bmad-plus 0.16.0 → 0.17.1

package/tools/cli/lib/update-check.js

@@ -3,20 +3,37 @@ const fs = require('node:fs');
 const semver = require('semver');
 const { safeAdapterPath } = require('./installed-adapters');
 const { readInstallManifest } = require('./install-manifest');
-const { readUpdatePolicy, validatePolicy, authorizeTarget, isExactVersion, writeProjectJson } = require('./update-policy');
+const {
+  readUpdatePolicy,
+  validatePolicy,
+  authorizeTarget,
+  isExactVersion,
+  writeProjectJson,
+} = require('./update-policy');
 
 const CACHE_FILE = '.bmad/update-check.json';
 const CACHE_TTL_MS = 24 * 60 * 60 * 1000;
 const FAILURE_BACKOFF_MS = 60 * 60 * 1000;
 
 function validateRelease(value) {
-  if (!value || typeof value !== 'object' || Array.isArray(value) || !isExactVersion(value.version)) {
+  if (
+    !value ||
+    typeof value !== 'object' ||
+    Array.isArray(value) ||
+    !isExactVersion(value.version)
+  ) {
     throw new Error('Registry returned an invalid exact version.');
   }
   const engines = value.engines === undefined ? {} : value.engines;
-  if (!engines || typeof engines !== 'object' || Array.isArray(engines) ||
-      (engines.node !== undefined && (typeof engines.node !== 'string' ||
-        !engines.node.trim() || !semver.validRange(engines.node)))) {
+  if (
+    !engines ||
+    typeof engines !== 'object' ||
+    Array.isArray(engines) ||
+    (engines.node !== undefined &&
+      (typeof engines.node !== 'string' ||
+        !engines.node.trim() ||
+        !semver.validRange(engines.node)))
+  ) {
     throw new Error('Registry returned an invalid Node engine requirement.');
   }
   return { version: value.version, engines: engines.node ? { node: engines.node } : {} };
@@ -25,10 +42,20 @@ function validateRelease(value) {
 async function queryNpmRelease({ projectDir, channel, registry }) {
   validatePolicy({ channel, registry });
   const { runNpm } = require('./npm-runner');
-  const stdout = await runNpm([
-    'view', `bmad-plus@${channel}`, 'version', 'engines', '--json', `--registry=${registry}`,
-    '--prefer-online', '--fetch-timeout=4000', '--fetch-retries=0',
-  ], { cwd: projectDir, timeout: 6000, maxBuffer: 64 * 1024 });
+  const stdout = await runNpm(
+    [
+      'view',
+      `bmad-plus@${channel}`,
+      'version',
+      'engines',
+      '--json',
+      `--registry=${registry}`,
+      '--prefer-online',
+      '--fetch-timeout=4000',
+      '--fetch-retries=0',
+    ],
+    { cwd: projectDir, timeout: 6000, maxBuffer: 64 * 1024 }
+  );
   return validateRelease(JSON.parse(stdout));
 }
 
@@ -40,45 +67,88 @@ function timestamp(value, now) {
 function readCache(projectDir, policy, now) {
   try {
     const cache = JSON.parse(fs.readFileSync(safeAdapterPath(projectDir, CACHE_FILE), 'utf8'));
-    if (!cache || cache.schemaVersion !== 1 || cache.package !== 'bmad-plus' ||
-        cache.registry !== policy.registry || cache.channel !== policy.channel) return null;
+    if (
+      !cache ||
+      cache.schemaVersion !== 1 ||
+      cache.package !== 'bmad-plus' ||
+      cache.registry !== policy.registry ||
+      cache.channel !== policy.channel
+    )
+      return null;
     if (cache.release) {
       cache.release = validateRelease(cache.release);
       if (timestamp(cache.checkedAt, now) === null) return null;
     }
     if (cache.failedAt !== undefined && timestamp(cache.failedAt, now) === null) return null;
     return cache;
-  } catch { return null; }
+  } catch {
+    return null;
+  }
 }
 
 function saveCache(projectDir, cache) {
-  try { writeProjectJson(projectDir, CACHE_FILE, cache); } catch { /* A read-only cache is nonfatal. */ }
+  try {
+    writeProjectJson(projectDir, CACHE_FILE, cache);
+  } catch {
+    /* A read-only cache is nonfatal. */
+  }
 }
 
