bigpowers 1.3.2 → 1.4.0

package/CHANGELOG.md

@@ -1,3 +1,10 @@
+# [1.4.0](https://github.com/danielvm-git/bigpowers/compare/v1.3.2...v1.4.0) (2026-06-11)
+
+
+### Features
+
+* **skills+dashboard:** add HARD GATE enforcement and factory dashboard ([9d02d50](https://github.com/danielvm-git/bigpowers/commit/9d02d507ce4a2330132cd3cfc2775cd653e90825))
+
 ## [1.3.2](https://github.com/danielvm-git/bigpowers/compare/v1.3.1...v1.3.2) (2026-06-02)
 
 

package/SKILL-INDEX.md

@@ -2,7 +2,7 @@
 
 **Purpose:** One canonical reference for all bigpowers skills. Referenced by README.md, RELEASE-PLAN.md, and CONVENTIONS.md. Updated per-release.
 
-**Last updated:** 2026-06-02 (v3.0.0 — YAML cockpit; 61 active, 0 planned; maintain-wiki removed; build-epic, run-planning, fix-bug added)
+**Last updated:** 2026-06-10 (v3.1.0 — YAML cockpit; 61 active, 0 planned; 18 sub-ops absorbed into parent skills)
 
 ---
 
@@ -49,8 +49,8 @@
 | 14 | Plan | `change-request` | Add requirement or WSJF reorder | RELEASE-PLAN.md | ✅ Active |
 | 15 | Plan | `scope-work` | Define in/out boundaries | SCOPE.md | ✅ Active |
 | 16 | Plan | `slice-tasks` | Vertical slices | TASKS.md | ✅ Active |
-| 17 | Plan | `define-success` | Step → verify pairs | (dialogue) | ✅ Active |
-| 18 | Plan | `plan-work` | Detailed plan with verify steps | RELEASE-PLAN.md | ✅ Active |
+| 17 | Plan | `define-success` | Step → verify pairs; absorbs zoom-out, slopcheck | (dialogue) | ✅ Active |
+| 18 | Plan | `plan-work` | Detailed plan with verify steps; absorbs plan-work-fast | RELEASE-PLAN.md | ✅ Active |
 | 19 | Plan | `plan-refactor` | Refactor plan via interview | REFACTOR.md | ✅ Active |
 | 20 | Plan | `plan-release` | Release plan with Gherkin criteria | RELEASE-PLAN.md | ✅ Active |
 | 21 | Spike | `spike-prototype` | Throw-away spike | SPIKE-<name>.md | ✅ Active |
@@ -58,23 +58,23 @@
 | 23 | Initiate | `guard-git` | Block dangerous git commands | (git state) | ✅ Active |
 | 24 | Initiate | `hook-commits` | Pre-commit hooks | (git state) | ✅ Active |
 | 25 | Initiate | `seed-conventions` | CLAUDE.md + CONVENTIONS.md + specs/ | CLAUDE.md, CONVENTIONS.md | ✅ Active |
-| 26 | Build | `develop-tdd` | Red → green → refactor TDD | src/ | ✅ Active |
+| 26 | Build | `develop-tdd` | Red → green → refactor TDD; absorbs red-phase, green-phase, refactor-phase | src/ | ✅ Active |
 | 27 | Build | `enforce-first` | F.I.R.S.T test-quality rubric | (checklist) | ✅ Active |
 | 28 | Build | `delegate-task` | One subagent, sequential + review | (code) | ✅ Active |
 | 29 | Build | `dispatch-agents` | Parallel subagents on independent tasks | (code) | ✅ Active |
 | 30 | Build | `execute-plan` | Batch execute plan with checkpoints | src/ | ✅ Active |
 | 31 | Harden | `wire-observability` | Structured logging + observability | src/, CLAUDE.md | ✅ Active |
-| 32 | Verify | `verify-work` | Multi-phase UAT; loop on gaps | (dialogue) | ✅ Active |
+| 32 | Verify | `verify-work` | Multi-phase UAT; loop on gaps; absorbs cold-start-smoke, gaps-loop, verify-work-smoke | (dialogue) | ✅ Active |
 | 33 | Verify | `run-evals` | EDD capability + regression evals | EVALS-<feature>.md | ✅ Active |
 | 34 | Bug | `investigate-bug` | Investigate bug → diagnosis | bugs/BUG-*.md | ✅ Active |
 | 35 | Bug | `diagnose-root` | 4-phase root cause analysis | bugs/BUG-*.md | ✅ Active |
 | 36 | Bug | `validate-fix` | Prove fix works | (verify) | ✅ Active |
-| 37 | Review | `audit-code` | Self-review checklist | (checklist) | ✅ Active |
+| 37 | Review | `audit-code` | Self-review checklist; absorbs audit-code-quick | (checklist) | ✅ Active |
 | 38 | Review | `request-review` | Fresh reviewer agent | review-report | ✅ Active |
 | 39 | Review | `respond-review` | Act on reviewer feedback | src/ | ✅ Active |
 | 40 | Review | `trace-requirement` | Story ID → code/tests | TRACEABILITY.md | ✅ Active |
-| 41 | Integrate | `commit-message` | Conventional Commits + semver | (git message) | ✅ Active |
-| 42 | Integrate | `release-branch` | Merge/PR decision + cleanup | (git PR) | ✅ Active |
+| 41 | Integrate | `commit-message` | Conventional Commits + semver; absorbs commit-message-fix | (git message) | ✅ Active |
+| 42 | Integrate | `release-branch` | Merge/PR decision + cleanup; absorbs release-branch-hotfix | (git PR) | ✅ Active |
 | 43 | Sustain | `inspect-quality` | Structured QA session | BUG-LOG.md | ✅ Active |
 | 44 | Sustain | `organize-workspace` | Safe workspace cleanup | (filesystem) | ✅ Active |
 | 45 | Sustain | `stocktake-skills` | Batch audit of skill catalog | specs/ audit report | ✅ Active |
@@ -82,7 +82,7 @@
 | 47 | Utility | `terse-mode` | Ultra-terse output (fallback) | (prompt) | ✅ Active |
 | 48 | Utility | `craft-skill` | Build new bigpowers skill | skills/<name>/SKILL.md | ✅ Active |
 | 49 | Utility | `edit-document` | Edit documents in specs/ | specs/<name>.md | ✅ Active |
-| 50 | Utility | `session-state` | Track decisions in state.yaml | state.yaml | ✅ Active |
+| 50 | Utility | `session-state` | Track decisions in state.yaml; absorbs show-state, reset-state, compact-state, list-epics, check-gates | state.yaml | ✅ Active |
 | 51 | Utility | `migrate-spec` | Migrate foreign spec formats | specs/ | ✅ Active |
 | 52 | Utility | `visual-dashboard` | Browser dashboard | .bigpowers/dashboard/ | ✅ Active |
 | 53 | Utility | `write-document` | BMAD technical documents | specs/<name>.md | ✅ Active |

