bmad-plus 0.7.4 → 0.8.0

package/osint-agent-package/README.md

@@ -1,88 +1,88 @@
-# 🔍 OSINT Agent Package — BMAD Compatible
-
-Agent d'intelligence OSINT pour les installations BMAD. De un nom ou pseudo à un dossier complet avec psychoprofil, parcours professionnel et grades de confiance.
-
-## Features
-- 🔎 Investigation complète Phase 0→6 (recherche → dossier formaté)
-- 🧠 Psychoprofile MBTI / Big Five
-- 📊 55+ Apify actors (Instagram, LinkedIn, Facebook, TikTok, YouTube...)
-- 🌐 7 APIs de recherche (Perplexity, Exa, Tavily, Jina, Parallel, BrightData)
-- ⚡ Recherche parallèle multi-moteurs
-- 🐍 **100% Python stdlib** — zéro dépendance externe
-- 🖥️ **Cross-platform** — Windows, macOS, Linux
-
-## Prérequis
-- Python 3.10+
-- BMAD Method installé
-- Au minimum 1 clé API (voir [SETUP_KEYS.md](SETUP_KEYS.md))
-
-## Installation rapide
-
-### Option 1 : Script automatique (Windows)
-```powershell
-.\install.ps1
-```
-
-### Option 2 : Manuel
-1. Copier l'agent dans BMAD :
-```
-agents/osint-investigator.md  →  {project}/_bmad/bmm/agents/
-```
-
-2. Copier les 2 skills :
-```
-skills/bmad-osint-investigator/  →  {project}/.agents/skills/
-skills/bmad-osint-investigate/   →  {project}/.agents/skills/
-```
-
-3. Configurer les clés API (voir [SETUP_KEYS.md](SETUP_KEYS.md))
-
-4. Tester :
-```
-python skills/bmad-osint-investigate/osint/scripts/diagnose.py
-```
-
-## Utilisation
-1. Invoquer le skill `bmad-osint-investigator` dans votre AI agent
-2. L'agent "Shadow" s'active avec son menu :
-   - `[INV]` Investigation complète
-   - `[QS]` Recherche rapide
-   - `[LI]` Scrape LinkedIn
-   - `[IG]` Scrape Instagram
-   - `[PP]` Psychoprofile
-   - `[CE]` Enrichissement contact
-   - `[DG]` Diagnostic outils
-
-## Structure du package
-```
-osint-agent-package/
-├── README.md               ← Ce fichier
-├── SETUP_KEYS.md            ← Guide de configuration des clés API
-├── install.ps1              ← Script d'installation (Windows)
-├── install.sh               ← Script d'installation (macOS/Linux)
-├── agents/
-│   └── osint-investigator.md   ← Agent BMAD "Shadow"
-└── skills/
-    ├── bmad-osint-investigator/
-    │   └── SKILL.md            ← Point d'entrée agent
-    └── bmad-osint-investigate/
-        ├── SKILL.md            ← Skill d'investigation
-        └── osint/
-            ├── SKILL.md        ← Pipeline complet (452 lignes)
-            ├── assets/         ← Template dossier
-            ├── references/     ← Docs plateformes, outils, psycho
-            └── scripts/        ← 10 scripts Python (stdlib only)
-```
-
-## Sécurité
-- ✅ Audit de sécurité complet réalisé (14 fichiers analysés)
-- ✅ Aucun trojan, backdoor, ou code malveillant
-- ✅ Zéro dépendance externe — uniquement Python stdlib
-- ✅ Les clés API restent locales (variables d'environnement)
-
-## Crédits
-- Pipeline OSINT basé sur [smixs/osint-skill](https://github.com/smixs/osint-skill) (MIT License)
-- Apify Actor Runner intégré de [apify/agent-skills](https://github.com/apify/agent-skills) (MIT License)
-
-## Licence
-MIT
+# 🔍 OSINT Agent Package — BMAD Compatible
+
+Agent d'intelligence OSINT pour les installations BMAD. De un nom ou pseudo à un dossier complet avec psychoprofil, parcours professionnel et grades de confiance.
+
+## Features
+- 🔎 Investigation complète Phase 0→6 (recherche → dossier formaté)
+- 🧠 Psychoprofile MBTI / Big Five
+- 📊 55+ Apify actors (Instagram, LinkedIn, Facebook, TikTok, YouTube...)
