bigpowers 2.22.0 → 2.24.0

package/.pi/package.json

@@ -1,6 +1,6 @@
 {
   "name": "bigpowers",
-  "version": "2.22.0",
+  "version": "2.24.0",
   "description": "68 skills — 61 agent skills for spec-driven, test-first software development by solo developers",
   "keywords": [
     "pi-package"

package/.pi/prompts/research-first.md

@@ -11,8 +11,29 @@ description: Look-before-build — search registries, repo, existing skills, and
 
 1. Read `specs/product/SCOPE_LATEST.yaml`, `specs/release-plan.yaml + epic shards`, and the current task statement.
 2. Search in order: this repo → bigpowers skills (`search-skills`) → package registries → web docs.
-3. For each candidate: note name, URL/path, fit (adopt | extend | compose | build).
-4. Append `## Prior Art` to `requirements/SCOPE_LATEST.yaml` notes or the active epic story.
+3. **Check opensrc cache** — if the task integrates an external library, run `bash scripts/bp-opensrc-check.sh` (or `npx opensrc search <pkg>`) to find locally-cached source. Read the `src/` directory for API shapes before writing any integration code.
+4. For each candidate: note name, URL/path, fit (adopt | extend | compose | build).
+5. Append `## Prior Art` to `requirements/SCOPE_LATEST.yaml` notes or the active epic story.
+
+## opensrc Integration
+
+`opensrc` is a local cache of 200+ open-source repos and npm/PyPI packages. Query it before building any external integration to avoid re-inventing documented API shapes.
+
+```bash
+# Check if a package is cached
+npx opensrc search <package-name>
+
+# Or use the bundled helper (checks all deps from package.json or requirements.txt)
+bash scripts/bp-opensrc-check.sh [package.json|requirements.txt]
+```
+
+If opensrc finds a match, read its `src/` or source directory and append findings to the **Prior Art** section:
+
+```
+opensrc: found <pkg> v<version> — exports <key classes/functions>
+```
+
+If opensrc is not installed or the package is not cached, fall through to web docs normally.
 
 ## Outcome matrix
 

package/.pi/prompts/verify-work.md

@@ -24,9 +24,10 @@ Review answers "is the code good?"; Verify answers "does the built thing do what
 
 1. Read active story tasks from `specs/epics/<capsule>/eNNsYY-tasks.yaml` and story spec from `specs/epics/<capsule>/eNNsYY-<slug>.md` (countable-story-format, Gherkin in §17).
 2. **Cold-start smoke** (if app): stop server, clear caches, boot from scratch.
-3. Mechanical gates: build → typecheck → lint → tests (from `CLAUDE.md`).
-4. **Step-by-step UAT** — one user-observable action at a time.
-5. **Gaps loop** — failures → log → `plan-work` → re-verify.
+3. **AGENTS.md preflight** — before running default checks, call `bash scripts/bp-read-agents.sh` to detect project-specific commands. If `BP_PREFLIGHT` is set, run it instead of the default mechanical gates (or in addition to them if the project requires both). Output: `"Using preflight from AGENTS.md: <cmd>"`. Fall back to `CLAUDE.md` commands if AGENTS.md is absent.
+4. Mechanical gates: build → typecheck → lint → tests (from `CLAUDE.md` or AGENTS.md).
+5. **Step-by-step UAT** — one user-observable action at a time.
+6. **Gaps loop** — failures → log → `plan-work` → re-verify.
 
 ## Verify sub-operations
 

package/.pi/skills/research-first/SKILL.md

@@ -13,8 +13,29 @@ model: sonnet
 
 1. Read `specs/product/SCOPE_LATEST.yaml`, `specs/release-plan.yaml + epic shards`, and the current task statement.
 2. Search in order: this repo → bigpowers skills (`search-skills`) → package registries → web docs.
-3. For each candidate: note name, URL/path, fit (adopt | extend | compose | build).
-4. Append `## Prior Art` to `requirements/SCOPE_LATEST.yaml` notes or the active epic story.
+3. **Check opensrc cache** — if the task integrates an external library, run `bash scripts/bp-opensrc-check.sh` (or `npx opensrc search <pkg>`) to find locally-cached source. Read the `src/` directory for API shapes before writing any integration code.
+4. For each candidate: note name, URL/path, fit (adopt | extend | compose | build).
+5. Append `## Prior Art` to `requirements/SCOPE_LATEST.yaml` notes or the active epic story.
+
+## opensrc Integration
+
+`opensrc` is a local cache of 200+ open-source repos and npm/PyPI packages. Query it before building any external integration to avoid re-inventing documented API shapes.
+
+```bash
+# Check if a package is cached
+npx opensrc search <package-name>
+
+# Or use the bundled helper (checks all deps from package.json or requirements.txt)
+bash scripts/bp-opensrc-check.sh [package.json|requirements.txt]
+```
+
+If opensrc finds a match, read its `src/` or source directory and append findings to the **Prior Art** section:
+
+```
+opensrc: found <pkg> v<version> — exports <key classes/functions>
+```
+
+If opensrc is not installed or the package is not cached, fall through to web docs normally.
 
