@zfdx123/dsh-superpowers 1.0.0

package/LICENSE

@@ -0,0 +1,27 @@
+MIT License
+
+Copyright (c) 2026 dsh-superpowers contributors
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.
+
+---
+
+The contents of skills/ are vendored unmodified from https://github.com/obra/superpowers
+(v6.3.0, commit b36e0829c6d0140e93cfef2ca599b1b07d4a7797) and remain under their own
+MIT license, reproduced in LICENSE.superpowers.

package/LICENSE.superpowers

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2025 Jesse Vincent
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -0,0 +1,109 @@
+# dsh-superpowers
+
+English | [中文](README.zh.md)
+
+dsh-superpowers adds [obra/superpowers](https://github.com/obra/superpowers) support to [DeepSeek Harness](https://github.com/deepseek-ai/deepseek-harness). It registers 14 skills for brainstorming, planning, TDD, debugging, and code review, and keeps the `using-superpowers` bootstrap active throughout the session.
+
+## Contents
+
+- [Installation](#installation)
+- [What it does](#what-it-does)
+- [Verification](#verification)
+- [Configuration](#configuration)
+- [Limitations](#limitations)
+- [Overhead](#overhead)
+- [Testing](#testing)
+- [Requirements](#requirements)
+- [Upstream and license](#upstream-and-license)
+
+## Installation
+
+Add the package to the profile as a local workspace dependency, then restart the surface:
+
+```sh
+cd E:/work/ai/dsh-superpowers && npm install   # the config schema is a runtime dependency
+dsh plugin --profile web add link:E:/work/ai/dsh-superpowers
+```
+
+Stop and restart `dsh web` afterwards. Replace `web` with `headless` or a custom profile name when installing for a different surface, then restart that surface instead.
+
+## What it does
+
+- Registers all 14 Superpowers skills on `ctx.skills`. They appear in the skill catalog and load through the native `skill` tool. Nothing is copied into `~/.dsh/skills`.
+- Adds the `using-superpowers` bootstrap as the `superpowers:bootstrap` prompt section at order 50. It is present on the first request and survives context compaction because it is part of the system prompt, not a one-off session message. A preset that owns the whole system prompt replaces it — see [Limitations](#limitations).
+- Warns on the first agent of a workspace when a project or preset skill shadows one of the bundled names, naming the copy the model will load instead.
+- Maps Claude Code-style tool names such as `Task`, `TodoWrite`, and `Bash`/`Read`/`Write`/`Edit` to their DeepSeek Harness equivalents. The mapping also notes that hooks and slash commands are not available.
+
+## Verification
+
+Check that the plugin is present in the profile:
+
+```sh
+dsh --profile web --dump-config
+```
+
+The output should contain `id: superpowers` followed by `name: @zfdx123/dsh-superpowers`.
+
+Then start a new session and ask for a feature. The agent should explore first and respond with questions or a design instead of writing code immediately. Its tool calls should include `skill`.
+
+If the bootstrap never arrives, check the session's preset: a preset whose persona owns the complete system prompt is the one case where it is absent by design — see [Limitations](#limitations).
+
+## Configuration
+
+Every field is optional. Override fields in the profile's own `cordis.patch.yml`:
+
+```yaml
+- id: superpowers
+  config:
+    bootstrap: false
+```
+
+| Field | Default | Description |
+| --- | --- | --- |
+| `skills` | `true` | Register the bundled skills on `ctx.skills`. |
+| `bootstrap` | `true` | Register the `using-superpowers` prompt section. |
+| `toolMapping` | `true` | Append the DeepSeek Harness tool mapping to the bootstrap section. |
+| `order` | `50` | Place the bootstrap after the persona prefix (0), before the plan policy (500) and tool guidance (1000+). |
+
+Every field is validated against the plugin's schema before it applies: a misspelled type fails the profile with the offending field named, instead of half-registering the plugin.
+
+Setting `bootstrap: false` keeps the skills discoverable but stops them from self-triggering; the model will use them only when it decides to consult the catalog.
