bmad-plus 0.9.1 → 0.12.0

package/tools/build/generate.js

@@ -0,0 +1,284 @@
+#!/usr/bin/env node
+/**
+ * BMAD+ Build — registry.yaml → pack artifacts generator (Pillar 1)
+ *
+ * Reads the root registry.yaml (the single source of truth) and generates the
+ * pack data currently hand-maintained in tools/cli/lib/packs.js:
+ *   - PACKS            (CLI pack definitions)
+ *   - PACK_ORDER       (install/display order)
+ *   - EXPECTED_AGENTS  (what `bmad-plus doctor` verifies after install)
+ *
+ * Usage:
+ *   node tools/build/generate.js              # print generated packs module source
+ *   node tools/build/generate.js --json       # print { PACKS, PACK_ORDER, EXPECTED_AGENTS } as JSON
+ *   node tools/build/generate.js --out <file> # write generated module source to <file>
+ *   node tools/build/generate.js --check      # verify registry.yaml reproduces the live
+ *                                             # tools/cli/lib/packs.js exactly (exit 1 on drift)
+ *
+ * Author: Laurent Rochetta
+ */
+
+'use strict';
+
+const fs = require('node:fs');
+const path = require('node:path');
+const { isDeepStrictEqual } = require('node:util');
+const yaml = require('js-yaml');
+
+const REPO_ROOT = path.join(__dirname, '..', '..');
+const DEFAULT_REGISTRY_PATH = path.join(REPO_ROOT, 'registry.yaml');
+const DEFAULT_PACKS_MODULE_PATH = path.join(REPO_ROOT, 'tools', 'cli', 'lib', 'packs.js');
+const PACKAGE_JSON_PATH = path.join(REPO_ROOT, 'package.json');
+
+const INSTALL_LAYOUTS = ['loose', 'packaged'];
+
+/**
+ * Validate the minimal contract the generator relies on.
+ * Throws with a precise message on the first violation.
+ */
+function validateRegistry(registry) {
+  if (!registry || typeof registry !== 'object') {
+    throw new Error('registry.yaml: file is empty or not a YAML mapping');
+  }
+  if (!registry.packs || typeof registry.packs !== 'object') {
+    throw new Error('registry.yaml: missing top-level "packs" mapping');
+  }
+
+  const seenOrders = new Set();
+  for (const [id, pack] of Object.entries(registry.packs)) {
+    const where = `registry.yaml: pack "${id}"`;
+    if (!pack || typeof pack !== 'object') throw new Error(`${where}: must be a mapping`);
+    if (!Number.isInteger(pack.order)) throw new Error(`${where}: missing integer "order"`);
+    if (seenOrders.has(pack.order)) throw new Error(`${where}: duplicate order ${pack.order}`);
+    seenOrders.add(pack.order);
+
+    if (!pack.cli || typeof pack.cli !== 'object') throw new Error(`${where}: missing "cli" block`);
+    for (const field of ['name', 'icon', 'desc']) {
+      if (typeof pack.cli[field] !== 'string' || pack.cli[field] === '') {
+        throw new Error(`${where}: missing cli.${field}`);
+      }
+    }
+    if (!Array.isArray(pack.agents)) throw new Error(`${where}: "agents" must be a list`);
+    if (pack.skills !== undefined && !Array.isArray(pack.skills)) {
+      throw new Error(`${where}: "skills" must be a list`);
+    }
+    if (typeof pack.pack_dir !== 'string' || pack.pack_dir === '') {
+      throw new Error(`${where}: missing "pack_dir"`);
+    }
+    if (!INSTALL_LAYOUTS.includes(pack.install_layout)) {
+      throw new Error(`${where}: "install_layout" must be one of ${INSTALL_LAYOUTS.join('|')}`);
+    }
+    if (pack.install_layout === 'packaged' && !Array.isArray((pack.doctor || {}).pack_agents)) {
+      throw new Error(`${where}: packaged layout requires "doctor.pack_agents" list`);
+    }
+  }
+  return registry;
+}
+
+/** Load + validate registry.yaml. */
+function loadRegistry(registryPath = DEFAULT_REGISTRY_PATH) {
+  const raw = fs.readFileSync(registryPath, 'utf8');
+  return validateRegistry(yaml.load(raw));
+}
+
+/** Pack entries sorted by their declared `order`. */
+function sortedPackEntries(registry) {
+  return Object.entries(registry.packs).sort((a, b) => a[1].order - b[1].order);
+}
+
+/** Generate PACK_ORDER (array of pack ids, sorted by `order`). */
+function buildPackOrder(registry) {
+  return sortedPackEntries(registry).map(([id]) => id);
+}
+
+/**
+ * Generate the PACKS object with the exact shape of tools/cli/lib/packs.js.