 ## Outcome matrix
 

package/.pi/skills/verify-work/SKILL.md

@@ -26,9 +26,10 @@ Review answers "is the code good?"; Verify answers "does the built thing do what
 
 1. Read active story tasks from `specs/epics/<capsule>/eNNsYY-tasks.yaml` and story spec from `specs/epics/<capsule>/eNNsYY-<slug>.md` (countable-story-format, Gherkin in §17).
 2. **Cold-start smoke** (if app): stop server, clear caches, boot from scratch.
-3. Mechanical gates: build → typecheck → lint → tests (from `CLAUDE.md`).
-4. **Step-by-step UAT** — one user-observable action at a time.
-5. **Gaps loop** — failures → log → `plan-work` → re-verify.
+3. **AGENTS.md preflight** — before running default checks, call `bash scripts/bp-read-agents.sh` to detect project-specific commands. If `BP_PREFLIGHT` is set, run it instead of the default mechanical gates (or in addition to them if the project requires both). Output: `"Using preflight from AGENTS.md: <cmd>"`. Fall back to `CLAUDE.md` commands if AGENTS.md is absent.
+4. Mechanical gates: build → typecheck → lint → tests (from `CLAUDE.md` or AGENTS.md).
+5. **Step-by-step UAT** — one user-observable action at a time.
+6. **Gaps loop** — failures → log → `plan-work` → re-verify.
 
 ## Verify sub-operations
 

package/CHANGELOG.md

@@ -1,3 +1,17 @@
+# [2.24.0](https://github.com/danielvm-git/bigpowers/compare/v2.23.0...v2.24.0) (2026-06-22)
+
+
+### Features
+
+* **verify-work:** read preflight commands from AGENTS.md before running checks ([966963d](https://github.com/danielvm-git/bigpowers/commit/966963d41e5801a904693ce28037b25304333f25))
+
+# [2.23.0](https://github.com/danielvm-git/bigpowers/compare/v2.22.0...v2.23.0) (2026-06-22)
+
+
+### Features
+
+* **research-first:** add opensrc cache check before building ([9921db6](https://github.com/danielvm-git/bigpowers/commit/9921db68c05b914da8e924a3fbba0d03e6e9dd35))
+
 # [2.22.0](https://github.com/danielvm-git/bigpowers/compare/v2.21.0...v2.22.0) (2026-06-22)
 
 

package/SKILL-INDEX.md

@@ -3,7 +3,7 @@
 > **DO NOT EDIT** — This file is auto-generated by `scripts/generate-skill-index.sh`.
 > Edit `SKILL.md` source files or `skills-lock.json` instead. Run `bash scripts/sync-skills.sh` to regenerate.
 
-**Generated:** 2026-06-22T02:11:51Z
+**Generated:** 2026-06-22T02:28:01Z
 **Skills:** 68
 
 ---

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "bigpowers",
-  "version": "2.22.0",
+  "version": "2.24.0",
   "description": "61 agent skills for spec-driven, test-first software development by solo developers",
   "main": "index.js",
   "scripts": {

