bmad-plus 0.12.1 → 0.13.0

package/tools/cli/lib/README-memory-journal.md

@@ -1,125 +1,125 @@
-# memory-journal.js — Karpathy Learning Layer core (Pillar 3)
-
-Portable data structures + helpers for the BMAD+ **memory → reward → reinforcement** loop.
-Prompt-level learning only: scores steer retrieval and pattern promotion — there is
-**no base-model fine-tuning** (see `audit/2026-07-01/north-star/registry.yaml` →
-`memory.reward_signal.applies_to`).
-
-Builds **on top of** the existing `pack-memory` (Zecher, Karpathy guardrails G1–G4,
-`decisions/lessons/patterns/context.md` templates). It never modifies those files or
-`tools/cli/lib/memory-init.js` — it adds a structured, machine-readable layer beside them.
-
-```
-.bmad/memory/journal.ndjson      ← structured event log (this module, north-star scope)
-.bmad/memory/promotions.ndjson   ← governance queue (always PROPOSED)
-.agents/memory/*.md              ← human memory (pack-memory, current layout) — READ ONLY here
-.bmad/memory/*.md                ← human memory (north-star layout) — READ ONLY here
-```
-
-## Hard rules baked into the module
-
-| Rule | Enforcement |
-|---|---|
-| No hidden clock / randomness | `ts` is a **required, caller-injected** field; ids are content hashes (sha256). The module never calls `Date.now()` or `Math.random()` — at import or runtime. |
-| Node stdlib only | `fs`, `path`, `crypto`. No network, no native deps → runs identically under every CLI. |
-| Journal is append-only, corruption-tolerant | `readJournal`/`readPromotions` skip torn lines instead of throwing (concurrent CLIs may write). |
-| Promotions are never auto-applied | `proposePromotion()` only emits `status: 'PROPOSED'`; `appendPromotion()` **forces** `PROPOSED` + clears approval fields on disk even for tampered records; `assertPromotionApplicable()` throws unless `status === 'APPROVED'` **and** `approvedBy` names a human/Shield reviewer. |
-
-## API
-
-### 1. Journal
-
-```js
-const mj = require('./memory-journal');
-
-mj.appendEvent(projectDir, {
-  ts: new Date().toISOString(),        // REQUIRED — injected by the caller
-  agent: 'forge',                      // REQUIRED
-  cli: 'claude-code',                  // claude-code | gemini-cli | antigravity | cursor | codex-cli | opencode | aider
-  model: 'claude',                     // model-agnostic by contract (claude/gpt/gemini/local)
-  task: 'refactor postgres pooling',
-  outcome: 'success',                  // success | failure | partial | abandoned
-  signals: { evalScore: 0.9, acceptance: true, ci: 'pass' },
-  artifactHashes: ['abc123'],          // traceability to produced artifacts
-});
-
-mj.readJournal(projectDir);            // → events[], oldest first, corrupt lines skipped
-```
-
-### 2. Recall (lexical first cut + vector-backend seam)
-
-```js
-mj.recall('postgres pooling', {
-  baseDir: projectDir,
-  scope: 'project',                    // or 'portfolio' + portfolioDir: 'D:/travail/DEV/_brain'
-  limit: 8,
-  now: new Date().toISOString(),       // optional injected clock → recency decay on events
-  halfLifeDays: 30,
-});
-// → [{ score, kind: 'event'|'note', source, ref, text, event? }] ranked desc
-```
-
-Sources merged: `journal.ndjson` events + `### `-sectioned entries from
-`decisions.md` / `lessons.md` / `patterns.md` in **both** `.bmad/memory/` (north-star)
-and `.agents/memory/` (current pack-memory layout), plus `<portfolioDir>/memory/*.md`
-when `scope: 'portfolio'`.
-
-**ChromaDB seam** — pass `backend: { search(query, opts) }` and ranking is delegated
-wholesale to it. The intended production backend is the existing RAG stack
-(`mcp-server/rag.py`: ChromaDB + SentenceTransformers — `registry.yaml → memory.index`).
-Backends must return the same entry shape as the lexical fallback, so callers never
-know which engine served them. The lexical scorer is the zero-dependency fallback for
-machines without Python provisioned.