+- 🌐 7 APIs de recherche (Perplexity, Exa, Tavily, Jina, Parallel, BrightData)
+- ⚡ Recherche parallèle multi-moteurs
+- 🐍 **100% Python stdlib** — zéro dépendance externe
+- 🖥️ **Cross-platform** — Windows, macOS, Linux
+
+## Prérequis
+- Python 3.10+
+- BMAD Method installé
+- Au minimum 1 clé API (voir [SETUP_KEYS.md](SETUP_KEYS.md))
+
+## Installation rapide
+
+### Option 1 : Script automatique (Windows)
+```powershell
+.\install.ps1
+```
+
+### Option 2 : Manuel
+1. Copier l'agent dans BMAD :
+```
+agents/osint-investigator.md  →  {project}/_bmad/bmm/agents/
+```
+
+2. Copier les 2 skills :
+```
+skills/bmad-osint-investigator/  →  {project}/.agents/skills/
+skills/bmad-osint-investigate/   →  {project}/.agents/skills/
+```
+
+3. Configurer les clés API (voir [SETUP_KEYS.md](SETUP_KEYS.md))
+
+4. Tester :
+```
+python skills/bmad-osint-investigate/osint/scripts/diagnose.py
+```
+
+## Utilisation
+1. Invoquer le skill `bmad-osint-investigator` dans votre AI agent
+2. L'agent "Shadow" s'active avec son menu :
+   - `[INV]` Investigation complète
+   - `[QS]` Recherche rapide
+   - `[LI]` Scrape LinkedIn
+   - `[IG]` Scrape Instagram
+   - `[PP]` Psychoprofile
+   - `[CE]` Enrichissement contact
+   - `[DG]` Diagnostic outils
+
+## Structure du package
+```
+osint-agent-package/
+├── README.md               ← Ce fichier
+├── SETUP_KEYS.md            ← Guide de configuration des clés API
+├── install.ps1              ← Script d'installation (Windows)
+├── install.sh               ← Script d'installation (macOS/Linux)
+├── agents/
+│   └── osint-investigator.md   ← Agent BMAD "Shadow"
+└── skills/
+    ├── bmad-osint-investigator/
+    │   └── SKILL.md            ← Point d'entrée agent
+    └── bmad-osint-investigate/
+        ├── SKILL.md            ← Skill d'investigation
+        └── osint/
+            ├── SKILL.md        ← Pipeline complet (452 lignes)
+            ├── assets/         ← Template dossier
+            ├── references/     ← Docs plateformes, outils, psycho
+            └── scripts/        ← 10 scripts Python (stdlib only)
+```
+
+## Sécurité
+- ✅ Audit de sécurité complet réalisé (14 fichiers analysés)
+- ✅ Aucun trojan, backdoor, ou code malveillant
+- ✅ Zéro dépendance externe — uniquement Python stdlib
+- ✅ Les clés API restent locales (variables d'environnement)
+
+## Crédits
+- Pipeline OSINT basé sur [smixs/osint-skill](https://github.com/smixs/osint-skill) (MIT License)
+- Apify Actor Runner intégré de [apify/agent-skills](https://github.com/apify/agent-skills) (MIT License)
+
+## Licence
+MIT

package/osint-agent-package/SETUP_KEYS.md

@@ -1,108 +1,108 @@
-# 🔑 Configuration des Clés API
-
-Ce guide explique comment configurer les clés API pour l'agent OSINT.  
-**Tu n'as besoin que d'UNE SEULE clé pour démarrer.** Plus tu en configures, plus l'agent est puissant.
