@torus-engineering/tas-kit 1.14.0 → 2.1.0

package/lib/install.js

@@ -1,546 +1,546 @@
-import fs from 'node:fs/promises';
-import path from 'node:path';
-import readline from 'node:readline';
-import { fileURLToPath } from 'node:url';
-import { createRequire } from 'node:module';
-import { PLATFORMS, getPlatform } from './adapters/index.js';
-
-const PACKAGE_DIR = path.join(path.dirname(fileURLToPath(import.meta.url)), '..');
-const TAS_SRC = path.join(PACKAGE_DIR, '.tas');
-const PLATFORMS_FILE = '.tas/platforms.json';
-const require = createRequire(import.meta.url);
-
-// ─── Logo ────────────────────────────────────────────────────────────────────
-
-function printLogo() {
-  const c = '\x1b[36m';
-  const d = '\x1b[90m';
-  const r = '\x1b[0m';
-  const art = [
-    `  ████████╗  █████╗ ███████╗   ██╗  ██╗ ██╗ ████████╗`,
-    `  ╚══██╔══╝ ██╔══██╗██╔════╝   ██║ ██╔╝ ██║ ╚══██╔══╝`,
-    `     ██║    ███████║███████╗   █████╔╝  ██║    ██║   `,
-    `     ██║    ██╔══██║╚════██║   ██╔═██╗  ██║    ██║   `,
-    `     ██║    ██║  ██║███████║   ██║  ██╗ ██║    ██║   `,
-    `     ╚═╝    ╚═╝  ╚═╝╚══════╝   ╚═╝  ╚═╝ ╚═╝    ╚═╝   `,
-  ].map(l => c + l + r).join('\n');
-  process.stdout.write('\n' + art + '\n' + d + '  Turbo Agentic SDLC Kit' + r + '\n\n');
-}
-
-// ─── Helpers ─────────────────────────────────────────────────────────────────
-
-async function getDeletedFiles() {
-  try {
-    const manifest = require('./deleted-files.json');
-    return Object.values(manifest).flat();
-  } catch {
-    return [];
-  }
-}
-
-async function removeDeletedFiles(target, deletedFiles) {
-  const removed = [];
-  const skipped = [];
-  for (const relPath of deletedFiles) {
-    const fullPath = path.join(target, relPath);
-    try {
-      await fs.rm(fullPath, { force: false });
-      removed.push(relPath);
-    } catch {
-      skipped.push(relPath);
-    }
-  }
-  return { removed, skipped };
-}
-
-async function ask(question, defaultValue = '') {
-  const rl = readline.createInterface({ input: process.stdin, output: process.stdout });
-  return new Promise((resolve) => {
-    rl.question(question, (answer) => {
-      rl.close();
-      resolve((answer || '').trim() || defaultValue);
-    });
-  });
-}
-
-async function confirm(question) {
-  const answer = await ask(`${question} [y/N] `);
-  return answer.toLowerCase() === 'y' || answer.toLowerCase() === 'yes';
-}
-
-async function exists(p) {
-  return fs.access(p).then(() => true).catch(() => false);
-}
-
-async function copyDir(src, dest) {
-  await fs.cp(src, dest, { recursive: true });
-}
-
-const TAS_ROOT_EXCLUDE = new Set([
-  'tas-example.yaml',
-  'project-status-example.yaml',
-  'platforms.json',
-  'agents',
-  'commands',
-  'skills',
-  'README.md',
-]);
-
-async function copyTasDir(src, dest) {
-  await fs.cp(src, dest, {
-    recursive: true,
-    filter: (srcPath) => !TAS_ROOT_EXCLUDE.has(path.relative(src, srcPath)),
-  });
-}
-
-async function chmodExecutables(target) {
-  const adoPy = path.join(target, '.tas', 'tools', 'tas-ado.py');
-  if (await exists(adoPy)) await fs.chmod(adoPy, 0o755);
-
-  const preCommit = path.join(target, '.tas', 'hooks', 'pre-commit');
-  if (await exists(preCommit)) await fs.chmod(preCommit, 0o755);
-
-  const hooksDir = path.join(target, '.tas', '_platform', 'hooks');
-  if (await exists(hooksDir)) {
-    const files = await fs.readdir(hooksDir);
-    for (const f of files) await fs.chmod(path.join(hooksDir, f), 0o755);
-  }
-}
-
-// ─── Platform selection ───────────────────────────────────────────────────────
-
-async function checkboxSelect(title, items, defaultIndexes = [0]) {
-  if (!process.stdin.isTTY || !process.stdout.isTTY) {
-    return fallbackTextSelect(title, items, defaultIndexes);
-  }
-
-  const selected = new Set(defaultIndexes);
-  let cursor = defaultIndexes[0] ?? 0;
-  let renderedLines = 0;
-
-  const clearRendered = () => {
-    if (renderedLines > 0) {
-      process.stdout.write(`\x1b[${renderedLines}A\x1b[0J`);
-    }
-  };
-
-  const render = () => {
-    clearRendered();
-    const lines = [];
-    lines.push(`  ${title}`);
-    lines.push('');
-    for (let i = 0; i < items.length; i++) {
-      const mark = selected.has(i) ? '\x1b[32m◉\x1b[0m' : '○';
-      const arrow = cursor === i ? '\x1b[36m›\x1b[0m' : ' ';
-      const label = cursor === i ? `\x1b[36m${items[i].label}\x1b[0m` : items[i].label;
-      const note = items[i].note ? ` \x1b[90m${items[i].note}\x1b[0m` : '';
-      lines.push(`  ${arrow} ${mark} ${label}${note}`);
-    }
