bigpowers 2.83.4 → 2.84.0

package/.windsurf/rules/write-document.md

@@ -0,0 +1,255 @@
+---
+name: write-document
+model: sonnet
+description: "Write, organize, and sync high-integrity technical documents using the BMAD methodology. Ensures every document is Bold, Minimal, Actionable, and Durable. Use when creating architectural docs, technical guides, or organizing the specs/ directory."
+---
+
+# Write Document (BMAD)
+
+Create high-signal technical documentation that serves as an expert collaborator for both humans and AI. This skill enforces the BMAD principles to prevent context rot and ensure architectural durability.
+
+**Distinct from `edit-document`:** Use this skill to create a document that does not yet exist. Use `edit-document` when a document already exists and needs restructuring, clarity, or prose improvements.
+
+> **HARD GATE** — Every document must have a clear "Reason for Existence." If a document doesn't provide actionable leverage for a caller or test, do not create it.
+
+## The BMAD Principles
+
+| Principle | Execution |
+| :--- | :--- |
+| **B**old | Make strong assertions. Define clear boundaries and "Never" rules. No "it might" or "usually." |
+| **M**inimal | High-density, low-filler. **Circuit Breaker**: If the file exceeds 300 lines or the session exceeds 20 turns, you MUST run `terse-mode` and compact state before saving. |
+| **A**ctionable | Link every doc to a verifiable outcome. **Architectural Docs**: Verify via Gherkin features (`specs/verifications/features/`) or grep-based structure checks (`grep -c "pattern" file`) that prove the design's *constraints* are present. |
+| **D**urable | Design for the long-term. **Scalability**: Use "Nested Indexing"—root files link to module-level `GEMINI.md` indexes; do not list individual sub-files in the root. |
+
+## Process
+
+### 1. Identify the Artifact Type & Scope
+
+Choose the correct BMAD-BigPowers artifact:
+- **Decision Record (ADR)**: For "Why" decisions (saved to `specs/adr/`).
+- **Context Map**: For system-wide architectural mapping (`specs/tech-architecture/tech-stack.md`).
+- **Technical Guide**: For "How-to" with verification (saved to `<module>/REFERENCE.md`).
+- **Behavioral Feature**: Gherkin-style compliance specs (saved to `specs/verifications/features/`).
+- **Project README**: Project-facing documentation (saved to `README.md` at project root).
+
+**Cross-Cutting Concerns**: If a doc affects multiple modules, place the authoritative source in the lowest common ancestor directory and use "Delegates" (one-line pointers) in sub-directories to maintain the Single Source of Truth without violating the Stepdown Rule.
+
+### 2. Draft with Semantic Velocity
+
+> **STREAM CONTINUITY** — When writing file content, output in continuous chunks of ~200 lines. Do not pause. Continue immediately until complete. If you need time, emit a placeholder comment rather than going silent.
+
+Write the document focusing on "Expert Collaboration":
+- **Instructions over Descriptions**: Tell the reader (human or AI) exactly how to interact with the system.
+- **Provenance Links**: Link to ADRs, Issues, or Commits to preserve intent.
+- **The Stepdown Rule**: Information should descend exactly one level of abstraction. If a root doc needs to explain a leaf-level detail, it must point to a sub-index first.
+
+### Quick README (Project READMEs only)
+
+1. Ask: "Project name? One-sentence description?"
+2. Generate `README.md` at project root using the template in [REFERENCE.md](REFERENCE.md) — no TOC, no second interview round.
+3. Fill gaps from `CLAUDE.md` commands if available; use `TODO` markers otherwise.
+4. Output and suggest `edit-document` for polish.
+
+→ verify: `grep -c "^## " README.md | awk '{if($1>=7) print "OK"}'`
+
+### 3. Apply the 94% Quality Gate
+
+Before finalizing, audit the document against these red flags:
+- [ ] **Filler Language**: Are there pleasantries or "I hope this helps"? (Delete them).
+- [ ] **Ambiguity**: Are there "usually," "often," or "it depends" without specific conditions?
+- [ ] **Dead Ends**: Does the document end without a "Next Step" or "Verification" command?
+- [ ] **Shallow Content**: Does it restate the code without explaining the *intent* or *contracts*?