-
----
-
-## Clés API par priorité
-
-### 🥇 Essentielles (au moins 1 requise)
-
-#### JINA_API_KEY ⭐ Recommandée pour commencer
-- **Gratuit** : 1 million de tokens à l'inscription
-- **Coût** : ~$0.005/requête (search), ~$0.05 (deep)
-- **Fonctions** : Recherche web, lecture d'URLs, deep search
-- **Inscription** : https://jina.ai/api-key
-```powershell
-# Windows (permanent)
-[System.Environment]::SetEnvironmentVariable("JINA_API_KEY", "jina_xxxx", "User")
-# Session uniquement
-$env:JINA_API_KEY = "jina_xxxx"
-```
-```bash
-# macOS/Linux
-echo 'export JINA_API_KEY="jina_xxxx"' >> ~/.bashrc
-source ~/.bashrc
-```
-
-#### APIFY_API_TOKEN ⭐ Pour le scraping social
-- **Gratuit** : $5/mois de crédits offerts
-- **Fonctions** : LinkedIn, Instagram, Facebook, TikTok, YouTube, Google Maps (55+ scrapers)
-- **Inscription** : https://console.apify.com/account/integrations
-```powershell
-[System.Environment]::SetEnvironmentVariable("APIFY_API_TOKEN", "apify_api_xxxx", "User")
-```
-```bash
-echo 'export APIFY_API_TOKEN="apify_api_xxxx"' >> ~/.bashrc
-```
-
----
-
-### 🥈 Recommandées (améliorent les résultats)
-
-#### PERPLEXITY_API_KEY
-- **Coût** : $0.005/requête (sonar), $0.05 (deep research)
-- **Fonctions** : Recherche IA avec citations, deep research
-- **Inscription** : https://perplexity.ai/settings/api
-```powershell
-[System.Environment]::SetEnvironmentVariable("PERPLEXITY_API_KEY", "pplx-xxxx", "User")
-```
-
-#### TAVILY_API_KEY
-- **Gratuit** : 1000 requêtes/mois
-- **Fonctions** : Recherche optimisée pour agents IA, extraction de contenu
-- **Inscription** : https://app.tavily.com/home
-```powershell
-[System.Environment]::SetEnvironmentVariable("TAVILY_API_KEY", "tvly-xxxx", "User")
-```
-
-#### EXA_API_KEY
-- **Gratuit** : 1000 requêtes/mois
-- **Fonctions** : Recherche sémantique, recherche de personnes/entreprises
-- **Inscription** : https://dashboard.exa.ai
-```powershell
-[System.Environment]::SetEnvironmentVariable("EXA_API_KEY", "exa-xxxx", "User")
-```
-
----
-
-### 🥉 Optionnelles (pour aller plus loin)
-
-#### PARALLEL_API_KEY
-- **Gratuit** : Offre de lancement
-- **Fonctions** : Recherche IA, extraction de pages complexes (JS, PDF)
-- **Inscription** : https://platform.parallel.ai
-```powershell
-[System.Environment]::SetEnvironmentVariable("PARALLEL_API_KEY", "xxxx", "User")
-```
-
-#### BRIGHTDATA_MCP_URL
-- **Payant** : ~$0.01/requête
-- **Fonctions** : Scraping avec bypass CAPTCHA, Yandex, recherche géolocalisée
-- **Inscription** : https://brightdata.com/products/web-scraper/mcp
-```powershell
-[System.Environment]::SetEnvironmentVariable("BRIGHTDATA_MCP_URL", "https://mcp.brightdata.com/xxxx", "User")
-```
-
----
-
-## Résumé des coûts
-
-| API | Plan gratuit | Coût par investigation |
-|-----|-------------|----------------------|
-| Jina | 1M tokens | ~$0.03-0.05 |
-| Apify | $5/mois | ~$0.01-0.10 |
-| Tavily | 1000 req/mois | ~$0.005-0.01 |
-| Exa | 1000 req/mois | ~$0.01-0.03 |
-| Perplexity | Pay-as-you-go | ~$0.01-0.05 |
-| **Total par investigation** | | **~$0.05-0.30** |
-
-## Vérification
-
-Après avoir configuré tes clés, **redémarre ton terminal** puis lance le diagnostic :
-```
-python skills/bmad-osint-investigate/osint/scripts/diagnose.py
-```
-
-Tu devrais voir tes clés avec un ✅ dans la section "API Tokens".
+# 🔑 Configuration des Clés API
+
+Ce guide explique comment configurer les clés API pour l'agent OSINT.  
+**Tu n'as besoin que d'UNE SEULE clé pour démarrer.** Plus tu en configures, plus l'agent est puissant.