-    lines.push('');
-    lines.push('\x1b[90m  ↑↓ navigate   space select   enter confirm\x1b[0m');
-    renderedLines = lines.length;
-    process.stdout.write(lines.join('\n') + '\n');
-  };
-
-  return new Promise((resolve) => {
-    process.stdout.write('\x1b[?25l');
-    process.stdin.setRawMode(true);
-    process.stdin.resume();
-    process.stdin.setEncoding('utf8');
-
-    render();
-
-    const onKey = (key) => {
-      if (key === '\x03') {
-        finish(null);
-        process.exit(0);
-      } else if (key === '\x1b[A') {
-        cursor = (cursor - 1 + items.length) % items.length;
-        render();
-      } else if (key === '\x1b[B') {
-        cursor = (cursor + 1) % items.length;
-        render();
-      } else if (key === ' ') {
-        if (selected.has(cursor)) selected.delete(cursor);
-        else selected.add(cursor);
-        render();
-      } else if (key === '\r' || key === '\n') {
-        const ids = items.filter((_, i) => selected.has(i)).map(it => it.id);
-        finish(ids.length > 0 ? ids : [items[cursor].id]);
-      }
-    };
-
-    const finish = (result) => {
-      process.stdin.removeListener('data', onKey);
-      process.stdin.setRawMode(false);
-      process.stdin.pause();
-      process.stdout.write('\x1b[?25h');
-      clearRendered();
-      if (result) {
-        const labels = result.map(id => items.find(it => it.id === id)?.label || id).join(', ');
-        process.stdout.write(`  Platforms: \x1b[36m${labels}\x1b[0m\n\n`);
-        resolve(result);
-      }
-    };
-
-    process.stdin.on('data', onKey);
-  });
-}
-
-async function fallbackTextSelect(title, items, defaultIndexes) {
-  console.log(`\n  ${title}`);
-  items.forEach((item, i) => {
-    const def = defaultIndexes.includes(i) ? ' (default)' : '';
-    console.log(`    [${i + 1}] ${item.label}${def}`);
-  });
-  console.log('');
-  console.log('  Enter numbers comma-separated for multiple platforms.');
-  const nums = items.map((_, i) => i + 1).join('/');
-  const answer = await ask(`  Choose [${nums}] (default: 1): `, '1');
-
-  const selected = [];
-  for (const part of answer.split(',')) {
-    const idx = parseInt(part.trim(), 10) - 1;
-    if (idx >= 0 && idx < items.length) {
-      const id = items[idx].id;
-      if (!selected.includes(id)) selected.push(id);
-    }
-  }
-  return selected.length > 0 ? selected : [items[defaultIndexes[0] ?? 0].id];
-}
-
-async function choosePlatforms({ yes, forced }) {
-  if (forced && forced.length > 0) return forced;
-  if (yes) return ['claude-code'];
-
-  return checkboxSelect(
-    'Agentic Coding Platform(s) to install:',
-    PLATFORMS.map(p => ({
-      id: p.id,
-      label: p.label,
-      note: p.id === 'claude-code' ? '(default)' : '',
-    })),
-    [0],
-  );
-}
-
-async function savePlatforms(target, platforms) {
-  const tasDir = path.join(target, '.tas');
-  await fs.mkdir(tasDir, { recursive: true });
-  await fs.writeFile(
-    path.join(target, PLATFORMS_FILE),
-    JSON.stringify({ platforms }, null, 2) + '\n'
-  );
-}
-
-async function loadPlatforms(target) {
-  try {
-    const data = JSON.parse(await fs.readFile(path.join(target, PLATFORMS_FILE), 'utf8'));
-    return Array.isArray(data.platforms) ? data.platforms : ['claude-code'];
-  } catch {
-    // fallback: detect from existing directories
-    const detected = [];
-    if (await exists(path.join(target, '.claude', 'commands'))) detected.push('claude-code');
-    if (await exists(path.join(target, '.cursor', 'agents'))) detected.push('cursor');
-    if (await exists(path.join(target, '.codex', 'skills'))) detected.push('codex');
-    if (await exists(path.join(target, '.agents', 'skills'))) detected.push('antigravity');
-    return detected.length > 0 ? detected : ['claude-code'];
-  }
-}
-
-async function runPlatformAdapters(platforms, { tasDir, target }) {
-  for (const id of platforms) {
-    const platform = getPlatform(id);
-    if (!platform) {
-      console.warn(`  [warn] Unknown platform "${id}" — skipping`);
-      continue;
-    }
-    console.log(`\n  Platform: ${platform.label}`);
-    await platform.install({ tasDir, target });
-  }
-}
-
-// ─── Security hook wiring ────────────────────────────────────────────────────
-
-async function chooseSecurityHookMode({ target, yes, forced }) {
-  if (forced) return forced;
-  if (yes) return 'native';
-
-  const hasPackageJson = await exists(path.join(target, 'package.json'));
-  const hint = hasPackageJson
-    ? '  Detected package.json — husky mode is available.'
