bmad-plus 0.16.0 → 0.17.1

package/tools/cli/lib/ide-config.js

@@ -5,6 +5,8 @@
 const adapters = require('../../build/generate-adapters');
 
 module.exports = {
-  get IDE_CONFIGS() { return adapters.IDE_CONFIGS; },
+  get IDE_CONFIGS() {
+    return adapters.IDE_CONFIGS;
+  },
   buildIDEConfigs: adapters.buildIDEConfigs,
 };

package/tools/cli/lib/install-manifest.js

@@ -3,12 +3,19 @@ const fs = require('node:fs');
 
 function readInstallManifest(manifestPath) {
   const manifest = JSON.parse(fs.readFileSync(manifestPath, 'utf8'));
-  if (!manifest || typeof manifest !== 'object' || Array.isArray(manifest) ||
-      typeof manifest.version !== 'string' || !manifest.version.trim() ||
-      typeof manifest.installed !== 'string' || !Number.isFinite(Date.parse(manifest.installed)) ||
-      !Array.isArray(manifest.packs) || manifest.packs.length === 0 ||
-      manifest.packs.some(pack => typeof pack !== 'string' || !/^[a-z0-9-]+$/.test(pack)) ||
-      (manifest.uiLanguage !== undefined && typeof manifest.uiLanguage !== 'string')) {
+  if (
+    !manifest ||
+    typeof manifest !== 'object' ||
+    Array.isArray(manifest) ||
+    typeof manifest.version !== 'string' ||
+    !manifest.version.trim() ||
+    typeof manifest.installed !== 'string' ||
+    !Number.isFinite(Date.parse(manifest.installed)) ||
+    !Array.isArray(manifest.packs) ||
+    manifest.packs.length === 0 ||
+    manifest.packs.some((pack) => typeof pack !== 'string' || !/^[a-z0-9-]+$/.test(pack)) ||
+    (manifest.uiLanguage !== undefined && typeof manifest.uiLanguage !== 'string')
+  ) {
     throw new Error('Expected version, installed date, and a nonempty array of pack IDs.');
   }
   return manifest;

package/tools/cli/lib/installation-health.js

@@ -4,7 +4,13 @@ const path = require('node:path');
 const semver = require('semver');
 const { DERIVED } = require('./packs');
 const { readInstallManifest } = require('./install-manifest');
-const { inventoryOf, collectManagedFiles, MANIFEST } = require('./update-transaction');
+const {
+  inventoryOf,
+  collectManagedFiles,
+  inspectProjectLock,
+  MANIFEST,
+  LOCK,
+} = require('./update-transaction');
 const { fileHash } = require('./pack-copy');
 const { contentHash } = require('./installed-adapters');
 const {
@@ -86,6 +92,32 @@ function collectInstallationHealth({
   }
   report.versions.installed = manifest.version;
   check('manifest.valid', 'pass', 'Manifest found: v' + manifest.version);
+  let lock = null;
+  try {
+    lock = inspectProjectLock(projectDir);
+  } catch (error) {
+    check('lock.unreadable', 'warning', 'Project lock cannot be inspected: ' + error.message, {
+      path: LOCK,
+    });
+  }
+  if (lock) {
+    check(
+      lock.stale ? 'lock.stale' : 'lock.active',
+      lock.stale ? 'error' : 'warning',
+      lock.stale
+        ? 'Stale project lock blocks install and update: ' +
+            lock.reason +
+            ' If no BMAD+ install or update is running, delete ' +
+            LOCK +
+            ' and retry.'
+        : 'An install or update holds the project lock (pid ' +
+            (lock.pid ?? 'unknown') +
+            ', since ' +
+            lock.createdAt +
+            ').',
+      { path: LOCK }
+    );
+  }
   check(
     'version.cli',
     manifest.version === cliVersion ? 'pass' : 'warning',

package/tools/cli/lib/installed-adapters.js

@@ -6,7 +6,8 @@ const clack = require('@clack/prompts');
 const { GENERATED_MARKER, USER_CONFIG_MARKER } = require('../../build/generate-adapters');
 