 async function checkForUpdate({
-  projectDir, runningVersion = require('../../../package.json').version, refresh = false, offline = false,
-  now = Date.now, queryRelease = queryNpmRelease, checkReadiness, nodeVersion = process.version,
+  projectDir,
+  runningVersion = require('../../../package.json').version,
+  refresh = false,
+  offline = false,
+  now = Date.now,
+  queryRelease = queryNpmRelease,
+  checkReadiness,
+  nodeVersion = process.version,
 }) {
   const time = typeof now === 'function' ? now() : now;
   const result = {
-    schemaVersion: 1, installedVersion: null, runningVersion, latestVersion: null,
-    targetVersion: null, channel: null, status: 'unknown', checkedAt: null,
-    source: 'none', stale: false, updateAvailable: null, releaseEligible: false,
-    versionEligible: false, canAutoApply: false, engineCompatible: null, engines: {}, reason: null,
+    schemaVersion: 1,
+    installedVersion: null,
+    runningVersion,
+    latestVersion: null,
+    targetVersion: null,
+    channel: null,
+    status: 'unknown',
+    checkedAt: null,
+    source: 'none',
+    stale: false,
+    updateAvailable: null,
+    releaseEligible: false,
+    versionEligible: false,
+    canAutoApply: false,
+    engineCompatible: null,
+    engines: {},
+    reason: null,
   };
-  if (!isExactVersion(runningVersion) || !Number.isFinite(time) ||
-      !Number.isFinite(new Date(time).getTime()) || !semver.valid(nodeVersion)) {
+  if (
+    !isExactVersion(runningVersion) ||
+    !Number.isFinite(time) ||
+    !Number.isFinite(new Date(time).getTime()) ||
+    !semver.valid(nodeVersion)
+  ) {
     return { ...result, status: 'invalid-runtime', reason: 'invalid-running-version-or-clock' };
   }
   try {
-    const manifest = readInstallManifest(safeAdapterPath(projectDir, '_bmad/.bmad-plus-install.json'));
+    const manifest = readInstallManifest(
+      safeAdapterPath(projectDir, '_bmad/.bmad-plus-install.json')
+    );
     if (!isExactVersion(manifest.version)) throw new Error('Invalid installed version');
     result.installedVersion = manifest.version;
   } catch {
-    return { ...result, status: 'invalid-installation', reason: 'missing-or-invalid-installation-manifest' };
+    return {
+      ...result,
+      status: 'invalid-installation',
+      reason: 'missing-or-invalid-installation-manifest',
+    };
   }
   let policy;
-  try { policy = readUpdatePolicy(projectDir); } catch {
+  try {
+    policy = readUpdatePolicy(projectDir);
+  } catch {
     return { ...result, status: 'invalid-policy', reason: 'unreadable-or-invalid-update-policy' };
   }
   result.channel = policy.channel;
@@ -98,16 +168,30 @@ async function checkForUpdate({
     result.checkedAt = cache.checkedAt;
   } else {
     try {
-      release = validateRelease(await queryRelease({ projectDir, channel: policy.channel, registry: policy.registry }));
-      cache = { schemaVersion: 1, package: 'bmad-plus', registry: policy.registry, channel: policy.channel,
-        release, checkedAt: new Date(time).toISOString() };
+      release = validateRelease(
+        await queryRelease({ projectDir, channel: policy.channel, registry: policy.registry })
+      );
+      cache = {
+        schemaVersion: 1,
+        package: 'bmad-plus',
+        registry: policy.registry,
+        channel: policy.channel,
+        release,
+        checkedAt: new Date(time).toISOString(),
+      };
       saveCache(projectDir, cache);
       result.source = 'registry';
       result.checkedAt = cache.checkedAt;
     } catch {
       result.reason = 'registry-unavailable';
-      saveCache(projectDir, { ...cache, schemaVersion: 1, package: 'bmad-plus',
-        registry: policy.registry, channel: policy.channel, failedAt: new Date(time).toISOString() });
+      saveCache(projectDir, {
+        ...cache,
+        schemaVersion: 1,
+        package: 'bmad-plus',
+        registry: policy.registry,
+        channel: policy.channel,
+        failedAt: new Date(time).toISOString(),
+      });
     }
   }
   if (!release) {
@@ -125,11 +209,17 @@ async function checkForUpdate({
   result.targetVersion = release.version;
   result.latestVersion = policy.channel === 'latest' ? release.version : null;
   result.engines = release.engines;
-  result.engineCompatible = !release.engines.node || semver.satisfies(nodeVersion, release.engines.node);
+  result.engineCompatible =
+    !release.engines.node || semver.satisfies(nodeVersion, release.engines.node);
   const comparison = semver.compare(release.version, result.installedVersion);
   result.updateAvailable = comparison > 0;
   result.status = comparison > 0 ? 'update-available' : comparison === 0 ? 'current' : 'ahead';
-  result.reason = comparison > 0 ? null : comparison === 0 ? 'installed-matches-channel' : 'installed-ahead-of-channel';
+  result.reason =
+    comparison > 0
+      ? null
+      : comparison === 0
+        ? 'installed-matches-channel'
+        : 'installed-ahead-of-channel';
   if (comparison <= 0) return result;
   if (!result.engineCompatible) return { ...result, reason: 'incompatible-node-version' };
   if (!policy.allowPrerelease && semver.prerelease(release.version)) {
@@ -142,10 +232,18 @@ async function checkForUpdate({
   if (authorization.allowed) {
     if (!checkReadiness) return { ...result, reason: 'ownership-readiness-not-checked' };
     try {
-      const readiness = await checkReadiness({ projectDir, targetVersion: release.version, policy });
+      const readiness = await checkReadiness({
+        projectDir,
+        targetVersion: release.version,
+        policy,
+      });
       result.canAutoApply = readiness?.ready === true;
-      result.reason = result.canAutoApply ? 'ready-for-authorized-update' : readiness?.reason || 'ownership-not-ready';
-    } catch { result.reason = 'ownership-readiness-failed'; }
+      result.reason = result.canAutoApply
+        ? 'ready-for-authorized-update'
+        : readiness?.reason || 'ownership-not-ready';
+    } catch {
+      result.reason = 'ownership-readiness-failed';
+    }
   }
   return result;
 }

