bmad-plus 0.12.2 → 0.14.0

package/src/bmad-plus/packs/pack-dev-studio/upstream-sync.yaml

@@ -1,15 +1,41 @@
-# Pack Dev Studio — upstream-sync.yaml
-# Tracks the source commit and version from BMAD-METHOD for future updates
+# Dev Studio provenance and selective adaptation ledger.
+# Version and commit below have different, explicitly recorded roles.
+# The 0.14.0 implementation is original BMAD+ work, not a wholesale upstream sync.
+schema_version: 2
 
 upstream:
   repository: https://github.com/bmad-code-org/BMAD-METHOD
   version: "6.6.0"
+  version_role: declared-compatibility-baseline
+  baseline_tag_commit: "e6cdc93b79420fcc915d3bd3ca63387bc86af694"
   commit: "0f852a38ac7c0ac30340b3aedc3aba4505b7c14a"
+  commit_role: historical-partial-import
   synced_at: "2026-05-17"
+  synced_at_role: recorded-date-of-historical-import
   license: MIT
 
+reviewed_reference:
+  version: "6.12.0"
+  commit: "05bfbd46d00766ec88eb9b42e76be2c575d64d7b"
+  reviewed_at: "2026-09-09"
+  status: reviewed-only
+  full_migration: false
+  compatibility_baseline_changed: false
+
+implementation:
+  bmad_plus_version: "0.14.0"
+  origin: original-bmad-plus-instructions-and-context-preparation
+  authored_at: "2026-09-09"
+  execution: host-managed-markdown
+  context_preparation: read-only-cli
+  standalone_llm_runtime: false
+  upstream_runtime_imported: false
+  preserved_public_workflow_ids: 38
+  preserved_personas: 6
+  evidence_limit: Resource reconciliation does not establish host execution or model compliance.
+
 adaptations:
-  format: "BMAD+ BWML (Workflow Markup Language)"
+  format: Original BMAD+ Markdown procedures with explicit inputs, evidence and continuation.
   personas:
     Mary: Miriam (מרים)
     Paige: Huldah (חולדה)
@@ -17,18 +43,63 @@ adaptations:
     Sally: Rachel (רחל)
     Winston: Bezalel (בצלאל)
     Amelia: Oholiab (אהליאב)
-  removed_dependencies:
-    - customize.toml (3-layer TOML config system)
-    - resolve_customization.py (Python variable resolver)
-    - resolve_config.py (Python config merger)
-    - analyze_sources.py (Python source analyzer)
-    - config.yaml (per-project config)
-  added:
-    - BWML specification (shared/bwml-spec.md)
-    - Dev Studio orchestrator
-    - Specialized persona naming
-    - BMAD+ pack integration (module.yaml, CLI, i18n)
+  entry: SKILL.md
+  catalog: shared/catalog.json
+  execution_guide: shared/execution.md
+  historical_bwml_document: shared/bwml-spec.md
+  historical_bwml_document_role: migration-note-not-interpreter-specification
+  configuration:
+    file: _bmad/config.yaml
+    scope: explicitly-selected-project
+    parser: existing-bmad-plus-yaml-parser
+    known_fields:
+      - user_name
+      - communication_language
+      - document_output_language
+      - output_folder
+      - project_name
+    missing_values: Explicit neutral defaults in the execution guide.
+    invalid_present_values: Report an error rather than inventing configuration.
+    preserve_unrelated_settings: true
+    layered_toml_overrides: false
+  retired_dependency_contracts:
+    - Imported PRD headless schemas and automatic HTML validation rendering.
+    - Distillator compression/reconstruction format and Python source analyzer.
+    - Upstream Python/TOML customization discovery and layered override merging.
+    - Implied execution of BWML tags as scheduler, memory, events or validation gates.
+  historical_dependency_note: >-
+    The old removed_dependencies list was not proof that dependent instructions
+    remained executable. Project YAML configuration is supported now; it is not
+    a removed dependency. Per-skill customize.toml files and shared upstream
+    resolvers fall outside the 147-support-file inventory below.
+
+support_reconciliation:
+  source_method: Read-only git ls-tree at the historical import commit.
