@luquimbo/bi-superpowers 4.1.4 → 4.1.5

package/.claude-plugin/marketplace.json

@@ -6,7 +6,7 @@
   },
   "metadata": {
     "description": "AI-powered skills for Power BI Desktop development. Works with Claude Code, GitHub Copilot, Codex, Gemini CLI, and Kilo Code.",
-    "version": "4.1.4",
+    "version": "4.1.5",
     "repository": "https://github.com/luquimbo/bi-superpowers"
   },
   "plugins": [

package/.claude-plugin/plugin.json

@@ -1,7 +1,7 @@
 {
   "name": "bi-superpowers",
   "description": "Claude Code plugin for Power BI, Microsoft Fabric, and semantic model workflows powered by the official Microsoft MCP servers.",
-  "version": "4.1.4",
+  "version": "4.1.5",
   "author": {
     "name": "Lucas Sanchez"
   },

package/.claude-plugin/skill-manifest.json

@@ -1,6 +1,6 @@
 {
   "name": "bi-superpowers",
-  "version": "4.1.4",
+  "version": "4.1.5",
   "skillCount": 4,
   "skills": [
     {

package/.plugin/plugin.json

@@ -1,7 +1,7 @@
 {
   "spec": "open-plugin-spec@1",
   "name": "bi-superpowers",
-  "version": "4.1.4",
+  "version": "4.1.5",
   "description": "Claude Code plugin for Power BI, Microsoft Fabric, and semantic model workflows powered by the official Microsoft MCP servers.",
   "author": {
     "name": "Lucas Sanchez"

package/AGENTS.md

@@ -15,38 +15,6 @@
 - `library/`
 - `config.json`
 
----
-
-## QA Codex Shortcut
-
-When the user says `qa codex` in a new session for this repo, treat it as activating the external QA review workflow.
-
-Role split:
-- **Codex** — external QA / code reviewer
-- **Claude Code** — primary implementer
-- **Lucas** — bridge between both agents
-
-Default review protocol:
-1. Read `coordination/ACTIVE_PLAN.md` first.
-2. Read `coordination/TO_CODEX_REVIEW.md` second.
-3. If `TO_CODEX_REVIEW.md` references an audit or follow-up review file, read that too.
-4. Review commits or staged diffs with focus on:
-   - functional bugs
-   - regressions
-   - reasonable missing tests
-   - drift between `src/content/...` and generated artifacts
-   - build/release risks
-   - Windows + Power BI Desktop risks
-5. Return prioritized findings first and a short summary second.
-
-Working rules:
-- Codex is a second opinion, not the implementation owner and not a release gate.
-- Do not assume you saw the whole previous session; rely on the coordination `.md` files.
-- If the user asks for a prompt for Claude, provide a copy-paste-ready prompt that explicitly references the coordination files above.
-- This shortcut is a repo convention for future sessions, not implicit model memory.
-
----
-
 ## Publishing to npm (for AI agents)
 
 When the user asks for things like **"publica una nueva versión"**, **"publish a patch"**, **"sube esto a npm"**, **"release v1.2.0"**, follow this flow.

package/CHANGELOG.md

@@ -114,10 +114,9 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 - **README rewrite**: dual install paths clearly segmented by audience
   (Claude Code users → marketplace, everyone else → npm + `super install`),
   mirrored update instructions, and OQ-1 resolution explained inline.
-- **Opus 4.7 1M code review report** at
-  `coordination/CODE_REVIEW_OPUS_2026-04-21.md` — 3 blockers + 5 high +
-  8 medium + 7 low findings across the whole repo (all resolved in this
-  release, except 4 mediums/3 lows explicitly deferred as product calls).
+- **Opus 4.7 1M code review pass** — 3 blockers + 5 high + 8 medium +
+  7 low findings across the whole repo (all resolved in this release,
+  except 4 mediums/3 lows explicitly deferred as product calls).
 
 ### Changed
 
@@ -200,7 +199,7 @@ changes required. Recommended sequence:
 
 # Users on npm:
 super upgrade
-super install --yes    # propagate the new skills to all agents
+super install --all --yes    # propagate the new skills to all agents
 ```
 
 Session-opener users: when you previously said "empezar" / "arranco" /
@@ -388,7 +387,7 @@ The plugin has been simplified to its core: **Power BI Desktop local development
 - GitHub Copilot → `~/.copilot/mcp-config.json` (`servers` JSON)
 - Codex → `~/.codex/config.toml` (TOML `[mcp_servers.*]`)
 - Gemini CLI → `~/.gemini/settings.json` (`mcpServers` with `httpUrl`)
-- Kilo Code → `~/.kilocode/mcp_settings.json` (`mcpServers` JSON)
+- Kilo Code → `~/.kilo/mcp_settings.json` (`mcpServers` JSON)
 
 New module: `bin/lib/mcp-config.js` with per-agent writers and tests.
 

package/README.md

@@ -567,7 +567,6 @@ The npm package does not include:
 