+
+### 4. Sync and Organize
+
+- **Big Powers Hierarchy**: Place the document in the correct tier (Global -> Project -> Sub-directory). Project READMEs are an exception — they go to project root (`README.md`), not `specs/`.
+- **Nested Indexing**: If adding a module-level doc, ensure the module's `GEMINI.md` is updated. If the module's index is new, add it to the root `GEMINI.md`.
+- **Sync**: Run `scripts/sync-skills.sh` if the document is a `SKILL.md` or affects generated artifacts.
+
+## Rules
+
+- **Minimalism is a requirement**: If a document can be a 5-line table, do not make it a 5-line essay.
+- **Verifiable outcomes**: Every technical document must include at least one `verify:` command. For architecture, this can be a `grep` or `run_shell_command` that validates the existence of required files or patterns.
+- **No speculative docs**: Do not write documentation for features that do not exist yet unless explicitly doing `elaborate-spec`.
+
+
+Suggest next skill: `audit-code` or `sync-skills.sh`.
+
+---
+
+# Project README Template
+
+Combined from dbader/readme-template and jehna/readme-best-practices. No TOC.
+
+## Navigation
+
+| Lines | Section |
+|-------|---------|
+| 1 | Title |
+| 5–16 | Navigation |
+| 18–24 | Sections intro |
+| 26–178 | README section templates (1–15) |
+| 180–183 | Verify |
+
+## Sections
+
+### 1. Title + Badges
+
+```markdown
+# Project Name
+
+![License](https://img.shields.io/badge/License-MIT-yellow.svg)
+![npm version](https://img.shields.io/npm/v/your-package.svg)
+
+```
+
+Fill badges from CLAUDE.md stack info if available. Default to license + version badges.
+
+### 2. Tagline
+
+```markdown
+> One-line description of what this project does and why it matters.
+```
+
+### 3. Description
+
+2-3 paragraphs: what problem it solves, who it's for, and what makes it different.
+
+### 4. Prerequisites
+
+```markdown
+## Prerequisites
+
+- **Runtime**: Node.js v18+ (from CLAUDE.md)
+- **Package manager**: npm (or pnpm/yarn)
+```
+
+Auto-fill from CLAUDE.md commands section when possible.
+
+### 5. Installation
+
+```markdown
+## Installation
+
+```bash
+npm install -g your-package
+# or
+npx your-package
+```
+```
+
+Prefer npx one-shot if applicable; list global install as alternative.
+
+### 6. Usage
+
+```markdown
+## Usage
+
+```bash
+your-command --help
+your-command do-something
+```
+```
+
+Include the most common 1-2 commands. Link to full docs if they exist.
+
+### 7. Features
+
+```markdown
+## Features
+
+- Feature 1: short description
+- Feature 2: short description
+```
+
+3-6 bullet points of what the project does. Derived from the project's purpose.
+
+### 8. Configuration
+
+```markdown
+## Configuration
+
+| Variable | Default | Description |
+|----------|---------|-------------|
+| `VAR_NAME` | `value` | What it controls |
+```
+
+Use `TODO` markers if unknown.
+
+### 9. Development Setup
+
+```markdown
+## Development
+
+```bash
+git clone <repo-url>
+cd project
+npm install
+```
+```
+
+Auto-fill from CLAUDE.md `Run` and `Build` commands.
+
+### 10. Running Tests
+
+```markdown
+## Tests
+
+```bash
+npm test
+npm run lint
+```
+```
+
+Auto-fill from CLAUDE.md `Test` and `Lint` commands.
+
+### 11. Contributing
+
+```markdown
+## Contributing
+
+1. Fork the repo.
+2. Create a feature branch (`git checkout -b feature/my-thing`).
+3. Commit changes (`git commit -am 'Add my thing'`).
+4. Push (`git push origin feature/my-thing`).
+5. Open a Pull Request.
+```
+
+### 12. Changelog
+
+```markdown
+## Changelog
+
+See [CHANGELOG.md](../../CHANGELOG.md) or [Releases](https://github.com/user/repo/releases).
+```
+
+### 13. Links
+
+```markdown
+## Links
+
+- Repository: https://github.com/user/repo
+- Issue tracker: https://github.com/user/repo/issues
+```
+
+### 14. License
+
+```markdown
+## License
+
+MIT — see [LICENSE](../../LICENSE) for details.
+```
+
+Detect from CLAUDE.md or project LICENSE file.
+
+### 15. Credits (optional)
+
+```markdown
+## Credits
+
+Built with [bigpowers](https://github.com/danielvm-git/bigpowers).
+```
+
+## Verify
+
+After generation, run: `grep -c "^## " README.md` — expect ≥ 7 section headings.

