bmad-method 6.0.0-alpha.8 → 6.0.1

package/README.md

@@ -1,434 +1,97 @@
-# BMad CORE + BMad Method
+![BMad Method](banner-bmad-method.png)
 
-[![Stable Version](https://img.shields.io/npm/v/bmad-method?color=blue&label=stable)](https://www.npmjs.com/package/bmad-method)
-[![Alpha Version](https://img.shields.io/npm/v/bmad-method/alpha?color=orange&label=alpha)](https://www.npmjs.com/package/bmad-method)
+[![Version](https://img.shields.io/npm/v/bmad-method?color=blue&label=version)](https://www.npmjs.com/package/bmad-method)
 [![License: MIT](https://img.shields.io/badge/License-MIT-yellow.svg)](LICENSE)
 [![Node.js Version](https://img.shields.io/badge/node-%3E%3D20.0.0-brightgreen)](https://nodejs.org)
 [![Discord](https://img.shields.io/badge/Discord-Join%20Community-7289da?logo=discord&logoColor=white)](https://discord.gg/gk8jAdXWmj)
 
-> **🚨 Alpha Version Notice**
->
-> v6-alpha is near-beta quality—stable and vastly improved over v4, but documentation is still being refined. New videos coming soon to the [BMadCode YouTube channel](https://www.youtube.com/@BMadCode)—subscribe for updates!
->
-> **Getting Started:**
->
-> - **Install v6 Alpha:** `npx bmad-method@alpha install`
-> - **Install stable v4:** `npx bmad-method install`
-> - **Not sure what to do?** Load any agent and run `*workflow-init` for guided setup
-> - **v4 Users:** [View v4 documentation](https://github.com/bmad-code-org/BMAD-METHOD/tree/V4) or [upgrade guide](./docs/v4-to-v6-upgrade.md)
-
-## Universal Human-AI Collaboration Platform
-
-**BMad-CORE** (**C**ollaboration **O**ptimized **R**eflection **E**ngine) amplifies human potential through specialized AI agents. Unlike tools that replace thinking, BMad-CORE guides reflective workflows that bring out your best ideas and AI's full capabilities.
-
-The **BMad-CORE** powers the **BMad Method** (probably why you're here!), but you can also use **BMad Builder** to create custom agents, workflows, and modules for any domain—software development, business strategy, creativity, learning, and more.
-
-**🎯 Human Amplification** • **🎨 Domain Agnostic** • **⚡ Agent-Powered**
-
-## Table of Contents
-
-- [BMad CORE + BMad Method](#bmad-core--bmad-method)
-  - [Universal Human-AI Collaboration Platform](#universal-human-ai-collaboration-platform)
-  - [Table of Contents](#table-of-contents)
-  - [What is BMad-CORE?](#what-is-bmad-core)
-    - [v6 Core Enhancements](#v6-core-enhancements)
-    - [C.O.R.E. Philosophy](#core-philosophy)
-  - [Modules](#modules)
-    - [BMad Method (BMM) - AI-Driven Agile Development](#bmad-method-bmm---ai-driven-agile-development)
-      - [v6 Highlights](#v6-highlights)
-  - [🚀 Quick Start](#-quick-start)
-    - [BMad Builder (BMB) - Create Custom Solutions](#bmad-builder-bmb---create-custom-solutions)
-    - [Creative Intelligence Suite (CIS) - Innovation \& Creativity](#creative-intelligence-suite-cis---innovation--creativity)
-  - [Installation](#installation)
-  - [🎯 Working with Agents \& Commands](#-working-with-agents--commands)
-    - [Method 1: Agent Menu (Recommended for Beginners)](#method-1-agent-menu-recommended-for-beginners)
-    - [Method 2: Direct Slash Commands](#method-2-direct-slash-commands)
-    - [Method 3: Party Mode Execution](#method-3-party-mode-execution)
-  - [Key Features](#key-features)
-    - [🎨 Update-Safe Customization](#-update-safe-customization)
-    - [🚀 Intelligent Installation](#-intelligent-installation)
-    - [📁 Clean Architecture](#-clean-architecture)
-    - [📄 Document Sharding (Advanced)](#-document-sharding-advanced)
-  - [Documentation](#documentation)
-  - [Community \& Support](#community--support)
-  - [Development \& Quality Checks](#development--quality-checks)
-    - [Testing \& Validation](#testing--validation)
-    - [Code Quality](#code-quality)
-    - [Build \& Development](#build--development)
-  - [Contributing](#contributing)
-  - [License](#license)
+**Breakthrough Method of Agile AI Driven Development** — An AI-driven agile development module for the BMad Method Module Ecosystem, the best and most comprehensive Agile AI Driven Development framework that has true scale-adaptive intelligence that adjusts from bug fixes to enterprise systems.
 
