SHA256 -ErrorAction Stop).Hash
+                    if ($actualSha -eq $expectedSha.ToUpper() -or $actualSha.ToLower() -eq $expectedSha.ToLower()) {
+                        $pristine++
+                    } else {
+                        $modifiedList += $relPath
+                    }
+                } catch {
+                    $modifiedList += ("{0} (hash error: {1})" -f $relPath, $_.Exception.Message)
+                }
+            }
+
+            $modifiedCount = $modifiedList.Count
+            Write-Host ("OK    Integrity: PRISTINE={0}, MODIFIED={1}, MISSING={2}" -f $pristine, $modifiedCount, $integrityMissing) -ForegroundColor Green
+            if ($modifiedCount -gt 0) {
+                Write-Host "WARN  File berikut dimodifikasi sejak install (mungkin disengaja):" -ForegroundColor Yellow
+                $modifiedList | ForEach-Object { Write-Host ("        - {0}" -f $_) -ForegroundColor Yellow }
+                $warn++
+            } else {
+                $ok++
+            }
+            if ($integrityMissing -gt 0) {
+                Write-Host ("ERROR Integrity: {0} file di manifest tapi tidak ada di disk" -f $integrityMissing) -ForegroundColor Red
+                $err++
+            }
+        }
+    } else {
+        Write-Host "INFO  Integrity check skipped: .install-manifest.json tidak ada (kit pre-manifest atau belum di-install)" -ForegroundColor Cyan
+    }
+
+    # 3. AGENTS.md di root proyek
+    $agentsAtRoot = Join-Path $ProjectRoot 'AGENTS.md'
+    if (Test-Path $agentsAtRoot) {
+        Write-Host "OK    AGENTS.md ada di root proyek" -ForegroundColor Green
+        $ok++
+    } else {
+        Write-Host "WARN  AGENTS.md belum di-copy ke root proyek" -ForegroundColor Yellow
+        Write-Host "      Saran: .\.claude-kit\kit.ps1 setup" -ForegroundColor Yellow
+        $warn++
+    }
+
+    # 4. docs/ folder
+    $docsDir = Join-Path $ProjectRoot 'docs'
+    if (Test-Path $docsDir) {
+        $docsCount = (Get-ChildItem $docsDir -Recurse -File).Count
+        Write-Host ("OK    docs/ ada ({0} file)" -f $docsCount) -ForegroundColor Green
+        $ok++
+    } else {
+        Write-Host "WARN  docs/ belum dibuat" -ForegroundColor Yellow
+        Write-Host "      Saran: .\.claude-kit\kit.ps1 setup" -ForegroundColor Yellow
+        $warn++
+    }
+
+    # 5. .github/ folder (team mode files)
+    $githubDir = Join-Path $ProjectRoot '.github'
+    if (Test-Path $githubDir) {
+        Write-Host "OK    .github/ ada (Team Mode aktif)" -ForegroundColor Green
+        $ok++
+    } else {
+        Write-Host "INFO  .github/ tidak ada (Team Mode skipped, atau project non-GitHub)" -ForegroundColor Cyan
+    }
+
+    # 6. .git/ internal (should NOT exist for Pola B clone)
+    $internalGit = Join-Path $KitDir '.git'
+    if (Test-Path $internalGit) {
+        Write-Host "WARN  .claude-kit\.git\ masih ada (sisa dari clone)" -ForegroundColor Yellow
+        Write-Host "      Saran: Remove-Item '$internalGit' -Recurse -Force" -ForegroundColor Yellow
+        $warn++
+    } else {
+        Write-Host "OK    .claude-kit/ tidak ada .git/ internal" -ForegroundColor Green
+        $ok++
+    }
+
+    # Ringkasan
+    Write-Host ""
+    Write-Host ("Result: OK={0} WARN={1} ERROR={2}" -f $ok, $warn, $err) -ForegroundColor Cyan
+    if ($err -eq 0 -and $warn -eq 0) {
+        Write-Host "Kit sehat. Siap dipakai." -ForegroundColor Green
+        return 0
+    } elseif ($err -eq 0) {