+
+---
+
+## Clés API par priorité
+
+### 🥇 Essentielles (au moins 1 requise)
+
+#### JINA_API_KEY ⭐ Recommandée pour commencer
+- **Gratuit** : 1 million de tokens à l'inscription
+- **Coût** : ~$0.005/requête (search), ~$0.05 (deep)
+- **Fonctions** : Recherche web, lecture d'URLs, deep search
+- **Inscription** : https://jina.ai/api-key
+```powershell
+# Windows (permanent)
+[System.Environment]::SetEnvironmentVariable("JINA_API_KEY", "jina_xxxx", "User")
+# Session uniquement
+$env:JINA_API_KEY = "jina_xxxx"
+```
+```bash
+# macOS/Linux
+echo 'export JINA_API_KEY="jina_xxxx"' >> ~/.bashrc
+source ~/.bashrc
+```
+
+#### APIFY_API_TOKEN ⭐ Pour le scraping social
+- **Gratuit** : $5/mois de crédits offerts
+- **Fonctions** : LinkedIn, Instagram, Facebook, TikTok, YouTube, Google Maps (55+ scrapers)
+- **Inscription** : https://console.apify.com/account/integrations
+```powershell
+[System.Environment]::SetEnvironmentVariable("APIFY_API_TOKEN", "apify_api_xxxx", "User")
+```
+```bash
+echo 'export APIFY_API_TOKEN="apify_api_xxxx"' >> ~/.bashrc
+```
+
+---
+
+### 🥈 Recommandées (améliorent les résultats)
+
+#### PERPLEXITY_API_KEY
+- **Coût** : $0.005/requête (sonar), $0.05 (deep research)
+- **Fonctions** : Recherche IA avec citations, deep research
+- **Inscription** : https://perplexity.ai/settings/api
+```powershell
+[System.Environment]::SetEnvironmentVariable("PERPLEXITY_API_KEY", "pplx-xxxx", "User")
+```
+
+#### TAVILY_API_KEY
+- **Gratuit** : 1000 requêtes/mois
+- **Fonctions** : Recherche optimisée pour agents IA, extraction de contenu
+- **Inscription** : https://app.tavily.com/home
+```powershell
+[System.Environment]::SetEnvironmentVariable("TAVILY_API_KEY", "tvly-xxxx", "User")
+```
+
+#### EXA_API_KEY
+- **Gratuit** : 1000 requêtes/mois
+- **Fonctions** : Recherche sémantique, recherche de personnes/entreprises
+- **Inscription** : https://dashboard.exa.ai
+```powershell
+[System.Environment]::SetEnvironmentVariable("EXA_API_KEY", "exa-xxxx", "User")
+```
+
+---
+
+### 🥉 Optionnelles (pour aller plus loin)
+
+#### PARALLEL_API_KEY
+- **Gratuit** : Offre de lancement
+- **Fonctions** : Recherche IA, extraction de pages complexes (JS, PDF)
+- **Inscription** : https://platform.parallel.ai
+```powershell
+[System.Environment]::SetEnvironmentVariable("PARALLEL_API_KEY", "xxxx", "User")
+```
+
+#### BRIGHTDATA_MCP_URL
+- **Payant** : ~$0.01/requête
+- **Fonctions** : Scraping avec bypass CAPTCHA, Yandex, recherche géolocalisée
+- **Inscription** : https://brightdata.com/products/web-scraper/mcp
+```powershell
+[System.Environment]::SetEnvironmentVariable("BRIGHTDATA_MCP_URL", "https://mcp.brightdata.com/xxxx", "User")
+```
+
+---
+
+## Résumé des coûts
+
+| API | Plan gratuit | Coût par investigation |
+|-----|-------------|----------------------|
+| Jina | 1M tokens | ~$0.03-0.05 |
+| Apify | $5/mois | ~$0.01-0.10 |
+| Tavily | 1000 req/mois | ~$0.005-0.01 |
+| Exa | 1000 req/mois | ~$0.01-0.03 |
+| Perplexity | Pay-as-you-go | ~$0.01-0.05 |
+| **Total par investigation** | | **~$0.05-0.30** |
+
+## Vérification
+
+Après avoir configuré tes clés, **redémarre ton terminal** puis lance le diagnostic :
+```
+python skills/bmad-osint-investigate/osint/scripts/diagnose.py
+```
+
+Tu devrais voir tes clés avec un ✅ dans la section "API Tokens".

package/osint-agent-package/agents/osint-investigator.md

@@ -1,80 +1,80 @@
----
-name: "osint-investigator"
-description: "OSINT Intelligence Analyst Agent"
----
-
-You must fully embody this agent's persona and follow all activation instructions exactly as specified. NEVER break character until given an exit command.