+ * Key-presence rules mirror the hand-written module:
+ *   - `data`            only when the registry pack declares a `data` key
+ *   - `externalPackage` only when `external_package` is set
+ *   - `required`        only when true (other packs omit the key entirely)
+ */
+function buildPacks(registry) {
+  const packs = {};
+  for (const [id, p] of sortedPackEntries(registry)) {
+    const entry = {
+      name: p.cli.name,
+      icon: p.cli.icon,
+      agents: [...p.agents],
+      skills: [...(p.skills || [])],
+    };
+    if ('data' in p) entry.data = [...p.data];
+    if (p.external_package) entry.externalPackage = p.external_package;
+    entry.packDir = p.pack_dir;
+    entry.packSrcDir = p.pack_src_dir || 'packs';
+    if (p.required === true) entry.required = true;
+    entry.desc = p.cli.desc;
+    packs[id] = entry;
+  }
+  return packs;
+}
+
+/**
+ * Generate EXPECTED_AGENTS (consumed by `bmad-plus doctor`).
+ *   - loose    packs → agent DIRECTORIES checked under .agents/skills/
+ *   - packaged packs → packDir checked, agent FILES checked inside it
+ */
+function buildExpectedAgents(registry) {
+  const expected = {};
+  for (const [id, p] of sortedPackEntries(registry)) {
+    if (p.install_layout === 'loose') {
+      expected[id] = { agents: [...p.agents], packDir: null };
+    } else {
+      expected[id] = { agents: [], packDir: p.pack_dir, packAgents: [...p.doctor.pack_agents] };
+    }
+  }
+  return expected;
+}
+
+/** Convenience: all three artifacts at once. */
+function buildAll(registry) {
+  return {
+    PACKS: buildPacks(registry),
+    PACK_ORDER: buildPackOrder(registry),
+    EXPECTED_AGENTS: buildExpectedAgents(registry),
+  };
+}
+
+/**
+ * Emit a drop-in replacement source for tools/cli/lib/packs.js.
+ * Evaluating this source yields exports deep-equal to the hand-written module.