-    : '  No package.json — husky mode will add one or fall back to native.';
-
-  console.log('\n  Pre-commit security hook wiring:');
-  console.log(hint);
-  console.log('    [1] husky     — shared via git, requires Node project');
-  console.log('    [2] native    — plain .git/hooks/pre-commit, any stack');
-  console.log('    [3] skip      — wire it later with "tas-kit install --security-hook=..."');
-  const answer = await ask('  Choose [1/2/3] (default: 2): ', '2');
-  if (answer === '1') return 'husky';
-  if (answer === '3') return 'none';
-  return 'native';
-}
-
-async function installSecurityHookNative({ target }) {
-  const gitDir = path.join(target, '.git');
-  if (!(await exists(gitDir))) {
-    console.warn('  [skip] Security hook (native): .git/ not found — run `git init` first, then re-run installer with --security-hook=native');
-    return false;
-  }
-
-  const hooksDir = path.join(gitDir, 'hooks');
-  await fs.mkdir(hooksDir, { recursive: true });
-
-  const src = path.join(target, '.tas', 'hooks', 'pre-commit');
-  const dest = path.join(hooksDir, 'pre-commit');
-
-  if (await exists(dest)) {
-    const existing = await fs.readFile(dest, 'utf8').catch(() => '');
-    if (!existing.includes('TAS Kit')) {
-      const backup = dest + '.backup';
-      await fs.copyFile(dest, backup);
-      console.log('  [ok] .git/hooks/pre-commit.backup (preserved existing hook)');
-    }
-  }
-
-  await fs.copyFile(src, dest);
-  if (process.platform !== 'win32') {
-    await fs.chmod(dest, 0o755);
-  }
-  console.log('  [ok] .git/hooks/pre-commit (security scan wired — native)');
-  return true;
-}
-
-async function installSecurityHookHusky({ target }) {
-  const pkgPath = path.join(target, 'package.json');
-  const hasPackageJson = await exists(pkgPath);
-
-  if (!hasPackageJson) {
-    console.warn('  [warn] Security hook (husky): no package.json — falling back to native mode');
-    return await installSecurityHookNative({ target });
-  }
-
-  let pkg;
-  try {
-    pkg = JSON.parse(await fs.readFile(pkgPath, 'utf8'));
-  } catch (err) {
-    console.warn(`  [warn] Security hook (husky): package.json unreadable (${err.message}) — falling back to native`);
-    return await installSecurityHookNative({ target });
-  }
-
-  pkg.scripts = pkg.scripts || {};
-  if (!pkg.scripts.prepare) {
-    pkg.scripts.prepare = 'husky';
-  } else if (!/husky/.test(pkg.scripts.prepare)) {
-    pkg.scripts.prepare = `${pkg.scripts.prepare} && husky`;
-  }
-
-  pkg.devDependencies = pkg.devDependencies || {};
-  if (!pkg.devDependencies.husky) {
-    pkg.devDependencies.husky = '^9.1.0';
-  }
-
-  await fs.writeFile(pkgPath, JSON.stringify(pkg, null, 2) + '\n');
-  console.log('  [ok] package.json (husky devDep + prepare script)');
-
-  const huskyDir = path.join(target, '.husky');
-  await fs.mkdir(huskyDir, { recursive: true });
-
-  const huskyHook = path.join(huskyDir, 'pre-commit');
-  const content = [
-    '# TAS Kit — husky pre-commit (delegates to .tas/hooks/pre-commit)',
-    '. "$(dirname -- "$0")/../.tas/hooks/pre-commit"',
-    '',
-  ].join('\n');
-  await fs.writeFile(huskyHook, content);
-  if (process.platform !== 'win32') {
-    await fs.chmod(huskyHook, 0o755);
-  }
-  console.log('  [ok] .husky/pre-commit (delegates to .tas/hooks/pre-commit)');
-  console.log('  [--] Run `npm install` in the project to activate husky');
-  return true;
-}
-
-async function installSecurityHook({ target, mode }) {
-  if (mode === 'none' || !mode) {
-    console.log('  [skip] Security hook (you can enable later: tas-kit install --security-hook=native|husky)');
-    return;
-  }
-  if (mode === 'husky') {
-    await installSecurityHookHusky({ target });
-    return;
-  }
-  if (mode === 'native') {
-    await installSecurityHookNative({ target });
-    return;
-  }
-  console.warn(`  [warn] Unknown security hook mode: "${mode}" — skipping`);
-}
-
-// ─── Update ──────────────────────────────────────────────────────────────────
-
-export async function update({ directory, yes, securityHook, platforms: forcedPlatforms }) {
-  printLogo();
-  const target = path.resolve(directory);
-
-  const tasExists = await exists(path.join(target, '.tas'));
-  if (!tasExists) {
-    console.error(`  ERROR: No TAS Kit found in: ${target}`);
-    console.error(`  Run "install" first to set up TAS Kit.`);
-    process.exit(1);
-  }
-
-  console.log(`Updating TAS Kit in: ${target}\n`);
-
-  const platforms = forcedPlatforms && forcedPlatforms.length > 0
-    ? forcedPlatforms
-    : await loadPlatforms(target);
-
-  const platformLabels = platforms.map(id => getPlatform(id)?.label || id).join(', ');
-
-  if (!yes) {
-    console.warn(`  This will overwrite .tas/ and platform directories (${platformLabels}) with the latest kit files.`);
-    console.warn(`  Your CLAUDE.md, tas.yaml, and .env.example will NOT be touched.\n`);
-    const ok = await confirm('Continue?');
-    if (!ok) {
-      console.log('Update cancelled.');
-      process.exit(0);
-    }
-    console.log();
-  }
-
-  const tasDest = path.join(target, '.tas');
-  if (path.resolve(TAS_SRC) !== path.resolve(tasDest)) {
-    await copyTasDir(TAS_SRC, tasDest);
-    await fs.copyFile(path.join(PACKAGE_DIR, 'README.md'), path.join(tasDest, 'README.md'));
-  }
-  console.log('  [ok] .tas/ (updated)');
-
-  const deletedFiles = await getDeletedFiles();
-  if (deletedFiles.length > 0) {
-    const { removed } = await removeDeletedFiles(target, deletedFiles);
-    for (const f of removed) {
-      console.log(`  [rm] ${f} (removed in this version)`);
-    }
-  }
-
-  await runPlatformAdapters(platforms, { tasDir: TAS_SRC, target });
-
-  await savePlatforms(target, platforms);
-
-  if (process.platform !== 'win32') {
-    await chmodExecutables(target);
-  }
-
-  if (securityHook) {
-    await installSecurityHook({ target, mode: securityHook });
-  }
-
-  const configFilename = platforms.includes('claude-code') ? 'CLAUDE.md' : 'AGENTS.md';
-  console.log(`  [--] ${configFilename}, tas.yaml, project-status.yaml, .env.example — not touched`);
-  console.log(`
-TAS Kit updated successfully!