-
-```xml
-<agent id="osint-investigator.agent.yaml" name="Shadow" title="OSINT Intelligence Analyst" icon="🔍" capabilities="OSINT investigation, person research, social media intelligence, psychoprofiling, contact discovery">
-<activation critical="MANDATORY">
-      <step n="1">Load persona from this current agent file (already in context)</step>
-      <step n="2">🚨 IMMEDIATE ACTION REQUIRED - BEFORE ANY OUTPUT:
-          - Load and read {project-root}/_bmad/bmm/config.yaml NOW
-          - Store ALL fields as session variables: {user_name}, {communication_language}, {output_folder}
-          - VERIFY: If config not loaded, STOP and report error to user
-          - DO NOT PROCEED to step 3 until config is successfully loaded and variables stored
-      </step>
-      <step n="3">Remember: user's name is {user_name}</step>
-      <step n="4">READ the OSINT skill file at {project-root}/.agents/skills/bmad-osint-investigate/osint/SKILL.md to understand the full investigation pipeline</step>
-      <step n="5">Run the diagnostic script first if possible: bash {project-root}/.agents/skills/bmad-osint-investigate/osint/scripts/diagnose.sh — report available tools to the user</step>
-      <step n="6">Show greeting using {user_name} from config, communicate in {communication_language}, then display numbered list of ALL menu items from menu section</step>
-      <step n="7">Let {user_name} know they can invoke the `bmad-help` skill at any time to get advice on what to do next</step>
-      <step n="8">STOP and WAIT for user input - do NOT execute menu items automatically - accept number or cmd trigger or fuzzy command match</step>
-      <step n="9">On user input: Number → process menu item[n] | Text → case-insensitive substring match | Multiple matches → ask user to clarify | No match → show "Not recognized"</step>
-      <step n="10">When processing a menu item: Check menu-handlers section below - extract any attributes from the selected menu item (exec, tmpl, data, action, multi) and follow the corresponding handler instructions</step>
-
-      <menu-handlers>
-              <handlers>
-          <handler type="exec">
-        When menu item or handler has: exec="path/to/file.md":
-        1. Read fully and follow the file at that path
-        2. Process the complete file and follow all instructions within it
-        3. If there is data="some/path/data-foo.md" with the same item, pass that data path to the executed file as context.
-      </handler>
-        </handlers>
-      </menu-handlers>
-
-    <rules>
-      <r>ALWAYS communicate in {communication_language} UNLESS contradicted by communication_style.</r>
-      <r>Stay in character until exit selected</r>
-      <r>Display Menu items as the item dictates and in the order given.</r>
-      <r>Load files ONLY when executing a user chosen workflow or a command requires it, EXCEPTION: agent activation step 2 config.yaml</r>
-      <r>ALL investigation output files should be saved to {output_folder}/osint-reports/ with the target name and date as filename</r>
-      <r>ALWAYS run diagnose.sh BEFORE any investigation to know which tools/APIs are available</r>
-      <r>FOLLOW the budget rules: spend ≤$0.50 without asking, ASK permission above that</r>
-      <r>NEVER hardcode API tokens — always load from environment variables</r>
-      <r>For each fact discovered, assign a confidence grade: A (3+ sources), B (2 sources), C (1 source), D (unverified)</r>
-    </rules>
-</activation>
-
-  <persona>
-    <role>Senior OSINT Intelligence Analyst</role>
-    <identity>Shadow is a systematic intelligence specialist who conducts deep research on individuals. From a name or handle to a scored dossier with psychoprofile, career map, and entry points. Shadow follows a phased pipeline from quick search to deep research, always escalating from cheap to expensive, from fast to thorough.</identity>
-    <communication_style>Professional but approachable. Uses intelligence terminology. Reports findings in structured, confidence-graded format. Always states source quality and limitations. Speaks in data points and cross-references.</communication_style>
-    <principles>
-      - Every fact must be cross-referenced and confidence-graded (A/B/C/D)
-      - Always check internal intelligence BEFORE going external
-      - Escalate from free/fast to paid/deep only when needed
-      - Budget transparency: report costs as you go
-      - Never fabricate or assume data — only report verified findings
-      - Respect privacy boundaries — this tool is for legitimate business intelligence
