bigpowers 2.86.4 → 2.86.5

package/skills-lock.json

@@ -48,7 +48,7 @@
     },
     "craft-skill": {
       "description": "Create new bigpowers skills with proper structure, progressive disclosure, and bundled resources. Use when user wants to create, write, or build a new skill for the bigpowers lifecycle.",
-      "sha256": "cc2d3a6c70693114",
+      "sha256": "f3b08c24979f1857",
       "path": "skills/craft-skillSKILL.md"
     },
     "deepen-architecture": {
@@ -62,8 +62,8 @@
       "path": "skills/define-languageSKILL.md"
     },
     "define-success": {
-      "description": "'Convert an imperative task statement into explicit \"step → verify: <cmd>\" pairs before implementation begins. Use before plan-work when success criteria are unclear, when a task lacks verifiable checkpoints, or when user says \"how will we know this is done?\".'",
-      "sha256": "458d06a29b0a5b67",
+      "description": "\"TOMBSTONE — renamed/merged to plan-work. This stub resolves for one release then is removed.\"",
+      "sha256": "b0aeb8c0d870fe2e",
       "path": "skills/define-successSKILL.md"
     },
     "delegate-task": {
@@ -73,7 +73,7 @@
     },
     "deploy": {
       "description": "\"Build → verify artifact → deploy → wait → smoke deployment pipeline. Platform-agnostic (MCP or CLI), with configurable timeout, retry with exponential backoff, and integrated health-check. The deploy half of CI/CD: run after build to push to production.\"",
-      "sha256": "09d24b7e5d2e759c",
+      "sha256": "ddfcbfbfc464c620",
       "path": "skills/deploySKILL.md"
     },
     "design-interface": {
@@ -108,7 +108,7 @@
     },
     "elaborate-spec": {
       "description": "Refine a rough idea into a clear, detailed specification through dialogue. Does not produce code. Use when user has a vague idea, wants to think through a feature before planning, or needs to turn \"I want X\" into a concrete spec.",
-      "sha256": "9307ab61c789a0a0",
+      "sha256": "67385bef84425f6d",
       "path": "skills/elaborate-specSKILL.md"
     },
     "enforce-first": {
@@ -167,8 +167,8 @@
       "path": "skills/guard-gitSKILL.md"
     },
     "harden-vps": {
-      "description": "\"Harden a production Linux VPS for BigBase across three layers — BigBase app (systemd hardening, monitoring alerts, backup automation), Ubuntu OS (UFW firewall, fail2ban SSH, unattended-upgrades, SSH hardening), and Contabo VPS (health checks, daily backups, monthly snapshots). Use when the user wants to secure a production server, harden a VPS, audit server security, or mentions production hardening, VPS security, or harden the server.\"",
-      "sha256": "5768af4f96e9a3b3",
+      "description": "\"Harden a production Linux VPS for your application across three layers — application (systemd hardening, monitoring alerts, backup automation), Ubuntu OS (UFW firewall, fail2ban SSH, unattended-upgrades, SSH hardening), and VPS provider (health checks, daily backups, monthly snapshots). Use when the user wants to secure a production server, harden a VPS, audit server security, or mentions production hardening, VPS security, or harden the server.\"",
+      "sha256": "38db97ca3c00d736",
       "path": "skills/harden-vpsSKILL.md"
     },
     "hook-commits": {
@@ -183,7 +183,7 @@
     },
     "investigate-bug": {
       "description": "Investigate a bug or issue by exploring the codebase to find root cause, then write a TDD-based fix plan to specs/bugs/BUG-*.md. Use when user reports a bug, wants to investigate a problem, mentions \"triage\", or wants to plan a fix.",
-      "sha256": "54f8c5417be34ef0",
+      "sha256": "b842fd329d1f7741",
       "path": "skills/investigate-bugSKILL.md"
     },
     "kickoff-branch": {
@@ -223,12 +223,12 @@
     },
     "plan-refactor": {
       "description": "Create a detailed refactor plan with tiny commits via user interview, then save it as specs/REFACTOR_LATEST.md. Use when user wants to plan a refactor, create a refactoring RFC, or break a refactor into safe incremental steps.",
-      "sha256": "2d18809da7cc9de8",
+      "sha256": "c418c850806e2f16",
       "path": "skills/plan-refactorSKILL.md"
     },
     "plan-release": {
       "description": "\"RELEASE-INDEX BUILDER — Sequence elaborated epics into specs/release-plan.yaml with WSJF ordering and BCP baselines. NOT a planning-spine substitute: it does not scope work (scope-work) or write story tasks (plan-work). Use after elaborate-spec when the user wants a versioned release index of epics.\"",
-      "sha256": "9334ff48e5b1fab3",
+      "sha256": "071acc0626c2a203",
       "path": "skills/plan-releaseSKILL.md"
     },
     "plan-tests": {
@@ -238,7 +238,7 @@
     },
     "plan-work": {
       "description": "\"PLANNING SPINE STEP 3 of 3 — Plan the work: write detailed implementation tasks into the active epic capsule (specs/epics/eNN-slug/). Produces countable-story-format .md specs and runnable -tasks.yaml files. Use after slice-tasks (step 2). Not a substitute for scope-work (step 1) or slice-tasks (step 2).\"",
-      "sha256": "e5d751ca5e928e2d",
+      "sha256": "32c2bcaf16cb4ad2",
       "path": "skills/plan-workSKILL.md"
     },
     "publish-package": {
@@ -363,7 +363,7 @@
     },
     "using-bigpowers": {
       "description": "One-time bootstrap that introduces the bigpowers skills system, the PMBOK lifecycle arc, and tells you which skill to call first for your situation. Use when starting with bigpowers for the first time, when user asks \"where do I start?\", or when the skills system needs to be explained.",
-      "sha256": "bad9ebe9bf303b36",
+      "sha256": "a6d780440a936929",
       "path": "skills/using-bigpowersSKILL.md"
     },
     "validate-contracts": {