-
-If this version added new settings or templates, check the changelog
-and manually merge changes into your CLAUDE.md and tas.yaml if needed.
-  `);
-}
-
-// ─── Install ─────────────────────────────────────────────────────────────────
-
-export async function install({ directory, yes, securityHook, platforms: forcedPlatforms }) {
-  printLogo();
-  const target = path.resolve(directory);
-
-  await fs.mkdir(target, { recursive: true });
-
-  console.log(`Installing TAS Kit into: ${target}\n`);
-
-  const tasExists = await exists(path.join(target, '.tas'));
-  if (tasExists && !yes) {
-    console.warn(`  WARNING: .tas/ already exists in target directory.`);
-    console.warn(`  Existing files with the same names will be overwritten.\n`);
-    const ok = await confirm('Continue?');
-    if (!ok) {
-      console.log('Installation cancelled.');
-      process.exit(0);
-    }
-    console.log();
-  }
-
-  // Copy .tas/ (skip if installing into the package itself)
-  const tasDest = path.join(target, '.tas');
-  if (path.resolve(TAS_SRC) !== path.resolve(tasDest)) {
-    await copyTasDir(TAS_SRC, tasDest);
-    await fs.copyFile(path.join(PACKAGE_DIR, 'README.md'), path.join(tasDest, 'README.md'));
-    console.log('  [ok] .tas/');
-  } else {
-    console.log('  [--] .tas/ (source = destination, skipped)');
-  }
-
-  // Platform selection
-  const platforms = await choosePlatforms({ yes, forced: forcedPlatforms });
-  await runPlatformAdapters(platforms, { tasDir: TAS_SRC, target });
-  await savePlatforms(target, platforms);
-
-  // Project config files (first-time only)
-  // Claude Code uses CLAUDE.md; all other platforms use AGENTS.md
-  const configFilename = platforms.includes('claude-code') ? 'CLAUDE.md' : 'AGENTS.md';
-  const configTarget = path.join(target, configFilename);
-  if (!(await exists(configTarget))) {
-    await fs.copyFile(path.join(PACKAGE_DIR, '.tas', 'templates', 'AGENTS.md'), configTarget);
-    console.log(`  [ok] ${configFilename} (from .tas/templates/AGENTS.md)`);
-  } else {
-    console.log(`  [--] ${configFilename} already exists, skipped`);
-  }
-
-  const envExampleTarget = path.join(target, '.env.example');
-  if (!(await exists(envExampleTarget))) {
-    await fs.copyFile(path.join(PACKAGE_DIR, '.env.example'), envExampleTarget);
-    console.log('  [ok] .env.example');
-  } else {
-    console.log('  [--] .env.example already exists, skipped');
-  }
-
-  const tasYamlTarget = path.join(target, 'tas.yaml');
-  if (!(await exists(tasYamlTarget))) {
-    await fs.copyFile(path.join(PACKAGE_DIR, '.tas', 'tas-example.yaml'), tasYamlTarget);
-    console.log('  [ok] tas.yaml (from .tas/tas-example.yaml)');
-  } else {
-    console.log('  [--] tas.yaml already exists, skipped');
-  }
-
-  const psYamlTarget = path.join(target, 'project-status.yaml');
-  if (!(await exists(psYamlTarget))) {
-    const psSrc = path.join(PACKAGE_DIR, '.tas', 'project-status-example.yaml');
-    if (await exists(psSrc)) {
-      await fs.copyFile(psSrc, psYamlTarget);
-      console.log('  [ok] project-status.yaml (from .tas/project-status-example.yaml)');
-    }
-  } else {
-    console.log('  [--] project-status.yaml already exists, skipped');
-  }
-
-  if (process.platform !== 'win32') {
-    await chmodExecutables(target);
-  }
-
-  const mode = await chooseSecurityHookMode({ target, yes, forced: securityHook });
-  await installSecurityHook({ target, mode });
-
-  const platformLabels = platforms.map(id => getPlatform(id)?.label || id).join(', ');
-  console.log(`
-TAS Kit installed successfully! (Platforms: ${platformLabels})
-
-Next steps:
-  1. Edit ${configFilename.padEnd(10)} — add your project's tech stack and conventions
-  2. Edit tas.yaml      — set project name, team and ADO config
-  3. Create .env        — add AZURE_DEVOPS_PAT (see .env.example)
-  4. Open your IDE      — run /tas-init to initialize your project
-
-Docs:
-  .tas/README.md           — kit overview
-  .tas/hooks/README.md     — pre-commit security hook details
-  `);
-}
+import fs from 'node:fs/promises';
+import path from 'node:path';
+import readline from 'node:readline';
+import { fileURLToPath } from 'node:url';
+import { createRequire } from 'node:module';
+import { PLATFORMS, getPlatform } from './adapters/index.js';
+
+const PACKAGE_DIR = path.join(path.dirname(fileURLToPath(import.meta.url)), '..');