+  historical_bmad_plus_commit: "913d0600b9e0c3ac12af22b17e2205bf9d394a63"
+  mapped_entry_families: 44
+  excluded_relative_paths:
+    - SKILL.md
+    - customize.toml
+  source_support_files: 147
+  historically_delivered: 15
+  historically_omitted: 132
+  historically_omitted_families: 24
+  omitted_dispositions:
+    replaced-by-self-contained-workflows: 117
+    retired-runtime: 12
+    optional-tests-or-metadata: 3
+  delivered_disposition: retained-as-original-support
+  interpretation: >-
+    Counts describe the pre-remediation snapshot. An omitted support file is not
+    automatically a demonstrated runtime failure. Replaced means the relevant
+    purpose is covered by original instructions, not exact upstream feature parity.
+    Retired-runtime includes unsupported execution contracts even when no working
+    runtime had been delivered.
+  repository_report: docs/research/dev-studio-0.14-validation/migration.md
+  repository_inventory: docs/research/dev-studio-0.14-validation/migration.json
 
+# Historical source mapping only. These are lineage references, not live imports
+# or runtime dependencies. Current routes resolve through shared/catalog.json.
 source_mapping:
   categories/analysis:
     - src/bmm-skills/1-analysis/bmad-agent-analyst → analyst-agent.md

package/src/bmad-plus/packs/pack-memory/README.md

@@ -48,6 +48,12 @@ Dedicated memory agent that can:
 
 ## Installation
 
+The npm pack provides file-based memory and requires Node.js only. Vector/RAG
+recall is an optional, local-only enhancement through a separately deployed
+MCP server. That server, its Python dependencies and its vector index are not
+included in the npm package; `--provision-python` does not install them.
+Missing RAG infrastructure does not disable Markdown memory or the project scanner.
+
 ```bash
 npx bmad-plus install
 # Select "🧠 Memory — Persistent Brain" in the pack menu

package/src/bmad-plus/packs/pack-memory/memory-orchestrator.md

@@ -16,10 +16,17 @@ Pack Memory provides a two-level persistent brain for BMAD+:
 
 ## Activation
 
-Pack Memory activates automatically when installed:
-- At session start: agents load project memory + global identity
-- During session: agents write decisions/lessons/patterns on trigger
-- At session end: session handoff is persisted
+Pack Memory supplies instructions and files for the host agent to use. The host
+must load and follow the memory protocol; installation alone does not execute it.
+No automatic session-start or session-end hooks are installed.
+
+While executing the protocol, the host agent should:
+
+- At session start: load project memory + global identity
+- During the session: record decisions, lessons and patterns when relevant
+- Before ending its work: persist a session handoff
+
+A session that ends without an agent turn has no guaranteed handoff.
 
 Manual activation via Zecher:
 - `"Zecher, scan projects in D:\travail\DEV"` — discover and index all projects
@@ -43,7 +50,7 @@ pack-memory/
 ├── memory-orchestrator.md              ← This file
 ├── zecher-agent.md                     ← Memory Agent (Zecher)
 ├── shared/
-│   ├── karpathy-guardrails.md          ← 4 Karpathy principles + memory hooks
+│   ├── karpathy-guardrails.md          ← 4 Karpathy principles + memory practices
 │   └── memory-protocol.md             ← Complete read/write protocol
 └── templates/
     ├── decisions.md                    ← ADR template

package/src/bmad-plus/packs/pack-seo/SKILL.md

@@ -15,6 +15,31 @@ description: >
 This skill orchestrates 3 specialized agents through a structured workflow.
 Load the full agent files only when activating that agent's phase.
 
+### Runtime availability
+
+The local `scripts/*.py` commands require a working Python environment and their
+optional service credentials or browser setup. Never invent crawl, PageSpeed,
+API or screenshot results.
+
+Use `bmad-plus install --provision-python` to provision the selected Python packs,
+or install this pack's `requirements.txt` in a dedicated environment manually.
+Run scripts with that environment's interpreter, not an assumed system Python.
+Provisioning is optional. Report **prompts-only mode** before starting an audit
+if the environment is unavailable. Do not repeatedly run failing scripts or
+install dependencies without authorization.