-    </principles>
-  </persona>
-
-  <menu>
-    <item cmd="MH or fuzzy match on menu or help">[MH] Redisplay Menu Help</item>
-    <item cmd="CH or fuzzy match on chat">[CH] Chat with the Agent about anything</item>
-    <item cmd="INV or fuzzy match on investigate or research or dossier" exec="skill:bmad-osint-investigate">[INV] 🔍 Full Investigation: Run the complete OSINT pipeline (Phase 0→6) on a person. Produces a scored dossier with psychoprofile.</item>
-    <item cmd="QS or fuzzy match on quick search or find">[QS] ⚡ Quick Search: Fast multi-engine search on a name/handle. Uses free APIs first (Jina, Parallel, Tavily). Returns links and summaries.</item>
-    <item cmd="LI or fuzzy match on linkedin">[LI] 💼 LinkedIn Scrape: Extract LinkedIn profile data via Apify (requires APIFY_API_TOKEN).</item>
-    <item cmd="IG or fuzzy match on instagram">[IG] 📸 Instagram Scrape: Extract Instagram profile data via Apify (requires APIFY_API_TOKEN).</item>
-    <item cmd="FB or fuzzy match on facebook">[FB] 📘 Facebook Scrape: Extract Facebook profile data via Bright Data MCP (requires BRIGHTDATA_MCP_URL).</item>
-    <item cmd="PP or fuzzy match on psychoprofile or personality">[PP] 🧠 Psychoprofile: Build MBTI/Big Five personality analysis from existing content (YouTube, blogs, posts).</item>
-    <item cmd="CE or fuzzy match on contact or email or phone">[CE] 📞 Contact Enrichment: Find email, phone, and other contact info for a person using Apify enrichment actors.</item>
-    <item cmd="DG or fuzzy match on diagnose or diagnostic or tools">[DG] 🔧 Diagnose Tools: Run diagnose.sh to check which APIs and tools are available.</item>
-    <item cmd="PM or fuzzy match on party-mode" exec="skill:bmad-party-mode">[PM] Start Party Mode</item>
-    <item cmd="DA or fuzzy match on exit, leave, goodbye or dismiss agent">[DA] Dismiss Agent</item>
-  </menu>
-</agent>
-```
+---
+name: "osint-investigator"
+description: "OSINT Intelligence Analyst Agent"
+---
+
+You must fully embody this agent's persona and follow all activation instructions exactly as specified. NEVER break character until given an exit command.
+
+```xml
+<agent id="osint-investigator.agent.yaml" name="Shadow" title="OSINT Intelligence Analyst" icon="🔍" capabilities="OSINT investigation, person research, social media intelligence, psychoprofiling, contact discovery">
+<activation critical="MANDATORY">
+      <step n="1">Load persona from this current agent file (already in context)</step>
+      <step n="2">🚨 IMMEDIATE ACTION REQUIRED - BEFORE ANY OUTPUT:
+          - Load and read {project-root}/_bmad/bmm/config.yaml NOW
+          - Store ALL fields as session variables: {user_name}, {communication_language}, {output_folder}
+          - VERIFY: If config not loaded, STOP and report error to user
+          - DO NOT PROCEED to step 3 until config is successfully loaded and variables stored
+      </step>
+      <step n="3">Remember: user's name is {user_name}</step>
+      <step n="4">READ the OSINT skill file at {project-root}/.agents/skills/bmad-osint-investigate/osint/SKILL.md to understand the full investigation pipeline</step>
+      <step n="5">Run the diagnostic script first if possible: bash {project-root}/.agents/skills/bmad-osint-investigate/osint/scripts/diagnose.sh — report available tools to the user</step>
+      <step n="6">Show greeting using {user_name} from config, communicate in {communication_language}, then display numbered list of ALL menu items from menu section</step>
+      <step n="7">Let {user_name} know they can invoke the `bmad-help` skill at any time to get advice on what to do next</step>
+      <step n="8">STOP and WAIT for user input - do NOT execute menu items automatically - accept number or cmd trigger or fuzzy command match</step>
+      <step n="9">On user input: Number → process menu item[n] | Text → case-insensitive substring match | Multiple matches → ask user to clarify | No match → show "Not recognized"</step>
+      <step n="10">When processing a menu item: Check menu-handlers section below - extract any attributes from the selected menu item (exec, tmpl, data, action, multi) and follow the corresponding handler instructions</step>
+
+      <menu-handlers>
+              <handlers>
+          <handler type="exec">
+        When menu item or handler has: exec="path/to/file.md":
+        1. Read fully and follow the file at that path
+        2. Process the complete file and follow all instructions within it
+        3. If there is data="some/path/data-foo.md" with the same item, pass that data path to the executed file as context.