-
-### 3. Reward + pattern score
-
-```js
-const reward = mj.computeReward({ evalScore: 0.8, acceptance: true, ci: 'fail' });
-// weights eval 0.5 / acceptance 0.3 / ci 0.2 (registry.yaml → memory.reward_signal.inputs)
-// missing signals renormalize the remaining weights; result always in [0, 1]
-
-let score = mj.INITIAL_PATTERN_SCORE;              // { elo: 1200, alpha: 1, beta: 1, mean: 0.5, ... }
-score = mj.updatePatternScore(score, reward, { ts: eventTs });
-```
-
-Two complementary estimators per pattern:
-
-- **Elo** (`k=32`, baseline 1200): `elo' = elo + K·(reward − expected)` — fast-moving,
-  ordinal, used to **rank** patterns in recall. Fresh pattern + reward 1 → 1216.
-- **Decayed Bayesian (Beta)**: evidence decays multiplicatively toward the uniform
-  prior (1,1) — per-update (`decay=0.98`) and time-based (`halfLifeDays=90`, only when
-  `ts` is injected) — so `mean = α/(α+β)` tracks the **recent** success rate, used for
-  **promotion thresholds** (`candidate → validated → deprecated` in `patterns.md`).
-
-Pure function: never mutates input, never reads the clock.
-
-### 4. Governance guard
-
-```js
-const p = mj.proposePromotion({ patternId: 'chromadb batch ingestion', ts, reason: 'mean 0.82 / 12 events', evidence: [eventIds] });
-mj.appendPromotion(projectDir, p);        // persisted as PROPOSED, always
-// ... a human / Shield reviewer flips it to APPROVED with approvedBy elsewhere ...
-mj.assertPromotionApplicable(approved);   // the gate every apply path MUST call
-```
-
-Governed by **Shield** (`registry.yaml → memory.reward_signal.governed_by`): bounded
-self-modification, versioned (append-only ndjson) and reversible (a promotion record
-never rewrites history; a rollback is just another proposal).
-
-## Testing
-
-```
-npx jest tests/unit/memory-journal.test.js
-```
-
-32 tests: append/recall round-trip on a tmp dir, corrupt-line tolerance, recency decay
-with injected clock, portfolio scope, backend-seam delegation, exact Elo/Beta math,
-purity, and the anti-tamper governance guard.
-
-## Future wiring (done by the orchestrator, not this module)
-
-- **MCP tools** `memory.write` / `memory.recall` in `mcp-server/` — thin wrappers over
-  this ndjson contract so every MCP-capable CLI shares one memory (Pillar 5).
-- **CLI commands** `bmad-plus memory log|recall|promote` in `tools/cli/commands/memory.js`.
-- **Zecher consolidation**: pack-memory's archivist reads `journal.ndjson` during
-  session consolidation and proposes pattern promotions via `proposePromotion()`.
+# memory-journal.js — Karpathy Learning Layer core (Pillar 3)
+
+Portable data structures + helpers for the BMAD+ **memory → reward → reinforcement** loop.
+Prompt-level learning only: scores steer retrieval and pattern promotion — there is
+**no base-model fine-tuning** (see `audit/2026-07-01/north-star/registry.yaml` →
+`memory.reward_signal.applies_to`).
+
+Builds **on top of** the existing `pack-memory` (Zecher, Karpathy guardrails G1–G4,
+`decisions/lessons/patterns/context.md` templates). It never modifies those files or
+`tools/cli/lib/memory-init.js` — it adds a structured, machine-readable layer beside them.