+ */
+function generatePacksModuleSource(registry) {
+  const { PACKS, PACK_ORDER, EXPECTED_AGENTS } = buildAll(registry);
+  const j = (value) => JSON.stringify(value, null, 2);
+  return [
+    '/**',
+    ' * BMAD+ Shared PACKS Module — AUTO-GENERATED, DO NOT EDIT.',
+    ' * Source of truth: registry.yaml (repo root).',
+    ' * Regenerate: node tools/build/generate.js --out tools/cli/lib/packs.js',
+    ' *',
+    ' * Author: Laurent Rochetta',
+    ' */',
+    '',
+    `const PACKS = ${j(PACKS)};`,
+    '',
+    `const PACK_ORDER = ${j(PACK_ORDER)};`,
+    '',
+    `const EXPECTED_AGENTS = ${j(EXPECTED_AGENTS)};`,
+    '',
+    'module.exports = { PACKS, PACK_ORDER, EXPECTED_AGENTS };',
+    '',
+  ].join('\n');
+}
+
+/** Human-readable drill-down for a mismatching keyed object. */
+function describeDiff(label, generated, current, mismatches) {
+  if (Array.isArray(generated) || Array.isArray(current)) {
+    mismatches.push(
+      `${label}: generated ${JSON.stringify(generated)} != current ${JSON.stringify(current)}`
+    );
+    return;
+  }
+  const ids = new Set([...Object.keys(generated || {}), ...Object.keys(current || {})]);
+  for (const id of ids) {
+    if (!(id in generated)) {
+      mismatches.push(`${label}.${id}: present in packs.js but missing from registry.yaml`);
+    } else if (!(id in current)) {
+      mismatches.push(`${label}.${id}: present in registry.yaml but missing from packs.js`);
+    } else if (!isDeepStrictEqual(generated[id], current[id])) {
+      mismatches.push(
+        `${label}.${id}: generated ${JSON.stringify(generated[id])} != current ${JSON.stringify(current[id])}`
+      );
+    }
+  }
+}
+
+/**
+ * `--check` mode: prove registry.yaml reproduces the live packs.js exactly,
+ * and that product.version matches package.json.
+ * Returns { ok, mismatches } — never throws on drift (only on unreadable input).
+ */
+function check({
+  registryPath = DEFAULT_REGISTRY_PATH,
+  packsModulePath = DEFAULT_PACKS_MODULE_PATH,
+  packageJsonPath = PACKAGE_JSON_PATH,
+} = {}) {
+  const registry = loadRegistry(registryPath);
+  const current = require(packsModulePath);
+  const generated = buildAll(registry);
+  const mismatches = [];
+
+  const pkg = JSON.parse(fs.readFileSync(packageJsonPath, 'utf8'));
+  if (!registry.product || registry.product.version !== pkg.version) {
+    const declared = registry.product ? registry.product.version : undefined;
+    mismatches.push(
+      `product.version: registry.yaml declares "${declared}" but package.json is "${pkg.version}"`
+    );
+  }
+
+  for (const key of ['PACKS', 'PACK_ORDER', 'EXPECTED_AGENTS']) {
+    if (!isDeepStrictEqual(generated[key], current[key])) {
+      describeDiff(key, generated[key], current[key], mismatches);
+    }
+  }
+
+  return { ok: mismatches.length === 0, mismatches };
+}
+
+/* ── CLI ────────────────────────────────────────────────────────────────── */
+
+function main(argv) {
+  const args = argv.slice(2);
+
+  if (args.includes('--check')) {
+    const result = check();
+    if (result.ok) {
+      console.log('OK — registry.yaml reproduces tools/cli/lib/packs.js exactly (no drift).');
+      return 0;
+    }
+    console.error('DRIFT DETECTED between registry.yaml and tools/cli/lib/packs.js:');
+    for (const m of result.mismatches) console.error(`  - ${m}`);
+    return 1;
+  }
+
+  const registry = loadRegistry();
+
+  if (args.includes('--json')) {
+    console.log(JSON.stringify(buildAll(registry), null, 2));
+    return 0;
+  }
+
+  const source = generatePacksModuleSource(registry);
+  const outIdx = args.indexOf('--out');
+  if (outIdx !== -1) {
+    const outPath = args[outIdx + 1];
+    if (!outPath) {
+      console.error('--out requires a file path');
+      return 1;
+    }
+    fs.writeFileSync(path.resolve(outPath), source, 'utf8');
+    console.log(`Generated ${path.resolve(outPath)} from registry.yaml`);
+    return 0;
+  }
+
+  console.log(source);
+  return 0;
+}
+
+if (require.main === module) {
+  process.exitCode = main(process.argv);
+}
+
+module.exports = {
+  DEFAULT_REGISTRY_PATH,
+  DEFAULT_PACKS_MODULE_PATH,
+  loadRegistry,
+  validateRegistry,
+  buildPacks,
+  buildPackOrder,
+  buildExpectedAgents,
+  buildAll,
+  generatePacksModuleSource,
+  check,
+  main,
+};

package/tools/build/generated-adapters/.codex/AGENTS.md

@@ -0,0 +1,121 @@
+<!-- AUTO-GENERATED by tools/build/generate-adapters.js — DO NOT EDIT. -->
+<!-- Source of truth: registry.yaml → spine AGENTS.md. Regenerate: node tools/build/generate-adapters.js -->
+
+# BMAD+ — Adapter for codex-cli
+
+This file is a THIN adapter. The single source of truth for agents, packs,
+skills, and workflows is the spine file: **AGENTS.md** (project root).