 ```text
 examples/smoke-test/
-coordination/
 node_modules/
 *.test.js
 ```

package/bin/cli.js

@@ -657,7 +657,7 @@ function getUpgradeRefreshSteps() {
     },
     {
       label: 'Skills installed in your user profile (npm + super install):',
-      command: 'super install --yes',
+      command: 'super install --all --yes',
     },
     {
       label:

package/bin/commands/mcp-setup.js

@@ -168,7 +168,13 @@ function mcpSetupCommand(args, config) {
     );
   }
 
-  if (!options.tool && !hasLocalPluginMarker(targetDir)) {
+  if (options.tool && !MCP_CONFIGS[options.tool]) {
+    tui.error(`Unknown tool: ${options.tool}`);
+    tui.info(`Available tools: ${Object.keys(MCP_CONFIGS).join(', ')}`);
+    process.exit(1);
+  }
+
+  if ((!options.tool || options.tool === 'claude-plugin') && !hasLocalPluginMarker(targetDir)) {
     tui.warning('mcp-setup is only for project-local Claude Code plugin configs.');
     tui.info(
       'For Codex, GitHub Copilot, Gemini CLI, Kilo Code, and Claude Code user-level installs, run:'
@@ -187,12 +193,6 @@ function mcpSetupCommand(args, config) {
   let configuredTools = loadConfiguredTools(targetDir);
 
   if (options.tool) {
-    if (!MCP_CONFIGS[options.tool]) {
-      tui.error(`Unknown tool: ${options.tool}`);
-      tui.info(`Available tools: ${Object.keys(MCP_CONFIGS).join(', ')}`);
-      process.exit(1);
-    }
-
     configuredTools = [options.tool];
   }
 

package/bin/lib/mcp-config.js

@@ -15,7 +15,7 @@
  *   | GitHub Copilot  | ~/.copilot/mcp-config.json            | JSON servers      |
  *   | Codex           | ~/.codex/config.toml                  | TOML mcp_servers  |
  *   | Gemini CLI      | ~/.gemini/settings.json               | JSON mcpServers   |
- *   | Kilo Code       | ~/.kilocode/mcp_settings.json         | JSON mcpServers   |
+ *   | Kilo Code       | ~/.kilo/mcp_settings.json             | JSON mcpServers   |
  *
  * The launcher path for the Power BI Modeling MCP is resolved to an
  * absolute path at install time so it works in agents that don't
@@ -121,10 +121,9 @@ function assertNotSymlink(filePath) {
  *
  * Known Windows gap: this uses `lstatSync().isSymbolicLink()`. NTFS
  * junctions are NOT classified as symlinks by Node, so a junction at
- * `~/.copilot` would pass this check. Documented as a residual risk
- * in `coordination/TO_CODEX_REVIEW.md`; addressing it needs
- * `fs.readlinkSync` with reparse-point inspection and is out of scope
- * for this commit.
+ * `~/.copilot` would pass this check. Addressing that needs
+ * `fs.readlinkSync` with reparse-point inspection and is tracked as
+ * a separate hardening task.
  *
  * @throws {Error} if any ancestor of filePath (up to home) is a symlink
  */
@@ -194,6 +193,11 @@ function assertPathSafeForWrite(filePath) {
  */
 function writeFileAtomic(filePath, content) {
   assertPathSafeForWrite(filePath);
+  const tmpPath = `${filePath}.tmp`;
+  const backupPath = `${filePath}.bak`;
+  assertPathSafeForWrite(tmpPath);
+  assertPathSafeForWrite(backupPath);
+
   const dir = path.dirname(filePath);
   if (!fs.existsSync(dir)) {
     fs.mkdirSync(dir, { recursive: true });
@@ -201,7 +205,7 @@ function writeFileAtomic(filePath, content) {
 
   if (fs.existsSync(filePath)) {
     try {
-      fs.copyFileSync(filePath, `${filePath}.bak`);
+      fs.copyFileSync(filePath, backupPath);
     } catch (err) {
       throw new Error(
         `Could not back up ${filePath} before writing: ${err.message}. ` +
@@ -210,7 +214,6 @@ function writeFileAtomic(filePath, content) {
     }
   }
 
-  const tmpPath = `${filePath}.tmp`;
   try {
     fs.writeFileSync(tmpPath, content);
     fs.renameSync(tmpPath, filePath);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@luquimbo/bi-superpowers",
-  "version": "4.1.4",
+  "version": "4.1.5",
   "description": "Open-source Power BI Desktop toolkit for Claude Code, GitHub Copilot, Codex, Gemini CLI, and Kilo Code. Ships 4 skills and 2 official Microsoft MCP servers.",