+
+```
+.bmad/memory/journal.ndjson      ← structured event log (this module, north-star scope)
+.bmad/memory/promotions.ndjson   ← governance queue (always PROPOSED)
+.agents/memory/*.md              ← human memory (pack-memory, current layout) — READ ONLY here
+.bmad/memory/*.md                ← human memory (north-star layout) — READ ONLY here
+```
+
+## Hard rules baked into the module
+
+| Rule | Enforcement |
+|---|---|
+| No hidden clock / randomness | `ts` is a **required, caller-injected** field; ids are content hashes (sha256). The module never calls `Date.now()` or `Math.random()` — at import or runtime. |
+| Node stdlib only | `fs`, `path`, `crypto`. No network, no native deps → runs identically under every CLI. |
+| Journal is append-only, corruption-tolerant | `readJournal`/`readPromotions` skip torn lines instead of throwing (concurrent CLIs may write). |
+| Promotions are never auto-applied | `proposePromotion()` only emits `status: 'PROPOSED'`; `appendPromotion()` **forces** `PROPOSED` + clears approval fields on disk even for tampered records; `assertPromotionApplicable()` throws unless `status === 'APPROVED'` **and** `approvedBy` names a human/Shield reviewer. |
+
+## API
+
+### 1. Journal
+
+```js
+const mj = require('./memory-journal');
+
+mj.appendEvent(projectDir, {
+  ts: new Date().toISOString(),        // REQUIRED — injected by the caller
+  agent: 'forge',                      // REQUIRED
+  cli: 'claude-code',                  // claude-code | gemini-cli | antigravity | cursor | codex-cli | opencode | aider
+  model: 'claude',                     // model-agnostic by contract (claude/gpt/gemini/local)
+  task: 'refactor postgres pooling',
+  outcome: 'success',                  // success | failure | partial | abandoned
+  signals: { evalScore: 0.9, acceptance: true, ci: 'pass' },
+  artifactHashes: ['abc123'],          // traceability to produced artifacts
+});
+
+mj.readJournal(projectDir);            // → events[], oldest first, corrupt lines skipped
+```
+
+### 2. Recall (lexical first cut + vector-backend seam)
+
+```js
+mj.recall('postgres pooling', {
+  baseDir: projectDir,
+  scope: 'project',                    // or 'portfolio' + portfolioDir: 'D:/travail/DEV/_brain'
+  limit: 8,
+  now: new Date().toISOString(),       // optional injected clock → recency decay on events
+  halfLifeDays: 30,
+});
+// → [{ score, kind: 'event'|'note', source, ref, text, event? }] ranked desc
+```
+
+Sources merged: `journal.ndjson` events + `### `-sectioned entries from
+`decisions.md` / `lessons.md` / `patterns.md` in **both** `.bmad/memory/` (north-star)
+and `.agents/memory/` (current pack-memory layout), plus `<portfolioDir>/memory/*.md`
+when `scope: 'portfolio'`.
+
+**ChromaDB seam** — pass `backend: { search(query, opts) }` and ranking is delegated
+wholesale to it. The intended production backend is the existing RAG stack
+(`mcp-server/rag.py`: ChromaDB + SentenceTransformers — `registry.yaml → memory.index`).
+Backends must return the same entry shape as the lexical fallback, so callers never
+know which engine served them. The lexical scorer is the zero-dependency fallback for
+machines without Python provisioned.
+
+### 3. Reward + pattern score
+
+```js
+const reward = mj.computeReward({ evalScore: 0.8, acceptance: true, ci: 'fail' });
+// weights eval 0.5 / acceptance 0.3 / ci 0.2 (registry.yaml → memory.reward_signal.inputs)
+// missing signals renormalize the remaining weights; result always in [0, 1]
+
+let score = mj.INITIAL_PATTERN_SCORE;              // { elo: 1200, alpha: 1, beta: 1, mean: 0.5, ... }
+score = mj.updatePatternScore(score, reward, { ts: eventTs });
+```
+
+Two complementary estimators per pattern:
+
+- **Elo** (`k=32`, baseline 1200): `elo' = elo + K·(reward − expected)` — fast-moving,
+  ordinal, used to **rank** patterns in recall. Fresh pattern + reward 1 → 1216.
+- **Decayed Bayesian (Beta)**: evidence decays multiplicatively toward the uniform
+  prior (1,1) — per-update (`decay=0.98`) and time-based (`halfLifeDays=90`, only when
+  `ts` is injected) — so `mean = α/(α+β)` tracks the **recent** success rate, used for
+  **promotion thresholds** (`candidate → validated → deprecated` in `patterns.md`).
+
+Pure function: never mutates input, never reads the clock.
+
+### 4. Governance guard
+
+```js
+const p = mj.proposePromotion({ patternId: 'chromadb batch ingestion', ts, reason: 'mean 0.82 / 12 events', evidence: [eventIds] });
+mj.appendPromotion(projectDir, p);        // persisted as PROPOSED, always
+// ... a human / Shield reviewer flips it to APPROVED with approvedBy elsewhere ...
+mj.assertPromotionApplicable(approved);   // the gate every apply path MUST call
+```
+
+Governed by **Shield** (`registry.yaml → memory.reward_signal.governed_by`): bounded
+self-modification, versioned (append-only ndjson) and reversible (a promotion record
+never rewrites history; a rollback is just another proposal).