 const INSTALLER_MARKER = 'BMAD+ \u2014 AI Agent Configuration';
-const contentHash = content => crypto.createHash('sha256').update(String(content).replace(/\r\n/g, '\n')).digest('hex');
+const contentHash = (content) =>
+  crypto.createHash('sha256').update(String(content).replace(/\r\n/g, '\n')).digest('hex');
 
 function classifyAdapter({ existing, content, previousHash, update = false, yes = false }) {
   if (existing === undefined) return { action: 'write', backup: false };
@@ -16,7 +17,13 @@ function classifyAdapter({ existing, content, previousHash, update = false, yes
   if (installed && existing === content) return { action: 'same', backup: false };
   const unchanged = installed && previousHash === contentHash(existing);
   if (adopted || (installed && !unchanged) || (!installed && !legacy && (update || !yes))) {
-    return { action: 'preserve', backup: false, adopted, installed, reason: adopted ? 'repository-adopted' : 'local-instructions' };
+    return {
+      action: 'preserve',
+      backup: false,
+      adopted,
+      installed,
+      reason: adopted ? 'repository-adopted' : 'local-instructions',
+    };
   }
   return { action: 'write', backup: legacy || (!installed && yes), legacy };
 }
@@ -26,14 +33,20 @@ function safeAdapterPath(projectDir, file) {
   const root = path.resolve(projectDir);
   const target = path.resolve(root, file);
   const relative = path.relative(root, target);
-  if (!relative || relative === '..' || relative.startsWith('..' + path.sep) || path.isAbsolute(relative)) {
+  if (
+    !relative ||
+    relative === '..' ||
+    relative.startsWith('..' + path.sep) ||
+    path.isAbsolute(relative)
+  ) {
     throw new Error('Adapter path outside project: ' + file);
   }
   let current = root;
   for (const part of relative.split(path.sep)) {
     current = path.join(current, part);
     try {
-      if (fs.lstatSync(current).isSymbolicLink()) throw new Error('Adapter path is a symbolic link or junction: ' + current);
+      if (fs.lstatSync(current).isSymbolicLink())
+        throw new Error('Adapter path is a symbolic link or junction: ' + current);
     } catch (err) {
       if (err.code !== 'ENOENT') throw err;
     }
@@ -73,7 +86,11 @@ function writeIDEConfigs({ projectDir, files, yes = false, update = false, adapt
       let suffix = '.bak';
       let index = 1;
       while (fs.existsSync(safeAdapterPath(projectDir, file + suffix))) suffix = `.bak.${index++}`;
-      fs.copyFileSync(target, safeAdapterPath(projectDir, file + suffix), fs.constants.COPYFILE_EXCL);
+      fs.copyFileSync(
+        target,
+        safeAdapterPath(projectDir, file + suffix),
+        fs.constants.COPYFILE_EXCL
+      );
       outcome.backedUp.push(file);
       clack.log.warn(`${file}: backed up to ${file + suffix} before refreshing.`);
     }
@@ -86,4 +103,10 @@ function writeIDEConfigs({ projectDir, files, yes = false, update = false, adapt
   return outcome;
 }
 
-module.exports = { INSTALLER_MARKER, contentHash, safeAdapterPath, writeIDEConfigs, classifyAdapter };
+module.exports = {
+  INSTALLER_MARKER,
+  contentHash,
+  safeAdapterPath,
+  writeIDEConfigs,
+  classifyAdapter,
+};

package/tools/cli/lib/memory-init.js

@@ -45,7 +45,9 @@ function resolveBrain(projectDir, homeDir = os.homedir()) {
   const envBrain = process.env.BMAD_PLUS_BRAIN;
   if (envBrain) {
     if (isBrainCandidateDir(envBrain)) return { dir: envBrain, type: 'portfolio' };
-    clack.log.warn(`BMAD_PLUS_BRAIN is set but is not a directory: ${envBrain} — falling back to auto-detection`);
+    clack.log.warn(
+      `BMAD_PLUS_BRAIN is set but is not a directory: ${envBrain} — falling back to auto-detection`
+    );
   }
 