package/research-first/SKILL.md

@@ -12,8 +12,29 @@ model: sonnet
 
 1. Read `specs/product/SCOPE_LATEST.yaml`, `specs/release-plan.yaml + epic shards`, and the current task statement.
 2. Search in order: this repo → bigpowers skills (`search-skills`) → package registries → web docs.
-3. For each candidate: note name, URL/path, fit (adopt | extend | compose | build).
-4. Append `## Prior Art` to `requirements/SCOPE_LATEST.yaml` notes or the active epic story.
+3. **Check opensrc cache** — if the task integrates an external library, run `bash scripts/bp-opensrc-check.sh` (or `npx opensrc search <pkg>`) to find locally-cached source. Read the `src/` directory for API shapes before writing any integration code.
+4. For each candidate: note name, URL/path, fit (adopt | extend | compose | build).
+5. Append `## Prior Art` to `requirements/SCOPE_LATEST.yaml` notes or the active epic story.
+
+## opensrc Integration
+
+`opensrc` is a local cache of 200+ open-source repos and npm/PyPI packages. Query it before building any external integration to avoid re-inventing documented API shapes.
+
+```bash
+# Check if a package is cached
+npx opensrc search <package-name>
+
+# Or use the bundled helper (checks all deps from package.json or requirements.txt)
+bash scripts/bp-opensrc-check.sh [package.json|requirements.txt]
+```
+
+If opensrc finds a match, read its `src/` or source directory and append findings to the **Prior Art** section:
+
+```
+opensrc: found <pkg> v<version> — exports <key classes/functions>
+```
+
+If opensrc is not installed or the package is not cached, fall through to web docs normally.
 
 ## Outcome matrix
 

package/scripts/bp-opensrc-check.sh

@@ -0,0 +1,64 @@
+#!/usr/bin/env bash
+# bp-opensrc-check.sh — Check project dependencies against the local opensrc cache.
+# Usage: bash scripts/bp-opensrc-check.sh [package.json|requirements.txt]
+# Output: one line per dependency — FOUND or NOT CACHED, with local path when found.
+set -euo pipefail
+
+INPUT="${1:-package.json}"
+
+if ! command -v npx >/dev/null 2>&1; then
+  echo "SKIP: npx not found — opensrc requires Node.js" >&2
+  exit 0
+fi
+
+if ! npx opensrc --version >/dev/null 2>&1; then
+  echo "SKIP: opensrc not installed — run: npm install -g opensrc" >&2
+  exit 0
+fi
+
+extract_deps() {
+  local file="$1"
+  case "$file" in
+    *.json)
+      python3 -c "
+import json, sys
+data = json.load(open('$file'))
+deps = list(data.get('dependencies', {}).keys()) + list(data.get('devDependencies', {}).keys())
+print('\n'.join(deps))
+" 2>/dev/null || true
+      ;;
+    requirements*.txt)
+      grep -v '^#' "$file" | grep -v '^$' | sed 's/[>=<!].*//' | tr -d ' ' || true
+      ;;
+    *)
+      echo "WARN: unsupported file type: $file — pass package.json or requirements.txt" >&2
+      exit 1
+      ;;
+  esac
+}
+
+if [ ! -f "$INPUT" ]; then
+  echo "WARN: $INPUT not found" >&2
+  exit 0
+fi
+
+echo "opensrc cache check: $INPUT"
+echo "---"
+
+FOUND=0
+MISSING=0
+
+while IFS= read -r dep; do
+  [ -z "$dep" ] && continue
+  result=$(npx opensrc search "$dep" 2>/dev/null | head -1 || true)
+  if [ -n "$result" ]; then
+    echo "FOUND     $dep — $result"
+    FOUND=$((FOUND + 1))
+  else
+    echo "NOT CACHED $dep"
+    MISSING=$((MISSING + 1))
+  fi
+done < <(extract_deps "$INPUT")
+
+echo "---"
+echo "Summary: $FOUND cached, $MISSING not cached"