----
-
-## What is BMad-CORE?
-
-Foundation framework powering all BMad modules:
-
-- **Agent Orchestration** - Specialized AI personas with domain expertise
-- **Workflow Engine** - Guided multi-step processes with built-in best practices
-- **Modular Architecture** - Extend with domain-specific modules (BMM, BMB, CIS, custom)
-- **IDE Integration** - Works with Claude Code, Cursor, Windsurf, VS Code, and more
-- **Update-Safe Customization** - Your configs persist through all updates
-
-### v6 Core Enhancements
-
-- **🎨 Agent Customization** - Modify names, roles, personalities via `bmad/_cfg/agents/`
-- **🌐 Multi-Language** - Independent language settings for communication and output
-- **👤 Personalization** - Agents adapt to your name, skill level, and preferences
-- **🔄 Persistent Config** - Customizations survive module updates
-- **⚙️ Flexible Settings** - Configure per-module or globally
-
-### C.O.R.E. Philosophy
-
-- **C**ollaboration: Human-AI partnership leveraging complementary strengths
-- **O**ptimized: Battle-tested processes for maximum effectiveness
-- **R**eflection: Strategic questioning that unlocks breakthrough solutions
-- **E**ngine: Framework orchestrating 19+ specialized agents and 50+ workflows
-
-BMad-CORE doesn't give you answers—it helps you **discover better solutions** through guided reflection.
-
-## Modules
-
-### BMad Method (BMM) - AI-Driven Agile Development
-
-Revolutionary AI-driven agile framework for software and game development. Automatically adapts from single bug fixes to enterprise-scale systems.
-
-#### v6 Highlights
-
-**🎯 Scale-Adaptive Intelligence (3 Planning Tracks)**
-
-Automatically adjusts planning depth and documentation based on project needs:
-
-- **Quick Flow Track:** Fast implementation (tech-spec only) - bug fixes, small features, clear scope
-- **BMad Method Track:** Full planning (PRD + Architecture + UX) - products, platforms, complex features
-- **Enterprise Method Track:** Extended planning (BMad Method + Security/DevOps/Test) - enterprise requirements, compliance
-
-**🏗️ Four-Phase Methodology**
-
-1. **Phase 1: Analysis** (Optional) - Brainstorming, research, product briefs
-2. **Phase 2: Planning** (Required) - Scale-adaptive PRD/tech-spec/GDD
-3. **Phase 3: Solutioning** (Track-dependent) - Architecture, (Coming soon: security, DevOps, test strategy)
-4. **Phase 4: Implementation** (Iterative) - Story-centric development with just-in-time context
-
-**🤖 12 Specialized Agents**
-
-PM • Analyst • Architect • Scrum Master • Developer • Test Architect (TEA) • UX Designer • Technical Writer • Game Designer • Game Developer • Game Architect • BMad Master (Orchestrator)
-
-**📚 Documentation**
-
-- **[Complete Documentation Hub](./src/modules/bmm/docs/README.md)** - Start here for all BMM guides
-- **[Quick Start Guide](./src/modules/bmm/docs/quick-start.md)** - Get building in 15 minutes
-- **[Agents Guide](./src/modules/bmm/docs/agents-guide.md)** - Meet all 12 agents (45 min read)
-- **[34 Workflow Guides](./src/modules/bmm/docs/README.md#-workflow-guides)** - Complete phase-by-phase reference
-- **[BMM Module Overview](./src/modules/bmm/README.md)** - Module structure and quick links
-
----
-
-## 🚀 Quick Start
-
-**After installation** (see [Installation](#installation) below), choose your path:
-
-**Three Planning Tracks:**
-
-1. **⚡ Quick Flow Track** - Bug fixes and small features
-   - 🐛 Bug fixes in minutes
-   - ✨ Small features (2-3 related changes)
-   - 🚀 Rapid prototyping
-   - **[→ Quick Spec Flow Guide](./src/modules/bmm/docs/quick-spec-flow.md)**
-
-2. **📋 BMad Method Track** - Products and platforms
-   - Complete planning (PRD/GDD)
-   - Architecture decisions
-   - Story-centric implementation
-   - **[→ Complete Quick Start Guide](./src/modules/bmm/docs/quick-start.md)**
+**100% free and open source.** No paywalls. No gated content. No gated Discord. We believe in empowering everyone, not just those who can pay for a gated community or courses.
 
