@relipa/ai-flow-kit 0.0.1

package/scripts/validate.js

@@ -0,0 +1,303 @@
+const fs = require('fs-extra');
+const path = require('path');
+const chalk = require('chalk');
+
+module.exports = async function validate(filePath, options = {}) {
+    const ruleSet = options.ruleset || 'default';
+    const verbose = options.verbose || false;
+    const autoFix = options.fix || false;
+
+    console.log(chalk.blue(`Validating ${path.basename(filePath)} against ruleset: ${ruleSet}`));
+
+    if (!(await fs.pathExists(filePath))) {
+        console.error(chalk.red(`File not found: ${filePath}`));
+        return;
+    }
+
+    const content = await fs.readFile(filePath, 'utf-8');
+    const issues = [];
+
+    // Load rules
+    const rulesDir = path.join(process.cwd(), '.rules');
+    let activeRules = [];
+
+    if (await fs.pathExists(rulesDir)) {
+        const ruleFiles = await fs.readdir(rulesDir);
+        activeRules = ruleFiles.filter(f => f.endsWith('.md'));
+    }
+
+    // Run validations
+    const codeStyleIssues = validateCodeStyle(content, filePath);
+    const namingIssues = validateNaming(content);
+    const securityIssues = validateSecurity(content);
+    const performanceIssues = validatePerformance(content);
+    const testingIssues = validateTesting(content, filePath);
+
+    issues.push(...codeStyleIssues);
+    issues.push(...namingIssues);
+    issues.push(...securityIssues);
+    issues.push(...performanceIssues);
+    issues.push(...testingIssues);
+
+    // Filter by ruleset strictness
+    const filtered = filterByRuleset(issues, ruleSet);
+
+    // Display results
+    displayResults(filtered, verbose);
+
+    // Auto-fix: rewrite file with trailing whitespace removed
+    if (autoFix && filtered.some(i => i.type === 'trailing-whitespace' || i.type === 'indentation')) {
+        const fixed = autoFixContent(content);
+        await fs.writeFile(filePath, fixed, 'utf-8');
+        console.log(chalk.green(`✓ Auto-fixed: trailing whitespace removed in ${path.basename(filePath)}`));
+    }
+
+    return {
+        passed: filtered.length === 0,
+        issues: filtered,
+        total: filtered.length,
+        warnings: filtered.filter(i => i.severity === 'warning').length,
+        errors: filtered.filter(i => i.severity === 'error').length
+    };
+};
+
+/**
+ * Validate code style (indentation, brackets, etc)
+ */
+function validateCodeStyle(content, filePath) {
+    const issues = [];
+    const ext = path.extname(filePath);
+
+    if (!['.php', '.js', '.ts', '.tsx', '.jsx'].includes(ext)) {
+        return issues;
+    }
+
+    const lines = content.split('\n');
+
+    lines.forEach((line, i) => {
+        const lineNum = i + 1;
+
+        // Check indentation consistency
+        const leadingSpaces = line.match(/^(\s*)/)[1].length;
+        if (leadingSpaces % 4 !== 0 && line.trim() !== '' && leadingSpaces > 0) {
+            issues.push({
+                type: 'indentation',
+                line: lineNum,
+                severity: 'warning',
+                message: 'Inconsistent indentation (not multiple of 4)',
+                suggestion: `Indent with 4 spaces`
+            });
+        }
+
+        // Check trailing whitespace
+        if (line.endsWith(' ') || line.endsWith('\t')) {
+            issues.push({
+                type: 'trailing-whitespace',
+                line: lineNum,
+                severity: 'warning',
+                message: 'Trailing whitespace',
+                suggestion: 'Remove trailing whitespace'
+            });
+        }
+
+        // Check line length (max 120 characters for PHP, 100 for others)
+        const maxLen = ext === '.php' ? 120 : 100;
+        if (line.length > maxLen) {
+            issues.push({
+                type: 'line-too-long',
+                line: lineNum,
+                severity: 'warning',
+                message: `Line too long (${line.length} > ${maxLen})`,
+                suggestion: 'Break into multiple lines'
+            });
+        }
+    });
+
+    return issues;
+}
+
+/**
+ * Validate naming conventions
+ */
+function validateNaming(content) {
+    const issues = [];
+
+    // Check for single-letter variables (except in loops)
+    const singleLetterVars = content.match(/\b([a-z])\s*=/g);
+    if (singleLetterVars) {
+        const matches = content.match(/\$([a-z])\s*=/g) || [];
+        if (matches.length > 0) {
+            issues.push({
+                type: 'single-letter-var',
+                severity: 'warning',
+                message: 'Single-letter variable names found',
+                suggestion: 'Use descriptive variable names'
+            });
+        }
+    }
+
+    // Check for camelCase vs snake_case consistency
+    const phpVars = content.match(/\$[a-zA-Z_][a-zA-Z0-9_]*/g) || [];
+    const hasSnakeCase = phpVars.some(v => v.includes('_'));
