bigpowers 2.89.0 → 2.89.1

package/.gemini/extensions/bigpowers/gemini-extension.json

@@ -1,6 +1,6 @@
 {
   "name": "bigpowers",
-  "version": "2.89.0",
+  "version": "2.89.1",
   "description": "80 skills — 73 agent skills synthesizing 17 years of software engineering discipline into a prescriptive methodology for solo developers",
   "keywords": [
     "gemini-extension"

package/.pi/package.json

@@ -1,6 +1,6 @@
 {
   "name": "bigpowers",
-  "version": "2.89.0",
+  "version": "2.89.1",
   "description": "80 skills — 73 agent skills synthesizing 17 years of software engineering discipline into a prescriptive methodology for solo developers",
   "keywords": [
     "pi-package"

package/CHANGELOG.md

@@ -1,3 +1,10 @@
+## [2.89.1](https://github.com/danielvm-git/bigpowers/compare/v2.89.0...v2.89.1) (2026-11-03)
+
+
+### Bug Fixes
+
+* **scripts:** remove pipefail SIGPIPE races from git and long-output pipelines ([#186](https://github.com/danielvm-git/bigpowers/issues/186)) ([f55cbb7](https://github.com/danielvm-git/bigpowers/commit/f55cbb7d8883dd0af4777ac2467d5b550fde23db))
+
 # [2.89.0](https://github.com/danielvm-git/bigpowers/compare/v2.88.18...v2.89.0) (2026-11-02)
 
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "bigpowers",
-  "version": "2.89.0",
+  "version": "2.89.1",
   "description": "73 agent skills synthesizing 17 years of software engineering discipline into a prescriptive methodology for solo developers",
   "main": "index.js",
   "scripts": {

package/scripts/bp-churn-rank.sh

@@ -45,5 +45,6 @@ git log --since="$SINCE" --name-only --pretty=format: $PATHSPEC \
   | sort \
   | uniq -c \
   | sort -rn \
-  | head -n "$LIMIT" \
-  | awk '{printf "%4d  %s\n", $1, $2}'
+  | awk -v limit="$LIMIT" 'NR <= limit {printf "%4d  %s\n", $1, $2}'
+# awk reads to the end instead of `head -n`, which closed the pipe early and
+# made `sort` die with SIGPIPE under pipefail (BUG-2026-11-02-pipefail-pipe-race).

package/scripts/check-spec-version-gap.sh

@@ -81,7 +81,8 @@ yaml_value_set() {
 }
 
 has_dirty_specs() {
-  [[ -d "$SPECS" ]] && git -C "$PROJECT_DIR" status --porcelain -- specs/ 2>/dev/null | grep -q .
+  # Test the captured output, not `git status | grep -q .` — a pipefail race (BUG-2026-11-02-pipefail-pipe-race).
+  [[ -d "$SPECS" ]] && [[ -n "$(git -C "$PROJECT_DIR" status --porcelain -- specs/ 2>/dev/null)" ]]
 }
 
 is_blocking_active_flow() {

package/scripts/land-branch.sh

@@ -86,8 +86,11 @@ if ! git show-ref --verify --quiet "refs/heads/$FEATURE_BRANCH"; then
   land_branch_deny "Feature branch '$FEATURE_BRANCH' does not exist"
 fi
 
-# Scan all commits in feature branch for Co-authored-by: footers
-if git log "$DEFAULT_BRANCH..$FEATURE_BRANCH" --format="%B" 2>/dev/null | grep -qiE '^co[- ]authored[- ]by:'; then
+# Scan all commits in feature branch for Co-authored-by: footers.
+# Capture first: `git log | grep -q` under pipefail fails at random when grep
+# exits before git finishes writing (SIGPIPE) — BUG-2026-11-02-pipefail-pipe-race.
+FEATURE_BODIES="$(git log "$DEFAULT_BRANCH..$FEATURE_BRANCH" --format="%B" 2>/dev/null || true)"
+if grep -qiE '^co[- ]authored[- ]by:' <<<"$FEATURE_BODIES"; then
   land_branch_deny "Feature branch '$FEATURE_BRANCH' contains Co-authored-by: footer(s). Amend commits to remove all AI agent attribution before landing."
 fi
 
@@ -194,7 +197,8 @@ fi
 
 # Worktree cleanup
 WORKTREE_PATH="../$FEATURE_BRANCH"
-if git worktree list --porcelain 2>/dev/null | grep -q "^worktree $WORKTREE_PATH$"; then
+WORKTREES="$(git worktree list --porcelain 2>/dev/null || true)"
+if grep -q "^worktree $WORKTREE_PATH$" <<<"$WORKTREES"; then
   echo "==> Removing worktree $WORKTREE_PATH"
   git worktree remove "$WORKTREE_PATH" 2>/dev/null || git worktree remove -f "$WORKTREE_PATH"
 fi

package/scripts/lib/golden-suite-gates.sh

@@ -79,6 +79,8 @@ GOLDEN_GATES=(
   "specs-parse:bash scripts/validate-specs-yaml.sh:false"
   # The runner itself: failing output is shown, skips are named and reasoned.
   "golden-gate-runner:bash scripts/test-golden-gate-runner.sh:false"
+  # Pipefail SIGPIPE races: fix shapes hold, git output never feeds grep -q/head.
+  "pipefail-pipe-race:bash scripts/test-pipefail-pipe-race.sh:false"
   # One pipeline, release needs: every gate, pinned runner and actions.
   "ci-pipeline-contract-selftest:bash scripts/test-ci-pipeline-contract.sh --self-test:false"
   "ci-pipeline-contract:bash scripts/test-ci-pipeline-contract.sh:false"

package/scripts/lib/parallel-review-worktrees.sh

@@ -11,7 +11,9 @@ cd "$REPO_ROOT"
 BASE=".bigpowers/worktrees/review-${CHECK}"
 mkdir -p "$(dirname "$BASE")"
 