-3. **🏢 Brownfield Projects** - Add to existing codebases
-   - Document existing code first
-   - Then choose Quick Flow or BMad Method
-   - **[→ Brownfield Guide](./src/modules/bmm/docs/brownfield-guide.md)**
+## Why the BMad Method?
 
-**Not sure which path?** Run `*workflow-init` and let BMM analyze your project goal and recommend the right track.
+Traditional AI tools do the thinking for you, producing average results. BMad agents and facilitated workflows act as expert collaborators who guide you through a structured process to bring out your best thinking in partnership with the AI.
 
-**[📚 Learn More: Scale Adaptive System](./src/modules/bmm/docs/scale-adaptive-system.md)** - How BMM adapts across three planning tracks
+- **AI Intelligent Help** — Ask `/bmad-help` anytime for guidance on what's next
+- **Scale-Domain-Adaptive** — Automatically adjusts planning depth based on project complexity
+- **Structured Workflows** — Grounded in agile best practices across analysis, planning, architecture, and implementation
+- **Specialized Agents** — 12+ domain experts (PM, Architect, Developer, UX, Scrum Master, and more)
+- **Party Mode** — Bring multiple agent personas into one session to collaborate and discuss
+- **Complete Lifecycle** — From brainstorming to deployment
 
----
-
-### BMad Builder (BMB) - Create Custom Solutions
-
-Build your own agents, workflows, and modules using the BMad-CORE framework.
-
-**What You Can Build:**
-
-- **Custom Agents** - Domain experts with specialized knowledge
-- **Guided Workflows** - Multi-step processes for any task
-- **Complete Modules** - Full solutions for specific domains
-- **Three Agent Types** - Full module, hybrid, or standalone
-
-**Perfect For:** Creating domain-specific solutions (legal, medical, finance, education, creative, etc.) or extending BMM with custom development workflows.
-
-**Documentation:**
-
-- **[BMB Module Overview](./src/modules/bmb/README.md)** - Complete reference
-- **[Create Agent Workflow](./src/modules/bmb/workflows/create-agent/README.md)** - Build custom agents
-- **[Create Workflow](./src/modules/bmb/workflows/create-workflow/README.md)** - Design guided processes
-- **[Create Module](./src/modules/bmb/workflows/create-module/README.md)** - Package complete solutions
-
-### Creative Intelligence Suite (CIS) - Innovation & Creativity
-
-AI-powered creative facilitation using proven methodologies and techniques.
-
-**5 Interactive Workflows:**
-
-- **Brainstorming** - Generate and refine ideas with 30+ techniques
-- **Design Thinking** - Human-centered problem solving
-- **Problem Solving** - Systematic breakthrough techniques
-- **Innovation Strategy** - Disruptive business model thinking
-- **Storytelling** - Compelling narrative frameworks
-
-**5 Specialized Agents:** Each with unique facilitation styles and domain expertise
-
-**Shared Resource:** CIS workflows are used by other modules (BMM's `brainstorm-project` uses CIS brainstorming)
-
-**Documentation:**
+[Learn more at **docs.bmad-method.org**](http://docs.bmad-method.org)
 
-- **[CIS Module Overview](./src/modules/cis/README.md)** - Complete reference
-- **[CIS Workflows Guide](./src/modules/cis/workflows/README.md)** - All 5 creative workflows
+## Quick Start
 
----
-
-## Installation
-
-**Prerequisites:** Node.js v20+ ([Download](https://nodejs.org))
+**Prerequisites**: [Node.js](https://nodejs.org) v20+
 
 ```bash
-# v6 Alpha (recommended for new projects)
-npx bmad-method@alpha install
-
-# Stable v4 (production)
 npx bmad-method install
 ```
 