+
+## Testing
+
+```
+npx jest tests/unit/memory-journal.test.js
+```
+
+32 tests: append/recall round-trip on a tmp dir, corrupt-line tolerance, recency decay
+with injected clock, portfolio scope, backend-seam delegation, exact Elo/Beta math,
+purity, and the anti-tamper governance guard.
+
+## Future wiring (done by the orchestrator, not this module)
+
+- **MCP tools** `memory.write` / `memory.recall` in `mcp-server/` — thin wrappers over
+  this ndjson contract so every MCP-capable CLI shares one memory (Pillar 5).
+- **CLI commands** `bmad-plus memory log|recall|promote` in `tools/cli/commands/memory.js`.
+- **Zecher consolidation**: pack-memory's archivist reads `journal.ndjson` during
+  session consolidation and proposes pattern promotions via `proposePromotion()`.

package/tools/cli/lib/ide-config.js

@@ -1,259 +1,10 @@
-/**
- * BMAD+ IDE Configuration Generator
- * Extracted from install.js for modularity.
- * Generates CLAUDE.md, GEMINI.md, AGENTS.md content with pack-aware agent filtering.
- *
- * Author: Laurent Rochetta
- */
-
-// ── IDE Configurations ──
-
-const IDE_CONFIGS = {
-  'claude-code': {
-    name: 'Claude Code',
-    detect: ['.claude'],
-    configFile: 'CLAUDE.md',
-  },
-  'gemini-cli': {
-    name: 'Gemini CLI',
-    detect: ['.gemini'],
-    configFile: 'GEMINI.md',
-  },
-  'codex-cli': {
-    name: 'Codex CLI / OpenCode',
-    detect: ['.codex', '.opencode'],
-    configFile: 'AGENTS.md',
-  },
-  'antigravity': {
-    name: 'Antigravity',
-    detect: ['.gemini/antigravity'],
-    configFile: 'GEMINI.md',
-  },
-};
-
-// All 14 BMAD+ agents — always included in templates
-const AGENT_LIST = [
-  '- **Atlas** (Strategist) — Business analysis + Product management',
-  '- **Forge** (Architect-Dev) — Architecture + Development + Documentation',
-  '- **Sentinel** (Quality) — QA + UX review',
-  '- **Nexus** (Orchestrator) — Sprint management + Autopilot + Parallel execution',
-  '- **Shadow** (OSINT) — Investigation + Scraping + Psychoprofiling',
-  '- **Shield** (GRC) — 38 compliance agents (GDPR, ISO 27001, SOC 2, HIPAA, EU AI Act, DORA, NIS2...)',
-  '- **Miriam** (מרים) — Business Analyst — Strategic analysis, research, product briefs',
-  '- **Huldah** (חולדה) — Technical Writer — Documentation, diagrams, editorial review',
-  '- **Yosef** (יוסף) — Product Manager — PRD, requirements, feature prioritization',
-  '- **Rachel** (רחל) — UX Designer — User experience, wireframes, empathy mapping',
-  '- **Bezalel** (בצלאל) — System Architect — Architecture, ADRs, epics & stories',
-  '- **Oholiab** (אהליאב) — Senior Engineer — TDD, sprint, code review, implementation',
-  '- **Zecher** (זכר) — Memory Archivist — Consolidation, project scanning, context recall',
-  '- **Maker** (Creator) — Custom agent builder — Create new agents from description',
-];
-
-/**
- * Filter agents based on installed packs.
- * Core agents are always included; others depend on pack selection.
- *
- * @param {string[]} packs - List of installed pack IDs
- * @returns {string[]} Agent description lines
- */
-function getAgentsByPacks(packs) {
-  const agents = [
-    '- **Atlas** (Strategist) — Business analysis + Product management',
-    '- **Forge** (Architect-Dev) — Architecture + Development + Documentation',
-    '- **Sentinel** (Quality) — QA + UX review',
-    '- **Nexus** (Orchestrator) — Sprint management + Autopilot + Parallel execution',
-  ];
-
-  if (packs.includes('osint')) {
-    agents.push('- **Shadow** (OSINT) — Investigation + Scraping + Psychoprofiling');
-  }
-
-  if (packs.includes('shield')) {
-    agents.push('- **Shield** (GRC) — 38 compliance agents (GDPR, ISO 27001, SOC 2, HIPAA, EU AI Act, DORA, NIS2...)');
-  }
-
-  if (packs.includes('maker')) {
-    agents.push('- **Maker** (Creator) — Custom agent builder — Create new agents from description');
-  }
-
-  if (packs.includes('dev-studio')) {
-    agents.push('- **Miriam** (מרים) — Business Analyst — Strategic analysis, research, product briefs');
-    agents.push('- **Huldah** (חולדה) — Technical Writer — Documentation, diagrams, editorial review');
-    agents.push('- **Yosef** (יוסף) — Product Manager — PRD, requirements, feature prioritization');
-    agents.push('- **Rachel** (רחל) — UX Designer — User experience, wireframes, empathy mapping');
-    agents.push('- **Bezalel** (בצלאל) — System Architecture — Architecture, ADRs, epics & stories');
-    agents.push('- **Oholiab** (אהליאב) — Senior Engineer — TDD, sprint, code review, implementation');
-  }
-
-  if (packs.includes('memory')) {
-    agents.push('- **Zecher** (זכר) — Memory Archivist — Consolidation, project scanning, context recall');
-  }
-
-  return agents;
-}
-
-/**
- * Build the Memory Protocol section if the memory pack is installed.