+const TAS_SRC = path.join(PACKAGE_DIR, '.tas');
+const PLATFORMS_FILE = '.tas/platforms.json';
+const require = createRequire(import.meta.url);
+
+// ─── Logo ────────────────────────────────────────────────────────────────────
+
+function printLogo() {
+  const c = '\x1b[36m';
+  const d = '\x1b[90m';
+  const r = '\x1b[0m';
+  const art = [
+    `  ████████╗  █████╗ ███████╗   ██╗  ██╗ ██╗ ████████╗`,
+    `  ╚══██╔══╝ ██╔══██╗██╔════╝   ██║ ██╔╝ ██║ ╚══██╔══╝`,
+    `     ██║    ███████║███████╗   █████╔╝  ██║    ██║   `,
+    `     ██║    ██╔══██║╚════██║   ██╔═██╗  ██║    ██║   `,
+    `     ██║    ██║  ██║███████║   ██║  ██╗ ██║    ██║   `,
+    `     ╚═╝    ╚═╝  ╚═╝╚══════╝   ╚═╝  ╚═╝ ╚═╝    ╚═╝   `,
+  ].map(l => c + l + r).join('\n');
+  process.stdout.write('\n' + art + '\n' + d + '  Turbo Agentic SDLC Kit' + r + '\n\n');
+}
+
+// ─── Helpers ─────────────────────────────────────────────────────────────────
+
+async function getDeletedFiles() {
+  try {
+    const manifest = require('./deleted-files.json');
+    return Object.values(manifest).flat();
+  } catch {
+    return [];
+  }
+}
+
+async function removeDeletedFiles(target, deletedFiles) {
+  const removed = [];
+  const skipped = [];
+  for (const relPath of deletedFiles) {
+    const fullPath = path.join(target, relPath);
+    try {
+      await fs.rm(fullPath, { force: false });
+      removed.push(relPath);
+    } catch {
+      skipped.push(relPath);
+    }
+  }
+  return { removed, skipped };
+}
+
+async function ask(question, defaultValue = '') {
+  const rl = readline.createInterface({ input: process.stdin, output: process.stdout });
+  return new Promise((resolve) => {
+    rl.question(question, (answer) => {
+      rl.close();
+      resolve((answer || '').trim() || defaultValue);
+    });
+  });
+}
+
+async function confirm(question) {
+  const answer = await ask(`${question} [y/N] `);
+  return answer.toLowerCase() === 'y' || answer.toLowerCase() === 'yes';
+}
+
+async function exists(p) {
+  return fs.access(p).then(() => true).catch(() => false);
+}
+
+async function copyDir(src, dest) {
+  await fs.cp(src, dest, { recursive: true });
+}
+
+const TAS_ROOT_EXCLUDE = new Set([
+  'tas-example.yaml',
+  'project-status-example.yaml',
+  'platforms.json',
+  'agents',
+  'commands',
+  'skills',
+  'README.md',
+]);
+
+async function copyTasDir(src, dest) {
+  await fs.cp(src, dest, {
+    recursive: true,
+    filter: (srcPath) => !TAS_ROOT_EXCLUDE.has(path.relative(src, srcPath)),
+  });
+}
+
+async function chmodExecutables(target) {
+  const adoPy = path.join(target, '.tas', 'tools', 'tas-ado.py');
+  if (await exists(adoPy)) await fs.chmod(adoPy, 0o755);
+
+  const preCommit = path.join(target, '.tas', 'hooks', 'pre-commit');
+  if (await exists(preCommit)) await fs.chmod(preCommit, 0o755);
+
+  const hooksDir = path.join(target, '.tas', '_platform', 'hooks');
+  if (await exists(hooksDir)) {
+    const files = await fs.readdir(hooksDir);
+    for (const f of files) await fs.chmod(path.join(hooksDir, f), 0o755);
+  }
+}
+
+// ─── Platform selection ───────────────────────────────────────────────────────
+
+async function checkboxSelect(title, items, defaultIndexes = [0]) {
+  if (!process.stdin.isTTY || !process.stdout.isTTY) {
+    return fallbackTextSelect(title, items, defaultIndexes);
+  }
+
+  const selected = new Set(defaultIndexes);
+  let cursor = defaultIndexes[0] ?? 0;
+  let renderedLines = 0;
+
+  const clearRendered = () => {
+    if (renderedLines > 0) {
+      process.stdout.write(`\x1b[${renderedLines}A\x1b[0J`);
+    }
+  };
+
+  const render = () => {
+    clearRendered();
+    const lines = [];
+    lines.push(`  ${title}`);
+    lines.push('');
+    for (let i = 0; i < items.length; i++) {
+      const mark = selected.has(i) ? '\x1b[32m◉\x1b[0m' : '○';
+      const arrow = cursor === i ? '\x1b[36m›\x1b[0m' : ' ';
+      const label = cursor === i ? `\x1b[36m${items[i].label}\x1b[0m` : items[i].label;
+      const note = items[i].note ? ` \x1b[90m${items[i].note}\x1b[0m` : '';
+      lines.push(`  ${arrow} ${mark} ${label}${note}`);
+    }
+    lines.push('');
+    lines.push('\x1b[90m  ↑↓ navigate   space select   enter confirm\x1b[0m');
+    renderedLines = lines.length;
+    process.stdout.write(lines.join('\n') + '\n');
+  };
+
