@slowdini/slow-powers-opencode 0.1.0 → 0.1.3

package/README.md

@@ -33,6 +33,26 @@ Slow-powers integrates directly into your agent's session, providing a highly di
 Installation differs by harness. If you use more than one, install
 Slow-powers separately for each.
 
+### Install with your agent
+
+Don't want to look up the steps? Open the harness you want Slow-powers on and
+paste this prompt to its agent — it'll read the guide, work out which harness
+it's in, and do the install for you:
+
+```text
+Install the "slow-powers" plugin for the coding-agent harness you are currently
+running in. Read the installation guide at
+https://github.com/slowdini/slow-powers#installation, determine which harness
+this is (Claude Code, Codex CLI, or OpenCode), and follow the matching steps —
+run the documented marketplace/install commands for Claude Code or Codex, or add
+the package to the `plugin` array in opencode.json for OpenCode. Then tell me
+exactly what you changed and what I need to do to finish (e.g. restart the
+session so the skills load).
+```
+
+The per-harness instructions below are the source of truth the agent follows —
+and the reference for installing by hand.
+
 ### Claude Code
 
 ```
@@ -65,13 +85,7 @@ Add Slow-powers to the `plugin` array in your `opencode.json` (global or project
 }
 ```
 
-This installs the latest version from npm. To track the `main` branch instead, use the GitHub install path:
-
-```json
-{
-  "plugin": ["github:slowdini/slow-powers#main"]
-}
-```
+This installs the latest published version from npm.
 
 ## The Core Execution Utilities
 
@@ -110,7 +124,7 @@ Flat layout — skills and assets live at root, harness-specific integration liv
 - `tests/` — Cross-cutting and harness-specific tests
 - `.claude-plugin/` — Claude Code plugin manifest and hooks
 - `.codex-plugin/` — OpenAI Codex plugin manifest
-- `opencode/` — OpenCode plugin and installation docs
+- `opencode/` — OpenCode plugin
 - `.claude-plugin/marketplace.json` — Claude Code marketplace registry
 - `package.json` — OpenCode plugin manifest + dev tooling
 - `harness-parity-check.md` — Instructions for an agent in any harness to audit feature gaps and prep to close one
@@ -125,7 +139,7 @@ Releases are cut from `dev` and tagged from `main`:
    commits to `dev`, and opens a `dev → main` PR.
 3. Review the release PR (full test matrix runs on it) and merge.
 4. Merging to `main` automatically tags `vX.Y.Z`, creates the GitHub release,
-   and publishes `@slowdini/slow-powers-opencode` to npm (with provenance).
+   and publishes `@slowdini/slow-powers-opencode` to npm.
    Notes come from the release PR body, or auto-generated if empty.
 
 See `.github/workflows/` for the workflow definitions.
@@ -139,36 +153,6 @@ Actions**:
 |--------|------|---------|---------------------|
 | `RELEASE_PR_TOKEN` | GitHub PAT (fine-grained or classic) | `release-pr.yml` | Push to `dev` (Contents: write) and open PRs (Pull requests: write). Required so the release PR triggers CI — PRs opened by the default `GITHUB_TOKEN` do not. |
 
-The npm publish needs **no secret**. `release.yml` publishes via npm
-[trusted publishing](https://docs.npmjs.com/trusted-publishers) (OIDC): auth is
-minted per run from the workflow's `permissions: id-token: write`, and provenance
-is generated automatically. `GITHUB_TOKEN` (auto-provided by Actions) covers the
-tag push and `gh release create`.
-
-### npm trusted publishing setup (one-time)
-
-Trusted publishing is configured on the package, so the package must exist on npm
-first. Bootstrap it once:
-
-1. **Create the package with a manual first publish** from a maintainer machine.
-   The `prepublishOnly` guard expects CI, so set `CI=true`:
-   ```bash
-   npm login
-   CI=true npm publish --access public
-   ```
-   This publishes the current `package.json` version (e.g. `0.1.0`) and creates
-   `@slowdini/slow-powers-opencode` on npm.
-2. **Configure the trusted publisher** at npmjs.com → the package → Settings →
-   Trusted publishing → GitHub Actions:
-   - Organization or user: `slowdini`
-   - Repository: `slow-powers`
-   - Workflow filename: `release.yml` (filename only, not a path)
-   - Environment: leave blank
-   - Allowed actions: `npm publish`
-3. **Subsequent releases are fully automated and tokenless.** Cut the next release
-   at a higher version (the Release PR workflow enforces strictly-greater); merging
-   to `main` publishes via OIDC with provenance.
-
 ## License
 
 MIT — see [`LICENSE`](./LICENSE).

package/bootstrap.md

@@ -1,12 +1,58 @@
 # Instructions for using Slow-powers Skills
 
+<EXTREMELY-IMPORTANT>
+  If you think there is even a 1% chance a skill might apply to what you are doing, you ABSOLUTELY MUST invoke the skill.
+  IF A SKILL APPLIES TO YOUR TASK, YOU DO NOT HAVE A CHOICE. YOU MUST USE IT.
+  This is not negotiable. This is not optional. You cannot rationalize your way out of this.
+</EXTREMELY-IMPORTANT>
+
 These skills are quality gates on procedures you already run. They don't grant abilities — they enhance how you execute work you already know how to do.
 