+Read AGENTS.md first; this adapter only adds tool-specific invocation notes.
+
+## Tool notes — codex-cli
+
+- Codex CLI follows the AGENTS.md open standard (https://agents.md/).
+- This file relays to the repo-root spine; prefer reading the spine directly when both exist.
+
+## Project Context
+
+This project uses BMAD+, an augmented AI-driven development framework.
+Based on BMAD-METHOD v6.6.0 with multi-role agents, autopilot mode, and parallel execution.
+
+<!-- Hand-authored project instructions — single source: tools/build/adapters.config.js. -->
+<!-- Edit the config, then regenerate; never edit this file directly. -->
+
+## Agents
+
+To activate an agent, say its name or persona:
+
+- **Atlas** (Strategist) — Business analysis + Product management
+- **Forge** (Architect-Dev) — Architecture + Development + Documentation
+- **Sentinel** (Quality) — QA + UX review
+- **Nexus** (Orchestrator) — Sprint management + Autopilot + Parallel execution
+- **Shadow** (OSINT) — Investigation + Scraping + Psychoprofiling (if OSINT pack installed)
+- **Maker** (Agent Creator) — Design, build, validate, and package new BMAD+ agents
+- **Shield** (GRC) — Compliance agents for GDPR, ISO 27001, SOC 2, HIPAA, EU AI Act, DORA, NIS2 and more (derived counts: see Registry facts below)
+- **Miriam** (מרים) — Business Analyst — Strategic analysis, research, product briefs (Dev Studio)
+- **Huldah** (חולדה) — Technical Writer — Documentation, diagrams, editorial review (Dev Studio)
+- **Yosef** (יוסף) — Product Manager — PRD, requirements, feature prioritization (Dev Studio)
+- **Rachel** (רחל) — UX Designer — User experience, wireframes, empathy mapping (Dev Studio)
+- **Bezalel** (בצלאל) — System Architect — Architecture, ADRs, epics & stories (Dev Studio)
+- **Oholiab** (אהליאב) — Senior Engineer — TDD, sprint, code review, implementation (Dev Studio)
+- **Zecher** (זכר, Memory Guardian) — Memory Archivist — Persistent cross-session memory, consolidation, project scanning, context recall, session handoffs
+
+## Skills
+
+- Installed projects load skills from `.agents/skills/`; in this repository the sources live in `src/bmad-plus/skills/` and `src/bmad-plus/agents/`.
+- Each agent has a SKILL.md with capabilities, activation protocol, and role-switching rules.
+- Auto-activation triggers: `.agents/data/role-triggers.yaml` (source: `src/bmad-plus/data/role-triggers.yaml`).
+
+## Project Structure
+
+- `src/bmad-plus/` — Custom module (agents, skills, data)
+- `monitor/` — Upstream monitoring system (VPS)
+- `mcp-server/` — Audit 360° MCP Server
+- `osint-agent-package/` — OSINT package
+- `upstream/` — BMAD-METHOD reference clone
+
+## Communication
+
+- User name: laurent
+- Default language: Français for user-facing content, English for code and technical docs.
+
+## Commit Rules
+
+- NEVER add "Co-Authored-By: Claude" or any AI co-author attribution.