package/tools/cli/lib/update-dispatch.js

@@ -46,8 +46,8 @@ async function withExecutionDirectory(action) {
     const actual = fs.realpathSync(directory);
     assert(
       path.dirname(actual) === parent &&
-      path.basename(actual).startsWith('bmad-update-exec-') &&
-      !fs.lstatSync(directory).isSymbolicLink(),
+        path.basename(actual).startsWith('bmad-update-exec-') &&
+        !fs.lstatSync(directory).isSymbolicLink(),
       'Refusing to remove an unexpected updater temporary directory.'
     );
     fs.rmSync(actual, { recursive: true, force: true, maxRetries: 3, retryDelay: 100 });

package/tools/cli/lib/update-policy.js

@@ -8,14 +8,19 @@ const { safeAdapterPath } = require('./installed-adapters');
 const POLICY_FILE = '_bmad/update-policy.json';
 const OFFICIAL_REGISTRY = 'https://registry.npmjs.org/';
 const DEFAULT_POLICY = Object.freeze({
-  mode: 'notify', channel: 'latest', allowedRange: null,
-  allowPrerelease: false, registry: OFFICIAL_REGISTRY,
+  mode: 'notify',
+  channel: 'latest',
+  allowedRange: null,
+  allowPrerelease: false,
+  registry: OFFICIAL_REGISTRY,
 });
 
 function isExactVersion(version) {
-  return typeof version === 'string' &&
+  return (
+    typeof version === 'string' &&
     /^\d+\.\d+\.\d+(?:-[0-9A-Za-z.-]+)?(?:\+[0-9A-Za-z.-]+)?$/.test(version) &&
-    semver.valid(version) !== null;
+    semver.valid(version) !== null
+  );
 }
 