- *
- * @param {string[]} packs - List of installed pack IDs
- * @returns {string} Memory section markdown (empty string if no memory pack)
- */
-function getMemorySection(packs) {
-  if (!packs.includes('memory')) return '';
-  return [
-    '',
-    '## Memory Protocol (Karpathy Guardrails)',
-    '',
-    'Agents MUST follow these behavioral principles:',
-    '',
-    '### G1 — Think Before Coding',
-    '- State assumptions explicitly. If uncertain, ask.',
-    '- Check `.agents/memory/decisions.md` for prior decisions before re-deciding.',
-    '',
-    '### G2 — Simplicity First',
-    '- Minimum code that solves the problem. Nothing speculative.',
-    '- Check `.agents/memory/patterns.md` for existing solutions.',
-    '',
-    '### G3 — Surgical Changes',
-    '- Touch only what you must. Match existing style.',
-    '- Log surprises in `.agents/memory/lessons.md`.',
-    '',
-    '### G4 — Goal-Driven Execution',
-    '- Define success criteria before implementing.',
-    '- Log non-obvious decisions in `.agents/memory/decisions.md`.',
-    '',
-    '### Memory Files',
-    '- `.agents/memory/decisions.md` — Read at session start, write when making decisions',
-    '- `.agents/memory/lessons.md` — Write when something unexpected happens',
-    '- `.agents/memory/patterns.md` — Write when a reusable pattern is validated',
-    '- `.agents/memory/context.md` — Update at session end with project state',
-  ].join('\n');
-}
-
-/**
- * Generate IDE config content with pack-aware agent filtering.
- *
- * @param {string} userName - The user's display name
- * @param {string} language - User-facing communication language
- * @param {string[]} packs - List of installed pack IDs
- * @returns {string} Complete Markdown template
- */
-function generateIDEConfig(userName, language, packs) {
-  const agents = getAgentsByPacks(packs);
-  const memorySection = getMemorySection(packs);
-
-  return `# BMAD+ — AI Agent Configuration
-
-## Project Context
-This project uses BMAD+, an augmented AI-driven development framework.
-Based on BMAD-METHOD v6.6.0 with multi-role agents, autopilot mode, and parallel execution.
-
-## Agents
-To activate an agent, say its name or persona:
-${agents.join('\n')}
-
-## Skills
-- Load skills from \`.agents/skills/\`
-- Each agent has a SKILL.md with capabilities, activation protocol, and role-switching rules
-- Auto-activation triggers: \`.agents/data/role-triggers.yaml\`
-
-## Key Commands
-- \`bmad-help\` — Show all available agents and skills
-- \`autopilot\` — Launch Nexus in full pipeline mode
-- \`parallel\` — Enable parallel multi-agent execution
-
-## Communication
-- User name: ${userName}
-- Default language: ${language} for user-facing content, English for code and technical docs.
-${memorySection}`;
-}
-
-/**
- * Generate a complete CLAUDE.md / GEMINI.md / AGENTS.md config file
- * (all agents, no filtering — backward compatible)
- *
- * @param {string} userName - The user's display name
- * @param {string} language - User-facing communication language
- * @returns {string} Complete Markdown template
- */
-function generateBaseConfig(userName, language) {
-  return `# BMAD+ — AI Agent Configuration
-
-## Project Context
-This project uses BMAD+, an augmented AI-driven development framework.