package/.fix_regex.sh

@@ -1,16 +0,0 @@
-#!/bin/bash
-# Fix the broken regex in migrate-version.sh
-cd /Users/danielvm/Developer/bigpowers
-python3 -c '
-path = "scripts/migrate-version.sh"
-with open(path) as f:
-    content = f.read()
-
-old = """    pat = re.compile(rf\"^\"+re.escape(md_key.rstrip(\":\"))+\"\\\\s*[:=]\\\\s*(.+)$\", re.MULTILINE | re.IGNORECASE)"""
-new = """    pat = re.compile(r\"^\" + re.escape(md_key.rstrip(\":\")) + r\"\\s*[:=]\\s*(.+)$\", re.MULTILINE | re.IGNORECASE)"""
-
-content = content.replace(old, new)
-with open(path, "w") as f:
-    f.write(content)
-print("Fixed")
-'

package/.hermes-verify-sed-fix.py

@@ -1,53 +0,0 @@
-import subprocess
-
-REPO = "/Users/danielvm/Developer/bigpowers"
-names = ["kickoff-branch","develop-tdd","wire-observability","hook-commits",
-         "request-review","dispatch-agents","investigate-bug","define-language",
-         "assess-impact","guard-git","smoke-test","respond-review","enforce-first"]
-
-errs = 0
-print("=== 1. Old sed vs new python3 (13 skills) ===")
-for name in names:
-    old = subprocess.run(["sed", "-E", r"s/-/ /g; s/\b(.)/\U\1/g"],
-                        input=name, capture_output=True, text=True).stdout.strip()
-    new = name.replace("-", " ").title()
-    if old != new:
-        print(f"  BROKEN: {name:22s} -> old='{old}'  new='{new}'")
-        errs += 1
-
-print(f"\n  {errs}/13 titles broken by BSD sed")
-
-print("\n=== 2. Generated files match new fix ===")
-ok = 0
-for name in ["kickoff-branch","develop-tdd","wire-observability","dispatch-agents","guard-git"]:
-    path = f"{REPO}/specs/skills-wiki/skills/{name}.md"
-    expected = f'title: "{name.replace("-", " ").title()}"'
-    actual = "MISSING"
-    try:
-        with open(path) as f:
-            for line in f:
-                if line.startswith("title:"):
-                    actual = line.strip()
-                    break
-    except FileNotFoundError:
-        pass
-    match = "OK" if actual == expected else "MISMATCH"
-    if match == "OK": ok += 1
-    print(f"  {match:8s} {name:22s} {actual}")
-
-print(f"\n  {ok}/5 generated files verified")
-
-print("\n=== 3. validate-okf.sh ===")
-r = subprocess.run(["bash", f"{REPO}/scripts/validate-okf.sh",
-                    "--dir", f"{REPO}/specs/skills-wiki/skills"],
-                   capture_output=True, text=True)
-print(f"  PASS={r.stdout.count('PASS ')}  FAIL={r.stdout.count('FAIL ')}  exit={r.returncode}")
-
-print("\n=== 4. Patch applied ===")
-with open(f"{REPO}/scripts/sync-skills.sh") as f:
-    for i, line in enumerate(f, 1):
-        if "python3" in line and "title()" in line:
-            print(f"  line {i}: {line.strip()}")
-            break
-
-print(f"\nVERDICT: {errs}/13 sed bug confirmed, {ok}/5 outputs correct, validate-okf pass")