   let dir = path.resolve(projectDir);
@@ -129,7 +131,14 @@ function ensureGlobalBrain(brainRoot, templateDir, userName, commLang) {
  * @param {string} [opts.homeDir]      - Home directory (injectable for tests; defaults to os.homedir())
  * @returns {void}
  */
-function initMemory({ projectDir, bmadSrc, userName, commLang, selectedPacks, homeDir = os.homedir() }) {
+function initMemory({
+  projectDir,
+  bmadSrc,
+  userName,
+  commLang,
+  selectedPacks,
+  homeDir = os.homedir(),
+}) {
   const memoryDir = path.join(projectDir, '.agents', 'memory');
   const sessionsDir = path.join(memoryDir, 'sessions');
   const globalBrainRoot = path.join(homeDir, '.bmad-plus', 'brain');
@@ -170,7 +179,11 @@ function initMemory({ projectDir, bmadSrc, userName, commLang, selectedPacks, ho
   fs.writeFileSync(
     path.join(memoryDir, '.brain-link'),
     JSON.stringify(
-      { linked_brain: linkedBrain.dir, brain_type: linkedBrain.type, linked_at: new Date().toISOString() },
+      {
+        linked_brain: linkedBrain.dir,
+        brain_type: linkedBrain.type,
+        linked_at: new Date().toISOString(),
+      },
       null,
       2
     ),
@@ -195,7 +208,9 @@ function initMemory({ projectDir, bmadSrc, userName, commLang, selectedPacks, ho
     };
     fs.writeFileSync(
       path.join(globalBrainRoot, 'projects', `${projHash}.yaml`),
-      Object.entries(projMeta).map(([k, v]) => `${k}: ${JSON.stringify(v)}`).join('\n'),
+      Object.entries(projMeta)
+        .map(([k, v]) => `${k}: ${JSON.stringify(v)}`)
+        .join('\n'),
       'utf8'
     );
   }