+  return new Promise((resolve) => {
+    process.stdout.write('\x1b[?25l');
+    process.stdin.setRawMode(true);
+    process.stdin.resume();
+    process.stdin.setEncoding('utf8');
+
+    render();
+
+    const onKey = (key) => {
+      if (key === '\x03') {
+        finish(null);
+        process.exit(0);
+      } else if (key === '\x1b[A') {
+        cursor = (cursor - 1 + items.length) % items.length;
+        render();
+      } else if (key === '\x1b[B') {
+        cursor = (cursor + 1) % items.length;
+        render();
+      } else if (key === ' ') {
+        if (selected.has(cursor)) selected.delete(cursor);
+        else selected.add(cursor);
+        render();
+      } else if (key === '\r' || key === '\n') {
+        const ids = items.filter((_, i) => selected.has(i)).map(it => it.id);
+        finish(ids.length > 0 ? ids : [items[cursor].id]);
+      }
+    };
+
+    const finish = (result) => {
+      process.stdin.removeListener('data', onKey);
+      process.stdin.setRawMode(false);
+      process.stdin.pause();
+      process.stdout.write('\x1b[?25h');
+      clearRendered();
+      if (result) {
+        const labels = result.map(id => items.find(it => it.id === id)?.label || id).join(', ');
+        process.stdout.write(`  Platforms: \x1b[36m${labels}\x1b[0m\n\n`);
+        resolve(result);
+      }
+    };
+
+    process.stdin.on('data', onKey);
+  });
+}
+
+async function fallbackTextSelect(title, items, defaultIndexes) {
+  console.log(`\n  ${title}`);
+  items.forEach((item, i) => {
+    const def = defaultIndexes.includes(i) ? ' (default)' : '';
+    console.log(`    [${i + 1}] ${item.label}${def}`);
+  });
+  console.log('');
+  console.log('  Enter numbers comma-separated for multiple platforms.');
+  const nums = items.map((_, i) => i + 1).join('/');
+  const answer = await ask(`  Choose [${nums}] (default: 1): `, '1');
+
+  const selected = [];
+  for (const part of answer.split(',')) {
+    const idx = parseInt(part.trim(), 10) - 1;
+    if (idx >= 0 && idx < items.length) {
+      const id = items[idx].id;
+      if (!selected.includes(id)) selected.push(id);
+    }
+  }
+  return selected.length > 0 ? selected : [items[defaultIndexes[0] ?? 0].id];
+}
+
+async function choosePlatforms({ yes, forced }) {
+  if (forced && forced.length > 0) return forced;
+  if (yes) return ['claude-code'];
+
+  return checkboxSelect(
+    'Agentic Coding Platform(s) to install:',
+    PLATFORMS.map(p => ({
+      id: p.id,
+      label: p.label,
+      note: p.id === 'claude-code' ? '(default)' : '',
+    })),
+    [0],
+  );
+}
+
+async function savePlatforms(target, platforms) {
+  const tasDir = path.join(target, '.tas');
+  await fs.mkdir(tasDir, { recursive: true });
+  await fs.writeFile(
+    path.join(target, PLATFORMS_FILE),
+    JSON.stringify({ platforms }, null, 2) + '\n'
+  );
+}
+
+async function loadPlatforms(target) {
+  try {
+    const data = JSON.parse(await fs.readFile(path.join(target, PLATFORMS_FILE), 'utf8'));
+    return Array.isArray(data.platforms) ? data.platforms : ['claude-code'];
+  } catch {
+    // fallback: detect from existing directories
+    const detected = [];
+    if (await exists(path.join(target, '.claude', 'commands'))) detected.push('claude-code');
+    if (await exists(path.join(target, '.cursor', 'agents'))) detected.push('cursor');
+    if (await exists(path.join(target, '.codex', 'skills'))) detected.push('codex');
+    if (await exists(path.join(target, '.agents', 'skills'))) detected.push('antigravity');
+    return detected.length > 0 ? detected : ['claude-code'];
+  }
+}
+
+async function runPlatformAdapters(platforms, { tasDir, target }) {
+  for (const id of platforms) {
+    const platform = getPlatform(id);
+    if (!platform) {
+      console.warn(`  [warn] Unknown platform "${id}" — skipping`);
+      continue;
+    }
+    console.log(`\n  Platform: ${platform.label}`);
+    await platform.install({ tasDir, target });
+  }
+}
+
+// ─── Security hook wiring ────────────────────────────────────────────────────
+
+async function chooseSecurityHookMode({ target, yes, forced }) {
+  if (forced) return forced;
+  if (yes) return 'native';
+
+  const hasPackageJson = await exists(path.join(target, 'package.json'));
+  const hint = hasPackageJson
+    ? '  Detected package.json — husky mode is available.'