+    const hasCamelCase = phpVars.some(v => /[a-z][A-Z]/.test(v));
+
+    if (hasSnakeCase && hasCamelCase) {
+        issues.push({
+            type: 'naming-inconsistency',
+            severity: 'warning',
+            message: 'Mixed snake_case and camelCase variables',
+            suggestion: 'Use consistent naming convention'
+        });
+    }
+
+    return issues;
+}
+
+/**
+ * Validate security issues
+ */
+function validateSecurity(content) {
+    const issues = [];
+
+    // Check for common security issues
+    const securityPatterns = [
+        {
+            pattern: /eval\s*\(/gi,
+            message: 'Using eval() is a security risk',
+            type: 'eval-usage'
+        },
+        {
+            pattern: /\$_\w+\s*\[/g,
+            message: 'Direct use of $_GET, $_POST, etc without sanitization',
+            type: 'unsanitized-input'
+        },
+        {
+            pattern: /sql\s*=\s*["'].*["']\s*\+/gi,
+            message: 'Possible SQL injection vulnerability',
+            type: 'sql-injection'
+        }
+    ];
+
+    for (const { pattern, message, type } of securityPatterns) {
+        if (pattern.test(content)) {
+            issues.push({
+                type,
+                severity: 'error',
+                message,
+                suggestion: 'Use parameterized queries or input sanitization'
+            });
+        }
+    }
+
+    return issues;
+}
+
+/**
+ * Validate performance issues
+ */
+function validatePerformance(content) {
+    const issues = [];
+
+    // Check for N+1 query patterns
+    if (content.includes('foreach') && content.includes('query')) {
+        issues.push({
+            type: 'n-plus-one',
+            severity: 'warning',
+            message: 'Potential N+1 query problem detected',
+            suggestion: 'Use eager loading or batch queries'
+        });
+    }
+
+    // Check for unnecessary loops
+    if (content.match(/for\s*\([^)]*;\s*[^)]*;\s*[^)]*\)\s*{\s*if\s*\(/)) {
+        issues.push({
+            type: 'inefficient-loop',
+            severity: 'warning',
+            message: 'Consider using filter() or array functions',
+            suggestion: 'Use array methods for better performance'
+        });
+    }
+
+    return issues;
+}
+
+/**
+ * Validate testing coverage
+ */
+function validateTesting(content, filePath) {
+    const issues = [];
+    const fileName = path.basename(filePath);
+
+    // Check if this is a test file
+    const isTestFile = fileName.includes('.test.') || fileName.includes('.spec.');
+
+    if (!isTestFile && (filePath.includes('src/') || filePath.includes('app/'))) {
+        const baseName = fileName.split('.')[0];
+        issues.push({
+            type: 'missing-tests',
+            severity: 'warning',
+            message: `No corresponding test file found for ${fileName}`,
+            suggestion: `Create ${baseName}.test.js or ${baseName}.spec.js`
+        });
+    }
+
+    return issues;
+}
+
+/**
+ * Filter issues by ruleset strictness:
+ *   strict  → all issues (warnings + errors)
+ *   default → errors + warnings (same as strict — team standard)
+ *   lenient → errors only
+ */
+function filterByRuleset(issues, ruleSet) {
+    if (ruleSet === 'lenient') {
+        return issues.filter(i => i.severity === 'error');
+    }
+    // 'strict' and 'default' both return everything
+    return issues;
+}
+
+/**
+ * Auto-fix: remove trailing whitespace from every line.
+ * Indentation normalization is not attempted (too risky without AST).
+ */
+function autoFixContent(content) {
+    return content
+        .split('\n')
+        .map(line => line.replace(/\s+$/, ''))
+        .join('\n');
+}
+
+/**
+ * Display validation results
+ */
+function displayResults(issues, verbose) {
+    if (issues.length === 0) {
+        console.log(chalk.green('✓ No issues found'));
+        return;
+    }
+
+    const errors = issues.filter(i => i.severity === 'error');
+    const warnings = issues.filter(i => i.severity === 'warning');
+
+    if (errors.length > 0) {
+        console.log(chalk.red(`\n❌ ${errors.length} Error(s):`));
+        errors.forEach(issue => {
+            console.log(chalk.red(`  • [${issue.type}] ${issue.message}`));
+            if (issue.line) console.log(chalk.gray(`    Line ${issue.line}`));
+            console.log(chalk.yellow(`    → ${issue.suggestion}`));
+        });
+    }
+
+    if (warnings.length > 0) {
+        console.log(chalk.yellow(`\n⚠️  ${warnings.length} Warning(s):`));
+        warnings.forEach(issue => {
+            console.log(chalk.yellow(`  • [${issue.type}] ${issue.message}`));
+            if (issue.line) console.log(chalk.gray(`    Line ${issue.line}`));
+            console.log(chalk.gray(`    → ${issue.suggestion}`));
+        });
+    }
+
+    console.log(chalk.gray(`\nTotal: ${errors.length} errors, ${warnings.length} warnings`));
+}