package/tools/cli/lib/packs.js

@@ -25,8 +25,6 @@ const PACKS = {
     "data": [
       "role-triggers.yaml"
     ],
-    "packDir": "pack-core",
-    "packSrcDir": "packs",
     "required": true,
     "desc": "Core agents & skills"
   },
@@ -38,8 +36,6 @@ const PACKS = {
     ],
     "skills": [],
     "externalPackage": "osint-agent-package",
-    "packDir": "pack-osint",
-    "packSrcDir": "packs",
     "desc": "OSINT & investigation"
   },
   "maker": {
@@ -50,16 +46,12 @@ const PACKS = {
     ],
     "skills": [],
     "data": [],
-    "packDir": "pack-maker",
-    "packSrcDir": "packs",
     "desc": "Agent creation toolkit"
   },
   "shield": {
     "name": "Shield",
     "icon": "m",
-    "agents": [
-      "shield-orchestrator"
-    ],
+    "agents": [],
     "skills": [],
     "packDir": "pack-shield",
     "packSrcDir": "packs",
@@ -68,11 +60,7 @@ const PACKS = {
   "seo": {
     "name": "SEO",
     "icon": "k",
-    "agents": [
-      "seo-scout",
-      "seo-chief",
-      "seo-judge"
-    ],
+    "agents": [],
     "skills": [],
     "packDir": "pack-seo",
     "packSrcDir": "packs",
@@ -81,9 +69,7 @@ const PACKS = {
   "memory": {
     "name": "Memory",
     "icon": "x",
-    "agents": [
-      "zecher"
-    ],
+    "agents": [],
     "skills": [],
     "packDir": "pack-memory",
     "packSrcDir": "packs",
@@ -92,9 +78,7 @@ const PACKS = {
   "dev-studio": {
     "name": "Dev Studio",
     "icon": "v",
-    "agents": [
-      "dev-studio-orchestrator"
-    ],
+    "agents": [],
     "skills": [
       "dev-studio"
     ],
@@ -105,9 +89,7 @@ const PACKS = {
   "backup": {
     "name": "Backup",
     "icon": "y",
-    "agents": [
-      "backup-agent"
-    ],
+    "agents": [],
     "skills": [],
     "packDir": "pack-backup",
     "packSrcDir": "packs",
@@ -116,9 +98,7 @@ const PACKS = {
   "animated": {
     "name": "Animated",
     "icon": "z",
-    "agents": [
-      "animated-website-agent"
-    ],
+    "agents": [],
     "skills": [],
     "packDir": "pack-animated",
     "packSrcDir": "packs",
@@ -211,7 +191,7 @@ const DERIVED = {
   "product": {
     "code": "bmad-plus",
     "displayName": "BMAD+",
-    "version": "0.16.0",
+    "version": "0.17.1",
     "derivedFrom": "BMAD-METHOD v6.6.0"
   },
   "packOrder": [
@@ -246,6 +226,7 @@ const DERIVED = {
       "order": 0,
       "name": "Core",
       "displayName": "Core Development",
+      "iconEmoji": "⚙️",
       "required": true,
       "installerAgentCount": 4,
       "categoryAgentCount": 0,
@@ -306,6 +287,7 @@ const DERIVED = {
       "order": 1,
       "name": "OSINT",
       "displayName": "OSINT Intelligence",
+      "iconEmoji": "🔍",
       "required": false,
       "installerAgentCount": 1,
       "categoryAgentCount": 0,
@@ -328,7 +310,7 @@ const DERIVED = {
           "id": "agent-shadow",
           "name": "Shadow",
           "role": "OSINT",
-          "description": "Investigation + Scraping + Psychoprofiling"
+          "description": "Investigation + Public-source research (governed, legal basis required)"
         }
       ],
       "summary": "Investigation & scraping (55+ Apify actors, 7 APIs).",
@@ -340,6 +322,7 @@ const DERIVED = {
       "order": 2,
       "name": "Maker",
       "displayName": "Agent Creator",
+      "iconEmoji": "🧬",
       "required": false,
       "installerAgentCount": 1,
       "categoryAgentCount": 0,
@@ -374,6 +357,7 @@ const DERIVED = {
       "order": 3,
       "name": "Shield",
       "displayName": "Shield — GRC Compliance",
+      "iconEmoji": "🛡️",
       "required": false,
       "installerAgentCount": 1,
       "categoryAgentCount": 27,
@@ -416,6 +400,7 @@ const DERIVED = {
       "order": 4,
       "name": "SEO",
       "displayName": "SEO Audit 360",
+      "iconEmoji": "🔍",
       "required": false,
       "installerAgentCount": 3,
       "categoryAgentCount": 0,
@@ -467,6 +452,7 @@ const DERIVED = {
       "order": 5,
       "name": "Memory",
       "displayName": "Memory — Persistent Brain",
+      "iconEmoji": "🧠",
       "required": false,
       "installerAgentCount": 1,
       "categoryAgentCount": 0,
@@ -503,6 +489,7 @@ const DERIVED = {
       "order": 6,
       "name": "Dev Studio",
       "displayName": "Dev Studio — Full SDLC",
+      "iconEmoji": "🏗️",
       "required": false,
       "installerAgentCount": 1,
       "categoryAgentCount": 0,
@@ -585,6 +572,7 @@ const DERIVED = {
       "order": 7,
       "name": "Backup",
       "displayName": "Universal Backup",
+      "iconEmoji": "🗂️",
       "required": false,
       "installerAgentCount": 1,
       "categoryAgentCount": 0,
@@ -619,6 +607,7 @@ const DERIVED = {
       "order": 8,
       "name": "Animated",
       "displayName": "Animated Website",
+      "iconEmoji": "🎬",
       "required": false,
       "installerAgentCount": 1,
       "categoryAgentCount": 0,

package/tools/cli/lib/path-hash.js

@@ -33,7 +33,11 @@ function normalizePathForHash(p) {
  * @returns {string} 8-character hex hash
  */
 function projectHash(projectDir) {
-  return crypto.createHash('sha256').update(normalizePathForHash(projectDir)).digest('hex').slice(0, 8);
+  return crypto
+    .createHash('sha256')
+    .update(normalizePathForHash(projectDir))
+    .digest('hex')
+    .slice(0, 8);
 }
 
 module.exports = { normalizePathForHash, projectHash };