+- The sole author is Laurent Rochetta.
+
+## Repository Maintenance Rule
+
+When updating the main README.md (English), you MUST synchronously update all translations in the readme-international/ directory (fr, es, de).
+
+## Memory Protocol (Karpathy Guardrails)
+
+Agents MUST follow these behavioral principles:
+
+### G1 — Think Before Coding
+
+- State assumptions explicitly. If uncertain, ask.
+- Check `.agents/memory/decisions.md` for prior decisions before re-deciding.
+
+### G2 — Simplicity First
+
+- Minimum code that solves the problem. Nothing speculative.
+- Check `.agents/memory/patterns.md` for existing solutions.
+
+### G3 — Surgical Changes
+
+- Touch only what you must. Match existing style.
+- Log surprises in `.agents/memory/lessons.md`.
+
+### G4 — Goal-Driven Execution
+
+- Define success criteria before implementing.
+- Log non-obvious decisions in `.agents/memory/decisions.md`.
+
+### Memory Files
+
+- `.agents/memory/decisions.md` — Read at session start, write when making decisions
+- `.agents/memory/lessons.md` — Write when something unexpected happens
+- `.agents/memory/patterns.md` — Write when a reusable pattern is validated
+- `.agents/memory/context.md` — Update at session end with project state
+
+## Registry facts (computed from registry.yaml — never hand-typed)
+
+- Product: BMAD+ v0.12.0 (derived from BMAD-METHOD v6.6.0)
+- Models supported: claude, gpt, gemini, local (model-agnostic by contract)
+- Packs (9): Core, OSINT, Maker, Shield, SEO, Memory, Dev Studio, Backup, Animated
+- Installer agents (14 across all packs):
+  - Core (required): 4 installer agents — Core agents & skills
+  - OSINT: 1 installer agent — OSINT & investigation — 2 compliance frameworks
+  - Maker: 1 installer agent — Agent creation toolkit
+  - Shield: 1 installer agent — GRC compliance (25+ frameworks) — 27 specialized agents, 11 workflows, 26 compliance frameworks
+  - SEO: 3 installer agents — SEO audit & optimization — 1 compliance frameworks
+  - Memory: 1 installer agent — Persistent cross-session memory
+  - Dev Studio: 1 installer agent — SDLC automation (6 agents, 56+ skills) — 6 sub-agents, 38 workflows
+  - Backup: 1 installer agent — Backup & restore
+  - Animated: 1 installer agent — Animated website agents
+
+## Key commands
+
+- `bmad-help` — Show all available agents and skills
+- `autopilot` — Launch the orchestrator (Nexus) in full pipeline mode
+- `parallel` — Enable parallel multi-agent execution

package/tools/build/generated-adapters/.cursor/rules/bmad-plus.mdc

@@ -0,0 +1,126 @@
+---
+description: "BMAD+ agents adapter (generated from registry.yaml)"
+alwaysApply: true
+---
+
+<!-- AUTO-GENERATED by tools/build/generate-adapters.js — DO NOT EDIT. -->
+<!-- Source of truth: registry.yaml → spine AGENTS.md. Regenerate: node tools/build/generate-adapters.js -->
+
+# BMAD+ — Adapter for cursor
+
+This file is a THIN adapter. The single source of truth for agents, packs,
+skills, and workflows is the spine file: **AGENTS.md** (project root).
+Read AGENTS.md first; this adapter only adds tool-specific invocation notes.
+
+## Tool notes — cursor
+
+- Cursor loads this rule from `.cursor/rules/` (`alwaysApply: true` in the frontmatter).
+- Treat the spine as the single source of truth; this rule only adds Cursor-specific notes.
+
+## Project Context
+
+This project uses BMAD+, an augmented AI-driven development framework.
+Based on BMAD-METHOD v6.6.0 with multi-role agents, autopilot mode, and parallel execution.