-The installer provides:
-
-1. **Module Selection** - Choose BMM, BMB, CIS (or all)
-2. **Configuration** - Your name, language preferences, game dev options
-3. **IDE Integration** - Automatic setup for your IDE
-
-**Installation creates:**
-
-```
-your-project/
-└── bmad/
-    ├── core/         # Core framework + BMad Master agent
-    ├── bmm/          # BMad Method (12 agents, 34 workflows)
-    ├── bmb/          # BMad Builder (1 agent, 7 workflows)
-    ├── cis/          # Creative Intelligence (5 agents, 5 workflows)
-    └── _cfg/         # Your customizations (survives updates)
-        └── agents/   # Agent customization files
-```
-
-**Next Steps:**
-
-1. Load any agent in your IDE
-2. Run `*workflow-init` to set up your project workflow path
-3. Follow the [Quick Start](#-quick-start) guide above to choose your planning track
-
----
-
-## 🎯 Working with Agents & Commands
-
-**Multiple Ways to Execute Workflows:**
+Follow the installer prompts, then open your AI IDE (Claude Code, Codex, Windsurf, etc.) in your project folder.
 
-BMad is flexible - you can execute workflows in several ways depending on your preference and IDE:
+**Non-Interactive Installation** (for CI/CD):
 
-### Method 1: Agent Menu (Recommended for Beginners)
-
-1. **Load an agent** in your IDE (see [IDE-specific instructions](./docs/ide-info/))
-2. **Wait for the menu** to appear showing available workflows
-3. **Tell the agent** what to run using natural language or shortcuts:
-   - Natural: "Run workflow-init"
-   - Shortcut: `*workflow-init`
-   - Menu number: "Run option 2"
-
-### Method 2: Direct Slash Commands
-
-**Execute workflows directly** using slash commands:
-
-```
-/bmad:bmm:workflows:workflow-init
-/bmad:bmm:workflows:prd
-/bmad:bmm:workflows:dev-story
+```bash
+npx bmad-method install --directory /path/to/project --modules bmm --tools claude-code --yes
 ```
 
-**Tip:** While you can run these without loading an agent first, **loading an agent is still recommended** - it can make a difference with certain workflows.
-
-**Benefits:**
-
-- ✅ Mix and match any agent with any workflow
-- ✅ Run workflows not in the loaded agent's menu
-- ✅ Faster access for experienced users who know the command names
-
-### Method 3: Party Mode Execution
-
-**Run workflows with multi-agent collaboration:**
-
-1. Start party mode: `/bmad:core:workflows:party-mode`
-2. Execute any workflow - **the entire team collaborates on it**
-3. Get diverse perspectives from multiple specialized agents
-
-**Perfect for:** Strategic decisions, complex workflows, cross-functional tasks
-
----
-
-> **📌 IDE-Specific Note:**
->
-> Slash command format varies by IDE:
->
-> - **Claude Code:** `/bmad:bmm:workflows:prd`
-> - **Cursor/Windsurf:** May use different syntax - check your IDE's [documentation](./docs/ide-info/)
-> - **VS Code with Copilot Chat:** Syntax may differ
->
-> See **[IDE Integration Guides](./docs/ide-info/)** for your specific IDE's command format.
+[See all installation options](http://docs.bmad-method.org/how-to/non-interactive-installation/)
 
----
-
-## Key Features
-
-### 🎨 Update-Safe Customization
-
-Modify agents without touching core files:
-
-- Override agent names, personalities, expertise via `bmad/_cfg/agents/`
-- Customizations persist through all updates
-- Multi-language support (communication + output)
-- Module-level or global configuration
-
-### 🚀 Intelligent Installation
-
-Smart setup that adapts to your environment:
-
-- Auto-detects v4 installations for smooth upgrades
-- Configures IDE integrations (Claude Code, Cursor, Windsurf, VS Code)
-- Resolves cross-module dependencies
-- Generates unified agent/workflow manifests
+> **Not sure what to do?** Run `/bmad-help` — it tells you exactly what's next and what's optional. You can also ask questions like `/bmad-help I just finished the architecture, what do I do next?`
 
-### 📁 Clean Architecture
-
-Everything in one place:
-
-- Single `bmad/` folder (no scattered files)
-- Modules live side-by-side (core, bmm, bmb, cis)
-- Your configs in `_cfg/` (survives updates)
-- Easy to version control or exclude
-
-### 📄 Document Sharding (Advanced)
-