+        Write-Host "Kit OK dengan warning. Bisa dipakai, tapi fix warning kalau bisa." -ForegroundColor Yellow
+        return 0
+    } else {
+        Write-Host "Kit BERMASALAH. Fix ERROR di atas dulu." -ForegroundColor Red
+        return 1
+    }
+}
+
+# ---- Helper: scan project ----
+function Invoke-Scan {
+    Write-Host ""
+    Write-Host "=== Kit Scan — Universal Adaptive Scan (kit v$(Get-KitVersion)) ===" -ForegroundColor Cyan
+    Write-Host ""
+    Write-Host "Catatan: kit.ps1 scan = scan ringan untuk count kandidat." -ForegroundColor Yellow
+    Write-Host "        Untuk bulk-bootstrap actual, paste JALANKAN_KIT.md ke Claude Code (yang trigger AI workflow)." -ForegroundColor Yellow
+    Write-Host ""
+
+    # Patterns CRITICAL (universal, sesuai JALANKAN_KIT)
+    $patterns = @{
+        'Auth'       = @('auth*', 'session*', 'login*', 'oauth*', 'jwt*', 'passport*')
+        'DB'         = @('db.*', 'prisma*', 'drizzle*', 'repository*', 'schema*', 'models')
+        'Security'   = @('crypto*', 'encrypt*', 'decrypt*', 'permissions*', 'acl*', 'policies*', '*-guard*', 'rate-limit*', 'csrf*', 'cors*')
+        'API/Router' = @('routes', 'controllers', 'handlers', 'api', 'endpoints', 'resolvers', 'actions')
+        'Entry/MW'   = @('main.*', 'index.*', 'app.*', 'server.*', 'layout.*', 'middleware.*', 'interceptor.*')
+    }
+
+    $sourceFolders = @('src', 'app', 'lib', 'internal', 'pkg', 'cmd', 'features', 'modules', 'routes', 'controllers', 'handlers', 'services', 'domain')
+    $skipFolders = @('node_modules', 'dist', '.next', 'target', 'build', 'vendor', '__pycache__', '.venv', 'generated', '.git')
+
+    $totalByCategory = @{}
+    foreach ($cat in $patterns.Keys) { $totalByCategory[$cat] = 0 }
+
+    foreach ($src in $sourceFolders) {
+        $srcPath = Join-Path $ProjectRoot $src
+        if (-not (Test-Path $srcPath)) { continue }
+
+        $allFiles = Get-ChildItem -Path $srcPath -Recurse -File -ErrorAction SilentlyContinue |
+            Where-Object {
+                $skipped = $false
+                foreach ($skip in $skipFolders) {
+                    if ($_.FullName -match "[\\/]$skip[\\/]") { $skipped = $true; break }
+                }
+                -not $skipped
+            }
+
+        foreach ($cat in $patterns.Keys) {
+            foreach ($p in $patterns[$cat]) {
+                $matched = $allFiles | Where-Object { $_.Name -like $p -or $_.FullName -match $p }
+                $totalByCategory[$cat] += $matched.Count
+            }
+        }
+    }
+
+    Write-Host "Kandidat CRITICAL per kategori (rough estimate):" -ForegroundColor Cyan
+    $grandTotal = 0
+    foreach ($cat in $patterns.Keys) {
+        $count = $totalByCategory[$cat]
+        Write-Host ("  {0,-15} {1,4} file" -f $cat, $count)
+        $grandTotal += $count
+    }
+    Write-Host ""
+    Write-Host ("Total kandidat (rough, may include duplicates): {0}" -f $grandTotal) -ForegroundColor Yellow
+    Write-Host ""
+
+    if ($grandTotal -ge 30) {
+        Write-Host "Saran: total >= 30, pakai subfolder grouping saat bulk-bootstrap." -ForegroundColor Cyan
+        Write-Host "      Mapping: docs/api/, docs/lib/, docs/security/, docs/features/<n>/, dst." -ForegroundColor Cyan
+    } else {
+        Write-Host "Saran: total < 30, flat docs/ masih oke." -ForegroundColor Cyan
+    }
+
+    Write-Host ""
+    Write-Host "Next step:" -ForegroundColor Cyan
+    Write-Host "  1. Paste isi .claude-kit\JALANKAN_KIT.md ke Claude Code untuk full workflow."