-Based on BMAD-METHOD v6.6.0 with multi-role agents, autopilot mode, and parallel execution.
-
-## Agents
-To activate an agent, say its name or persona:
-${AGENT_LIST.join('\n')}
-
-## Skills
-- Load skills from \`.agents/skills/\`
-- Each agent has a SKILL.md with capabilities, activation protocol, and role-switching rules
-- Auto-activation triggers: \`.agents/data/role-triggers.yaml\`
-
-## Key Commands
-- \`bmad-help\` — Show all available agents and skills
-- \`autopilot\` — Launch Nexus in full pipeline mode
-- \`parallel\` — Enable parallel multi-agent execution
-
-## Communication
-- User name: ${userName}
-- Default language: ${language} for user-facing content, English for code and technical docs.
-
-## Memory Protocol (Karpathy Guardrails)
-
-Agents MUST follow these behavioral principles:
-
-### G1 — Think Before Coding
-- State assumptions explicitly. If uncertain, ask.
-- Check \`.agents/memory/decisions.md\` for prior decisions before re-deciding.
-
-### G2 — Simplicity First
-- Minimum code that solves the problem. Nothing speculative.
-- Check \`.agents/memory/patterns.md\` for existing solutions.
-
-### G3 — Surgical Changes
-- Touch only what you must. Match existing style.
-- Log surprises in \`.agents/memory/lessons.md\`.
-
-### G4 — Goal-Driven Execution
-- Define success criteria before implementing.
-- Log non-obvious decisions in \`.agents/memory/decisions.md\`.
-
-### Memory Files
-- \`.agents/memory/decisions.md\` — Read at session start, write when making decisions
-- \`.agents/memory/lessons.md\` — Write when something unexpected happens
-- \`.agents/memory/patterns.md\` — Write when a reusable pattern is validated
-- \`.agents/memory/context.md\` — Update at session end with project state`;
-}
-
-module.exports = {
-  IDE_CONFIGS,
-  generateIDEConfig,
-  getAgentsByPacks,
-
-  /**
-   * Generate CLAUDE.md config for Claude Code
-   * @param {string} userName
-   * @param {string} language
-   * @returns {string}
-   */
-  generateClaudeMD: generateBaseConfig,
-
-  /**
-   * Generate GEMINI.md config for Gemini CLI / Antigravity
-   * @param {string} userName
-   * @param {string} language
-   * @returns {string}
-   */
-  generateGeminiMD: generateBaseConfig,
-
-  /**
-   * Generate AGENTS.md config for Codex CLI / OpenCode
-   * @param {string} userName
-   * @param {string} language
-   * @returns {string}
-   */
-  generateAgentsMD: generateBaseConfig,
-};
+/**
+ * Compatibility entry for IDE metadata. Rendering lives in the registry generator.
+ * Author: Laurent Rochetta
+ */
+const adapters = require('../../build/generate-adapters');
+
+module.exports = {
+  get IDE_CONFIGS() { return adapters.IDE_CONFIGS; },
+  buildIDEConfigs: adapters.buildIDEConfigs,
+};

package/tools/cli/lib/install-manifest.js

@@ -0,0 +1,17 @@
+/** Read the manifest fields used by maintenance commands without unsafe coercion. */
+const fs = require('node:fs');
+
+function readInstallManifest(manifestPath) {
+  const manifest = JSON.parse(fs.readFileSync(manifestPath, 'utf8'));
+  if (!manifest || typeof manifest !== 'object' || Array.isArray(manifest) ||
+      typeof manifest.version !== 'string' || !manifest.version.trim() ||
+      typeof manifest.installed !== 'string' || !Number.isFinite(Date.parse(manifest.installed)) ||
+      !Array.isArray(manifest.packs) || manifest.packs.length === 0 ||
+      manifest.packs.some(pack => typeof pack !== 'string' || !/^[a-z0-9-]+$/.test(pack)) ||
+      (manifest.uiLanguage !== undefined && typeof manifest.uiLanguage !== 'string')) {
+    throw new Error('Expected version, installed date, and a nonempty array of pack IDs.');
+  }
+  return manifest;
+}
+
+module.exports = { readInstallManifest };

package/tools/cli/lib/installed-adapters.js

@@ -0,0 +1,89 @@
+/** Installed adapter ownership shared by install, update, and uninstall. */
+const fs = require('node:fs');
+const path = require('node:path');
+const crypto = require('node:crypto');
+const clack = require('@clack/prompts');
+const { GENERATED_MARKER, USER_CONFIG_MARKER } = require('../../build/generate-adapters');
+
+const INSTALLER_MARKER = 'BMAD+ \u2014 AI Agent Configuration';
+const contentHash = content => crypto.createHash('sha256').update(String(content).replace(/\r\n/g, '\n')).digest('hex');
+
+function classifyAdapter({ existing, content, previousHash, update = false, yes = false }) {
+  if (existing === undefined) return { action: 'write', backup: false };
+  const installed = existing.includes(USER_CONFIG_MARKER);
+  const adopted = existing.includes(GENERATED_MARKER) && !installed;
+  const legacy = existing.includes(INSTALLER_MARKER) && !existing.includes(GENERATED_MARKER);
+  if (installed && existing === content) return { action: 'same', backup: false };
+  const unchanged = installed && previousHash === contentHash(existing);
+  if (adopted || (installed && !unchanged) || (!installed && !legacy && (update || !yes))) {
+    return { action: 'preserve', backup: false, adopted, installed, reason: adopted ? 'repository-adopted' : 'local-instructions' };
+  }
+  return { action: 'write', backup: legacy || (!installed && yes), legacy };
+}
+
+// Refuse redirected parent directories as well as linked destination files.