-When you reach a gate moment — about to code, debug, claim done, finish a branch — the matching skill's description surfaces it. Load it then, even if your procedure already feels complete. That "feels complete" is the gate's target.
+When you reach a gate moment — about to code, hand off a plan, debug, claim done, finish a branch — the matching skill's description surfaces it. Load it then, even if your procedure already feels complete. That "feels complete" is the gate's target.
 
-<EXTREMELY-IMPORTANT>
-If a skill applies to your current task, you MUST load and follow the skill. Do not skip or shortcut execution.
-</EXTREMELY-IMPORTANT>
+## The Rule
+
+**Invoke relevant or requested skills BEFORE any response or action.** Even a 1% chance a skill might apply means that you should invoke the skill to check. If an invoked skill turns out to be wrong for the situation, you don't need to use it.
+
+```dot
+digraph skill_flow {
+    "User message received" [shape=doublecircle];
+    "Might any skill apply?" [shape=diamond];
+    "Invoke skill mechanism" [shape=box];
+    "Announce: 'Using [skill] to [purpose]'" [shape=box];
+    "Has checklist?" [shape=diamond];
+    "Create todo per item with persistent task tracker" [shape=box];
+    "Follow skill exactly" [shape=box];
+    "Respond (including clarifications)" [shape=doublecircle];
+
+    "User message received" -> "Might any skill apply?";
+    "Might any skill apply?" -> "Invoke skill mechanism" [label="yes, even 1%"];
+    "Might any skill apply?" -> "Respond (including clarifications)" [label="definitely not"];
+    "Invoke skill mechanism" -> "Announce: 'Using [skill] to [purpose]'";
+    "Announce: 'Using [skill] to [purpose]'" -> "Has checklist?";
+    "Has checklist?" -> "Create todo per item with persistent task tracker" [label="yes"];
+    "Has checklist?" -> "Follow skill exactly" [label="no"];
+    "Create todo per item with persistent task tracker" -> "Follow skill exactly";
+}
+```
+
+## Red Flags
+
+These thoughts mean STOP — you're rationalizing:
+
+| Thought | Reality |
+|---------|---------|
+| "This is just a simple question" | Questions are tasks. Check for skills. |
+| "I need more context first" | Skill check comes BEFORE clarifying questions. |
+| "I can check git/files quickly" | Files lack conversation context. Check for skills. |
+| "Let me gather information first" | Skills tell you HOW to gather information. |
+| "This doesn't need a formal skill" | If a skill exists, use it. |
+| "I remember this skill" | Skills evolve. Read current version. |
+| "This doesn't count as a task" | Action = task. Check for skills. |
+| "The skill is overkill" | Simple things become complex. Use it. |
+| "I'll just do this one thing first" | Check BEFORE doing anything. |
+| "This feels productive" | Undisciplined action wastes time. Skills prevent this. |
+| "I know what that means" | Knowing the concept ≠ using the skill. Invoke it. |
 
 ## Instruction Priority
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@slowdini/slow-powers-opencode",
-  "version": "0.1.0",
+  "version": "0.1.3",
   "description": "Slow-powers — structured development workflows for coding agents (TDD, debugging, verification, git hygiene)",
   "type": "module",
   "main": "./opencode/plugins/slow-powers.js",
@@ -45,11 +45,10 @@
     "evals:grade": "bun run skills/evaluating-skills/runner/grade.ts --skill-dir ./skills",
     "evals:aggregate": "bun run skills/evaluating-skills/runner/aggregate.ts --skill-dir ./skills",
     "evals:promote-baseline": "bun run skills/evaluating-skills/runner/promote-baseline.ts --skill-dir ./skills",
-    "version": "bun scripts/bump-version.ts",
     "check": "biome check --write .",
     "check:ci": "biome check --error-on-warnings .",
     "typecheck": "tsc --noEmit",
-    "setup": "husky",
+    "prepare": "node .husky/install.mjs",
     "prepublishOnly": "node -e \"if (process.env.CI !== 'true') { console.error('Publishing should be done via CI'); process.exit(1); }\""
   },
   "devDependencies": {