+    Write-Host "  2. AI akan tanya pilih (1)/(2)/(3)/(4) di step 12 (default (3) Skeleton-first)."
+    Write-Host ""
+
+    return 0
+}
+
+# ---- Helper: print version ----
+# Uses Get-KitVersion fallback chain (manifest -> $script:KIT_VERSION -> CHANGELOG -> "unknown").
+function Show-Version {
+    Write-Host (Get-KitVersion)
+}
+
+# ---- Router ----
+switch ($Command) {
+    'setup' {
+        $script = Join-Path $KitDir 'setup-pola-b.ps1'
+        if (-not (Test-Path $script)) {
+            Write-Host "ERROR: setup-pola-b.ps1 tidak ada di $KitDir" -ForegroundColor Red
+            exit 1
+        }
+        & $script @ExtraArgs
+        exit $LASTEXITCODE
+    }
+    'update' {
+        $script = Join-Path $KitDir 'update-kit.ps1'
+        if (-not (Test-Path $script)) {
+            Write-Host "ERROR: update-kit.ps1 tidak ada di $KitDir" -ForegroundColor Red
+            exit 1
+        }
+        & $script @ExtraArgs
+        exit $LASTEXITCODE
+    }
+    'uninstall' {
+        $script = Join-Path $KitDir 'uninstall.ps1'
+        if (-not (Test-Path $script)) {
+            Write-Host "ERROR: uninstall.ps1 tidak ada di $KitDir" -ForegroundColor Red
+            Write-Host "       Kit ini di-install pakai versi <v1.0.0 (sebelum uninstall.ps1 ada)." -ForegroundColor Red
+            Write-Host "       Saran: update kit dulu (.\.claude-kit\kit.ps1 update), atau hapus manual." -ForegroundColor Red
+            exit 1
+        }
+        & $script @ExtraArgs
+        exit $LASTEXITCODE
+    }
+    'doctor' {
+        $code = Invoke-Doctor
+        exit $code
+    }
+    'scan' {
+        $code = Invoke-Scan
+        exit $code
+    }
+    'version' {
+        Show-Version
+        exit 0
+    }
+    'rollback' {
+        if (Test-Path $libRollback) {
+            try {
+                . $libRollback
+                $result = Invoke-Rollback -ProjectRoot $ProjectRoot
+                # Result hash bisa di-suppress kalau dipanggil di pipe; di sini kita
+                # tidak butuh nilainya — biarin function-nya yang print status.
+                $null = $result
+                $global:LASTEXITCODE = 0
+                exit 0
+            } catch {
+                Write-Host ("[ERROR] Rollback gagal: {0}" -f $_) -ForegroundColor Red
+                $global:LASTEXITCODE = 2
+                exit 2
+            }
+        } else {
+            Write-Host "ERROR: lib\rollback.ps1 tidak ada di $KitDir" -ForegroundColor Red
+            Write-Host "       Kit ini di-install pakai versi <v1.x (sebelum rollback ada)." -ForegroundColor Red
+            Write-Host "       Saran: update kit dulu (.\.claude-kit\kit.ps1 update)." -ForegroundColor Red
+            exit 1
+        }
+    }
+    'help' {
+        Show-Help
+        exit 0
+    }
+    default {
+        Show-Help
+        if ($Command -eq '') { exit 0 } else { exit 1 }
+    }
+}

package/lib/agents-md.ps1

@@ -0,0 +1,174 @@
+<#
+.SYNOPSIS
+  lib/agents-md.ps1 - Library helper untuk deploy AGENTS.md dari template kit.
+
+.DESCRIPTION
+  Extracted dari setup-pola-b.ps1 (v1.9) supaya logic fill AGENTS.md.template
+  reusable dari kit.ps1, update-kit.ps1, atau script lain yang butuh refresh
+  AGENTS.md tanpa run ulang full setup.