package/CHANGELOG.md

@@ -1,3 +1,33 @@
+# [2.84.0](https://github.com/danielvm-git/bigpowers/compare/v2.83.4...v2.84.0) (2026-07-24)
+
+
+### Bug Fixes
+
+* **install:** hub test dry-run grep SIGPIPE + OpenCode verify ([dd9ca99](https://github.com/danielvm-git/bigpowers/commit/dd9ca994534905efa1ec24a2afad5bbda5432d1b))
+
+
+### Features
+
+* **62:** OpenCode install hub wiring (Wave B) ([b768546](https://github.com/danielvm-git/bigpowers/commit/b76854632549912389b1ef575d2058c4482919f4))
+* **70:** Trae install hub wiring (Wave B) ([8183f3a](https://github.com/danielvm-git/bigpowers/commit/8183f3ab430941a3482caa1547c017dd02e781e1))
+* **71:** Copilot CLI install hub wiring (Wave B) ([d7d21f4](https://github.com/danielvm-git/bigpowers/commit/d7d21f4141b14eff18aebd9dc383ad0e719f93d9))
+* **73:** Windsurf install hub wiring (Wave B) ([9d5c758](https://github.com/danielvm-git/bigpowers/commit/9d5c75878215d8038df6de7f0d54ca7d32308248))
+* **e62:** OpenCode adapter (Wave A) ([7b508a9](https://github.com/danielvm-git/bigpowers/commit/7b508a9382c3ca00c3f24203da3a19ba70c38f33))
+* **e65:** Codex CLI adapter (Wave A) ([3475197](https://github.com/danielvm-git/bigpowers/commit/34751977adceb1765f1c30798d41f14730777143))
+* **e65:** Codex CLI install hub wiring (Wave B) ([4773ea3](https://github.com/danielvm-git/bigpowers/commit/4773ea303e82b963318ce2644d6c235e3cc7e9ad))
+* **e66:** Cline adapter (Wave A) ([908e5ac](https://github.com/danielvm-git/bigpowers/commit/908e5ac0cc21db1429ae0bbdb05c6d21a2366b7f))
+* **e66:** Cline install hub wiring (Wave B) ([d1bb38c](https://github.com/danielvm-git/bigpowers/commit/d1bb38c5112d8adeff2a04aec50d5130f272d8ce))
+* **e67:** Kilo adapter (Wave A) ([814cc01](https://github.com/danielvm-git/bigpowers/commit/814cc010143fcb7926e40b7c5cbd968996c7cd84))
+* **e67:** Kilo install hub wiring (Wave B) ([5cd40f2](https://github.com/danielvm-git/bigpowers/commit/5cd40f286e4bf6b8abedb0cc16584ded9cea09f9))
+* **e68:** Qwen Code adapter (Wave A) ([bdcd197](https://github.com/danielvm-git/bigpowers/commit/bdcd19791811b1c2a9853820aaf41cb7e2a4c6e8))
+* **e68:** Qwen Code install hub wiring (Wave B) ([96374ea](https://github.com/danielvm-git/bigpowers/commit/96374eaeeb61215b57a25143c99d323d8614980d))
+* **e70:** Trae adapter (Wave A) ([87d1350](https://github.com/danielvm-git/bigpowers/commit/87d1350696db421f3bf162bc0dc6cfb1eb780723))
+* **e71:** Copilot CLI adapter (Wave A) ([4b23263](https://github.com/danielvm-git/bigpowers/commit/4b23263fe585681957ebc022295566585865f7bf))
+* **e72:** CodeBuddy adapter (Wave A) ([73f69cd](https://github.com/danielvm-git/bigpowers/commit/73f69cd68bd0fd5e0f3b5388dfc19871df7b92c2))
+* **e72:** CodeBuddy install hub wiring (Wave B) ([f0d5304](https://github.com/danielvm-git/bigpowers/commit/f0d53044ae94ed5ee9d2322661f96e4121847622))
+* **e73:** Windsurf adapter (Wave A) ([beb47d7](https://github.com/danielvm-git/bigpowers/commit/beb47d71d093c7d429a58113a3ad7a18903258de))
+* **fleet:** complete 9 integration epics (e62, e65-e68, e70-e73) ([a34bfc9](https://github.com/danielvm-git/bigpowers/commit/a34bfc943babd399db9275e20455d195519e2510))
+
 ## [2.83.4](https://github.com/danielvm-git/bigpowers/compare/v2.83.3...v2.83.4) (2026-07-24)
 