package/scripts/bp-read-agents.sh

@@ -0,0 +1,60 @@
+#!/usr/bin/env bash
+# bp-read-agents.sh — Extract preflight/test/build/lint/deploy commands from AGENTS.md.
+# Outputs env-var exports: BP_PREFLIGHT, BP_TEST, BP_BUILD, BP_LINT, BP_DEPLOY
+# Usage: eval "$(bash scripts/bp-read-agents.sh)"  # imports env vars
+#        bash scripts/bp-read-agents.sh --print     # prints discovered commands
+set -euo pipefail
+
+PRINT_MODE=false
+if [ "${1:-}" = "--print" ]; then
+  PRINT_MODE=true
+fi
+
+AGENTS_FILES=("AGENTS.md" "CLAUDE.md" "CURSOR.md")
+FOUND_FILE=""
+
+for f in "${AGENTS_FILES[@]}"; do
+  if [ -f "$f" ]; then
+    FOUND_FILE="$f"
+    break
+  fi
+done
+
+if [ -z "$FOUND_FILE" ]; then
+  if $PRINT_MODE; then echo "No AGENTS.md found — using defaults" >&2; fi
+  exit 0
+fi
+
+extract_command() {
+  local section="$1"
+  local file="$2"
+  # Extract the first non-empty, non-comment line after a ## <section> heading
+  awk "
+    /^## $section/ { found=1; next }
+    found && /^## / { found=0 }
+    found && /^\`\`\`/ { in_block=!in_block; next }
+    found && in_block && /^[a-zA-Z]/ { print; exit }
+    found && !/^\`\`\`/ && /^[a-zA-Z]/ && !in_block { print; exit }
+  " "$file" 2>/dev/null | head -1 | tr -d '\r' || true
+}
+
+BP_PREFLIGHT=$(extract_command "Preflight" "$FOUND_FILE")
+BP_TEST=$(extract_command "Test" "$FOUND_FILE")
+BP_BUILD=$(extract_command "Build" "$FOUND_FILE")
+BP_LINT=$(extract_command "Lint" "$FOUND_FILE")
+BP_DEPLOY=$(extract_command "Deploy" "$FOUND_FILE")
+
+if $PRINT_MODE; then
+  echo "Source: $FOUND_FILE"
+  if [ -n "$BP_PREFLIGHT" ]; then echo "Preflight: $BP_PREFLIGHT"; fi
+  if [ -n "$BP_TEST" ];      then echo "Test:      $BP_TEST"; fi
+  if [ -n "$BP_BUILD" ];     then echo "Build:     $BP_BUILD"; fi
+  if [ -n "$BP_LINT" ];      then echo "Lint:      $BP_LINT"; fi
+  if [ -n "$BP_DEPLOY" ];    then echo "Deploy:    $BP_DEPLOY"; fi
+else
+  if [ -n "$BP_PREFLIGHT" ]; then echo "export BP_PREFLIGHT='$BP_PREFLIGHT'"; fi
+  if [ -n "$BP_TEST" ];      then echo "export BP_TEST='$BP_TEST'"; fi
+  if [ -n "$BP_BUILD" ];     then echo "export BP_BUILD='$BP_BUILD'"; fi
+  if [ -n "$BP_LINT" ];      then echo "export BP_LINT='$BP_LINT'"; fi
+  if [ -n "$BP_DEPLOY" ];    then echo "export BP_DEPLOY='$BP_DEPLOY'"; fi
+fi

package/skills-lock.json

@@ -213,7 +213,7 @@
     },
     "research-first": {
       "description": "Look-before-build — search registries, repo, existing skills, and web for prior art before implementing. Appends Prior Art to the spec. Use after survey-context and before elaborate-spec, when adding dependencies, or when the task may already be solved.",
-      "sha256": "2d11dadf63b9dbd3",
+      "sha256": "8c6928fce1c896b8",
       "path": "research-first/SKILL.md"
     },
     "reset-baseline": {
@@ -318,7 +318,7 @@
     },
     "verify-work": {
       "description": "Multi-phase UAT gate — cold-start smoke, build, typecheck, lint, tests, step-by-step manual verification, gaps-closure loop. Use after execute-plan or develop-tdd, before audit-code.",
-      "sha256": "a05a1d7ab2a959aa",
+      "sha256": "d1aeab669a9c5621",
       "path": "verify-work/SKILL.md"
     },
     "visual-dashboard": {

package/verify-work/SKILL.md

@@ -25,9 +25,10 @@ Review answers "is the code good?"; Verify answers "does the built thing do what
 
 1. Read active story tasks from `specs/epics/<capsule>/eNNsYY-tasks.yaml` and story spec from `specs/epics/<capsule>/eNNsYY-<slug>.md` (countable-story-format, Gherkin in §17).
 2. **Cold-start smoke** (if app): stop server, clear caches, boot from scratch.
-3. Mechanical gates: build → typecheck → lint → tests (from `CLAUDE.md`).
-4. **Step-by-step UAT** — one user-observable action at a time.
-5. **Gaps loop** — failures → log → `plan-work` → re-verify.
+3. **AGENTS.md preflight** — before running default checks, call `bash scripts/bp-read-agents.sh` to detect project-specific commands. If `BP_PREFLIGHT` is set, run it instead of the default mechanical gates (or in addition to them if the project requires both). Output: `"Using preflight from AGENTS.md: <cmd>"`. Fall back to `CLAUDE.md` commands if AGENTS.md is absent.
+4. Mechanical gates: build → typecheck → lint → tests (from `CLAUDE.md` or AGENTS.md).
+5. **Step-by-step UAT** — one user-observable action at a time.
+6. **Gaps loop** — failures → log → `plan-work` → re-verify.
 
 ## Verify sub-operations