+
+<!-- Hand-authored project instructions — single source: tools/build/adapters.config.js. -->
+<!-- Edit the config, then regenerate; never edit this file directly. -->
+
+## Agents
+
+To activate an agent, say its name or persona:
+
+- **Atlas** (Strategist) — Business analysis + Product management
+- **Forge** (Architect-Dev) — Architecture + Development + Documentation
+- **Sentinel** (Quality) — QA + UX review
+- **Nexus** (Orchestrator) — Sprint management + Autopilot + Parallel execution
+- **Shadow** (OSINT) — Investigation + Scraping + Psychoprofiling (if OSINT pack installed)
+- **Maker** (Agent Creator) — Design, build, validate, and package new BMAD+ agents
+- **Shield** (GRC) — Compliance agents for GDPR, ISO 27001, SOC 2, HIPAA, EU AI Act, DORA, NIS2 and more (derived counts: see Registry facts below)
+- **Miriam** (מרים) — Business Analyst — Strategic analysis, research, product briefs (Dev Studio)
+- **Huldah** (חולדה) — Technical Writer — Documentation, diagrams, editorial review (Dev Studio)
+- **Yosef** (יוסף) — Product Manager — PRD, requirements, feature prioritization (Dev Studio)
+- **Rachel** (רחל) — UX Designer — User experience, wireframes, empathy mapping (Dev Studio)
+- **Bezalel** (בצלאל) — System Architect — Architecture, ADRs, epics & stories (Dev Studio)
+- **Oholiab** (אהליאב) — Senior Engineer — TDD, sprint, code review, implementation (Dev Studio)
+- **Zecher** (זכר, Memory Guardian) — Memory Archivist — Persistent cross-session memory, consolidation, project scanning, context recall, session handoffs
+
+## Skills
+
+- Installed projects load skills from `.agents/skills/`; in this repository the sources live in `src/bmad-plus/skills/` and `src/bmad-plus/agents/`.
+- Each agent has a SKILL.md with capabilities, activation protocol, and role-switching rules.
+- Auto-activation triggers: `.agents/data/role-triggers.yaml` (source: `src/bmad-plus/data/role-triggers.yaml`).
+
+## Project Structure
+
+- `src/bmad-plus/` — Custom module (agents, skills, data)
+- `monitor/` — Upstream monitoring system (VPS)
+- `mcp-server/` — Audit 360° MCP Server
+- `osint-agent-package/` — OSINT package
+- `upstream/` — BMAD-METHOD reference clone
+
+## Communication
+
+- User name: laurent
+- Default language: Français for user-facing content, English for code and technical docs.
+
+## Commit Rules
+
+- NEVER add "Co-Authored-By: Claude" or any AI co-author attribution.
+- The sole author is Laurent Rochetta.
+
+## Repository Maintenance Rule
+
+When updating the main README.md (English), you MUST synchronously update all translations in the readme-international/ directory (fr, es, de).
+
+## Memory Protocol (Karpathy Guardrails)
+
+Agents MUST follow these behavioral principles:
+
+### G1 — Think Before Coding
+
+- State assumptions explicitly. If uncertain, ask.
+- Check `.agents/memory/decisions.md` for prior decisions before re-deciding.
+
+### G2 — Simplicity First
+
+- Minimum code that solves the problem. Nothing speculative.
+- Check `.agents/memory/patterns.md` for existing solutions.
+
+### G3 — Surgical Changes
+
+- Touch only what you must. Match existing style.
+- Log surprises in `.agents/memory/lessons.md`.
+
+### G4 — Goal-Driven Execution
+
+- Define success criteria before implementing.
+- Log non-obvious decisions in `.agents/memory/decisions.md`.