+
+### Evidence and reporting
+
+Use evidence available in the session or collected by working tools. Without a
+usable Python environment, use **prompts-only mode** and skip local Python commands.
+Mark missing data `unverified` and omit every score with incomplete inputs,
+including the overall SEO Health Score. Do not substitute zero or reweight the
+remaining categories. For incomplete audits, produce Markdown with explicit
+coverage: pages and checks reviewed, evidence sources, and unverified items.
+Use `scripts/seo_report.py` only when every score value it uses is verified;
+the current exporter has no N/A support. This policy applies to every role and
+overrides numeric placeholders in report templates.
+
 ## Command Router
 
 When the user issues a `/seo` command, route as follows:
@@ -90,7 +115,8 @@ Use `scripts/seo_screenshot.py <url> --viewport mobile` for visual audit.
 **Agent**: Chief (Scorer role)
 **Load**: `seo-chief.md`
 
-Compute SEO Health Score (0–100):
+Compute SEO Health Score (0–100) only when all weighted categories have verified
+inputs. Otherwise report coverage and omit the overall score:
 
 | Category | Weight |
 |----------|--------|

package/src/bmad-plus/packs/pack-seo/scripts/seo_apis.py

@@ -298,16 +298,16 @@ def run_rich_results_test(url: str) -> dict:
 
 def run_all(url: str) -> dict:
     """Run all available API checks and merge results."""
-    print(f"Running PageSpeed Insights (mobile)...", file=sys.stderr)
+    print("Running PageSpeed Insights (mobile)...", file=sys.stderr)
     psi_mobile = run_pagespeed(url, strategy="mobile")
 
-    print(f"Running PageSpeed Insights (desktop)...", file=sys.stderr)
+    print("Running PageSpeed Insights (desktop)...", file=sys.stderr)
     psi_desktop = run_pagespeed(url, strategy="desktop")
 
-    print(f"Running CrUX API...", file=sys.stderr)
+    print("Running CrUX API...", file=sys.stderr)
     crux = run_crux(url)
 
-    print(f"Running Mobile-Friendly Test...", file=sys.stderr)
+    print("Running Mobile-Friendly Test...", file=sys.stderr)
     rich = run_rich_results_test(url)
 
     return {
@@ -339,21 +339,21 @@ def print_psi_summary(result: dict, label: str):
 
     cwv = result.get("cwv", {})
     if cwv:
-        print(f"\n  Core Web Vitals:")
+        print("\n  Core Web Vitals:")
         for metric, data in cwv.items():
             icon = "🟢" if data["score"] >= 90 else "🟡" if data["score"] >= 50 else "🔴"
             print(f"    {icon} {metric}: {data['display']} ({data['score']}/100)")
 
     failures = result.get("failing_audits", [])[:5]
     if failures:
-        print(f"\n  Top Failing Audits:")
+        print("\n  Top Failing Audits:")
         for audit in failures:
             icon = "🔴" if audit["severity"] == "critical" else "🟠"
             print(f"    {icon} {audit['title']} ({audit['score']}/100)")
 
     opps = result.get("opportunities", [])[:3]
     if opps:
-        print(f"\n  Top Opportunities:")
+        print("\n  Top Opportunities:")
         for opp in opps:
             print(f"    💡 {opp['title']} (save {opp['savings_ms']}ms)")
 
@@ -397,7 +397,7 @@ def main():
 
             crux = result["crux"]
             if not crux.get("error"):
-                print(f"\n  📊 CrUX Field Data:")
+                print("\n  📊 CrUX Field Data:")
                 for metric, data in crux.get("metrics", {}).items():
                     print(f"    {metric}: p75 = {data['p75']}")
             else:

package/src/bmad-plus/packs/pack-seo/scripts/seo_fetch.py

@@ -18,7 +18,6 @@ import ipaddress
 import json
 import socket
 import sys
-from typing import Optional
 from urllib.parse import urljoin, urlparse
 
 try:
@@ -290,7 +289,7 @@ def main():
         print(result["content"])
 
     # Metadata to stderr
-    print(f"\n--- Fetch Summary ---", file=sys.stderr)
+    print("\n--- Fetch Summary ---", file=sys.stderr)
     print(f"Final URL: {result['final_url']}", file=sys.stderr)
     print(f"Status: {result['status_code']}", file=sys.stderr)
     print(f"Size: {result['content_length']:,} bytes", file=sys.stderr)

package/src/bmad-plus/packs/pack-seo/scripts/seo_report.py

@@ -136,7 +136,6 @@ def generate_html_report(audit_data: dict) -> str:
     total_score_esc = html.escape(str(total_score))
     categories = audit_data.get("score", {}).get("categories", {})
     issues = audit_data.get("issues", [])
-    pages = audit_data.get("pages", [])
 
     # Generate radar chart
     radar_svg = generate_radar_svg(categories) if categories else ""

package/src/bmad-plus/packs/pack-seo/seo-chief.md

@@ -6,6 +6,18 @@
 
 You are **Chief**, the strategist and reporting agent of the BMAD+ SEO Engine. You aggregate findings from Scout and Judge, compute the SEO Health Score, generate prioritized action plans, and produce publication-ready reports.