+
+  Tanggung jawab:
+    1. Detect AGENTS.md existing di project root (preserve customization)
+    2. Backup pre-overwrite ke AGENTS.md.backup-<timestamp>
+    3. Fill template dengan placeholder set yang dikasih caller
+    4. Tulis UTF-8 tanpa BOM (PS 5.1 default = with BOM, beberapa tool sensitif)
+    5. Pakai .Replace() literal (bukan -replace regex) supaya input user dengan
+       karakter $0/$1/$ tidak corrupt output (defense vs regex injection)
+
+  TIDAK tangani:
+    - Manifest tracking (caller wajib panggil Add-ToManifest sendiri kalau perlu)
+    - Template file resolution (caller kasih -TemplatePath absolute)
+    - Project root validation (caller wajib pastikan path valid)
+
+.NOTES
+  Versi  : 1.0
+  Tanggal: 2026-06-06
+  Target : PowerShell 5.1+ (Windows Server 2025 / Win10 / Win11)
+  Encoding: UTF-8 tanpa BOM (System.Text.UTF8Encoding $false)
+#>
+
+# Module-level guard supaya re-dot-source tidak duplikasi function definition
+if ($script:__lintasAI_AgentsMdLoaded) { return }
+$script:__lintasAI_AgentsMdLoaded = $true
+
+function Deploy-AgentsMd {
+    <#
+    .SYNOPSIS
+      Deploy AGENTS.md ke project root: fill template + backup existing.
+
+    .DESCRIPTION
+      Tiga mode behavior berdasarkan state existing AGENTS.md + flag -Preserve:
+        - Tidak ada existing       -> CREATE (write template-filled fresh)
+        - Existing + -Preserve     -> PRESERVE (skip, jangan timpa, return action=preserved)
+        - Existing + tanpa flag    -> BACKUP + UPDATE (rename existing ke .backup-<timestamp>, tulis fresh)
+
+      Placeholders adalah hashtable @{ '<KEY>' = 'value' } - caller bebas tentukan
+      key set. Template biasanya pakai <NAMA_PROYEK>, <TANGGAL_HARI_INI>, <NAMA_KAMU>,
+      <URL_REPO_STANDAR>, <VERSI_KIT>, tapi function ini agnostic - apa pun yang
+      ada di hashtable di-replace pakai .Replace() literal.
+
+    .PARAMETER ProjectRoot
+      Absolute path ke root proyek (parent dari .claude-kit/). AGENTS.md akan
+      ditulis ke <ProjectRoot>\AGENTS.md.
+
+    .PARAMETER TemplatePath
+      Absolute path ke AGENTS.md.template (biasanya <KitDir>\AGENTS.md.template).
+
+    .PARAMETER Placeholders
+      Hashtable berisi pair @{ '<PLACEHOLDER>' = 'replacement_value' }.
+      Key biasanya wrap dengan angle bracket (e.g. '<NAMA_PROYEK>') sesuai konvensi
+      template, tapi function tidak enforce - replace literal apa adanya.
+
+    .PARAMETER Preserve
+      Kalau aktif DAN AGENTS.md existing ada -> SKIP overwrite, return action='preserved'.
+      Anti-destruktif default: protect user customization.
+
+      Tanpa flag ini, behavior default = backup + overwrite (untuk -Force scenario).