package/upstream/.claude-plugin/marketplace.json

@@ -0,0 +1,20 @@
+{
+  "name": "superpowers-dev",
+  "description": "Development marketplace for Superpowers core skills library",
+  "owner": {
+    "name": "Jesse Vincent",
+    "email": "jesse@fsck.com"
+  },
+  "plugins": [
+    {
+      "name": "superpowers",
+      "description": "Core skills library for Claude Code: TDD, debugging, collaboration patterns, and proven techniques",
+      "version": "5.0.7",
+      "source": "./",
+      "author": {
+        "name": "Jesse Vincent",
+        "email": "jesse@fsck.com"
+      }
+    }
+  ]
+}

package/upstream/.claude-plugin/plugin.json

@@ -0,0 +1,20 @@
+{
+  "name": "superpowers",
+  "description": "Core skills library for Claude Code: TDD, debugging, collaboration patterns, and proven techniques",
+  "version": "5.0.7",
+  "author": {
+    "name": "Jesse Vincent",
+    "email": "jesse@fsck.com"
+  },
+  "homepage": "https://github.com/obra/superpowers",
+  "repository": "https://github.com/obra/superpowers",
+  "license": "MIT",
+  "keywords": [
+    "skills",
+    "tdd",
+    "debugging",
+    "collaboration",
+    "best-practices",
+    "workflows"
+  ]
+}

package/upstream/.codex/INSTALL.md

@@ -0,0 +1,67 @@
+# Installing Superpowers for Codex
+
+Enable superpowers skills in Codex via native skill discovery. Just clone and symlink.
+
+## Prerequisites
+
+- Git
+
+## Installation
+
+1. **Clone the superpowers repository:**
+   ```bash
+   git clone https://github.com/obra/superpowers.git ~/.codex/superpowers
+   ```
+
+2. **Create the skills symlink:**
+   ```bash
+   mkdir -p ~/.agents/skills
+   ln -s ~/.codex/superpowers/skills ~/.agents/skills/superpowers
+   ```
+
+   **Windows (PowerShell):**
+   ```powershell
+   New-Item -ItemType Directory -Force -Path "$env:USERPROFILE\.agents\skills"
+   cmd /c mklink /J "$env:USERPROFILE\.agents\skills\superpowers" "$env:USERPROFILE\.codex\superpowers\skills"
+   ```
+
+3. **Restart Codex** (quit and relaunch the CLI) to discover the skills.
+
+## Migrating from old bootstrap
+
+If you installed superpowers before native skill discovery, you need to:
+
+1. **Update the repo:**
+   ```bash
+   cd ~/.codex/superpowers && git pull
+   ```
+
+2. **Create the skills symlink** (step 2 above) — this is the new discovery mechanism.
+
+3. **Remove the old bootstrap block** from `~/.codex/AGENTS.md` — any block referencing `superpowers-codex bootstrap` is no longer needed.
+
+4. **Restart Codex.**
+
+## Verify
+
+```bash
+ls -la ~/.agents/skills/superpowers
+```
+
+You should see a symlink (or junction on Windows) pointing to your superpowers skills directory.
+
+## Updating
+
+```bash
+cd ~/.codex/superpowers && git pull
+```
+
+Skills update instantly through the symlink.
+
+## Uninstalling
+
+```bash
+rm ~/.agents/skills/superpowers
+```
+
+Optionally delete the clone: `rm -rf ~/.codex/superpowers`.