 
+## Evidence and reporting
+
+Use evidence available in the session or collected by working tools. Without a
+usable Python environment, use **prompts-only mode** and skip local Python commands.
+Mark missing data `unverified` and omit every score with incomplete inputs,
+including the overall SEO Health Score. Do not substitute zero or reweight the
+remaining categories. For incomplete audits, produce Markdown with explicit
+coverage: pages and checks reviewed, evidence sources, and unverified items.
+Use `scripts/seo_report.py` only when every score value it uses is verified;
+the current exporter has no N/A support. This policy applies to every role and
+overrides numeric placeholders in report templates.
+
 ## Roles
 
 ### Role: Scorer
@@ -73,13 +85,16 @@ You are **Chief**, the strategist and reporting agent of the BMAD+ SEO Engine. Y
 | 0–39 | 🔴 Critical | Fundamental issues blocking performance |
 
 ### Category Score Calculation
-Each category is scored 0–100 based on the checklist pass rate:
+Score a category 0–100 only when its required checklist inputs are verified:
 - ✅ Pass = full points for that item
 - ⚠️ Warning = 50% points (issue exists but not blocking)
 - ❌ Fail = 0 points (blocking issue)
 
 **Final Score** = Σ(category_score × category_weight)
 
+Compute this total only when all weighted categories are verified. Missing
+evidence remains `unverified`; it is never a failed check or a zero score.
+
 ---
 
 ## Issue Priority Classification

package/src/bmad-plus/packs/pack-seo/seo-judge.md

@@ -6,6 +6,18 @@
 
 You are **Judge**, the content and AI analyst of the BMAD+ SEO Engine. You evaluate content quality, validate structured data, and measure AI search readiness. You are the analytical brain of the audit.
 
+## Evidence and reporting
+
+Use evidence available in the session or collected by working tools. Without a
+usable Python environment, use **prompts-only mode** and skip local Python commands.
+Mark missing data `unverified` and omit every score with incomplete inputs,
+including the overall SEO Health Score. Do not substitute zero or reweight the
+remaining categories. For incomplete audits, produce Markdown with explicit
+coverage: pages and checks reviewed, evidence sources, and unverified items.
+Use `scripts/seo_report.py` only when every score value it uses is verified;
+the current exporter has no N/A support. This policy applies to every role and
+overrides numeric placeholders in report templates.
+
 ## Roles
 
 ### Role: Content Expert

package/src/bmad-plus/packs/pack-seo/seo-scout.md

@@ -6,6 +6,18 @@
 
 You are **Scout**, the technical reconnaissance agent of the BMAD+ SEO Engine. You crawl, fetch, inspect, and photograph websites to produce raw technical intelligence for the audit pipeline.
 
+## Evidence and reporting
+
+Use evidence available in the session or collected by working tools. Without a
+usable Python environment, use **prompts-only mode** and skip local Python commands.
+Mark missing data `unverified` and omit every score with incomplete inputs,
+including the overall SEO Health Score. Do not substitute zero or reweight the
+remaining categories. For incomplete audits, produce Markdown with explicit
+coverage: pages and checks reviewed, evidence sources, and unverified items.
+Use `scripts/seo_report.py` only when every score value it uses is verified;
+the current exporter has no N/A support. This policy applies to every role and
+overrides numeric placeholders in report templates.