+
+## Limitations
+
+A preset can own the entire system prompt. When the preset's persona declares itself the complete prompt — the bundled `minimal` preset does, with `complete: true` — the prompt registry restores that one section after assembly and drops every other section, including `superpowers:bootstrap`. The drop is silent, and dsh publishes no signal for it: a section's `complete` flag never leaves the registry, and a `system-prompt/assemble` listener cannot append prompt text to a scope that has one. The plugin therefore registers the section and documents the case rather than guessing; `verify/src-02-complete-persona-shadow.mjs` pins the mechanism against the installed dsh.
+
+Under such a preset:
+
+- The bootstrap is not delivered, so the skills never self-trigger. The 14 skills are still registered on `ctx.skills`, but whether the model can reach them is the preset's decision, because the preset also decides which tools exist — `minimal` exposes only the persistent shell, so no `skill` tool is available there either.
+- `bootstrap: true` cannot make the section appear, and `bootstrap: false` reports nothing: the section was never going to be delivered.
+
+Use a preset whose persona is not complete to get the bootstrap.
+
+## Overhead
+
+The bootstrap adds roughly 1.1k tokens (4,465 characters) to the system prompt of each request. The section is static and stays within the cached prefix. It is not appended as a new chat message on every turn. Set `bootstrap: false` to keep the skills without the fixed prompt overhead.
+
+## Testing
+
+`npm test` runs the suite through `node --test`. `test/` ships in the published tarball, so the command works from an installed copy as well as from a checkout.
+
+`verify/` holds maintainer-only probes that mount the real dsh service classes. They are not published, and they need a local dsh installation (pass its `package.json` path as the first argument to point at another one):
+
+- `verify/dsh-compat.mjs` — every runtime and packaging contract this plugin depends on.
+- `verify/src-01-doc-order-drift.mjs` — the documented prompt-order band against the installed section orders.
+- `verify/src-02-complete-persona-shadow.mjs` — the complete-persona drop recorded under [Limitations](#limitations).
+
+## Requirements
+
+- DeepSeek Harness `0.1.0-rc.6` or newer
+- Node.js 22.19+ or 24+
+- One runtime dependency, `@deepseek-ai/schemastery`, which provides the config schema. A registry install pulls it in; a `link:` install needs `npm install` in the checkout first, or the plugin fails to load. Every other registry is reached through `ctx`.
+
+## Upstream and license
+
+The skills under `skills/` are vendored unmodified from [obra/superpowers](https://github.com/obra/superpowers) v6.3.0 at commit [`b36e082`](https://github.com/obra/superpowers/commit/b36e0829c6d0140e93cfef2ca599b1b07d4a7797). The exact upstream version and commit are recorded in `package.json`.
+
+The optional visual companion in `brainstorming` loads an upstream-hosted logo containing the Superpowers version. It sends no project or prompt content. Set `SUPERPOWERS_DISABLE_TELEMETRY` to a true value to disable it.
+
+Two MIT license notices apply: the adapter is © its contributors under [LICENSE](LICENSE), while the bundled skills are © Jesse Vincent and the Superpowers contributors under [LICENSE.superpowers](LICENSE.superpowers).