-Optional optimization for large projects (BMad Method and Enterprise tracks):
-
-- **Massive Token Savings** - Phase 4 workflows load only needed sections (90%+ reduction)
-- **Automatic Support** - All workflows handle whole or sharded documents seamlessly
-- **Easy Setup** - Built-in tool splits documents by headings
-- **Smart Discovery** - Workflows auto-detect format
+## Modules
 
-**[→ Document Sharding Guide](./docs/document-sharding-guide.md)**
+BMad Method extends with official modules for specialized domains. Available during installation or anytime after.
 
----
+| Module                                                                                                            | Purpose                                           |
+| ----------------------------------------------------------------------------------------------------------------- | ------------------------------------------------- |
+| **[BMad Method (BMM)](https://github.com/bmad-code-org/BMAD-METHOD)**                                             | Core framework with 34+ workflows                 |
+| **[BMad Builder (BMB)](https://github.com/bmad-code-org/bmad-builder)**                                           | Create custom BMad agents and workflows           |
+| **[Test Architect (TEA)](https://github.com/bmad-code-org/tea)**                                                  | Risk-based test strategy and automation           |
+| **[Game Dev Studio (BMGD)](https://github.com/bmad-code-org/bmad-module-game-dev-studio)**                        | Game development workflows (Unity, Unreal, Godot) |
+| **[Creative Intelligence Suite (CIS)](https://github.com/bmad-code-org/bmad-module-creative-intelligence-suite)** | Innovation, brainstorming, design thinking        |
 
 ## Documentation
 
-**Module Documentation:**
+[BMad Method Docs Site](http://docs.bmad-method.org) — Tutorials, guides, concepts, and reference
 
-- **[BMM Complete Documentation Hub](./src/modules/bmm/docs/README.md)** - All BMM guides, FAQs, troubleshooting
-- **[BMB Module Reference](./src/modules/bmb/README.md)** - Build custom agents and workflows
-- **[CIS Workflows Guide](./src/modules/cis/workflows/README.md)** - Creative facilitation workflows
+**Quick links:**
+- [Getting Started Tutorial](http://docs.bmad-method.org/tutorials/getting-started/)
+- [Upgrading from Previous Versions](http://docs.bmad-method.org/how-to/upgrade-to-v6/)
+- [Test Architect Documentation](https://bmad-code-org.github.io/bmad-method-test-architecture-enterprise/)
 
-**Additional Resources:**
 
-- **[Documentation Index](./docs/index.md)** - All project documentation
-- **[v4 to v6 Upgrade Guide](./docs/v4-to-v6-upgrade.md)** - Migration instructions
-- **[CLI Tool Guide](./tools/cli/README.md)** - Installer and build tool reference
-- **[Contributing Guide](./CONTRIBUTING.md)** - How to contribute
+## Community
 
----
-
-## Community & Support
-
-- 💬 **[Discord Community](https://discord.gg/gk8jAdXWmj)** - Get help, share projects (#general-dev, #bugs-issues)
-- 🐛 **[GitHub Issues](https://github.com/bmad-code-org/BMAD-METHOD/issues)** - Report bugs, request features
-- 🎥 **[YouTube Channel](https://www.youtube.com/@BMadCode)** - Video tutorials and walkthroughs
-- ⭐ **[Star this repo](https://github.com/bmad-code-org/BMAD-METHOD)** - Stay updated on releases
-
----
-
-## Development & Quality Checks
+- [Discord](https://discord.gg/gk8jAdXWmj) — Get help, share ideas, collaborate
+- [Subscribe on YouTube](https://www.youtube.com/@BMadCode) — Tutorials, master class, and podcast (launching Feb 2025)
+- [GitHub Issues](https://github.com/bmad-code-org/BMAD-METHOD/issues) — Bug reports and feature requests
+- [Discussions](https://github.com/bmad-code-org/BMAD-METHOD/discussions) — Community conversations
 
-**For contributors working on the BMAD codebase:**
+## Support BMad
 
-**Requirements:** Node.js 22+ (see `.nvmrc`). Run `nvm use` to switch to the correct version.
+BMad is free for everyone — and always will be. If you'd like to support development:
 
-### Testing & Validation
-
-```bash
-# Run all quality checks (comprehensive - use before pushing)
-npm test
-