package/upstream/.cursor-plugin/plugin.json

@@ -0,0 +1,25 @@
+{
+  "name": "superpowers",
+  "displayName": "Superpowers",
+  "description": "Core skills library: TDD, debugging, collaboration patterns, and proven techniques",
+  "version": "5.0.7",
+  "author": {
+    "name": "Jesse Vincent",
+    "email": "jesse@fsck.com"
+  },
+  "homepage": "https://github.com/obra/superpowers",
+  "repository": "https://github.com/obra/superpowers",
+  "license": "MIT",
+  "keywords": [
+    "skills",
+    "tdd",
+    "debugging",
+    "collaboration",
+    "best-practices",
+    "workflows"
+  ],
+  "skills": "./skills/",
+  "agents": "./agents/",
+  "commands": "./commands/",
+  "hooks": "./hooks/hooks-cursor.json"
+}

package/upstream/.gitattributes

@@ -0,0 +1,18 @@
+# Ensure shell scripts always have LF line endings
+*.sh text eol=lf
+hooks/session-start text eol=lf
+
+# Ensure the polyglot wrapper keeps LF (it's parsed by both cmd and bash)
+*.cmd text eol=lf
+
+# Common text files
+*.md text eol=lf
+*.json text eol=lf
+*.js text eol=lf
+*.mjs text eol=lf
+*.ts text eol=lf
+
+# Explicitly mark binary files
+*.png binary
+*.jpg binary
+*.gif binary

package/upstream/.github/FUNDING.yml

@@ -0,0 +1,3 @@
+# These are supported funding model platforms
+
+github: [obra]

package/upstream/.github/ISSUE_TEMPLATE/bug_report.md

@@ -0,0 +1,52 @@
+---
+name: Bug Report
+about: Something isn't working as expected
+labels: bug
+---
+
+<!--
+BEFORE FILING: Search open AND closed issues. The Windows SessionStart
+hook alone has been reported 29 times. If your issue already exists,
+add a comment or reaction to the existing one instead.
+-->
+
+- [ ] I searched existing issues and this is not a duplicate
+
+## Environment
+
+| Field | Value |
+|-------|-------|
+| Superpowers version | |
+| Harness (Claude Code, Cursor, etc.) | |
+| Harness version | |
+| Model | |
+| OS + shell | |
+
+## Is this a Superpowers issue or a platform issue?
+<!-- Superpowers is a plugin. Some reported "bugs" are actually issues
+     in the underlying platform or model. If you're not sure, try
+     reproducing without Superpowers installed.
+
+     If the problem persists without Superpowers, file the issue with
+     your platform instead. -->
+
+- [ ] I confirmed this issue does not occur without Superpowers installed
+
+## What happened?
+<!-- Be specific. "It doesn't work" is not a bug report. -->
+
+## Steps to reproduce
+1.
+2.
+3.
+
+## Expected behavior
+<!-- What should have happened? -->
+
+## Actual behavior
+<!-- What happened instead? -->
+
+## Debug log or conversation transcript
+<!-- A debug log or conversation transcript showing the issue is the
+     single most helpful thing you can include. Without one, we're
+     guessing. Screenshots of error output are also useful. -->

package/upstream/.github/ISSUE_TEMPLATE/config.yml

@@ -0,0 +1,5 @@
+blank_issues_enabled: false
+contact_links:
+  - name: Questions & Help
+    url: https://discord.gg/Jd8Vphy9jq
+    about: For usage questions, troubleshooting help, and general discussion, please visit our Discord instead of opening an issue.

package/upstream/.github/ISSUE_TEMPLATE/feature_request.md

@@ -0,0 +1,34 @@
+---
+name: Feature Request
+about: Propose a change or addition to Superpowers
+labels: enhancement
+---
+
+<!--
+BEFORE FILING: Search open AND closed issues. Many features have been
+requested before — some were implemented differently, some are in
+progress, and some were intentionally declined.
+-->
+
+- [ ] I searched existing issues and this has not been proposed before
+
+## What problem does this solve?
+<!-- Describe the problem from your own experience. What were you doing,
+     what went wrong or was missing, and why did it matter?
+
+     "It would be cool if..." is not a problem statement. -->
+
+## Proposed solution
+<!-- What specifically do you want to happen? Be concrete. -->
+
+## What alternatives did you consider?
+<!-- What other approaches could solve the same problem? Why is your
+     proposal better? -->
+
+## Is this appropriate for core Superpowers?
+<!-- Would this benefit someone working on a completely different kind
+     of project? If this is specific to your domain, workflow, or a
+     third-party tool, it may belong as its own plugin instead. -->
+
+## Context
+<!-- Optional: version info, harness, model, workflow where you hit this. -->