 

package/CONVENTIONS.md

@@ -48,6 +48,7 @@ All changes to this repository MUST follow the [Conventional Commits 1.0.0](http
 - **State Commit Policy:** To minimize git history noise, intermediate `chore(state):` commits (e.g., tracking build-epic step transitions) should either be squashed locally using the `--squash-state` flag on `release-branch` before merging, or kept out-of-band using local cycle-state files.
 - Never call GitHub REST API directly (curl, fetch, etc.)
 - Never create GitHub issues from automated workflows — produce local .md files in specs/ instead
+- **Post-land branch cleanup:** `land-branch.sh` squash-merges the feature branch, so `git branch -d <branch>` afterward always fails ("not fully merged" — expected, since a squash doesn't create an ancestor relationship). `git branch -D <branch>` is the correct next step, but `guard-git`'s hook blocks agents from running `-D` directly. Leave the orphaned local branch for the human to delete, or fix `land-branch.sh` to delete its own branch under the `GIT_BIGPOWERS_LAND=1` exemption it already sets — don't spend a turn fighting the hook.
 
 ### Pre-Merge Verification Gates
 
@@ -265,6 +266,26 @@ Skill content is edited in `skills/*/SKILL.md` and auto-propagated to these targ
 
 **Never edit any of these targets directly.** Edit the SKILL.md sources and run rebuild scripts (`bash scripts/sync-skills.sh`, `npm run site:build`).
 
+### Packaging boundary — dev-repo tooling vs. end-user CLI
+
+bigpowers ships itself as an npm package (`bin/setup.js`) while also being a
+self-hosting monorepo that dogfoods its own skills. `.npmignore` excludes
+`specs/`, `docs/`, and `.git` from the published tarball — a real end-user
+install has none of them.
+
+**Any script invoked from `bin/*.js` (the end-user CLI surface) must not
+assume dev-only files exist.** `scripts/sync-skills.sh` conflates two
+concerns — skill distribution (render into `.cursor/rules/` etc., relevant
+to every user) and dev-repo maintenance (`sync_post_run`: regenerate
+`skills-lock.json`, `SKILL-INDEX.md`, `docs/references/model-profiles.md`,
+`specs/epics-wiki/`, `specs/adr-wiki/` — relevant only to bigpowers
+contributors). `bin/setup.js` calls it with `--distribute-only`, which skips
+`sync_post_run` entirely; the no-flag form remains the contributor
+dev-workflow. Before wiring any dev-maintenance script into an installer
+path, verify with `command npm pack --pack-destination <dir>` + extract
+what a real install actually contains, rather than assuming `specs/`/`docs/`
+are present (see `BUG-2026-07-24-installer-runs-dev-maintenance-pipeline`).
+
 ### Legacy paths (migrate away)
 