package/tools/cli/lib/python-provision.js

@@ -156,7 +156,13 @@ function venvPython(envDir, platform = process.platform) {
  * @returns {{ create: Array<{cmd:string,args:string[],label:string}>,
  *             install: Array<{cmd:string,args:string[],label:string}> }}
  */
-function buildEnvCommands({ tool, python, envDir, requirementsPath = null, platform = process.platform }) {
+function buildEnvCommands({
+  tool,
+  python,
+  envDir,
+  requirementsPath = null,
+  platform = process.platform,
+}) {
   const envPy = venvPython(envDir, platform);
   const create = [];
   const install = [];
@@ -223,13 +229,21 @@ function missingPythonGuidance(platform = process.platform) {
   const min = `${MIN_PYTHON.major}.${MIN_PYTHON.minor}`;
   const lines = [`Python >= ${min} was not found on PATH.`];
   if (platform === 'win32') {
-    lines.push(`Install it with: winget install Python.Python.3.12  (or from https://www.python.org/downloads/)`);
+    lines.push(
+      `Install it with: winget install Python.Python.3.12  (or from https://www.python.org/downloads/)`
+    );
   } else if (platform === 'darwin') {
-    lines.push(`Install it with: brew install python@3.12  (or from https://www.python.org/downloads/)`);
+    lines.push(
+      `Install it with: brew install python@3.12  (or from https://www.python.org/downloads/)`
+    );
   } else {
-    lines.push(`Install it with your package manager (e.g. apt install python3.12) or from https://www.python.org/downloads/`);
+    lines.push(
+      `Install it with your package manager (e.g. apt install python3.12) or from https://www.python.org/downloads/`
+    );
   }
-  lines.push(`Alternatively install uv (https://docs.astral.sh/uv/) — BMAD+ will use it to fetch Python ${min} automatically.`);
+  lines.push(
+    `Alternatively install uv (https://docs.astral.sh/uv/) — BMAD+ will use it to fetch Python ${min} automatically.`
+  );
   return lines;
 }
 
@@ -248,7 +262,11 @@ function missingPythonGuidance(platform = process.platform) {
  * @returns {{ ok: boolean, tool: 'python'|null, command: {cmd:string,baseArgs:string[]}|null,
  *             version: object|null, messages: string[] }}
  */
-function detectPython({ runner = defaultRunner, platform = process.platform, minVersion = MIN_PYTHON } = {}) {
+function detectPython({
+  runner = defaultRunner,
+  platform = process.platform,
+  minVersion = MIN_PYTHON,
+} = {}) {
   const messages = [];
   let tooOld = null;
 
@@ -259,7 +277,9 @@ function detectPython({ runner = defaultRunner, platform = process.platform, min
     const version = parsePythonVersion(`${res.stdout}\n${res.stderr}`);
     if (!version) continue;
     if (meetsMinVersion(version, minVersion)) {
-      messages.push(`Found ${version.raw} via \`${[candidate.cmd, ...candidate.baseArgs].join(' ')}\`.`);
+      messages.push(
+        `Found ${version.raw} via \`${[candidate.cmd, ...candidate.baseArgs].join(' ')}\`.`
+      );
       return { ok: true, tool: 'python', command: candidate, version, messages };
     }
     tooOld = { candidate, version };
@@ -370,14 +390,22 @@ function verifyImports({ envDir, modules, runner = defaultRunner, platform = pro
  * Verify that the pack's entry script runs inside the env (default: --help).
  * @returns {{ ok: boolean, messages: string[] }}
  */
-function verifyEntry({ envDir, entryPath, entryArgs = ['--help'], runner = defaultRunner, platform = process.platform }) {
+function verifyEntry({
+  envDir,
+  entryPath,
+  entryArgs = ['--help'],
+  runner = defaultRunner,
+  platform = process.platform,
+}) {
   if (!entryPath) return { ok: true, messages: [] };
   const envPy = venvPython(envDir, platform);
   const res = runner(envPy, [entryPath, ...entryArgs]);
   if (!ranOk(res)) {
     return {
       ok: false,
-      messages: [`Entry check failed (${path.basename(entryPath)} ${entryArgs.join(' ')}): ${firstErrorLine(res)}`],
+      messages: [
+        `Entry check failed (${path.basename(entryPath)} ${entryArgs.join(' ')}): ${firstErrorLine(res)}`,
+      ],
     };
   }
   return { ok: true, messages: [`Verified entry: ${path.basename(entryPath)} runs.`] };
@@ -418,7 +446,13 @@ function provisionPack({
   const messages = [];
 
   if (!envDir) {
-    return { ok: false, tool: null, envDir: null, python: null, messages: ['provisionPack: envDir is required.'] };
+    return {
+      ok: false,
+      tool: null,
+      envDir: null,
+      python: null,
+      messages: ['provisionPack: envDir is required.'],
+    };
   }
 