+
 ## Roles
 
 You operate in 3 switchable roles:

package/src/bmad-plus/skills/bmad-plus-autopilot/SKILL.md

@@ -48,10 +48,10 @@ The autopilot executes the following pipeline:
 
 ### Checkpoint Behavior
 
-Checkpoints are configurable via `module.yaml`:
+Before starting, read `execution_mode` and `checkpoints` from `_bmad/config.yaml`. The checkpoint keys are `discovery` (PRD and UX review), `architecture`, `story` (each completed story), and `delivery`. Apply the configured behavior at each stage:
 
-- **require_approval** (🔴 STOP): Pause execution, send WhatsApp notification, wait for user approval.
-- **notify_only** (🟡 INFO): Send notification, continue unless user intervenes.
+- **require_approval** (🔴 STOP): Present the checkpoint in the session and wait for user approval. If an external notification channel is configured and sending is authorized, also notify through that channel.
+- **notify_only** (🟡 INFO): Report progress in the session and continue. If an external notification channel is configured and sending is authorized, also notify through that channel.
 - **auto** (🟢 AUTO): Continue automatically. Log for audit trail.
 
 ### State Management
@@ -96,4 +96,4 @@ Or via the Orchestrator capabilities menu: `AP`
 - **Test failure**: Auto-retry up to 3 times, then escalate to user
 - **Agent error**: Log error, notify user, skip to next step if non-critical
 - **Conflict in parallel execution**: Pause conflicting agent, resolve, restart
-- **User timeout at checkpoint**: Send reminder after 24h, pause pipeline
+- **User timeout at checkpoint**: Keep the pipeline paused. A reminder requires a configured scheduler and notification channel plus authorization; a bare installation has no background sender.

package/src/bmad-plus/skills/bmad-plus-sync/SKILL.md

@@ -47,8 +47,8 @@ bmad-plus-sync
   ├─ Uses Gemini API for:
   │   └─ AI-powered change classification
   │
-  └─ Notifies via:
-      └─ WhatsApp (Evolution API) or Email
+  └─ Reports in the current session
+      └─ If configured and authorized: WhatsApp (Evolution API) or email
 ```
 
 ## Protected Paths
@@ -66,4 +66,6 @@ Invoke via the Orchestrator (Nexus) or directly:
 bmad-plus-sync
 ```
 
-This skill is also called automatically by the VPS weekly cron job.
+The npm package installs no VPS, cron job or notification sender. An independently
+configured monitor may schedule checks. Use external notifications only when a
+channel is configured and the user has authorized sending; otherwise report inline.

package/src/bmad-plus/skills/dev-studio/SKILL.md

@@ -0,0 +1,19 @@
+---
+name: dev-studio
+description: Open the installed Dev Studio pack for its six personas and 38 product, architecture, documentation and development workflows.
+---
+
+# Dev Studio dispatcher
+
+In an installed project, read the [Dev Studio pack](../pack-dev-studio/SKILL.md)
+and follow its activation procedure. It resolves the requested persona and
+workflow through the shipped catalog. The host executes the instructions;
+`bmad-plus studio prepare` only loads a read-only context bundle.
+
+This dispatcher is installed at `.agents/skills/dev-studio/SKILL.md`. Its sibling
+pack is at `.agents/skills/pack-dev-studio/SKILL.md`. In the BMAD+ source checkout,
+read `src/bmad-plus/packs/pack-dev-studio/SKILL.md` instead; the source and installed
+layouts intentionally differ.
+
+If the pack is absent, report the missing Dev Studio installation. Do not invent
+routes or treat a dispatcher without its resource files as an executable pack.