-# Individual test suites
-npm run test:schemas     # Agent schema validation (fixture-based)
-npm run test:install     # Installation component tests (compilation)
-npm run validate:schemas # YAML schema validation
-npm run validate:bundles # Web bundle integrity
-```
-
-### Code Quality
-
-```bash
-# Lint check
-npm run lint
-
-# Auto-fix linting issues
-npm run lint:fix
-
-# Format check
-npm run format:check
-
-# Auto-format all files
-npm run format:fix
-```
-
-### Build & Development
-
-```bash
-# Bundle for web deployment
-npm run bundle
-
-# Test local installation
-npm run install:bmad
-```
-
-**Pre-commit Hook:** Auto-fixes changed files (lint-staged) + validates everything (npm test)
-**CI:** GitHub Actions runs all quality checks in parallel on every PR
-
----
+- ⭐ Please click the star project icon near the top right of this page
+- ☕ [Buy Me a Coffee](https://buymeacoffee.com/bmad) — Fuel the development
+- 🏢 Corporate sponsorship — DM on Discord
+- 🎤 Speaking & Media — Available for conferences, podcasts, interviews (BM on Discord)
 
 ## Contributing
 
-We welcome contributions! See **[CONTRIBUTING.md](CONTRIBUTING.md)** for:
-
-- Code contribution guidelines
-- Documentation improvements
-- Module development
-- Issue reporting
-
----
+We welcome contributions! See [CONTRIBUTING.md](CONTRIBUTING.md) for guidelines.
 
 ## License
 
-**MIT License** - See [LICENSE](LICENSE) for details
-
-**Trademarks:** BMAD™ and BMAD-METHOD™ are trademarks of BMad Code, LLC.
+MIT License — see [LICENSE](LICENSE) for details.
 
 ---
 
+**BMad** and **BMAD-METHOD** are trademarks of BMad Code, LLC. See [TRADEMARK.md](TRADEMARK.md) for details.
+
 [![Contributors](https://contrib.rocks/image?repo=bmad-code-org/BMAD-METHOD)](https://github.com/bmad-code-org/BMAD-METHOD/graphs/contributors)
 
-<sub>Built with ❤️ for the human-AI collaboration community</sub>
+See [CONTRIBUTORS.md](CONTRIBUTORS.md) for contributor information.

package/SECURITY.md

@@ -0,0 +1,85 @@
+# Security Policy
+
+## Supported Versions
+
+We release security patches for the following versions:
+
+| Version | Supported          |
+| ------- | ------------------ |
+| Latest  | :white_check_mark: |
+| < Latest | :x:               |
+
+We recommend always using the latest version of BMad Method to ensure you have the most recent security updates.
+
+## Reporting a Vulnerability
+
+We take security vulnerabilities seriously. If you discover a security issue, please report it responsibly.
+
+### How to Report
+
+**Do NOT report security vulnerabilities through public GitHub issues.**
+
+Instead, please report them via one of these methods:
+
+1. **GitHub Security Advisories** (Preferred): Use [GitHub's private vulnerability reporting](https://github.com/bmad-code-org/BMAD-METHOD/security/advisories/new) to submit a confidential report.
+
+2. **Discord**: Contact a maintainer directly via DM on our [Discord server](https://discord.gg/gk8jAdXWmj).
+
+### What to Include
+
+Please include as much of the following information as possible:
+
+- Type of vulnerability (e.g., prompt injection, path traversal, etc.)
+- Full paths of source file(s) related to the vulnerability
+- Step-by-step instructions to reproduce the issue
+- Proof-of-concept or exploit code (if available)
+- Impact assessment of the vulnerability
+
+### Response Timeline
+
+- **Initial Response**: Within 48 hours of receiving your report
+- **Status Update**: Within 7 days with our assessment
+- **Resolution Target**: Critical issues within 30 days; other issues within 90 days
+
+### What to Expect
+
+1. We will acknowledge receipt of your report
+2. We will investigate and validate the vulnerability
+3. We will work on a fix and coordinate disclosure timing with you
+4. We will credit you in the security advisory (unless you prefer to remain anonymous)
+
+## Security Scope
+
+### In Scope
+
+- Vulnerabilities in BMad Method core framework code
+- Security issues in agent definitions or workflows that could lead to unintended behavior
+- Path traversal or file system access issues
+- Prompt injection vulnerabilities that bypass intended agent behavior
+- Supply chain vulnerabilities in dependencies