 | Old | New |
@@ -294,6 +315,7 @@ Skill content is edited in `skills/*/SKILL.md` and auto-propagated to these targ
 - **Verification mandate:** Every story must include runnable `verify:` commands (in epic shards or story files). No story is done until `verify-work` confirms it (or user explicitly waives with documented reason in `specs/state.yaml` handoff).
 - Exception messages must include the offending value, expected shape, and an actionable remediation hint for the agent.
 - SOLID beyond SRP: favor interfaces over concrete types (DIP) when injecting dependencies.
+- **`grep -E` portability:** never use `\d` or `\D` in a `grep -E` pattern — they are PCRE-only escapes, not GNU grep extensions (unlike `\s`/`\S`/`\w`/`\W`, which GNU grep does support). Real GNU grep on Linux CI treats `\d` as a literal `d`, silently matching nothing; this only "works" on macOS if the local `grep` happens to be a permissive BSD/GNU-compatible variant. Use `[0-9]` instead. This exact defect broke the traceability gate codebase-wide (`scripts/lib/trace-stories.py`, `scripts/lib/trace-matrix.py`) while passing every local check.
 
 ## Comments
 

package/bin/setup.js

@@ -1,6 +1,14 @@
 #!/usr/bin/env node
 // story: e60s01
 // story: e74s02
+// story: e71s02
+// story: e62s02
+// story: e73s02
+// story: e70s02
+// story: e67s02
+// story: e66s02
+// story: e72s02
+// story: e68s02
 // bigpowers setup — interactive installer
 // Combines GSD simplicity with BMAD visual polish.
 
@@ -58,7 +66,7 @@ const TOOLS = [
   { id: 'windsurf', name: 'Windsurf', globalPath: '~/.codeium/windsurf', localPath: '.codeium/windsurf' },
   { id: 'zcode', name: 'ZCode', globalPath: '~/.zcode', localPath: '.zcode' },
 ];
-const SUPPORTED_IDS = new Set(['claude', 'gemini', 'pi', 'hermes', 'mimo', 'zcode', 'cursor', 'codex', 'antigravity', 'agy']);
+const SUPPORTED_IDS = new Set(['claude', 'gemini', 'pi', 'hermes', 'mimo', 'zcode', 'cursor', 'codex', 'antigravity', 'agy', 'qwen', 'codebuddy', 'cline', 'kilo', 'trae', 'windsurf', 'opencode', 'copilot']);
 const UNSUPPORTED_HINT = '(TODO)';
 
 // ── clack helpers (lazy ESM import from CJS) ─────────────────────────────────

package/instructions

@@ -0,0 +1 @@
+AGENTS.md: AGENTS.md

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "bigpowers",
-  "version": "2.83.4",
+  "version": "2.84.0",
   "description": "73 agent skills synthesizing 17 years of software engineering discipline into a prescriptive methodology for solo developers",
   "main": "index.js",
   "scripts": {

package/scripts/adapters/cline.sh

@@ -1,8 +1,58 @@
 #!/usr/bin/env bash
-# story: e37s05
-# Cline reads AGENTS.md natively — no skill artifacts.
+# story: e66s01
+# scenario: SC-e66s01-P1-01
+# Cline skill adapter — renders .cline/skills from SkillIR.
+
+cline_is_unsafe_skill_name() {
+  local name="$1"
+  [[ -z "$name" || "$name" == "null" || "$name" == *"/"* || "$name" == *".."* ]]
+}
+
+cline_sanitize_name() {
+  local name="$1"
+  if cline_is_unsafe_skill_name "$name"; then
+    echo "cline: invalid skill name: ${name:-<empty>}" >&2
+    return 1
+  fi
+  printf '%s' "$name"
+}
+
+render_skill() {
+  local safe_name
+  safe_name=$(cline_sanitize_name "${IR_NAME:-}") || return 1
+  local out="${CLINE_SKILLS:-.cline/skills}"
+  mkdir -p "$out/$safe_name"
+
+  if [[ -n "${SKILL_MD_PATH:-}" && -f "$SKILL_MD_PATH" ]]; then
+    cp "$SKILL_MD_PATH" "$out/$safe_name/SKILL.md"
+    return 0
+  fi
+
+  {
+    echo "---"
+    echo "name: $safe_name"
+    [[ -n "${IR_MODEL:-}" && "$IR_MODEL" != "null" ]] && echo "model: $IR_MODEL"
+    echo "description: \"${IR_DESC_ESCAPED:-}\""
+    echo "---"
+    echo ""
+    echo "${IR_BODY:-}"
+  } > "$out/$safe_name/SKILL.md"
+}
+
 