package/_test_e28s01.sh

@@ -1,2 +0,0 @@
-#!/usr/bin/env bash
-echo "test"

package/audit-independent-unwaived-2026-07-06.md

@@ -1,49 +0,0 @@
-# Independent Compliance Audit (Unwaived Mode)
-
-**Date**: 2026-07-06
-**Mode**: Strict (All waivers disabled)
-**Target**: `specs/verifications/features/`
-**Result**: GATE: FAIL
-
-## Summary of Execution
-I executed the verification gates by temporarily bypassing `waivers.yaml` to run an independent compliance audit against the `bigpowers` principles and conventions without any exceptions. The `audit-compliance.sh` and `validate-doctrine.sh` scripts were successfully executed.
-
-## Failed Verification Steps & Offending Scripts
-
-By disabling the waivers, I isolated **4 failing verification steps**. Below is the mapping of each failure to its offending files and corresponding `bigpowers` skills:
-
-### 1. Unique Public Symbols (`grep` < 5 results)
-**Feature**: `akita.feature` (sourced from `conventions.feature`)
-- **Reason**: Duplicate function names across multiple files (e.g., `agent_dry_run`, `assign_tier`, `cleanup`, `emit_json`, `fail`, `parse_frontmatter`, `pass`, `show_help`, `usage`). 
-- **Affected Core/Skills**: Common shared scripts and lifecycle utilities.
-
-### 2. Context Window Constraint (< 300 lines)
-**Feature**: `akita.feature`
-- **Reason**: Scripts exceeding the 300-line limit for agent context windows.
-- **Offending Files**:
-  - `scripts/sync-skills.sh` (Mapped to: `craft-skill`, `evolve-skill`, `maintain-wiki`)
-  - `scripts/migrate-version.sh` (Mapped to: `migrate-spec`)
-  - `scripts/run-verification-gates.sh` (Core harness)
-  - `scripts/validate-okf.sh` (Core harness)
-  - `scripts/audit-compliance.sh` (Core harness / `audit-code`)
-  - `scripts/run-golden-suite.sh` (Core harness)
-  - `scripts/lib/trace-matrix.py` (Mapped to: `gate-trace`)
-  - `scripts/lib/trace-stories.py` (Mapped to: `trace-requirement`)
-
-### 3. Newspaper Metaphor (< 500 lines)
-**Feature**: `cleancode.feature`
-- **Reason**: Critical scripts exceeding the absolute 500-line hard cap.
-- **Offending Files**:
-  - `scripts/sync-skills.sh` (Mapped to: `craft-skill`, `evolve-skill`)
-  - `scripts/migrate-version.sh` (Mapped to: `migrate-spec`)
-  - `scripts/lib/trace-matrix.py` (Mapped to: `gate-trace`)
-
-### 4. Boolean Encapsulation (G28)
-**Feature**: `cleancode.feature`
-- **Reason**: Complex, multi-clause bash conditional logic not encapsulated in named functions.
-- **Offending Files**:
-  - `scripts/migrate-version.sh` (Mapped to: `migrate-spec`)
-  - `scripts/check-spec-version-gap.sh` (Mapped to: `plan-release`)
-
-## Restoration
-After the test run concluded, the original `waivers.yaml` was restored to preserve environment integrity. No actual code modifications were made.