+
+### Out of Scope
+
+- Security issues in user-created custom agents or modules
+- Vulnerabilities in third-party AI providers (Claude, GPT, etc.)
+- Issues that require physical access to a user's machine
+- Social engineering attacks
+- Denial of service attacks that don't exploit a specific vulnerability
+
+## Security Best Practices for Users
+
+When using BMad Method:
+
+1. **Review Agent Outputs**: Always review AI-generated code before executing it
+2. **Limit File Access**: Configure your AI IDE to limit file system access where possible
+3. **Keep Updated**: Regularly update to the latest version
+4. **Validate Dependencies**: Review any dependencies added by generated code
+5. **Environment Isolation**: Consider running AI-assisted development in isolated environments
+
+## Acknowledgments
+
+We appreciate the security research community's efforts in helping keep BMad Method secure. Contributors who report valid security issues will be acknowledged in our security advisories.
+
+---
+
+Thank you for helping keep BMad Method and our community safe.

package/TRADEMARK.md

@@ -0,0 +1,55 @@
+# Trademark Notice & Guidelines
+
+## Trademark Ownership
+
+The following names and logos are trademarks of BMad Code, LLC:
+
+- **BMad** (word mark, all casings: BMad, bmad, BMAD)
+- **BMad Method** (word mark, includes BMadMethod, BMAD-METHOD, and all variations)
+- **BMad Core** (word mark, includes BMadCore, BMAD-CORE, and all variations)
+- **BMad Code** (word mark)
+- BMad Method logo and visual branding
+- The "Build More, Architect Dreams" tagline
+
+**All casings, stylings, and variations** of the above names (with or without hyphens, spaces, or specific capitalization) are covered by these trademarks.
+
+These trademarks are protected under trademark law and are **not** licensed under the MIT License. The MIT License applies to the software code only, not to the BMad brand identity.
+
+## What This Means
+
+You may:
+
+- Use the BMad software under the terms of the MIT License
+- Refer to BMad to accurately describe compatibility or integration (e.g., "Compatible with BMad Method v6")
+- Link to <https://github.com/bmad-code-org/BMAD-METHOD>
+- Fork the software and distribute your own version under a different name
+
+You may **not**:
+
+- Use "BMad" or any confusingly similar variation as your product name, service name, company name, or domain name
+- Present your product as officially endorsed, approved, or certified by BMad Code, LLC when it is not, without written consent from an authorized representative of BMad Code, LLC
+- Use BMad logos or branding in a way that suggests your product is an official or endorsed BMad product
+- Register domain names, social media handles, or trademarks that incorporate BMad branding
+
+## Examples
+
+| Permitted                                              | Not Permitted                                |
+| ------------------------------------------------------ | -------------------------------------------- |
+| "My workflow tool, compatible with BMad Method"        | "BMadFlow" or "BMad Studio"                  |
+| "An alternative implementation inspired by BMad"       | "BMad Pro" or "BMad Enterprise"              |
+| "My Awesome Healthcare Module (Bmad Community Module)" | "The Official BMad Core Healthcare Module"   |
+| Accurately stating you use BMad as a dependency        | Implying official endorsement or partnership |
+
+## Commercial Use
+
+You may sell products that incorporate or work with BMad software. However:
+
+- Your product must have its own distinct name and branding
+- You must not use BMad trademarks in your marketing, domain names, or product identity
+- You may truthfully describe technical compatibility (e.g., "Works with BMad Method")
+
+## Questions?
+
+If you have questions about trademark usage or would like to discuss official partnership or endorsement opportunities, please reach out:
+
+- **Email**: <contact@bmadcode.com>

package/docs/404.md

@@ -0,0 +1,9 @@
+---
+title: Page Not Found
+template: splash
+---
+
+
+The page you're looking for doesn't exist or has been moved.
+
+[Return to Home](./index.md)