 wire_context() {
-  # native mode — no derivative
+  # native mode — Cline reads AGENTS.md directly
   return 0
 }
+
+if [[ "${BASH_SOURCE[0]}" == "${0}" ]] && [[ ! -t 0 ]]; then
+  JSON_INPUT=$(cat)
+  if [[ -n "$JSON_INPUT" ]]; then
+    IR_NAME=$(echo "$JSON_INPUT" | jq -r '.name')
+    IR_MODEL=$(echo "$JSON_INPUT" | jq -r '.model')
+    IR_DESCRIPTION=$(echo "$JSON_INPUT" | jq -r '.description')
+    IR_BODY=$(echo "$JSON_INPUT" | jq -r '.body')
+    IR_DESC_ESCAPED=$(echo "$IR_DESCRIPTION" | sed 's/\\/\\\\/g; s/\"/\\"/g')
+    render_skill
+  fi
+fi

package/scripts/adapters/codebuddy.sh

@@ -0,0 +1,58 @@
+#!/usr/bin/env bash
+# story: e72s01
+# scenario: SC-e72s01-P1-01
+# CodeBuddy skill adapter — renders .codebuddy/skills from SkillIR.
+
+codebuddy_is_unsafe_skill_name() {
+  local name="$1"
+  [[ -z "$name" || "$name" == "null" || "$name" == *"/"* || "$name" == *".."* ]]
+}
+
+codebuddy_sanitize_name() {
+  local name="$1"
+  if codebuddy_is_unsafe_skill_name "$name"; then
+    echo "codebuddy: invalid skill name: ${name:-<empty>}" >&2
+    return 1
+  fi
+  printf '%s' "$name"
+}
+
+render_skill() {
+  local safe_name
+  safe_name=$(codebuddy_sanitize_name "${IR_NAME:-}") || return 1
+  local out="${CODEBUDDY_SKILLS:-.codebuddy/skills}"
+  mkdir -p "$out/$safe_name"
+
+  if [[ -n "${SKILL_MD_PATH:-}" && -f "$SKILL_MD_PATH" ]]; then
+    cp "$SKILL_MD_PATH" "$out/$safe_name/SKILL.md"
+    return 0
+  fi
+
+  {
+    echo "---"
+    echo "name: $safe_name"
+    [[ -n "${IR_MODEL:-}" && "$IR_MODEL" != "null" ]] && echo "model: $IR_MODEL"
+    echo "description: \"${IR_DESC_ESCAPED:-}\""
+    echo "---"
+    echo ""
+    echo "${IR_BODY:-}"
+  } > "$out/$safe_name/SKILL.md"
+}
+
+
+wire_context() {
+  source "$(dirname "${BASH_SOURCE[0]}")/../lib/context-wire.sh"
+  wire_context_mode symlink "${1:-AGENTS.md}"
+}
+
+if [[ "${BASH_SOURCE[0]}" == "${0}" ]] && [[ ! -t 0 ]]; then
+  JSON_INPUT=$(cat)
+  if [[ -n "$JSON_INPUT" ]]; then
+    IR_NAME=$(echo "$JSON_INPUT" | jq -r '.name')
+    IR_MODEL=$(echo "$JSON_INPUT" | jq -r '.model')
+    IR_DESCRIPTION=$(echo "$JSON_INPUT" | jq -r '.description')
+    IR_BODY=$(echo "$JSON_INPUT" | jq -r '.body')
+    IR_DESC_ESCAPED=$(echo "$IR_DESCRIPTION" | sed 's/\\/\\\\/g; s/\"/\\"/g')
+    render_skill
+  fi
+fi