package/upstream/.github/ISSUE_TEMPLATE/platform_support.md

@@ -0,0 +1,23 @@
+---
+name: IDE / Platform Support Request
+about: Request support for a new IDE, editor, or AI coding tool
+labels: platform-support
+---
+
+<!--
+BEFORE FILING: Search existing issues — your IDE may already be
+requested or discussed.
+-->
+
+- [ ] I searched existing issues for this IDE/platform
+
+## Which IDE or platform?
+<!-- Name and link -->
+
+## Does this tool have a plugin or extension system?
+<!-- If yes, link to the docs. If no, explain how third-party
+     integrations typically work with this tool. -->
+
+## Have you tried manual installation?
+<!-- Many tools work with Superpowers through manual setup even without
+     official support. Did you try? What happened? -->

package/upstream/.github/PULL_REQUEST_TEMPLATE.md

@@ -0,0 +1,87 @@
+<!--
+BEFORE SUBMITTING: Read every word of this template. PRs that leave
+sections blank, contain multiple unrelated changes, or show no evidence
+of human involvement will be closed without review.
+-->
+
+## What problem are you trying to solve?
+<!-- Describe the specific problem you encountered. If this was a session
+     issue, include: what you were doing, what went wrong, the model's
+     exact failure mode, and ideally a transcript or session log.
+
+     "Improving" something is not a problem statement. What broke? What
+     failed? What was the user experience that motivated this? -->
+
+## What does this PR change?
+<!-- 1-3 sentences. What, not why — the "why" belongs above. -->
+
+## Is this change appropriate for the core library?
+<!-- Superpowers core contains general-purpose skills and infrastructure
+     that benefit all users. Ask yourself:
+
+     - Would this be useful to someone working on a completely different
+       kind of project than yours?
+     - Is this project-specific, team-specific, or tool-specific?
+     - Does this integrate or promote a third-party service?
+
+     If your change is a new skill for a specific domain, workflow tool,
+     or third-party integration, it belongs in its own plugin — not here.
+     See the plugin development docs for how to publish it separately. -->
+
+## What alternatives did you consider?
+<!-- What other approaches did you try or evaluate before landing on this
+     one? Why were they worse? If you didn't consider alternatives, say so
+     — but know that's a red flag. -->
+
+## Does this PR contain multiple unrelated changes?
+<!-- If yes: stop. Split it into separate PRs. Bundled PRs will be closed.
+     If you believe the changes are related, explain the dependency. -->
+
+## Existing PRs
+- [ ] I have reviewed all open AND closed PRs for duplicates or prior art
+- Related PRs: <!-- #number, #number, or "none found" -->
+
+<!-- If a related closed PR exists, explain what's different about your
+     approach and why it should succeed where the other didn't. -->
+
+## Environment tested
+
+| Harness (e.g. Claude Code, Cursor) | Harness version | Model | Model version/ID |
+|-------------------------------------|-----------------|-------|------------------|
+|                                     |                 |       |                  |
+
+## Evaluation
+- What was the initial prompt you (or your human partner) used to start
+  the session that led to this change?
+- How many eval sessions did you run AFTER making the change?
+- How did outcomes change compared to before the change?
+
+<!-- "It works" is not evaluation. Describe the before/after difference
+     you observed across multiple sessions. -->
+
+## Rigor
+
+- [ ] If this is a skills change: I used `superpowers:writing-skills` and
+      completed adversarial pressure testing (paste results below)
+- [ ] This change was tested adversarially, not just on the happy path
+- [ ] I did not modify carefully-tuned content (Red Flags table,
+      rationalizations, "human partner" language) without extensive evals
+      showing the change is an improvement
+
+<!-- If you changed wording in skills that shape agent behavior, show your
+     eval methodology and results. These are not prose — they are code. -->
+
+## Human review
+- [ ] A human has reviewed the COMPLETE proposed diff before submission
+
+<!--
+STOP. If the checkbox above is not checked, do not submit this PR.
+
+PRs will be closed without review if they:
+- Show no evidence of human involvement
+- Contain multiple unrelated changes
+- Promote or integrate third-party services or tools
+- Submit project-specific or personal configuration as core changes
+- Leave required sections blank or use placeholder text
+- Modify behavior-shaping content without eval evidence
+-->