+    : '  No package.json — husky mode will add one or fall back to native.';
+
+  console.log('\n  Pre-commit security hook wiring:');
+  console.log(hint);
+  console.log('    [1] husky     — shared via git, requires Node project');
+  console.log('    [2] native    — plain .git/hooks/pre-commit, any stack');
+  console.log('    [3] skip      — wire it later with "tas-kit install --security-hook=..."');
+  const answer = await ask('  Choose [1/2/3] (default: 2): ', '2');
+  if (answer === '1') return 'husky';
+  if (answer === '3') return 'none';
+  return 'native';
+}
+
+async function installSecurityHookNative({ target }) {
+  const gitDir = path.join(target, '.git');
+  if (!(await exists(gitDir))) {
+    console.warn('  [skip] Security hook (native): .git/ not found — run `git init` first, then re-run installer with --security-hook=native');
+    return false;
+  }
+
+  const hooksDir = path.join(gitDir, 'hooks');
+  await fs.mkdir(hooksDir, { recursive: true });
+
+  const src = path.join(target, '.tas', 'hooks', 'pre-commit');
+  const dest = path.join(hooksDir, 'pre-commit');
+
+  if (await exists(dest)) {
+    const existing = await fs.readFile(dest, 'utf8').catch(() => '');
+    if (!existing.includes('TAS Kit')) {
+      const backup = dest + '.backup';
+      await fs.copyFile(dest, backup);
+      console.log('  [ok] .git/hooks/pre-commit.backup (preserved existing hook)');
+    }
+  }
+
+  await fs.copyFile(src, dest);
+  if (process.platform !== 'win32') {
+    await fs.chmod(dest, 0o755);
+  }
+  console.log('  [ok] .git/hooks/pre-commit (security scan wired — native)');
+  return true;
+}
+
+async function installSecurityHookHusky({ target }) {
+  const pkgPath = path.join(target, 'package.json');
+  const hasPackageJson = await exists(pkgPath);
+
+  if (!hasPackageJson) {
+    console.warn('  [warn] Security hook (husky): no package.json — falling back to native mode');
+    return await installSecurityHookNative({ target });
+  }
+
+  let pkg;
+  try {
+    pkg = JSON.parse(await fs.readFile(pkgPath, 'utf8'));
+  } catch (err) {
+    console.warn(`  [warn] Security hook (husky): package.json unreadable (${err.message}) — falling back to native`);
+    return await installSecurityHookNative({ target });
+  }
+
+  pkg.scripts = pkg.scripts || {};
+  if (!pkg.scripts.prepare) {
+    pkg.scripts.prepare = 'husky';
+  } else if (!/husky/.test(pkg.scripts.prepare)) {
+    pkg.scripts.prepare = `${pkg.scripts.prepare} && husky`;
+  }
+
+  pkg.devDependencies = pkg.devDependencies || {};
+  if (!pkg.devDependencies.husky) {
+    pkg.devDependencies.husky = '^9.1.0';
+  }
+
+  await fs.writeFile(pkgPath, JSON.stringify(pkg, null, 2) + '\n');
+  console.log('  [ok] package.json (husky devDep + prepare script)');
+
+  const huskyDir = path.join(target, '.husky');
+  await fs.mkdir(huskyDir, { recursive: true });
+
+  const huskyHook = path.join(huskyDir, 'pre-commit');
+  const content = [
+    '# TAS Kit — husky pre-commit (delegates to .tas/hooks/pre-commit)',
+    '. "$(dirname -- "$0")/../.tas/hooks/pre-commit"',
+    '',
+  ].join('\n');
+  await fs.writeFile(huskyHook, content);
+  if (process.platform !== 'win32') {
+    await fs.chmod(huskyHook, 0o755);
+  }
+  console.log('  [ok] .husky/pre-commit (delegates to .tas/hooks/pre-commit)');
+  console.log('  [--] Run `npm install` in the project to activate husky');
+  return true;
+}
+
+async function installSecurityHook({ target, mode }) {
+  if (mode === 'none' || !mode) {
+    console.log('  [skip] Security hook (you can enable later: tas-kit install --security-hook=native|husky)');
+    return;
+  }
+  if (mode === 'husky') {
+    await installSecurityHookHusky({ target });
+    return;
+  }
+  if (mode === 'native') {
+    await installSecurityHookNative({ target });
+    return;
+  }
+  console.warn(`  [warn] Unknown security hook mode: "${mode}" — skipping`);
+}
+
+// ─── Update ──────────────────────────────────────────────────────────────────
+
+export async function update({ directory, yes, securityHook, platforms: forcedPlatforms }) {
+  printLogo();
+  const target = path.resolve(directory);
+
+  const tasExists = await exists(path.join(target, '.tas'));
+  if (!tasExists) {
+    console.error(`  ERROR: No TAS Kit found in: ${target}`);
+    console.error(`  Run "install" first to set up TAS Kit.`);
+    process.exit(1);
+  }
+
+  console.log(`Updating TAS Kit in: ${target}\n`);
+
+  const platforms = forcedPlatforms && forcedPlatforms.length > 0
+    ? forcedPlatforms
+    : await loadPlatforms(target);
+
+  const platformLabels = platforms.map(id => getPlatform(id)?.label || id).join(', ');
+
+  if (!yes) {
+    console.warn(`  This will overwrite .tas/ and platform directories (${platformLabels}) with the latest kit files.`);
+    console.warn(`  Your CLAUDE.md, tas.yaml, and .env.example will NOT be touched.\n`);
+    const ok = await confirm('Continue?');
+    if (!ok) {
+      console.log('Update cancelled.');
+      process.exit(0);
+    }
+    console.log();
+  }
+
+  const tasDest = path.join(target, '.tas');
+  if (path.resolve(TAS_SRC) !== path.resolve(tasDest)) {
+    await copyTasDir(TAS_SRC, tasDest);
+    await fs.copyFile(path.join(PACKAGE_DIR, 'README.md'), path.join(tasDest, 'README.md'));
+  }
+  console.log('  [ok] .tas/ (updated)');
+
+  const deletedFiles = await getDeletedFiles();
+  if (deletedFiles.length > 0) {
+    const { removed } = await removeDeletedFiles(target, deletedFiles);
+    for (const f of removed) {
+      console.log(`  [rm] ${f} (removed in this version)`);
+    }
+  }
+
+  await runPlatformAdapters(platforms, { tasDir: TAS_SRC, target });
+
+  await savePlatforms(target, platforms);
+
+  if (process.platform !== 'win32') {
+    await chmodExecutables(target);
+  }
+
+  if (securityHook) {
+    await installSecurityHook({ target, mode: securityHook });
+  }
+
+  const configFilename = platforms.includes('claude-code') ? 'CLAUDE.md' : 'AGENTS.md';
+  console.log(`  [--] ${configFilename}, tas.yaml, project-status.yaml, .env.example — not touched`);
+  console.log(`
+TAS Kit updated successfully!