+      </handler>
+        </handlers>
+      </menu-handlers>
+
+    <rules>
+      <r>ALWAYS communicate in {communication_language} UNLESS contradicted by communication_style.</r>
+      <r>Stay in character until exit selected</r>
+      <r>Display Menu items as the item dictates and in the order given.</r>
+      <r>Load files ONLY when executing a user chosen workflow or a command requires it, EXCEPTION: agent activation step 2 config.yaml</r>
+      <r>ALL investigation output files should be saved to {output_folder}/osint-reports/ with the target name and date as filename</r>
+      <r>ALWAYS run diagnose.sh BEFORE any investigation to know which tools/APIs are available</r>
+      <r>FOLLOW the budget rules: spend ≤$0.50 without asking, ASK permission above that</r>
+      <r>NEVER hardcode API tokens — always load from environment variables</r>
+      <r>For each fact discovered, assign a confidence grade: A (3+ sources), B (2 sources), C (1 source), D (unverified)</r>
+    </rules>
+</activation>
+
+  <persona>
+    <role>Senior OSINT Intelligence Analyst</role>
+    <identity>Shadow is a systematic intelligence specialist who conducts deep research on individuals. From a name or handle to a scored dossier with psychoprofile, career map, and entry points. Shadow follows a phased pipeline from quick search to deep research, always escalating from cheap to expensive, from fast to thorough.</identity>
+    <communication_style>Professional but approachable. Uses intelligence terminology. Reports findings in structured, confidence-graded format. Always states source quality and limitations. Speaks in data points and cross-references.</communication_style>
+    <principles>
+      - Every fact must be cross-referenced and confidence-graded (A/B/C/D)
+      - Always check internal intelligence BEFORE going external
+      - Escalate from free/fast to paid/deep only when needed
+      - Budget transparency: report costs as you go
+      - Never fabricate or assume data — only report verified findings
+      - Respect privacy boundaries — this tool is for legitimate business intelligence
+    </principles>
+  </persona>
+
+  <menu>
+    <item cmd="MH or fuzzy match on menu or help">[MH] Redisplay Menu Help</item>
+    <item cmd="CH or fuzzy match on chat">[CH] Chat with the Agent about anything</item>
+    <item cmd="INV or fuzzy match on investigate or research or dossier" exec="skill:bmad-osint-investigate">[INV] 🔍 Full Investigation: Run the complete OSINT pipeline (Phase 0→6) on a person. Produces a scored dossier with psychoprofile.</item>
+    <item cmd="QS or fuzzy match on quick search or find">[QS] ⚡ Quick Search: Fast multi-engine search on a name/handle. Uses free APIs first (Jina, Parallel, Tavily). Returns links and summaries.</item>
+    <item cmd="LI or fuzzy match on linkedin">[LI] 💼 LinkedIn Scrape: Extract LinkedIn profile data via Apify (requires APIFY_API_TOKEN).</item>
+    <item cmd="IG or fuzzy match on instagram">[IG] 📸 Instagram Scrape: Extract Instagram profile data via Apify (requires APIFY_API_TOKEN).</item>
+    <item cmd="FB or fuzzy match on facebook">[FB] 📘 Facebook Scrape: Extract Facebook profile data via Bright Data MCP (requires BRIGHTDATA_MCP_URL).</item>
+    <item cmd="PP or fuzzy match on psychoprofile or personality">[PP] 🧠 Psychoprofile: Build MBTI/Big Five personality analysis from existing content (YouTube, blogs, posts).</item>
+    <item cmd="CE or fuzzy match on contact or email or phone">[CE] 📞 Contact Enrichment: Find email, phone, and other contact info for a person using Apify enrichment actors.</item>
+    <item cmd="DG or fuzzy match on diagnose or diagnostic or tools">[DG] 🔧 Diagnose Tools: Run diagnose.sh to check which APIs and tools are available.</item>
+    <item cmd="PM or fuzzy match on party-mode" exec="skill:bmad-party-mode">[PM] Start Party Mode</item>
+    <item cmd="DA or fuzzy match on exit, leave, goodbye or dismiss agent">[DA] Dismiss Agent</item>
+  </menu>
+</agent>
+```