 function validatePolicy(value) {
@@ -27,13 +32,21 @@ function validatePolicy(value) {
   }
   const policy = { ...DEFAULT_POLICY, ...value };
   delete policy.schemaVersion;
-  if (Object.keys(policy).some(key => !Object.hasOwn(DEFAULT_POLICY, key)) ||
-      !['off', 'notify', 'auto'].includes(policy.mode) ||
-      typeof policy.channel !== 'string' || !/^[a-z][a-z0-9_-]{0,31}$/.test(policy.channel) ||
-      typeof policy.allowPrerelease !== 'boolean' || policy.registry !== OFFICIAL_REGISTRY ||
-      (policy.allowedRange !== null && (typeof policy.allowedRange !== 'string' ||
-        !policy.allowedRange.trim() || !semver.validRange(policy.allowedRange)))) {
-    throw new Error('Invalid update policy: check mode, channel, range, prerelease flag and official registry.');
+  if (
+    Object.keys(policy).some((key) => !Object.hasOwn(DEFAULT_POLICY, key)) ||
+    !['off', 'notify', 'auto'].includes(policy.mode) ||
+    typeof policy.channel !== 'string' ||
+    !/^[a-z][a-z0-9_-]{0,31}$/.test(policy.channel) ||
+    typeof policy.allowPrerelease !== 'boolean' ||
+    policy.registry !== OFFICIAL_REGISTRY ||
+    (policy.allowedRange !== null &&
+      (typeof policy.allowedRange !== 'string' ||
+        !policy.allowedRange.trim() ||
+        !semver.validRange(policy.allowedRange)))
+  ) {
+    throw new Error(
+      'Invalid update policy: check mode, channel, range, prerelease flag and official registry.'
+    );
   }
   if (policy.mode === 'auto' && policy.allowedRange === null) {
     throw new Error('Automatic updates require an explicit allowedRange.');
@@ -58,11 +71,18 @@ function writeProjectJson(projectDir, relativeFile, data) {
   const temporaryName = `${relativeFile}.${process.pid}.${crypto.randomUUID()}.tmp`;
   const temporary = safeAdapterPath(projectDir, temporaryName);
   try {
-    fs.writeFileSync(temporary, JSON.stringify(data, null, 2) + '\n', { encoding: 'utf8', flag: 'wx' });
+    fs.writeFileSync(temporary, JSON.stringify(data, null, 2) + '\n', {
+      encoding: 'utf8',
+      flag: 'wx',
+    });
     safeAdapterPath(projectDir, relativeFile);
     fs.renameSync(temporary, file);
   } finally {
-    try { fs.unlinkSync(temporary); } catch { /* Preserve the original write error if cleanup fails. */ }
+    try {
+      fs.unlinkSync(temporary);
+    } catch {
+      /* Preserve the original write error if cleanup fails. */
+    }
   }
 }
 
@@ -74,17 +94,35 @@ function writeUpdatePolicy(projectDir, value) {
 
 function authorizeTarget(value, version) {
   let policy;
-  try { policy = validatePolicy(value); } catch { return { allowed: false, reason: 'invalid-policy' }; }
+  try {
+    policy = validatePolicy(value);
+  } catch {
+    return { allowed: false, reason: 'invalid-policy' };
+  }
   if (!isExactVersion(version)) return { allowed: false, reason: 'invalid-target-version' };
-  if (policy.mode !== 'auto') return { allowed: false, reason: policy.mode === 'off' ? 'updates-disabled' : 'approval-required' };
-  if (!policy.allowPrerelease && semver.prerelease(version)) return { allowed: false, reason: 'prerelease-not-allowed' };
-  if (!semver.satisfies(version, policy.allowedRange, { includePrerelease: policy.allowPrerelease })) {
+  if (policy.mode !== 'auto')
+    return {
+      allowed: false,
+      reason: policy.mode === 'off' ? 'updates-disabled' : 'approval-required',
+    };
+  if (!policy.allowPrerelease && semver.prerelease(version))
+    return { allowed: false, reason: 'prerelease-not-allowed' };
+  if (
+    !semver.satisfies(version, policy.allowedRange, { includePrerelease: policy.allowPrerelease })
+  ) {
     return { allowed: false, reason: 'outside-allowed-range' };
   }
   return { allowed: true, reason: 'authorized-policy' };
 }
 
 module.exports = {
-  DEFAULT_POLICY, POLICY_FILE, OFFICIAL_REGISTRY, isExactVersion,
-  validatePolicy, readUpdatePolicy, writeUpdatePolicy, authorizeTarget, writeProjectJson,
+  DEFAULT_POLICY,
+  POLICY_FILE,
+  OFFICIAL_REGISTRY,
+  isExactVersion,
+  validatePolicy,
+  readUpdatePolicy,
+  writeUpdatePolicy,
+  authorizeTarget,
+  writeProjectJson,
 };