+
+    .OUTPUTS
+      PSCustomObject:
+        action      : 'created' | 'updated' | 'preserved'
+        backup_path : string (path file backup) atau $null kalau tidak ada backup
+        target_path : string (path AGENTS.md final di project root)
+        placeholders_applied : int (jumlah key di hashtable yang di-replace)
+
+    .EXAMPLE
+      # Setup awal, project belum punya AGENTS.md
+      $result = Deploy-AgentsMd `
+          -ProjectRoot 'C:\proyek\akses' `
+          -TemplatePath 'C:\proyek\akses\.claude-kit\AGENTS.md.template' `
+          -Placeholders @{
+              '<NAMA_PROYEK>'         = 'akses'
+              '<TANGGAL_HARI_INI>'    = '2026-06-06'
+              '<NAMA_KAMU>'           = 'dokterbrutal'
+              '<URL_REPO_STANDAR>'    = 'https://github.com/foo/akses'
+              '<VERSI_KIT>'           = 'v1.5.0'
+          }
+      # $result.action = 'created', $result.backup_path = $null
+
+    .EXAMPLE
+      # Re-run setup, AGENTS.md existing - mau preserve customization user
+      $result = Deploy-AgentsMd `
+          -ProjectRoot 'C:\proyek\akses' `
+          -TemplatePath 'C:\proyek\akses\.claude-kit\AGENTS.md.template' `
+          -Placeholders @{ '<NAMA_PROYEK>' = 'akses' } `
+          -Preserve
+      # $result.action = 'preserved', $result.backup_path = $null
+    #>
+    [CmdletBinding()]
+    param(
+        [Parameter(Mandatory = $true)]
+        [string]$ProjectRoot,
+
+        [Parameter(Mandatory = $true)]
+        [string]$TemplatePath,
+
+        [Parameter(Mandatory = $true)]
+        [hashtable]$Placeholders,
+
+        [switch]$Preserve
+    )
+
+    # ---- Validasi input ----
+    if (-not (Test-Path -LiteralPath $ProjectRoot -PathType Container)) {
+        throw "Deploy-AgentsMd: ProjectRoot tidak ditemukan atau bukan folder: $ProjectRoot"
+    }
+    if (-not (Test-Path -LiteralPath $TemplatePath -PathType Leaf)) {
+        throw "Deploy-AgentsMd: TemplatePath tidak ditemukan: $TemplatePath"
+    }
+
+    $target = Join-Path $ProjectRoot 'AGENTS.md'
+    $existing = Test-Path -LiteralPath $target -PathType Leaf
+
+    # ---- Mode PRESERVE: existing + flag aktif -> skip, return early ----
+    if ($existing -and $Preserve) {
+        return [PSCustomObject]@{
+            action               = 'preserved'
+            backup_path          = $null
+            target_path          = $target
+            placeholders_applied = 0
+        }
+    }
+
+    # ---- Mode BACKUP: existing tanpa Preserve -> rename ke backup ----
+    $backupPath = $null
+    if ($existing) {
+        $timestamp = Get-Date -Format 'yyyyMMdd-HHmmss'
+        $backupPath = "$target.backup-$timestamp"
+        try {
+            Copy-Item -LiteralPath $target -Destination $backupPath -Force -ErrorAction Stop
+        } catch {
+            throw "Deploy-AgentsMd: Gagal backup AGENTS.md existing ke '$backupPath': $_"
+        }
+    }
+
+    # ---- Fill template + tulis ----
+    try {
+        $content = Get-Content -LiteralPath $TemplatePath -Raw -Encoding UTF8
+    } catch {
+        throw "Deploy-AgentsMd: Gagal baca template '$TemplatePath': $_"
+    }
+
+    # Pakai .Replace() literal (bukan -replace regex) - input user dengan $0/$1/$
+    # tidak akan corrupt output. Defensive default vs regex injection.
+    $applied = 0
+    foreach ($key in $Placeholders.Keys) {
+        $val = [string]$Placeholders[$key]
+        $content = $content.Replace([string]$key, $val)
+        $applied++
+    }
+
+    # Tulis UTF-8 tanpa BOM (PS 5.1 default UTF8 = with BOM, beberapa tool sensitif)
+    try {
+        [System.IO.File]::WriteAllText($target, $content, (New-Object System.Text.UTF8Encoding $false))
+    } catch {
+        throw "Deploy-AgentsMd: Gagal tulis AGENTS.md ke '$target': $_"
+    }
+
+    return [PSCustomObject]@{
+        action               = $(if ($existing) { 'updated' } else { 'created' })
+        backup_path          = $backupPath
+        target_path          = $target
+        placeholders_applied = $applied
+    }
+}