package/scripts/adapters/codex.sh

@@ -0,0 +1,58 @@
+#!/usr/bin/env bash
+# story: e65s01
+# scenario: SC-e65s01-P1-01
+# Codex CLI skill adapter — renders .codex/skills from SkillIR.
+
+codex_is_unsafe_skill_name() {
+  local name="$1"
+  [[ -z "$name" || "$name" == "null" || "$name" == *"/"* || "$name" == *".."* ]]
+}
+
+codex_sanitize_name() {
+  local name="$1"
+  if codex_is_unsafe_skill_name "$name"; then
+    echo "codex: invalid skill name: ${name:-<empty>}" >&2
+    return 1
+  fi
+  printf '%s' "$name"
+}
+
+render_skill() {
+  local safe_name
+  safe_name=$(codex_sanitize_name "${IR_NAME:-}") || return 1
+  local out="${CODEX_SKILLS:-.codex/skills}"
+  mkdir -p "$out/$safe_name"
+
+  if [[ -n "${SKILL_MD_PATH:-}" && -f "$SKILL_MD_PATH" ]]; then
+    cp "$SKILL_MD_PATH" "$out/$safe_name/SKILL.md"
+    return 0
+  fi
+
+  {
+    echo "---"
+    echo "name: $safe_name"
+    [[ -n "${IR_MODEL:-}" && "$IR_MODEL" != "null" ]] && echo "model: $IR_MODEL"
+    echo "description: \"${IR_DESC_ESCAPED:-}\""
+    echo "---"
+    echo ""
+    echo "${IR_BODY:-}"
+  } > "$out/$safe_name/SKILL.md"
+}
+
+
+wire_context() {
+  source "$(dirname "${BASH_SOURCE[0]}")/../lib/context-wire.sh"
+  wire_context_mode config-bridge ".codex/config.toml" "instructions" "AGENTS.md"
+}
+
+if [[ "${BASH_SOURCE[0]}" == "${0}" ]] && [[ ! -t 0 ]]; then
+  JSON_INPUT=$(cat)
+  if [[ -n "$JSON_INPUT" ]]; then
+    IR_NAME=$(echo "$JSON_INPUT" | jq -r '.name')
+    IR_MODEL=$(echo "$JSON_INPUT" | jq -r '.model')
+    IR_DESCRIPTION=$(echo "$JSON_INPUT" | jq -r '.description')
+    IR_BODY=$(echo "$JSON_INPUT" | jq -r '.body')
+    IR_DESC_ESCAPED=$(echo "$IR_DESCRIPTION" | sed 's/\\/\\\\/g; s/\"/\\"/g')
+    render_skill
+  fi
+fi