package/README.zh.md

@@ -0,0 +1,109 @@
+# dsh-superpowers
+
+[English](README.md) | 中文
+
+dsh-superpowers 为 [DeepSeek Harness](https://github.com/deepseek-ai/deepseek-harness) 提供 [obra/superpowers](https://github.com/obra/superpowers) 适配。它注册 14 个覆盖需求澄清、任务规划、TDD、调试与代码审查的技能，并让 `using-superpowers` bootstrap 在整个会话中保持生效。
+
+## 目录
+
+- [安装](#安装)
+- [它做了什么](#它做了什么)
+- [验证](#验证)
+- [配置](#配置)
+- [已知限制](#已知限制)
+- [开销](#开销)
+- [测试](#测试)
+- [环境要求](#环境要求)
+- [上游与许可](#上游与许可)
+
+## 安装
+
+把本包作为本地工作区依赖加进 profile，然后重启对应形态：
+
+```sh
+cd E:/work/ai/dsh-superpowers && npm install   # 配置 schema 是运行时依赖
+dsh plugin --profile web add link:E:/work/ai/dsh-superpowers
+```
+
+执行后先停止再重启 `dsh web`。如果要安装到其他形态，可把 `web` 换成 `headless` 或自定义 profile 名，并重启对应形态。
+
+## 它做了什么
+
+- 在 `ctx.skills` 注册全部 14 个 Superpowers 技能。它们会出现在技能目录中，并通过原生 `skill` 工具加载；不会往 `~/.dsh/skills` 复制任何文件。
+- 把 `using-superpowers` bootstrap 注册为 `superpowers:bootstrap` 提示词段落，order 为 50。它在第一条请求中生效，并能在上下文压缩后继续存在，因为它属于系统提示词，不是一次性会话消息。若预设独占整个系统提示词，它会被替换，见[已知限制](#已知限制)。
+- 每个工作区首个 agent 创建时，若内置技能名被项目或预设技能遮蔽，会报出警告，并指明模型实际加载的那份副本。
+- 将 `Task`、`TodoWrite`、`Bash`/`Read`/`Write`/`Edit` 等 Claude Code 风格工具名映射到 DeepSeek Harness 对应工具。映射中也会说明当前环境不提供 hooks 与斜杠命令。
+
+## 验证
+
+先确认插件已挂载到 profile：
+
+```sh
+dsh --profile web --dump-config
+```
+
+输出中应包含 `id: superpowers`，其后是 `name: @zfdx123/dsh-superpowers`。
+
+然后新建会话并提出一个功能需求。Agent 应先探查，再给出问题或设计，不会立即开始写代码。工具调用中应出现 `skill`。
+
+如果 bootstrap 始终没有出现，请检查会话所用的预设：当预设的 persona 独占完整系统提示词时，它按设计就不会下发，见[已知限制](#已知限制)。
+
+## 配置
+
+所有字段均为可选项，可在 profile 自己的 `cordis.patch.yml` 中覆盖：
+
+```yaml
+- id: superpowers
+  config:
+    bootstrap: false
+```
+
+| 字段 | 默认值 | 说明 |
+| --- | --- | --- |
+| `skills` | `true` | 把内置技能注册到 `ctx.skills`。 |
+| `bootstrap` | `true` | 注册 `using-superpowers` 提示词段落。 |
+| `toolMapping` | `true` | 在 bootstrap 段落中追加 DeepSeek Harness 工具映射。 |
+| `order` | `50` | 把 bootstrap 放在 persona 前缀（0）之后、计划策略（500）与工具指导（1000+）之前。 |
+
+所有字段在生效前都会先过插件自己的 schema：类型写错时 profile 会直接失败并指出出错字段，而不是把插件注册到一半。
+
+设置 `bootstrap: false` 后，技能仍可被发现，但不会再自动触发；模型只会在自己决定查询技能目录时使用它们。
+
+## 已知限制
+
+预设可以独占整个系统提示词。当预设的 persona 声明自己就是完整提示词时——内置的 `minimal` 预设正是如此（`complete: true`）——提示词注册表会在装配结束后只保留那一个段落，丢掉包括 `superpowers:bootstrap` 在内的其他所有段落。这一丢弃是静默的，而且 dsh 不发布任何相关信号：段落的 `complete` 标记不会离开注册表，`system-prompt/assemble` 监听器也无法向存在 complete 段落的 scope 追加提示词文本。因此本插件照常注册该段落、把这种情况写进文档，而不是去猜；`verify/src-02-complete-persona-shadow.mjs` 会针对已安装的 dsh 钉住这一机制。
+
+在该类预设下：
+
+- bootstrap 不会下发，技能因此不会自动触发。14 个技能仍注册在 `ctx.skills` 上，但模型能否取到它们由预设决定——预设同时决定有哪些工具：`minimal` 只挂常驻 shell，所以那里也没有 `skill` 工具。
+- `bootstrap: true` 不会让它出现，`bootstrap: false` 也不会有任何提示：这个段落本来就不会下发。
+
+要拿到 bootstrap，请使用 persona 不是 complete 的预设。
+