package/hermes-verify-sed-fix.py

@@ -1,30 +0,0 @@
-import subprocess
-names=["kickoff-branch","develop-tdd","wire-observability","hook-commits","request-review","dispatch-agents","investigate-bug","define-language","assess-impact","guard-git","smoke-test","respond-review","enforce-first"]
-errs=0
-print("=== 1. Old sed vs new python3 ===")
-for name in names:
-    old=subprocess.run(["sed","-E",r"s/-/ /g; s/\b(.)/\U\1/g"],input=name,capture_output=True,text=True).stdout.strip()
-    new=name.replace("-"," ").title()
-    if old!=new:
-        print(f"  BROKEN: {name:22s} old={old!r:22s} new={new!r}")
-        errs+=1
-print(f"  {errs}/13 broken")
-print("\n=== 2. Generated files ===")
-ok=0
-for name in ["kickoff-branch","develop-tdd","wire-observability","dispatch-agents","guard-git"]:
-    path=f"specs/skills-wiki/skills/{name}.md"
-    expected="title: \\"%s\\""%name.replace("-"," ").title()
-    actual="MISSING"
-    try:
-        with open(path) as f:
-            for line in f:
-                if line.startswith("title:"):actual=line.strip();break
-    except:pass
-    match="OK" if actual==expected else "MISMATCH"
-    if match=="OK":ok+=1
-    print(f"  {match:8s} {name}")
-print(f"  {ok}/5 ok")
-print("\n=== 3. validate-okf ===")
-r=subprocess.run(["bash","scripts/validate-okf.sh","--dir","specs/skills-wiki/skills"],capture_output=True,text=True)
-print(f"  exit={r.returncode}  pass_lines={r.stdout.count(chr(80)+chr(65)+chr(83)+chr(83))}")
-print(f"\nVERDICT: {errs}/13 sed bug, {ok}/5 outputs correct, validate-okf exit={r.returncode}")

package/instructions

@@ -1 +0,0 @@
-AGENTS.md: AGENTS.md

package/scripts/hermes-verify-e39s02.sh

@@ -1,28 +0,0 @@
-#!/bin/bash
-# Ad-hoc verification: e39s02 agent-locks protocol
-REPO="/Users/danielvm/Developer/bigpowers"
-ERR=0
-echo "=== e39s02 agent-locks verification ==="
-
-echo -n "1. agent-locks.yaml: "
-test -f "$REPO/specs/agent-locks.yaml" || { echo "MISSING"; ERR=1; }
-LOCKS=$(yq '.locks | length' "$REPO/specs/agent-locks.yaml" 2>/dev/null)
-[ "$LOCKS" = "0" ] && echo "OK (0 locks)" || { echo "FAIL ($LOCKS)"; ERR=1; }
-
-echo -n "2. kickoff-branch: "
-grep -q 'agent-locks' "$REPO/skills/kickoff-branch/SKILL.md" && echo "OK" || { echo "FAIL"; ERR=1; }
-
-echo -n "3. release-branch: "
-grep -q 'agent-locks' "$REPO/skills/release-branch/SKILL.md" && echo "OK" || { echo "FAIL"; ERR=1; }
-
-echo -n "4. CI workflow: "
-grep -rq 'agent-locks' "$REPO/.github/workflows/" && echo "OK" || { echo "FAIL"; ERR=1; }
-echo -n "   24h threshold: "
-grep -q 'timedelta(hours=24)' "$REPO/.github/workflows/agent-locks.yml" && echo "OK" || { echo "FAIL"; ERR=1; }
-echo -n "   exit(1): "
-grep -q 'sys.exit(1)' "$REPO/.github/workflows/agent-locks.yml" && echo "OK" || { echo "FAIL"; ERR=1; }
-echo -n "   hourly cron: "
-grep -q 'cron: "0 \* \* \* \*"' "$REPO/.github/workflows/agent-locks.yml" && echo "OK" || { echo "FAIL"; ERR=1; }
-
-[ $ERR -eq 0 ] && echo "ALL CHECKS PASSED" || echo "SOME FAILED"
-exit $ERR

package/test_figlet.py

@@ -1,17 +0,0 @@
-import sys
-try:
-    import pyfiglet
-except ImportError:
-    import subprocess
-    subprocess.run([sys.executable, '-m', 'pip', 'install', 'pyfiglet'])
-    import pyfiglet
-
-text = "BIGPOWERS"
-fonts = ['ansi_shadow', 'block', 'colossal', 'epic', 'banner3', 'cyberlarge', 'isometric1', 'rectangles', 'alligator', 'alpha']
-
-for f in fonts:
-    try:
-        print(f"Font: {f}")
-        print(pyfiglet.figlet_format(text, font=f))
-    except Exception as e:
-        print(f"Error with {f}: {e}")