package/audit-code/SKILL.md

@@ -5,11 +5,18 @@ description: Self-review checklist for the coding agent to run before dispatchin
 ---
 
 # Audit Code
+> **HARD GATE** — **HARD GATE** — Audit must check for: bugs (correctness), security, performance, and clarity. Do NOT skip security review if the code touches user data, auth, or external APIs.
+
 
 Run this self-review before asking anyone else to look at the code. The goal is to catch everything that is clearly wrong or missing — so the reviewer can focus on design and architecture, not hygiene.
 
 **Distinct from `request-review`:** This is the coding agent checking its own work. No second agent is involved. Run this first; run `request-review` after this passes.
 
+## Modes
+
+- Default: full checklist
+- --quick: Run only Supply Chain and Test Coverage. Use for changes under 50 LOC.
+
 ## Checklist
 
 ### Supply Chain & Security
@@ -97,3 +104,8 @@ Report the checklist with ✓ / ✗ per item. For each ✗, describe what needs
 
 If all items pass: suggest running `request-review` for an independent second opinion.
 If any items fail: fix them before proceeding.
+
+## Handoff
+
+Gate: READY -> next: commit-message
+Writes: state.yaml handoff.next_skill = commit-message

package/build-epic/SKILL.md

@@ -6,6 +6,8 @@ description: Eight-step epic build cycle — reads state.yaml, execution-status.
 
 # Build Epic
 
+Scope: one story. Called by orchestrate-project Phase 4. Not a replacement for orchestrate-project.
+
 Orchestrates the **build** flow for a single epic: survey → plan tasks → kickoff → TDD → verify → audit → commit → release.
 
 > **HARD GATE** — Set `specs/state.yaml` `active_flow: build_epic` and `active_epic: eNN` before starting.
@@ -28,10 +30,11 @@ Orchestrates the **build** flow for a single epic: survey → plan tasks → kic
 ## Process
 
 1. Read `specs/state.yaml`, `specs/execution-status.yaml`, `specs/release-plan.yaml`, active `specs/epics/eNN-*.yaml`.
-2. If `epic_cycle.step` missing, set to `1`.
-3. Run **only the current step** (resume mode) unless user asked for full auto-run.
-4. After step verify passes, increment `epic_cycle.step` in `state.yaml` (or `bash scripts/bp-yaml-set.sh` if available).
-5. On story complete, set `execution-status.yaml` story key to `done`; run `bash scripts/sync-status-from-epics.sh`.
+2. **BCP Tracking (Step 2):** After `plan-work` completes, read the `bcps:` count from the epic shard and carry it into `state.yaml` as `epic_cycle.story_bcps = N`.
+3. If `epic_cycle.step` missing, set to `1`.
+4. Run **only the current step** (resume mode) unless user asked for full auto-run.
+5. After step verify passes, increment `epic_cycle.step` in `state.yaml` (or `bash scripts/bp-yaml-set.sh` if available).
+6. On story complete, set `execution-status.yaml` story key to `done`; run `bash scripts/sync-status-from-epics.sh`.
 