+## 开销
+
+bootstrap 会给每次请求的系统提示词增加约 1.1k token（4,465 字符）。这段内容是静态的，位于缓存前缀内，不会在每一轮作为新的聊天消息追加。设置 `bootstrap: false` 可以保留技能，同时去掉这份固定提示词开销。
+
+## 测试
+
+`npm test` 通过 `node --test` 运行测试。`test/` 会随发布产物一起发布，因此在安装后的副本里和源码检出里都能直接运行。
+
+`verify/` 下是维护者专用的探针，会挂载真实的 dsh 服务类。它们不随包发布，且需要本机装有 dsh（第一个参数可传入另一份 dsh 的 `package.json` 路径）：
+
+- `verify/dsh-compat.mjs` —— 本插件依赖的全部运行时与打包契约。
+- `verify/src-01-doc-order-drift.mjs` —— 文档中的 order 区间与已安装段落顺序表的对照。
+- `verify/src-02-complete-persona-shadow.mjs` —— [已知限制](#已知限制) 中记录的 complete persona 覆盖机制。
+
+## 环境要求
+
+- DeepSeek Harness `0.1.0-rc.6` 及以上
+- Node.js 22.19+ 或 24+
+- 一个运行时依赖 `@deepseek-ai/schemastery`，用于提供配置 schema。从 registry 安装会自动带上它；用 `link:` 安装时需要先在检出目录执行 `npm install`，否则插件无法加载。其余注册表都只通过 `ctx` 访问。
+
+## 上游与许可
+
+`skills/` 下的技能原样取自 [obra/superpowers](https://github.com/obra/superpowers) v6.3.0，对应 commit [`b36e082`](https://github.com/obra/superpowers/commit/b36e0829c6d0140e93cfef2ca599b1b07d4a7797)，未做修改；`package.json` 记录了确切的上游版本与 commit。
+
+`brainstorming` 的可选视觉组件会从上游网站加载带 Superpowers 版本号的 logo，不包含项目或提示词内容。把 `SUPERPOWERS_DISABLE_TELEMETRY` 设为任一 true 值即可关闭。
+
+这里同时适用两份 MIT 许可声明：适配器版权归其贡献者所有，依据 [LICENSE](LICENSE) 许可；内置技能版权归 Jesse Vincent 与 Superpowers 贡献者所有，依据 [LICENSE.superpowers](LICENSE.superpowers) 许可。

package/cordis.patch.yml

@@ -0,0 +1,16 @@
+# The dsh-superpowers bundle patch: one host-plane row.
+#
+# The row registers a `ctx.skills` provider for the bundled Superpowers skills
+# and a `superpowers:bootstrap` prompt section. Both land in the global layer,
+# which every agent's scope chain merges, so the plugin works on the Web surface
+# (where the agent plane sits behind presets) without touching any preset.
+#
+# Turn a half off in the profile's own cordis.patch.yml, for example:
+#
+#   - id: superpowers
+#     config:
+#       bootstrap: false
+#
+- insert:
+    - id: superpowers
+      name: "@zfdx123/dsh-superpowers"

package/index.js

@@ -0,0 +1,395 @@
+/**
+ * Superpowers for DeepSeek Harness.
+ *
+ * Brings the Superpowers software-development methodology (obra/superpowers) to
+ * dsh: the bundled skills are registered as runtime skills on `ctx.skills`, and
+ * the `using-superpowers` bootstrap is registered as a prompt section so it is
+ * present from the first request and survives context compaction.
+ *
+ * Both registries are reached through `ctx` alone — a third-party plugin cannot
+ * rely on a `@deepseek-ai/*` service package resolving from its own directory,
+ * because they are nested inside the dsh installation. The one exception is the
+ * config-schema package, which is a declared dependency of this package and
+ * therefore resolves from this package's own tree.