package/scripts/adapters/copilot.sh

@@ -0,0 +1,58 @@
+#!/usr/bin/env bash
+# story: e71s01
+# scenario: SC-e71s01-P1-01
+# Copilot CLI skill adapter — renders .copilot/skills from SkillIR.
+
+copilot_is_unsafe_skill_name() {
+  local name="$1"
+  [[ -z "$name" || "$name" == "null" || "$name" == *"/"* || "$name" == *".."* ]]
+}
+
+copilot_sanitize_name() {
+  local name="$1"
+  if copilot_is_unsafe_skill_name "$name"; then
+    echo "copilot: invalid skill name: ${name:-<empty>}" >&2
+    return 1
+  fi
+  printf '%s' "$name"
+}
+
+render_skill() {
+  local safe_name
+  safe_name=$(copilot_sanitize_name "${IR_NAME:-}") || return 1
+  local out="${COPILOT_SKILLS:-.copilot/skills}"
+  mkdir -p "$out/$safe_name"
+
+  if [[ -n "${SKILL_MD_PATH:-}" && -f "$SKILL_MD_PATH" ]]; then
+    cp "$SKILL_MD_PATH" "$out/$safe_name/SKILL.md"
+    return 0
+  fi
+
+  {
+    echo "---"
+    echo "name: $safe_name"
+    [[ -n "${IR_MODEL:-}" && "$IR_MODEL" != "null" ]] && echo "model: $IR_MODEL"
+    echo "description: \"${IR_DESC_ESCAPED:-}\""
+    echo "---"
+    echo ""
+    echo "${IR_BODY:-}"
+  } > "$out/$safe_name/SKILL.md"
+}
+
+
+wire_context() {
+  source "$(dirname "${BASH_SOURCE[0]}")/../lib/context-wire.sh"
+  wire_context_mode copy "${1:-AGENTS.md}"
+}
+
+if [[ "${BASH_SOURCE[0]}" == "${0}" ]] && [[ ! -t 0 ]]; then
+  JSON_INPUT=$(cat)
+  if [[ -n "$JSON_INPUT" ]]; then
+    IR_NAME=$(echo "$JSON_INPUT" | jq -r '.name')
+    IR_MODEL=$(echo "$JSON_INPUT" | jq -r '.model')
+    IR_DESCRIPTION=$(echo "$JSON_INPUT" | jq -r '.description')
+    IR_BODY=$(echo "$JSON_INPUT" | jq -r '.body')
+    IR_DESC_ESCAPED=$(echo "$IR_DESCRIPTION" | sed 's/\\/\\\\/g; s/\"/\\"/g')
+    render_skill
+  fi
+fi

package/scripts/adapters/kilocode.sh

@@ -1,11 +1,52 @@
 #!/usr/bin/env bash
-# story: e37s11
+# story: e67s01
+# scenario: SC-e67s01-P1-01
+# Kilo skill adapter — renders .kilocode/rules from SkillIR.
+
+kilocode_is_unsafe_skill_name() {
+  local name="$1"
+  [[ -z "$name" || "$name" == "null" || "$name" == *"/"* || "$name" == *".."* ]]
+}
+
+kilocode_sanitize_name() {
+  local name="$1"
+  if kilocode_is_unsafe_skill_name "$name"; then
+    echo "kilocode: invalid skill name: ${name:-<empty>}" >&2
+    return 1
+  fi
+  printf '%s' "$name"
+}
+
 render_skill() {
+  local safe_name
+  safe_name=$(kilocode_sanitize_name "${IR_NAME:-}") || return 1
   local out="${KILOCODE_RULES:-.kilocode/rules}"
-  mkdir -p "$out" 2>/dev/null || true
-  [[ -n "${IR_NAME:-}" ]] && touch "$out/$IR_NAME.md" 2>/dev/null || true
+  mkdir -p "$out"
+  {
+    echo "---"
+    echo "name: $safe_name"
+    [[ -n "${IR_MODEL:-}" && "$IR_MODEL" != "null" ]] && echo "model: $IR_MODEL"
+    echo "description: \"${IR_DESC_ESCAPED:-}\""
+    echo "---"
+    echo ""
+    echo "${IR_BODY:-}"
+  } > "$out/$safe_name.md"
 }
+
+
 wire_context() {
   source "$(dirname "${BASH_SOURCE[0]}")/../lib/context-wire.sh"
   wire_context_mode copy "${1:-AGENTS.md}"
 }
+
+if [[ "${BASH_SOURCE[0]}" == "${0}" ]] && [[ ! -t 0 ]]; then
+  JSON_INPUT=$(cat)
+  if [[ -n "$JSON_INPUT" ]]; then
+    IR_NAME=$(echo "$JSON_INPUT" | jq -r '.name')
+    IR_MODEL=$(echo "$JSON_INPUT" | jq -r '.model')
+    IR_DESCRIPTION=$(echo "$JSON_INPUT" | jq -r '.description')
+    IR_BODY=$(echo "$JSON_INPUT" | jq -r '.body')
+    IR_DESC_ESCAPED=$(echo "$IR_DESCRIPTION" | sed 's/\\/\\\\/g; s/\"/\\"/g')
+    render_skill
+  fi
+fi