bigpowers 2.87.7 → 2.87.8

package/.gemini/extensions/bigpowers/gemini-extension.json

@@ -1,6 +1,6 @@
 {
   "name": "bigpowers",
-  "version": "2.87.7",
+  "version": "2.87.8",
   "description": "81 skills — 73 agent skills synthesizing 17 years of software engineering discipline into a prescriptive methodology for solo developers",
   "keywords": [
     "gemini-extension"

package/.pi/package.json

@@ -1,6 +1,6 @@
 {
   "name": "bigpowers",
-  "version": "2.87.7",
+  "version": "2.87.8",
   "description": "81 skills — 73 agent skills synthesizing 17 years of software engineering discipline into a prescriptive methodology for solo developers",
   "keywords": [
     "pi-package"

package/CHANGELOG.md

@@ -1,3 +1,10 @@
+## [2.87.8](https://github.com/danielvm-git/bigpowers/compare/v2.87.7...v2.87.8) (2026-09-01)
+
+
+### Bug Fixes
+
+* **cli:** bigpowers init provisions scripts/ + specs/ into consumer projects ([#117](https://github.com/danielvm-git/bigpowers/issues/117)) ([37bc0bf](https://github.com/danielvm-git/bigpowers/commit/37bc0bf72875cd66898d35138870982c8af2d310)), closes [#116](https://github.com/danielvm-git/bigpowers/issues/116) [#116](https://github.com/danielvm-git/bigpowers/issues/116) [#114](https://github.com/danielvm-git/bigpowers/issues/114) [#116](https://github.com/danielvm-git/bigpowers/issues/116) [#114](https://github.com/danielvm-git/bigpowers/issues/114)
+
 ## [2.87.7](https://github.com/danielvm-git/bigpowers/compare/v2.87.6...v2.87.7) (2026-09-01)
 
 