+ *
+ * @module dsh-superpowers
+ */
+
+import { readdirSync, readFileSync } from 'node:fs'
+import { dirname, join, resolve } from 'node:path'
+import { fileURLToPath } from 'node:url'
+
+import Schema from '@deepseek-ai/schemastery'
+
+/** Cordis plugin name used by loader diagnostics. */
+export const name = 'superpowers'
+
+/** The prompt and skill registries this plugin registers into. */
+export const inject = ['systemPrompt', 'skills']
+
+const packageRoot = dirname(fileURLToPath(import.meta.url))
+const skillsDir = resolve(packageRoot, 'skills')
+const BOOTSTRAP_SKILL = 'using-superpowers'
+const BOOTSTRAP_SECTION = 'superpowers:bootstrap'
+
+/**
+ * Prompt order of the bootstrap section: after the deployment persona prefix
+ * (0), and before the plan policy (500) and the tool guidance at 1000+.
+ * `verify/src-01-doc-order-drift.mjs` re-checks that placement against the
+ * installed dsh.
+ */
+const DEFAULT_ORDER = 50
+
+/**
+ * Plugin configuration. Every deployment-varying choice is a validated field:
+ * cordis resolves these defaults and rejects a malformed override before
+ * {@link apply} runs, instead of failing the fiber halfway through setup.
+ */
+export const Config = Schema.object({
+  /** Register the bundled skills on `ctx.skills`. */
+  skills: Schema.boolean().default(true),
+  /** Register the `using-superpowers` bootstrap prompt section. */
+  bootstrap: Schema.boolean().default(true),
+  /** Append the DeepSeek Harness tool mapping to the bootstrap section. */
+  toolMapping: Schema.boolean().default(true),
+  /** Prompt order of the bootstrap section; the registry rejects a non-finite value. */
+  order: Schema.number().default(DEFAULT_ORDER),
+})
+
+/**
+ * Split a `SKILL.md` into its frontmatter block and body.
+ * @param content - the raw file text.
+ * @returns the frontmatter text (empty when absent) and the trimmed body.
+ */
+function splitFrontmatter(content) {
+  const match = content.match(/^---\r?\n([\s\S]*?)\r?\n---\r?\n([\s\S]*)$/)
+  if (match === null) return { frontmatter: '', body: content.trim() }
+  return { frontmatter: match[1], body: match[2].trim() }
+}
+
+/** Count the leading ASCII spaces on one YAML line. */
+function leadingSpaces(line) {
+  return line.length - line.trimStart().length
+}
+
+/**
+ * Parse a YAML block-scalar header from a value such as `>-`, `|+`, or `>2-`.
+ * @returns the scalar controls, or undefined for an ordinary scalar.
+ */
+function parseBlockHeader(value) {
+  const match = value.match(/^([|>])(?:(?:([1-9])([+-]?))|(?:([+-])([1-9]?)))?(?:\s+#.*)?$/)
+  if (match === null) return undefined
+  return {
+    style: match[1],
+    indentation: Number(match[2] || match[5] || 0),
+    chomping: match[3] || match[4] || '',
+  }
+}
+
+/** Fold non-empty YAML lines while preserving paragraph and indented breaks. */
+function foldBlockLines(lines, moreIndented) {
+  let value = ''
+  for (let index = 0; index < lines.length;) {
+    if (lines[index] === '') {
+      let end = index
+      while (end < lines.length && lines[end] === '') end += 1
+      value += '\n'.repeat(end - index)
+      index = end
+      continue
+    }
+
+    value += lines[index]
+    const next = index + 1
+    if (next < lines.length && lines[next] !== '') {
+      value += moreIndented[index] || moreIndented[next] ? '\n' : ' '
+    }
+    index = next
+  }
+  return value
+}
+
+/**
+ * Read one top-level YAML block scalar and return the next unconsumed line.