+
+### Memory Files
+
+- `.agents/memory/decisions.md` — Read at session start, write when making decisions
+- `.agents/memory/lessons.md` — Write when something unexpected happens
+- `.agents/memory/patterns.md` — Write when a reusable pattern is validated
+- `.agents/memory/context.md` — Update at session end with project state
+
+## Registry facts (computed from registry.yaml — never hand-typed)
+
+- Product: BMAD+ v0.12.0 (derived from BMAD-METHOD v6.6.0)
+- Models supported: claude, gpt, gemini, local (model-agnostic by contract)
+- Packs (9): Core, OSINT, Maker, Shield, SEO, Memory, Dev Studio, Backup, Animated
+- Installer agents (14 across all packs):
+  - Core (required): 4 installer agents — Core agents & skills
+  - OSINT: 1 installer agent — OSINT & investigation — 2 compliance frameworks
+  - Maker: 1 installer agent — Agent creation toolkit
+  - Shield: 1 installer agent — GRC compliance (25+ frameworks) — 27 specialized agents, 11 workflows, 26 compliance frameworks
+  - SEO: 3 installer agents — SEO audit & optimization — 1 compliance frameworks
+  - Memory: 1 installer agent — Persistent cross-session memory
+  - Dev Studio: 1 installer agent — SDLC automation (6 agents, 56+ skills) — 6 sub-agents, 38 workflows
+  - Backup: 1 installer agent — Backup & restore
+  - Animated: 1 installer agent — Animated website agents
+
+## Key commands
+
+- `bmad-help` — Show all available agents and skills
+- `autopilot` — Launch the orchestrator (Nexus) in full pipeline mode
+- `parallel` — Enable parallel multi-agent execution

package/tools/build/generated-adapters/.opencode/AGENTS.md

@@ -0,0 +1,121 @@
+<!-- AUTO-GENERATED by tools/build/generate-adapters.js — DO NOT EDIT. -->
+<!-- Source of truth: registry.yaml → spine AGENTS.md. Regenerate: node tools/build/generate-adapters.js -->
+
+# BMAD+ — Adapter for opencode
+
+This file is a THIN adapter. The single source of truth for agents, packs,
+skills, and workflows is the spine file: **AGENTS.md** (project root).
+Read AGENTS.md first; this adapter only adds tool-specific invocation notes.
+
+## Tool notes — opencode
+
+- OpenCode follows the AGENTS.md open standard (https://agents.md/).
+- This file relays to the repo-root spine; prefer reading the spine directly when both exist.
+
+## Project Context
+
+This project uses BMAD+, an augmented AI-driven development framework.
+Based on BMAD-METHOD v6.6.0 with multi-role agents, autopilot mode, and parallel execution.
+
+<!-- Hand-authored project instructions — single source: tools/build/adapters.config.js. -->
+<!-- Edit the config, then regenerate; never edit this file directly. -->
+
+## Agents
+
+To activate an agent, say its name or persona:
+
+- **Atlas** (Strategist) — Business analysis + Product management
+- **Forge** (Architect-Dev) — Architecture + Development + Documentation
+- **Sentinel** (Quality) — QA + UX review
+- **Nexus** (Orchestrator) — Sprint management + Autopilot + Parallel execution
+- **Shadow** (OSINT) — Investigation + Scraping + Psychoprofiling (if OSINT pack installed)
+- **Maker** (Agent Creator) — Design, build, validate, and package new BMAD+ agents
+- **Shield** (GRC) — Compliance agents for GDPR, ISO 27001, SOC 2, HIPAA, EU AI Act, DORA, NIS2 and more (derived counts: see Registry facts below)
+- **Miriam** (מרים) — Business Analyst — Strategic analysis, research, product briefs (Dev Studio)
+- **Huldah** (חולדה) — Technical Writer — Documentation, diagrams, editorial review (Dev Studio)
+- **Yosef** (יוסף) — Product Manager — PRD, requirements, feature prioritization (Dev Studio)
+- **Rachel** (רחל) — UX Designer — User experience, wireframes, empathy mapping (Dev Studio)
+- **Bezalel** (בצלאל) — System Architect — Architecture, ADRs, epics & stories (Dev Studio)
+- **Oholiab** (אהליאב) — Senior Engineer — TDD, sprint, code review, implementation (Dev Studio)
+- **Zecher** (זכר, Memory Guardian) — Memory Archivist — Persistent cross-session memory, consolidation, project scanning, context recall, session handoffs
+
+## Skills
+
+- Installed projects load skills from `.agents/skills/`; in this repository the sources live in `src/bmad-plus/skills/` and `src/bmad-plus/agents/`.