package/tools/bmad-plus-npx.js

@@ -21,8 +21,10 @@ if (isNpxExecution) {
   }
 
   try {
-    const result = spawnSync('node', [cliPath, ...args], { stdio: 'inherit' });
-    if (result.status !== 0) process.exit(result.status);
+    const result = spawnSync(process.execPath, [cliPath, ...args], { stdio: 'inherit' });
+    if (result.error) console.error(`Error: Could not launch BMAD+: ${result.error.message}`);
+    if (result.error || result.signal || result.status === null) process.exit(1);
+    if (result.status !== 0) process.exit(result.status || 1);
   } catch (error) {
     process.exit(error.status || 1);
   }

package/tools/build/adapters.config.js

@@ -6,7 +6,7 @@
  * hand-written instruction they contained was folded into THIS file — the UNION
  * of all three pre-adoption root files, nothing dropped:
  *
- *   - Agents roster (personas + Hebrew names + pack qualifiers) — from all three
+ * Agent personas now live in registry.yaml; only repository-specific prose is here.
  *   - Skills paths (installed `.agents/` layout AND repo `src/bmad-plus/` layout)
  *   - Project Structure                                      — from GEMINI/AGENTS
  *   - Communication (user name + language policy)            — from CLAUDE
@@ -23,7 +23,7 @@
  *
  * Numbers policy: NO counts are hand-typed here (they drift — see audit DOC-06).
  * All counts live in the generated "Registry facts" section, derived from
- * registry.yaml. That is why the Shield line below carries no agent count.
+ * registry.yaml. Agent personas and their pack membership live there too.
  *
  * Author: Laurent Rochetta
  */
@@ -34,54 +34,7 @@
  * Markdown lines (LF-joined by the generator). Headings are `##` level so the
  * block nests directly under each generated file's H1.
  */
-const PROJECT_INSTRUCTIONS = [
-  '## Agents',
-  '',
-  'To activate an agent, say its name or persona:',
-  '',
-  '- **Atlas** (Strategist) — Business analysis + Product management',
-  '- **Forge** (Architect-Dev) — Architecture + Development + Documentation',
-  '- **Sentinel** (Quality) — QA + UX review',
-  '- **Nexus** (Orchestrator) — Sprint management + Autopilot + Parallel execution',
-  '- **Shadow** (OSINT) — Investigation + Scraping + Psychoprofiling (if OSINT pack installed)',
-  '- **Maker** (Agent Creator) — Design, build, validate, and package new BMAD+ agents',
-  '- **Shield** (GRC) — Compliance agents for GDPR, ISO 27001, SOC 2, HIPAA, EU AI Act, DORA, NIS2 and more (derived counts: see Registry facts below)',
-  '- **Miriam** (מרים) — Business Analyst — Strategic analysis, research, product briefs (Dev Studio)',
-  '- **Huldah** (חולדה) — Technical Writer — Documentation, diagrams, editorial review (Dev Studio)',
-  '- **Yosef** (יוסף) — Product Manager — PRD, requirements, feature prioritization (Dev Studio)',
-  '- **Rachel** (רחל) — UX Designer — User experience, wireframes, empathy mapping (Dev Studio)',
-  '- **Bezalel** (בצלאל) — System Architect — Architecture, ADRs, epics & stories (Dev Studio)',
-  '- **Oholiab** (אהליאב) — Senior Engineer — TDD, sprint, code review, implementation (Dev Studio)',
-  '- **Zecher** (זכר, Memory Guardian) — Memory Archivist — Persistent cross-session memory, consolidation, project scanning, context recall, session handoffs',
-  '',
-  '## Skills',
-  '',
-  '- Installed projects load skills from `.agents/skills/`; in this repository the sources live in `src/bmad-plus/skills/` and `src/bmad-plus/agents/`.',
-  '- Each agent has a SKILL.md with capabilities, activation protocol, and role-switching rules.',
-  '- Auto-activation triggers: `.agents/data/role-triggers.yaml` (source: `src/bmad-plus/data/role-triggers.yaml`).',
-  '',
-  '## Project Structure',
-  '',
-  '- `src/bmad-plus/` — Custom module (agents, skills, data)',
-  '- `monitor/` — Upstream monitoring system (VPS)',
-  '- `mcp-server/` — Audit 360° MCP Server',
-  '- `osint-agent-package/` — OSINT package',
-  '- `upstream/` — BMAD-METHOD reference clone',
-  '',
-  '## Communication',
-  '',
-  '- User name: laurent',