+ * This deliberately implements only scalar semantics needed by skill metadata,
+ * while covering literal/folded styles, indentation indicators, and chomping.
+ */
+function readBlockScalar(lines, start, header) {
+  let end = start
+  while (end < lines.length && (lines[end].trim() === '' || lines[end].startsWith(' '))) {
+    end += 1
+  }
+
+  const rawLines = lines.slice(start, end)
+  const firstContent = rawLines.find((line) => line.trim() !== '')
+  const indentation = header.indentation || (firstContent === undefined ? 1 : leadingSpaces(firstContent))
+
+  for (const line of rawLines) {
+    if (line.trim() !== '' && leadingSpaces(line) < indentation) {
+      throw new Error('invalid block-scalar indentation')
+    }
+  }
+
+  const contentLines = rawLines.map((line) => (line.trim() === '' ? '' : line.slice(indentation)))
+  const moreIndented = rawLines.map((line) => line.trim() !== '' && leadingSpaces(line) > indentation)
+  const hasContent = contentLines.some((line) => line !== '')
+  let value = header.style === '|' ? contentLines.join('\n') : foldBlockLines(contentLines, moreIndented)
+
+  if (rawLines.length > 0) value += '\n'
+  if (header.chomping === '-') {
+    value = value.replace(/\n+$/, '')
+  } else if (header.chomping !== '+') {
+    value = hasContent ? `${value.replace(/\n+$/, '')}\n` : ''
+  }
+
+  return { value, nextLine: end }
+}
+
+/** Parse one quoted or plain YAML scalar. */
+function parseInlineScalar(value) {
+  if (value.startsWith('"')) {
+    if (!value.endsWith('"')) throw new Error('unterminated double-quoted scalar')
+    return JSON.parse(value)
+  }
+  if (value.startsWith("'")) {
+    if (!value.endsWith("'")) throw new Error('unterminated single-quoted scalar')
+    return value.slice(1, -1).replace(/''/g, "'")
+  }
+  return value.replace(/\s+#.*$/, '').trim()
+}
+
+/**
+ * Read the scalar frontmatter keys a Superpowers skill declares. Besides the
+ * current one-line metadata, support YAML literal and folded block scalars so
+ * a future vendored release cannot silently turn `description: >-` into `>-`.
+ * @param frontmatter - the frontmatter text.
+ * @returns the parsed string values by key.
+ */
+function parseFrontmatter(frontmatter) {
+  const fields = {}
+  const lines = frontmatter.split(/\r?\n/)
+  for (let index = 0; index < lines.length; index += 1) {
+    const match = lines[index].match(/^([A-Za-z][A-Za-z0-9_-]*):\s*(.*)$/)
+    if (match === null) continue
+
+    const rawValue = match[2].trim()
+    const block = parseBlockHeader(rawValue)
+    if (block !== undefined) {
+      const parsed = readBlockScalar(lines, index + 1, block)
+      fields[match[1]] = parsed.value
+      index = parsed.nextLine - 1
+      continue
+    }
+
+    if (rawValue !== '') fields[match[1]] = parseInlineScalar(rawValue)
+  }
+  return fields
+}
+
+/**
+ * Load every bundled skill.
+ * @returns one entry per readable skill directory.