+- Each agent has a SKILL.md with capabilities, activation protocol, and role-switching rules.
+- Auto-activation triggers: `.agents/data/role-triggers.yaml` (source: `src/bmad-plus/data/role-triggers.yaml`).
+
+## Project Structure
+
+- `src/bmad-plus/` — Custom module (agents, skills, data)
+- `monitor/` — Upstream monitoring system (VPS)
+- `mcp-server/` — Audit 360° MCP Server
+- `osint-agent-package/` — OSINT package
+- `upstream/` — BMAD-METHOD reference clone
+
+## Communication
+
+- User name: laurent
+- Default language: Français for user-facing content, English for code and technical docs.
+
+## Commit Rules
+
+- NEVER add "Co-Authored-By: Claude" or any AI co-author attribution.
+- The sole author is Laurent Rochetta.
+
+## Repository Maintenance Rule
+
+When updating the main README.md (English), you MUST synchronously update all translations in the readme-international/ directory (fr, es, de).
+
+## Memory Protocol (Karpathy Guardrails)
+
+Agents MUST follow these behavioral principles:
+
+### G1 — Think Before Coding
+
+- State assumptions explicitly. If uncertain, ask.
+- Check `.agents/memory/decisions.md` for prior decisions before re-deciding.
+
+### G2 — Simplicity First
+
+- Minimum code that solves the problem. Nothing speculative.
+- Check `.agents/memory/patterns.md` for existing solutions.
+
+### G3 — Surgical Changes
+
+- Touch only what you must. Match existing style.
+- Log surprises in `.agents/memory/lessons.md`.
+
+### G4 — Goal-Driven Execution
+
+- Define success criteria before implementing.
+- Log non-obvious decisions in `.agents/memory/decisions.md`.
+
+### Memory Files
+
+- `.agents/memory/decisions.md` — Read at session start, write when making decisions
+- `.agents/memory/lessons.md` — Write when something unexpected happens
+- `.agents/memory/patterns.md` — Write when a reusable pattern is validated
+- `.agents/memory/context.md` — Update at session end with project state
+
+## Registry facts (computed from registry.yaml — never hand-typed)
+
+- Product: BMAD+ v0.12.0 (derived from BMAD-METHOD v6.6.0)
+- Models supported: claude, gpt, gemini, local (model-agnostic by contract)
+- Packs (9): Core, OSINT, Maker, Shield, SEO, Memory, Dev Studio, Backup, Animated
+- Installer agents (14 across all packs):
+  - Core (required): 4 installer agents — Core agents & skills
+  - OSINT: 1 installer agent — OSINT & investigation — 2 compliance frameworks
+  - Maker: 1 installer agent — Agent creation toolkit
+  - Shield: 1 installer agent — GRC compliance (25+ frameworks) — 27 specialized agents, 11 workflows, 26 compliance frameworks
+  - SEO: 3 installer agents — SEO audit & optimization — 1 compliance frameworks
+  - Memory: 1 installer agent — Persistent cross-session memory
+  - Dev Studio: 1 installer agent — SDLC automation (6 agents, 56+ skills) — 6 sub-agents, 38 workflows
+  - Backup: 1 installer agent — Backup & restore
+  - Animated: 1 installer agent — Animated website agents
+
+## Key commands
+
+- `bmad-help` — Show all available agents and skills
+- `autopilot` — Launch the orchestrator (Nexus) in full pipeline mode
+- `parallel` — Enable parallel multi-agent execution