   "main": "bin/cli.js",
   "bin": {

package/skills/bi-start/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: "bi-start"
 description: "Use when the user asks about BI Start Skill, especially phrases like \"bi-start\", \"bi start\", \"/bi-start\", \"empezar\", \"comenzar\", \"arranco\"."
-version: "4.1.4"
+version: "4.1.5"
 ---
 
 <!-- Generated by BI Agent Superpowers. Edit src/content/skills/bi-start.md instead. -->

package/skills/bi-start/scripts/update-check.js

@@ -47,7 +47,7 @@ const HTTPS_TIMEOUT_MS = 5000;
 // Rewritten at generation time when this helper is copied into
 // `skills/<name>/scripts/update-check.js`. In the canonical source under
 // `bin/commands/`, it stays null and we fall back to package.json.
-const BUNDLED_INSTALLED_VERSION = "4.1.4";
+const BUNDLED_INSTALLED_VERSION = "4.1.5";
 
 // ---------------------------------------------------------------------------
 // Argument parsing

package/skills/pbi-connect/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: "pbi-connect"
 description: "Use when the user asks about Power BI MCP Connection Skill, especially phrases like \"connect Power BI\", \"PBI connection\", \"MCP connection\", \"Power BI MCP\", \"modeling mcp\", \"Power BI Modeling MCP\"."
-version: "4.1.4"
+version: "4.1.5"
 ---
 
 <!-- Generated by BI Agent Superpowers. Edit src/content/skills/pbi-connect.md instead. -->

package/skills/pbi-connect/scripts/update-check.js

@@ -47,7 +47,7 @@ const HTTPS_TIMEOUT_MS = 5000;
 // Rewritten at generation time when this helper is copied into
 // `skills/<name>/scripts/update-check.js`. In the canonical source under
 // `bin/commands/`, it stays null and we fall back to package.json.
-const BUNDLED_INSTALLED_VERSION = "4.1.4";
+const BUNDLED_INSTALLED_VERSION = "4.1.5";
 
 // ---------------------------------------------------------------------------
 // Argument parsing

package/skills/project-kickoff/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: "project-kickoff"
 description: "Use when the user asks about Project Kickoff Skill, especially phrases like \"I'm starting a brand-new BI project from scratch\", \"analizar proyecto\", \"analyze project\", \"project kickoff\", \"nuevo proyecto\", \"new project\"."
-version: "4.1.4"
+version: "4.1.5"
 ---
 
 <!-- Generated by BI Agent Superpowers. Edit src/content/skills/project-kickoff.md instead. -->

package/skills/project-kickoff/scripts/update-check.js

@@ -47,7 +47,7 @@ const HTTPS_TIMEOUT_MS = 5000;
 // Rewritten at generation time when this helper is copied into
 // `skills/<name>/scripts/update-check.js`. In the canonical source under
 // `bin/commands/`, it stays null and we fall back to package.json.
-const BUNDLED_INSTALLED_VERSION = "4.1.4";
+const BUNDLED_INSTALLED_VERSION = "4.1.5";
 
 // ---------------------------------------------------------------------------
 // Argument parsing

package/skills/report-design/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: "report-design"
 description: "Use when the user asks about Report Design Skill, especially phrases like \"crear reportes\", \"armar el reporte\", \"diseñar reporte\", \"report design\", \"create reports\", \"build dashboard\"."
-version: "4.1.4"
+version: "4.1.5"
 ---
 
 <!-- Generated by BI Agent Superpowers. Edit src/content/skills/report-design.md instead. -->

package/skills/report-design/scripts/update-check.js

@@ -47,7 +47,7 @@ const HTTPS_TIMEOUT_MS = 5000;
 // Rewritten at generation time when this helper is copied into
 // `skills/<name>/scripts/update-check.js`. In the canonical source under
 // `bin/commands/`, it stays null and we fall back to package.json.
-const BUNDLED_INSTALLED_VERSION = "4.1.4";
+const BUNDLED_INSTALLED_VERSION = "4.1.5";
 
 // ---------------------------------------------------------------------------
 // Argument parsing