 ## Handoff
 

package/commit-message/SKILL.md

@@ -5,6 +5,13 @@ description: Reviews working-tree changes, then drafts a Conventional Commits ti
 ---
 
 # Commit Message
+> **HARD GATE** — **HARD GATE** — Commits must follow Conventional Commits spec (type(scope): description). Do NOT use vague messages like 'fix' or 'updates.' The message must explain the 'why,' not the 'what.'
+
+
+## Modes
+
+- Default: standard Conventional Commits message
+- --fix-type: Forces type=fix. Use when commit type is unambiguous.
 
 ## What "last chat" means
 
@@ -38,3 +45,8 @@ If the repo uses a custom `@semantic-release/commit-analyzer` preset, note that
 ## Further reading
 
 - [REFERENCE.md](REFERENCE.md) — Message shape, footers, release mapping, squashing notes.
+
+## Handoff
+
+Gate: READY -> next: release-branch
+Writes: state.yaml handoff.next_skill = release-branch

package/compose-workflow/SKILL.md

@@ -5,6 +5,8 @@ model: sonnet
 ---
 
 # Compose Workflow
+> **HARD GATE** — **HARD GATE** — Workflows are orchestration, not automation. Do NOT create workflows for tasks that should be single skills. Workflow complexity must be justified.
+
 
 ## Process
 

package/dashboard/bin/dashboard.js

@@ -0,0 +1,93 @@
+#!/usr/bin/env node
+
+const path = require('path');
+
+// Parse command-line arguments
+const args = process.argv.slice(2);
+let showHelp = false;
+let useWeb = false;
+let port = 7742;
+let projectRoot = process.cwd();
+
+for (let i = 0; i < args.length; i++) {
+  const arg = args[i];
+  if (arg === '--help' || arg === '-h') {
+    showHelp = true;
+  } else if (arg === '--web') {
+    useWeb = true;
+  } else if (arg === '--port') {
+    if (i + 1 < args.length) {
+      const portNum = parseInt(args[i + 1], 10);
+      if (!isNaN(portNum) && portNum > 0 && portNum < 65536) {
+        port = portNum;
+        i++;
+      } else {
+        console.error('Error: --port requires a valid port number (1-65535)');
+        process.exit(1);
+      }
+    } else {
+      console.error('Error: --port requires a port number');
+      process.exit(1);
+    }
+  } else if (arg === '--project') {
+    if (i + 1 < args.length) {
+      projectRoot = args[i + 1];
+      i++;
+    } else {
+      console.error('Error: --project requires a path');
+      process.exit(1);
+    }
+  } else {
+    console.error(`Error: unknown flag "${arg}"`);
+    process.exit(1);
+  }
+}
+
+if (showHelp) {
+  console.log(`
+Dashboard - Visualize and manage your project
+
+Usage: dashboard [OPTIONS]
+
+Options:
+  --help, -h           Show this help message and exit
+  --web                Start the web server (default: TUI mode)
+  --port PORT          Set the server port (default: 7742)
+  --project PATH       Set the project root path (default: current directory)
+
+Examples:
+  dashboard                              # Start in TUI mode
+  dashboard --web                        # Start web server on port 7742
+  dashboard --web --port 3000            # Start web server on port 3000
+  dashboard --web --project /path/to/project
+  dashboard --help                       # Show this message
+`);
+  process.exit(0);
+}
+
+// Resolve the project root to an absolute path
+const resolvedProjectRoot = path.resolve(projectRoot);
+
+if (useWeb) {
+  // Start the web server
+  try {
+    const { createServer } = require('../src/web/server');
+    const server = createServer(resolvedProjectRoot, port);
+    server.listen(port, () => {
+      console.log(`Dashboard: http://localhost:${port}`);
+      console.log('Press Ctrl-C to stop.');
+    });
+  } catch (error) {
+    console.error('Error starting web server:', error.message);
+    process.exit(1);
+  }
+} else {
+  // Start the TUI
+  try {
+    const { start } = require('../src/tui/index');
+    start(resolvedProjectRoot);
+  } catch (error) {
+    console.error('Error starting TUI:', error.message);
+    process.exit(1);
+  }
+}