-  '- Default language: Français for user-facing content, English for code and technical docs.',
-  '',
-  '## Commit Rules',
-  '',
-  '- NEVER add "Co-Authored-By: Claude" or any AI co-author attribution.',
-  '- The sole author is Laurent Rochetta.',
-  '',
-  '## Repository Maintenance Rule',
-  '',
-  'When updating the main README.md (English), you MUST synchronously update all translations in the readme-international/ directory (fr, es, de).',
-  '',
+const MEMORY_INSTRUCTIONS = [
   '## Memory Protocol (Karpathy Guardrails)',
   '',
   'Agents MUST follow these behavioral principles:',
@@ -114,4 +67,60 @@ const PROJECT_INSTRUCTIONS = [
   '- `.agents/memory/context.md` — Update at session end with project state',
 ];
 
-module.exports = { PROJECT_INSTRUCTIONS };
+/** Shared once-per-session update instruction for source and installed projects. */
+const UPDATE_INSTRUCTIONS = [
+  '## Framework updates',
+  '',
+  'Once per session, check the installed framework before starting project work. If this is the BMAD+ source checkout, use `node tools/cli/bmad-plus-cli.js update-check --json`; otherwise use `npx --no-install bmad-plus update-check --json` from the project root.',
+  'If the command is unavailable or the result is off, unknown, offline or stale, continue the user task. Do not install a CLI just to perform this check or claim that an offline version is current.',
+  'When `updateAvailable` is true and `canAutoApply` is true, run the same CLI with `update --latest --auto`. This follows the project update policy; it does not grant permission to expand that policy.',
+  'When an update is available but automatic application is not eligible, explain the version and reason. An explicit request to update can be fulfilled with `update --latest --yes`; do not change the policy, overwrite customized files, or resolve conflicts without the user request covering that action.',
+  'After a successful update, reread the project spine and relevant installed skills, or start a fresh session if the client cannot reload them. Respect preserved local instructions. Check only once even when several adapters include this section.',
+];
+
+const PROJECT_INSTRUCTIONS = [
+  '## Skills',
+  '',
+  '- Installed projects load skills from `.agents/skills/`; in this repository the sources live in `src/bmad-plus/skills/` and `src/bmad-plus/agents/`.',
+  '- Each agent has a SKILL.md with capabilities, activation protocol, and role-switching rules.',
+  '- Auto-activation triggers: `.agents/data/role-triggers.yaml` (source: `src/bmad-plus/data/role-triggers.yaml`).',
+  '',
+  '## Project Structure',
+  '',
+  '- `src/bmad-plus/` — Custom module (agents, skills, data)',
+  '- `monitor/` — Upstream monitoring system (VPS)',
+  '- `mcp-server/` — Audit 360° MCP Server',
+  '- `osint-agent-package/` — OSINT package',
+  '- `upstream/` — BMAD-METHOD reference clone',
+  '',
+  '## Communication',
+  '',
+  '- User name: laurent',
+  '- Default language: Français for user-facing content, English for code and technical docs.',
+  '',
+  '## Commit Rules',
+  '',
+  '- NEVER add "Co-Authored-By: Claude" or any AI co-author attribution.',
+  '- The sole author is Laurent Rochetta.',
+  '',
+  '## Repository Maintenance Rule',
+  '',
+  'When updating the main README.md (English), you MUST synchronously update all translations in the readme-international/ directory (fr, es, de).',
+  '',
+  ...MEMORY_INSTRUCTIONS,
+  '',
+  ...UPDATE_INSTRUCTIONS,
+];
+
+/** Tool display/detection metadata; installable tools and paths come from DERIVED. */
+const TOOL_METADATA = {
+  'claude-code': { name: 'Claude Code', detect: ['.claude'] },
+  'gemini-cli': { name: 'Gemini CLI', detect: ['.gemini'] },
+  antigravity: { name: 'Antigravity', detect: ['.gemini/antigravity'] },
+  cursor: { name: 'Cursor', detect: ['.cursor'] },
+  'codex-cli': { name: 'Codex CLI', detect: ['.codex'] },
+  opencode: { name: 'OpenCode', detect: ['.opencode'] },
+  aider: { name: 'Aider', detect: ['.aider.conf.yml'] },
+};
+
+module.exports = { PROJECT_INSTRUCTIONS, MEMORY_INSTRUCTIONS, UPDATE_INSTRUCTIONS, TOOL_METADATA };