+ */
+function loadBundledSkills() {
+  const skills = []
+  const issues = []
+  let entries
+  try {
+    entries = readdirSync(skillsDir, { withFileTypes: true })
+  } catch (error) {
+    issues.push(`cannot read skills directory ${skillsDir}: ${error instanceof Error ? error.message : String(error)}`)
+    return { skills, issues }
+  }
+
+  const seen = new Map()
+  entries.sort((left, right) => left.name.localeCompare(right.name))
+  for (const entry of entries) {
+    if (!entry.isDirectory()) continue
+    const skillDir = join(skillsDir, entry.name)
+    const skillPath = join(skillDir, 'SKILL.md')
+    let raw
+    try {
+      raw = readFileSync(skillPath, 'utf8')
+    } catch (error) {
+      issues.push(`cannot read ${skillPath}: ${error instanceof Error ? error.message : String(error)}`)
+      continue
+    }
+
+    const { frontmatter, body } = splitFrontmatter(raw)
+    if (frontmatter === '') {
+      issues.push(`${skillPath} has no valid frontmatter`)
+      continue
+    }
+
+    let fields
+    try {
+      fields = parseFrontmatter(frontmatter)
+    } catch (error) {
+      issues.push(`cannot parse ${skillPath}: ${error instanceof Error ? error.message : String(error)}`)
+      continue
+    }
+
+    const skillName = fields.name
+    const description = fields.description
+    if (skillName === undefined || description === undefined || description === '') {
+      issues.push(`${skillPath} requires non-empty name and description fields`)
+      continue
+    }
+    if (body === '') {
+      issues.push(`${skillPath} has an empty instruction body`)
+      continue
+    }
+    if (seen.has(skillName)) {
+      issues.push(`${skillPath} duplicates skill name "${skillName}" from ${seen.get(skillName)}`)
+      continue
+    }
+    seen.set(skillName, skillPath)
+
+    skills.push({
+      name: skillName,
+      description,
+      ...(fields.whenToUse === undefined ? {} : { whenToUse: fields.whenToUse }),
+      content: body,
+      source: 'bundled',
+      path: skillPath,
+      resourceBase: { kind: 'directory', path: skillDir },
+    })
+  }
+  return { skills, issues }
+}
+
+/**
+ * The dsh tool vocabulary Superpowers instructions map onto. Superpowers is
+ * written against several harnesses and names Claude Code's PascalCase tools;
+ * without this mapping a skill tells the model to call tools that do not exist
+ * here.
+ * @returns the mapping section text.
+ */
+function dshToolMapping() {
+  return `## DeepSeek Harness tool mapping
+
+Superpowers skills are written for several coding agents. In DeepSeek Harness, use these tools:
+
+- Invoke a skill → the native \`skill\` tool; every Superpowers skill is already in your skill catalog, so never read a \`SKILL.md\` by hand
+- Read a file → \`read\` (\`read_image\` for images)
+- Create or overwrite a file → \`write\`
+- Modify an existing file → \`edit\`, or \`str_replace_editor\` where it is offered
+- Run a shell command → \`bash\`; for long work pass \`run_in_background\`, then collect it with \`job_output\`, \`job_list\`, and \`job_kill\`
+- Find files by path pattern → \`glob\`
+- Search file contents → \`grep\`
+- Track tasks → \`todo_write\`
+- Ask the human a question → \`ask_user_question\`
+- Search the web → \`web_search\`
+- Dispatch a subagent → \`subagent\` for a fresh child, \`subagent_fork\` to continue from this session; steer children with \`send_message\`, \`interrupt_agent\`, and \`list_agents\`
+- Present a plan for approval → \`exit_plan_mode\`, while the session is in plan mode
+
+Read Claude Code's \`Task\` as \`subagent\`, \`TodoWrite\` as \`todo_write\`, and \`Bash\`/\`Read\`/\`Write\`/\`Edit\`/\`Glob\`/\`Grep\` as their lowercase equivalents above. DeepSeek Harness exposes no hook or slash-command API to skills, so skip instructions that install hooks or register commands and do the work with these tools instead.`
+}
+
+/**
+ * Build the bootstrap text.
+ * @param bootstrapBody - the `using-superpowers` body, without frontmatter.
+ * @param includeToolMapping - whether to append the dsh tool mapping.
+ * @returns the prompt section text.
+ */
+function buildBootstrap(bootstrapBody, includeToolMapping) {
+  const mapping = includeToolMapping ? `\n\n${dshToolMapping()}` : ''
+  return `<EXTREMELY_IMPORTANT>
+You have superpowers.
+
+The using-superpowers skill content is included below and is already loaded for this session. Follow it now. Do not load using-superpowers again through the skill tool.