   // 1) provisioner first — uv can operate without a system Python.
@@ -432,7 +466,9 @@ function provisionPack({
     return { ok: false, tool: prov.tool, envDir, python: null, messages };
   }
   if (!py.ok && prov.tool === 'uv') {
-    messages.push(`No system Python >= ${minVersion.major}.${minVersion.minor} — uv will download a managed interpreter.`);
+    messages.push(
+      `No system Python >= ${minVersion.major}.${minVersion.minor} — uv will download a managed interpreter.`
+    );
   }
 
   // 3) create isolated env
@@ -482,7 +518,10 @@ function provisionPack({
 function firstErrorLine(res) {
   if (!res) return 'no result';
   if (res.error) return res.error;
-  const text = `${res.stderr}\n${res.stdout}`.split(/\r?\n/).map((l) => l.trim()).filter(Boolean);
+  const text = `${res.stderr}\n${res.stdout}`
+    .split(/\r?\n/)
+    .map((l) => l.trim())
+    .filter(Boolean);
   return text.length > 0 ? text[text.length - 1] : `exit code ${res.status}`;
 }
 

package/tools/cli/lib/stack-detect.js

@@ -10,24 +10,28 @@ const fs = require('node:fs');
 // ── Project Detection Markers (for scan.js) ──
 
 const PROJECT_MARKERS = [
-  { file: 'package.json', stack: 'Node.js', detect: (dir) => {
-    try {
-      const pkg = JSON.parse(fs.readFileSync(path.join(dir, 'package.json'), 'utf8'));
-      const deps = { ...pkg.dependencies, ...pkg.devDependencies };
-      if (deps['next']) return 'Next.js';
-      if (deps['nuxt']) return 'Nuxt';
-      if (deps['react']) return 'React';
-      if (deps['vue']) return 'Vue.js';
-      if (deps['svelte']) return 'Svelte';
-      if (deps['express']) return 'Express';
-      if (deps['fastify']) return 'Fastify';
-      if (deps['electron']) return 'Electron';
-      if (deps['tauri']) return 'Tauri';
-      return 'Node.js';
-    } catch {
-      return 'Node.js';
-    }
-  }},
+  {
+    file: 'package.json',
+    stack: 'Node.js',
+    detect: (dir) => {
+      try {
+        const pkg = JSON.parse(fs.readFileSync(path.join(dir, 'package.json'), 'utf8'));
+        const deps = { ...pkg.dependencies, ...pkg.devDependencies };
+        if (deps['next']) return 'Next.js';
+        if (deps['nuxt']) return 'Nuxt';
+        if (deps['react']) return 'React';
+        if (deps['vue']) return 'Vue.js';
+        if (deps['svelte']) return 'Svelte';
+        if (deps['express']) return 'Express';
+        if (deps['fastify']) return 'Fastify';
+        if (deps['electron']) return 'Electron';
+        if (deps['tauri']) return 'Tauri';
+        return 'Node.js';
+      } catch {
+        return 'Node.js';
+      }
+    },
+  },
   { file: 'Cargo.toml', stack: 'Rust' },
   { file: 'pyproject.toml', stack: 'Python' },
   { file: 'requirements.txt', stack: 'Python' },
@@ -56,7 +60,10 @@ function detectStack(dir) {
       const pkg = JSON.parse(fs.readFileSync(pkgPath, 'utf8'));
       const deps = { ...pkg.dependencies, ...pkg.devDependencies };
       result.runtime = 'Node.js';
-      result.language = deps['typescript'] || fs.existsSync(path.join(dir, 'tsconfig.json')) ? 'TypeScript' : 'JavaScript';
+      result.language =
+        deps['typescript'] || fs.existsSync(path.join(dir, 'tsconfig.json'))
+          ? 'TypeScript'
+          : 'JavaScript';
       result.hasTypeScript = result.language === 'TypeScript';
 