package/README.md

@@ -216,6 +216,25 @@ pi install .
 pi install npm:bigpowers
 ```
 
+### Provision a consumer project (`bigpowers init`)
+
+pi's package contract registers **skills and prompts only** — it has no resource
+type for arbitrary project files, and no lifecycle script runs on install. Skills
+reference the package's `scripts/*.sh` tooling project-relative (e.g.
+`bash scripts/run-skill-verify.sh`, verify gates like `test -f scripts/... &&
+test -d specs/bugs`), so after installing the package, run **one command per
+consumer project** to provision what the skills expect:
+
+```bash
+cd <your-project>
+npx bigpowers init        # or: bigpowers init
+```
+
+This symlinks `<project>/scripts` → the installed package's `scripts/` tree and
+scaffolds `specs/bugs/` + `specs/verifications/`. It refuses (never clobbers) a
+`scripts/` you already own; `bigpowers init --remove` undoes it. The same step
+applies to `npm i -g bigpowers` / `npx bigpowers setup` consumers.
+
 **What you get:**
 - **pi skills** in `.pi/skills/` (one per SKILL.md) — loaded automatically into pi's system prompt as `<available_skills>`
 - **pi prompt templates** in `.pi/prompts/` — slash commands like `/survey-context`, `/plan-work`

package/bin/bigpowers.js

@@ -75,6 +75,13 @@ if (cmd === 'setup' || cmd === 'install') {
   return;
 }
 
+if (cmd === 'init') {
+  // Provision the CURRENT project (cwd): scripts/ link + specs/ scaffolding (#116)
+  const initScript = path.join(ROOT, 'bin', 'init.js');
+  require(initScript);
+  return;
+}
+
 if (cmd === 'update') {
   // Pull the newest release first (global installs), then re-sync + refresh symlinks.
   selfUpdateGlobalPackage();
@@ -106,6 +113,7 @@ bigpowers — agent skills for spec-driven, test-first development
 
 Commands:
   bigpowers setup    Install skills into ~/.claude/skills/
+  bigpowers init     Provision the CURRENT project: scripts/ link + specs/ scaffolding (run per project)
   bigpowers update   Fetch the latest release (global installs) + re-sync and refresh symlinks
   bigpowers status   Show installed version and skill count (warns if a newer release exists)
   bigpowers help     This message

package/bin/init.js

@@ -0,0 +1,39 @@
+#!/usr/bin/env node
+// bigpowers init — provision the CURRENT project (cwd) for skill tooling.
+// story: BUG-2026-08-31-pi-scripts-provisioning (#116)
+//
+// Package installs (pi install npm:bigpowers, npm i -g, npx) register skills
+// but never provision a project-local scripts/ tree — pi's package contract
+// has no resource type for project files and no lifecycle script runs — so
+// SKILL.md commands (`bash scripts/*.sh`) and `→ verify:` gates fail in every
+// consumer project. `bigpowers init` (or `npx bigpowers init`) links the
+// package's scripts/ into the project and scaffolds specs/{bugs,verifications}.
+
+'use strict';
+
+const path = require('path');
+
+const ROOT = path.dirname(path.dirname(__filename));
+const { initProject, initProjectRemove } = require('../scripts/lib/install-helpers.js');
+
+if (process.argv.includes('--remove')) {
+  initProjectRemove(ROOT);
+  console.log('bigpowers init --remove: removed the managed scripts/ link');
+  console.log('  (and specs/ scaffolding dirs only where untouched).');
+  process.exit(0);
+}
+
+try {
+  const result = initProject(ROOT);
+  if (result.skipped === 'cwd-is-package') {
+    console.log('bigpowers init: already inside the bigpowers package — nothing to provision.');
+  } else {
+    console.log('bigpowers init: linked scripts/ → package scripts tree.');
+    console.log('bigpowers init: ensured specs/bugs/ + specs/verifications/ scaffolding.');
+    console.log('Skill commands and verify gates (fix-bug, verify-work, wire-ci, …) now resolve here.');
+  }
+} catch (e) {
+  // e.g. Refusing to replace a user-owned scripts/ — surface it, don't stack-trace.
+  console.error(`bigpowers init: ${e.message}`);
+  process.exit(1);
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "bigpowers",
-  "version": "2.87.7",
+  "version": "2.87.8",
   "description": "73 agent skills synthesizing 17 years of software engineering discipline into a prescriptive methodology for solo developers",
   "main": "index.js",
   "scripts": {

package/scripts/lib/install-helpers.js

@@ -36,7 +36,11 @@ function assertReplaceable(dst) {
   }
   if (st.isSymbolicLink()) {
     const target = fs.readlinkSync(dst);
-    if (target.startsWith(REPO_ROOT)) return; // managed by bigpowers — safe to re-link
+    // Path-separator boundary: a string-prefix sibling of the package root
+    // (e.g. <ROOT>-evil) is NOT managed by this package.
+    if (target === REPO_ROOT || target.startsWith(REPO_ROOT + path.sep)) {
+      return; // managed by bigpowers — safe to re-link
+    }
   }
   throw new Error(
     `Refusing to replace ${dst}: it exists and is not a bigpowers-managed symlink. ` +
@@ -416,6 +420,52 @@ function installLocal(tool, repoRoot) {
   }
 }
 
+// ── Project provisioning (bigpowers init) ────────────────────────────────────
+
+// Provision the CURRENT project (cwd) with the package's scripts/ tree and the
+// specs/ scaffolding skill bodies assume. Package installs (pi, npm -g, npx)
+// register skills but pi's package contract has no resource type for project
+// files and no lifecycle script runs — so `bash scripts/*.sh` invocations and
+// `→ verify:` gates in SKILL.md files fail outside a bigpowers checkout. (#116)
+function initProject(repoRoot) {