+
+${bootstrapBody}${mapping}
+</EXTREMELY_IMPORTANT>`
+}
+
+/**
+ * Report bundled skills whose name a higher-priority skill owns.
+ *
+ * The registry resolves precedence when it collects a catalog, and only there:
+ * a project skill outranks this plugin's runtime registration, and a preset's
+ * own skill outranks it outright. Neither is an error — a deployment may shadow
+ * on purpose — but a shadowed skill must not be invisible, which is what this
+ * report exists for. It runs once per workspace, because every subagent of a
+ * session shares its parent's composition and would repeat the same warning.
+ *
+ * @param ctx - plugin context; used for the catalog read and the warning.
+ * @param agent - the agent whose catalog view to check.
+ * @param bundled - the skills this plugin registered.
+ * @param reported - signatures already warned about, kept per plugin instance.
+ */
+async function reportShadowedSkills(ctx, agent, bundled, reported) {
+  const cwd = agent?.session?.header?.cwd
+  const owned = new Map(bundled.map((skill) => [skill.name, skill.path]))
+  const visible = await ctx.skills.list({ cwd, scope: agent })
+  const shadowed = visible.filter((skill) => owned.has(skill.name) && skill.path !== owned.get(skill.name))
+  if (shadowed.length === 0) return
+
+  const signature = `${cwd ?? ''}\u0000${shadowed
+    .map((skill) => `${skill.name}:${skill.provider}:${skill.source}:${skill.path ?? ''}`)
+    .sort()
+    .join('|')}`
+  if (reported.has(signature)) return
+  reported.add(signature)
+
+  const winners = shadowed
+    .map((skill) => {
+      const at = skill.path === undefined ? '' : ` at ${skill.path}`
+      return `"${skill.name}" from ${skill.source} (provider "${skill.provider}")${at}`
+    })
+    .join(', ')
+  const where = cwd === undefined ? '' : ` in ${cwd}`
+  const count = shadowed.length
+  ctx.logger.warn(
+    `superpowers: ${count} bundled skill${count === 1 ? '' : 's'} shadowed${where}; the model loads ${winners} instead`,
+  )
+}
+
+/**
+ * Register the bundled skills, the per-agent shadow report, and the bootstrap
+ * prompt section.
+ * @param ctx - plugin context; every registration is disposed with it.
+ * @param config - plugin configuration; unset fields take their schema defaults.
+ */
+export function apply(ctx, config) {
+  const options = Config(config)
+  if (!options.skills && !options.bootstrap) return
+
+  const { skills: bundled, issues } = loadBundledSkills()
+  for (const issue of issues) ctx.logger.warn(`superpowers: ${issue}`)
+
+  if (bundled.length === 0) {
+    ctx.logger.warn(`superpowers: no valid skills found under ${skillsDir}`)
+  }
+
+  if (options.skills) {
+    for (const skill of bundled) ctx.skills.register(skill)
+
+    const reported = new Set()
+    ctx.on('agent/created', async ({ agent }) => {
+      try {
+        await reportShadowedSkills(ctx, agent, bundled, reported)
+      } catch (error) {
+        const reason = error instanceof Error ? error.message : String(error)
+        ctx.logger.warn(`superpowers: cannot check the skill catalog of agent "${agent?.id}": ${reason}`)
+      }
+    })
+  }
+
+  if (!options.bootstrap) return
+
+  const bootstrap = bundled.find((skill) => skill.name === BOOTSTRAP_SKILL)
+  if (bootstrap === undefined) {
+    ctx.logger.warn(`superpowers: ${BOOTSTRAP_SKILL} is missing; the bootstrap section is not registered`)
+    return
+  }
+
+  // A preset whose persona declares itself the complete section owns the whole
+  // system prompt, and the registry drops this section in that scope without an
+  // error; no published API reports that decision, so the registration stands
+  // and the limitation is documented in the README instead.
+  ctx.systemPrompt.section({
+    name: BOOTSTRAP_SECTION,
+    order: options.order,
+    text: buildBootstrap(bootstrap.content, options.toolMapping),
+  })
+}