+
+If this version added new settings or templates, check the changelog
+and manually merge changes into your CLAUDE.md and tas.yaml if needed.
+  `);
+}
+
+// ─── Install ─────────────────────────────────────────────────────────────────
+
+export async function install({ directory, yes, securityHook, platforms: forcedPlatforms }) {
+  printLogo();
+  const target = path.resolve(directory);
+
+  await fs.mkdir(target, { recursive: true });
+
+  console.log(`Installing TAS Kit into: ${target}\n`);
+
+  const tasExists = await exists(path.join(target, '.tas'));
+  if (tasExists && !yes) {
+    console.warn(`  WARNING: .tas/ already exists in target directory.`);
+    console.warn(`  Existing files with the same names will be overwritten.\n`);
+    const ok = await confirm('Continue?');
+    if (!ok) {
+      console.log('Installation cancelled.');
+      process.exit(0);
+    }
+    console.log();
+  }
+
+  // Copy .tas/ (skip if installing into the package itself)
+  const tasDest = path.join(target, '.tas');
+  if (path.resolve(TAS_SRC) !== path.resolve(tasDest)) {
+    await copyTasDir(TAS_SRC, tasDest);
+    await fs.copyFile(path.join(PACKAGE_DIR, 'README.md'), path.join(tasDest, 'README.md'));
+    console.log('  [ok] .tas/');
+  } else {
+    console.log('  [--] .tas/ (source = destination, skipped)');
+  }
+
+  // Platform selection
+  const platforms = await choosePlatforms({ yes, forced: forcedPlatforms });
+  await runPlatformAdapters(platforms, { tasDir: TAS_SRC, target });
+  await savePlatforms(target, platforms);
+
+  // Project config files (first-time only)
+  // Claude Code uses CLAUDE.md; all other platforms use AGENTS.md
+  const configFilename = platforms.includes('claude-code') ? 'CLAUDE.md' : 'AGENTS.md';
+  const configTarget = path.join(target, configFilename);
+  if (!(await exists(configTarget))) {
+    await fs.copyFile(path.join(PACKAGE_DIR, '.tas', 'templates', 'AGENTS.md'), configTarget);
+    console.log(`  [ok] ${configFilename} (from .tas/templates/AGENTS.md)`);
+  } else {
+    console.log(`  [--] ${configFilename} already exists, skipped`);
+  }
+
+  const envExampleTarget = path.join(target, '.env.example');
+  if (!(await exists(envExampleTarget))) {
+    await fs.copyFile(path.join(PACKAGE_DIR, '.env.example'), envExampleTarget);
+    console.log('  [ok] .env.example');
+  } else {
+    console.log('  [--] .env.example already exists, skipped');
+  }
+
+  const tasYamlTarget = path.join(target, 'tas.yaml');
+  if (!(await exists(tasYamlTarget))) {
+    await fs.copyFile(path.join(PACKAGE_DIR, '.tas', 'tas-example.yaml'), tasYamlTarget);
+    console.log('  [ok] tas.yaml (from .tas/tas-example.yaml)');
+  } else {
+    console.log('  [--] tas.yaml already exists, skipped');
+  }
+
+  const psYamlTarget = path.join(target, 'project-status.yaml');
+  if (!(await exists(psYamlTarget))) {
+    const psSrc = path.join(PACKAGE_DIR, '.tas', 'project-status-example.yaml');
+    if (await exists(psSrc)) {
+      await fs.copyFile(psSrc, psYamlTarget);
+      console.log('  [ok] project-status.yaml (from .tas/project-status-example.yaml)');
+    }
+  } else {
+    console.log('  [--] project-status.yaml already exists, skipped');
+  }
+
+  if (process.platform !== 'win32') {
+    await chmodExecutables(target);
+  }
+
+  const mode = await chooseSecurityHookMode({ target, yes, forced: securityHook });
+  await installSecurityHook({ target, mode });
+
+  const platformLabels = platforms.map(id => getPlatform(id)?.label || id).join(', ');
+  console.log(`
+TAS Kit installed successfully! (Platforms: ${platformLabels})
+
+Next steps:
+  1. Edit ${configFilename.padEnd(10)} — add your project's tech stack and conventions
+  2. Edit tas.yaml      — set project name, team and ADO config
+  3. Create .env        — add AZURE_DEVOPS_PAT (see .env.example)
+  4. Open your IDE      — run /tas-init to initialize your project
+
+Docs:
+  .tas/README.md           — kit overview
+  .tas/hooks/README.md     — pre-commit security hook details
+  `);
+}