       // Framework detection
@@ -85,12 +92,31 @@ function detectStack(dir) {
 
   // Other languages
   if (!result.runtime) {
-    if (fs.existsSync(path.join(dir, 'Cargo.toml'))) { result.language = 'Rust'; result.runtime = 'Rust'; }
-    else if (fs.existsSync(path.join(dir, 'pyproject.toml')) || fs.existsSync(path.join(dir, 'requirements.txt'))) { result.language = 'Python'; result.runtime = 'Python'; }
-    else if (fs.existsSync(path.join(dir, 'go.mod'))) { result.language = 'Go'; result.runtime = 'Go'; }
-    else if (fs.existsSync(path.join(dir, 'composer.json'))) { result.language = 'PHP'; result.runtime = 'PHP'; }
-    else if (fs.existsSync(path.join(dir, 'Gemfile'))) { result.language = 'Ruby'; result.runtime = 'Ruby'; }
-    else if (fs.existsSync(path.join(dir, 'pom.xml')) || fs.existsSync(path.join(dir, 'build.gradle'))) { result.language = 'Java'; result.runtime = 'JVM'; }
+    if (fs.existsSync(path.join(dir, 'Cargo.toml'))) {
+      result.language = 'Rust';
+      result.runtime = 'Rust';
+    } else if (
+      fs.existsSync(path.join(dir, 'pyproject.toml')) ||
+      fs.existsSync(path.join(dir, 'requirements.txt'))
+    ) {
+      result.language = 'Python';
+      result.runtime = 'Python';
+    } else if (fs.existsSync(path.join(dir, 'go.mod'))) {
+      result.language = 'Go';
+      result.runtime = 'Go';
+    } else if (fs.existsSync(path.join(dir, 'composer.json'))) {
+      result.language = 'PHP';
+      result.runtime = 'PHP';
+    } else if (fs.existsSync(path.join(dir, 'Gemfile'))) {
+      result.language = 'Ruby';
+      result.runtime = 'Ruby';
+    } else if (
+      fs.existsSync(path.join(dir, 'pom.xml')) ||
+      fs.existsSync(path.join(dir, 'build.gradle'))
+    ) {
+      result.language = 'Java';
+      result.runtime = 'JVM';
+    }
   }
 
   return result;

package/tools/cli/lib/uat.js

@@ -247,6 +247,15 @@ function validateSpec(spec, options = {}) {
         `${at}: writes: true requires verify {kind: ${VERIFY_KINDS.join('|')}, text} — the read-only check run after the tester`
       );
     }
+    for (const [line, text] of (step.do || []).entries()) {
+      // A tester copies "doctor." from "Run <code>…doctor</code>." into the terminal —
+      // it happened on the first human run of BMAD+'s own recipe.
+      if (/<\/code>\s*[.,;:!?](?:\s|$)/.test(String(text))) {
+        warnings.push(
+          `${at}: "do" line ${line + 1} puts punctuation right after a command — testers copy it into the terminal`
+        );
+      }
+    }
     const letters = new Set();
     for (const expect of step.expect || []) {
       for (const key of unknownKeys(expect, EXPECT_KEYS))
@@ -706,6 +715,13 @@ function gate({ spec, runs, triage }) {
       );
     } else if (entry.decision === 'accept-risk' && !String(entry.decidedBy || '').trim()) {
       reasons.push(`${failure.step}/${failure.expect}: accept-risk requires decidedBy`);
+    } else if (failure.state === 'blocked' && entry.decision !== 'accept-risk') {
+      // A blocked expectation was never observed. Classifying why does not establish
+      // anything about the product: replay it, or have someone accept the risk by name.
+      // (First run of BMAD+'s own recipe: 17 of 21 blocked would otherwise have passed.)
+      reasons.push(
+        `${failure.step}/${failure.expect} was blocked: nothing was observed — replay it, or record accept-risk with decidedBy`
+      );
     }
   }
   // A tick on a step that writes is not a write: the read-only proof settles it.
@@ -815,6 +831,8 @@ for (const [stepId, step] of Object.entries(run.steps || {})) {
     if (!entry) problems.push(stepId + '/' + letter + ' ' + expect.state + ', not triaged');
     else if (!entry.class || entry.class === 'undecided' || !entry.decision) {
       problems.push(stepId + '/' + letter + ' triaged without a class and a decision');
+    } else if (expect.state === 'blocked' && (entry.decision !== 'accept-risk' || !entry.decidedBy)) {
+      problems.push(stepId + '/' + letter + ' was blocked and never observed; replay it or accept the risk by name');
     }
   }
 }