+  const cwd = process.cwd();
+  if (path.resolve(cwd) === path.resolve(repoRoot)) {
+    return { skipped: 'cwd-is-package' };
+  }
+  linkDir(path.join(repoRoot, 'scripts'), path.join(cwd, 'scripts'));
+  const created = [];
+  for (const rel of [path.join('specs', 'bugs'), path.join('specs', 'verifications')]) {
+    const dir = path.join(cwd, rel);
+    if (!fs.existsSync(dir)) {
+      fs.mkdirSync(dir, { recursive: true });
+      created.push(rel);
+    }
+  }
+  return { skipped: null, scriptsLinked: true, created };
+}
+
+// Inverse of initProject: remove ONLY the managed scripts symlink and specs/
+// scaffolding dirs we created (and only while untouched — user content survives).
+function initProjectRemove(repoRoot) {
+  const cwd = process.cwd();
+  const scriptsLink = path.join(cwd, 'scripts');
+  try {
+    if (fs.lstatSync(scriptsLink).isSymbolicLink()
+      && fs.readlinkSync(scriptsLink) === path.join(repoRoot, 'scripts')) {
+      fs.unlinkSync(scriptsLink);
+    }
+  } catch {}
+  for (const rel of [path.join('specs', 'bugs'), path.join('specs', 'verifications'), 'specs']) {
+    const dir = path.join(cwd, rel);
+    try {
+      if (fs.existsSync(dir) && fs.statSync(dir).isDirectory()
+        && fs.readdirSync(dir).length === 0) {
+        fs.rmdirSync(dir);
+      }
+    } catch {}
+  }
+}
+
 // ── Uninstall per tool ───────────────────────────────────────────────────────
 
 function uninstallTool(toolId, repoRoot) {
@@ -694,6 +744,8 @@ module.exports = {
   linkHook,
   installGlobal,
   installLocal,
+  initProject,
+  initProjectRemove,
   uninstallTool,
   removeSymlink,
   detectExistingInstall,

package/scripts/test-install-helpers.js

@@ -269,6 +269,94 @@ try {
     }
   }
 
+  // story: BUG-2026-08-31-pi-scripts-provisioning (#116)
+  // A package consumer project needs bigpowers' scripts/ + specs/ scaffolding
+  // so SKILL.md bodies ("bash scripts/run-skill-verify.sh") and verify gates
+  // ("test -f scripts/... && test -d specs/bugs") resolve outside a checkout.
+  {
+    const { initProject, initProjectRemove } = require('../scripts/lib/install-helpers.js');
+    const savedInitCwd = process.cwd();
+    const consumerDir = mkdtempSync(path.join(os.tmpdir(), 'bp-init-project-'));
+    try {
+      process.chdir(consumerDir);
+
+      // (a) init provisions scripts/ + specs/ scaffolding
+      initProject(ROOT);
+      assert.ok(
+        fs.lstatSync(path.join(consumerDir, 'scripts')).isSymbolicLink(),
+        'init must symlink scripts/ into the consumer project'
+      );
+      assert.strictEqual(
+        fs.readlinkSync(path.join(consumerDir, 'scripts')),
+        path.join(ROOT, 'scripts'),
+        'scripts symlink must point at the package scripts tree'
+      );
+      assert.ok(
+        fs.existsSync(path.join(consumerDir, 'scripts', 'run-skill-verify.sh')),
+        'scripts/run-skill-verify.sh must resolve through the link (skill verify gate)'
+      );
+      assert.ok(
+        fs.existsSync(path.join(consumerDir, 'specs', 'bugs')),
+        'init must scaffold specs/bugs (fix-bug verify gate probes it)'
+      );
+      assert.ok(
+        fs.existsSync(path.join(consumerDir, 'specs', 'verifications')),
+        'init must scaffold specs/verifications'
+      );
+
+      // (b) init --remove cleans managed artifacts only
+      initProjectRemove(ROOT);
+      assert.ok(
+        !fs.existsSync(path.join(consumerDir, 'scripts')),
+        'init --remove must remove the managed scripts symlink'
+      );
+      assert.ok(
+        !fs.existsSync(path.join(consumerDir, 'specs')),
+        'init --remove must remove the untouched scaffolded specs tree'
+      );
+
+      // (c) refuses a pre-existing non-managed scripts/ (never clobbers)
+      fs.mkdirSync(path.join(consumerDir, 'scripts'));
+      fs.writeFileSync(path.join(consumerDir, 'scripts', 'mine.sh'), 'echo mine\n');
+      assert.throws(
+        () => initProject(ROOT),
+        /Refusing to replace/,
+        'init must refuse a user-owned scripts/ dir'
+      );
+      assert.ok(
+        fs.existsSync(path.join(consumerDir, 'scripts', 'mine.sh')),
+        'user-owned scripts/ content must survive the refusal'
+      );
+    } finally {
+      process.chdir(savedInitCwd);
+      rmSync(consumerDir, { recursive: true, force: true });
+    }
+
+    // (d) CLI dispatch drift guard: `bigpowers init` must stay wired
+    const bigpowersSrc = fs.readFileSync(path.join(ROOT, 'bin', 'bigpowers.js'), 'utf8');
+    assert.ok(
+      /'init'/.test(bigpowersSrc),
+      "bin/bigpowers.js must dispatch the 'init' command"
+    );
+    assert.ok(
+      fs.existsSync(path.join(ROOT, 'bin', 'init.js')),
+      'bin/init.js must exist'
+    );
+  }
+
+  // story: BUG-2026-08-31-pi-scripts-provisioning (follow-up from PR #114 review)
+  // The managed-symlink check must not treat a string-prefix sibling of the
+  // package root (e.g. <ROOT>-evil) as managed — needs a path-separator boundary.
+  {
+    const dst = path.join(tmpHome, 'prefix-boundary-hook.sh');
+    fs.symlinkSync(path.join(`${ROOT}-evil`, 'x.sh'), dst); // dangling foreign link
+      assert.throws(
+        () => linkHook(rtkSrc, dst),
+        /Refusing to replace/,
+        'managed-symlink check must require a path-separator boundary (prefix sibling is NOT managed)'
+      );
+  }
+
   console.log('test-install-helpers: ALL PASS');
 } finally {
   rmSync(tmpHome, { recursive: true, force: true });