+function safeAdapterPath(projectDir, file) {
+  const root = path.resolve(projectDir);
+  const target = path.resolve(root, file);
+  const relative = path.relative(root, target);
+  if (!relative || relative === '..' || relative.startsWith('..' + path.sep) || path.isAbsolute(relative)) {
+    throw new Error('Adapter path outside project: ' + file);
+  }
+  let current = root;
+  for (const part of relative.split(path.sep)) {
+    current = path.join(current, part);
+    try {
+      if (fs.lstatSync(current).isSymbolicLink()) throw new Error('Adapter path is a symbolic link or junction: ' + current);
+    } catch (err) {
+      if (err.code !== 'ENOENT') throw err;
+    }
+  }
+  return target;
+}
+
+function writeIDEConfigs({ projectDir, files, yes = false, update = false, adapterHashes = {} }) {
+  const outcome = { written: [], skipped: [], backedUp: [], adapterHashes: {} };
+  // Preflight the complete set before writing any adapter.
+  for (const { file } of files) safeAdapterPath(projectDir, file);
+  for (const { file, content } of files) {
+    const target = safeAdapterPath(projectDir, file);
+    const previousHash = Object.hasOwn(adapterHashes, file) ? adapterHashes[file] : undefined;
+    let backup = false;
+    if (fs.existsSync(target)) {
+      const existing = fs.readFileSync(target, 'utf8');
+      const decision = classifyAdapter({ existing, content, previousHash, update, yes });
+      if (decision.action === 'same') {
+        outcome.adapterHashes[file] = contentHash(content);
+        continue;
+      }
+      if (decision.action === 'preserve') {
+        if (previousHash && decision.installed) outcome.adapterHashes[file] = previousHash;
+        outcome.skipped.push(file);
+        const compare = decision.adopted
+          ? ` Compare package defaults: node "${require.resolve('../../build/generate-adapters')}" --target "${path.resolve(projectDir)}" --check`
+          : '';
+        clack.log.warn(`${file}: existing project instructions preserved.${compare}`);
+        continue;
+      }
+      // Older installers did not record hashes. Keep their exact bytes before
+      // migration, including any local additions that cannot be distinguished.
+      backup = decision.backup;
+    }
+    if (backup) {
+      let suffix = '.bak';
+      let index = 1;
+      while (fs.existsSync(safeAdapterPath(projectDir, file + suffix))) suffix = `.bak.${index++}`;
+      fs.copyFileSync(target, safeAdapterPath(projectDir, file + suffix), fs.constants.COPYFILE_EXCL);
+      outcome.backedUp.push(file);
+      clack.log.warn(`${file}: backed up to ${file + suffix} before refreshing.`);
+    }
+    fs.mkdirSync(path.dirname(target), { recursive: true });
+    safeAdapterPath(projectDir, file);
+    fs.writeFileSync(target, content, 'utf8');
+    outcome.written.push(file);
+    outcome.adapterHashes[file] = contentHash(content);
+  }
+  return outcome;
+}
+
+module.exports = { INSTALLER_MARKER, contentHash, safeAdapterPath, writeIDEConfigs, classifyAdapter };