-if git worktree list | grep -q "$BASE"; then
+# Capture first: `git worktree list | grep -q` is a pipefail race (BUG-2026-11-02-pipefail-pipe-race).
+WORKTREES="$(git worktree list)"
+if grep -q "$BASE" <<<"$WORKTREES"; then
   git worktree remove --force "$BASE" 2>/dev/null || true
 fi
 

package/scripts/run-smoke.sh

@@ -46,7 +46,8 @@ run_single_url_check() {
 
   # Assert content signal
   if [ -n "$content_signal" ]; then
-    if echo "$body" | grep -qiE "$content_signal"; then
+    # Here-string, not `echo "$body" | grep -q`: a large body races pipefail (BUG-2026-11-02-pipefail-pipe-race).
+    if grep -qiE "$content_signal" <<<"$body"; then
       echo "  PASS: body matches \"$content_signal\""
     else
       echo "  FAIL: body does not match \"$content_signal\""
@@ -165,7 +166,7 @@ run_parsed_check() {
 
   # Assert content signal
   if [ -n "$content_signal" ]; then
-    if echo "$body" | grep -qiE "$content_signal"; then
+    if grep -qiE "$content_signal" <<<"$body"; then
       echo "  PASS: body matches \"$content_signal\""
       checks_passed=$((checks_passed + 1))
     else

package/scripts/test-pipefail-pipe-race.sh

@@ -0,0 +1,68 @@
+#!/usr/bin/env bash
+# story: BUG-2026-11-02-pipefail-pipe-race
+# test-pipefail-pipe-race.sh — regression guard for SIGPIPE races under pipefail.
+#
+# `producer | grep -q` (or `| head`) fails at random under `set -o pipefail`:
+# the reader exits early, the producer dies with SIGPIPE (141), and pipefail
+# reports the pipeline as failed — a found match reads as "not found".
+#
+#   (a) anti-vacuity: the racy shape really fails on this host
+#   (b) each fix shape used in the repo passes RUNS times with a long producer
+#   (c) static guard: no pipefail script pipes git output into an early-exit reader
+#
+# Usage: bash scripts/test-pipefail-pipe-race.sh
+
+set -euo pipefail
+source "$(dirname "${BASH_SOURCE[0]}")/lib/skill-common.sh"
+resolve_repo_root
+cd "$REPO_ROOT"
+
+source scripts/lib/test-assertions.sh
+TA_PASS=0
+TA_FAIL=0
+RUNS=20
+
+# ~2 MB of output: far past any pipe buffer, so an early reader always wins.
+long_producer() { seq 1 300000; }
+
+# Runs "$@" RUNS times; prints how many runs returned non-zero.
+count_failures() {
+  local i fails=0
+  for ((i = 0; i < RUNS; i++)); do
+    "$@" || fails=$((fails + 1))
+  done
+  echo "$fails"
+}
+
+racy_grep_q()      { long_producer | grep -q '^1$'; }
+fixed_capture()    { local out; out="$(long_producer)"; grep -q '^1$' <<<"$out"; }
+fixed_nonempty()   { [[ -n "$(long_producer)" ]]; }
+fixed_awk_limit()  { long_producer | awk -v limit=3 'NR <= limit' >/dev/null; }
+fixed_sed_range()  { long_producer | sed -n '1,5p' >/dev/null; }
+
+echo "=== test-pipefail-pipe-race.sh ==="
+
+fails=$(count_failures racy_grep_q)
+[[ "$fails" -gt 0 ]] \
+  && ta_pass "(a) racy 'producer | grep -q' fails under pipefail ($fails/$RUNS)" \
+  || ta_fail "(a) racy shape never failed — test cannot detect the race on this host"
+
+for fix in fixed_capture fixed_nonempty fixed_awk_limit fixed_sed_range; do
+  fails=$(count_failures "$fix")
+  [[ "$fails" -eq 0 ]] \
+    && ta_pass "(b) $fix: 0/$RUNS failures" \
+    || ta_fail "(b) $fix: $fails/$RUNS failures"
+done
+
+# run-skill-verify.sh holds `git diff ... | head -20` as a fixture string of
+# fail-open verify directives, not as a command it runs.
+hits=$(grep -rlE 'pipefail' scripts hooks --include='*.sh' \
+  | grep -v '^scripts/run-skill-verify\.sh$' \
+  | xargs grep -nE 'git [a-z-]+[^|]*\|[[:space:]]*(grep -[a-zA-Z]*[qm]|head)' \
+  | grep -vE '^[^:]+:[0-9]+:[[:space:]]*#' || true)
+[[ -z "$hits" ]] \
+  && ta_pass "(c) no pipefail script pipes git output into grep -q/-m or head" \
+  || ta_fail "(c) git output piped into an early-exit reader:"$'\n'"$hits"
+
+echo "$TA_PASS passed, $TA_FAIL failed"
+[[ "$TA_FAIL" -eq 0 ]]

package/scripts/validate-doctrine.sh

@@ -55,7 +55,7 @@ else
   grep -rE "PLAN\.md|STATE\.md|PROJECT\.md|CONTEXT\.md|SUMMARY\.md|VERIFICATION\.md|RESEARCH\.md|RELEASE-PLAN\.md" \
     docs/ 2>/dev/null \
     | grep -v "docs/archive/" \
-    | grep -v "specs/archive" | head -20 >&2
+    | grep -v "specs/archive" | sed -n '1,20p' >&2  # sed reads to the end; `head` races pipefail (BUG-2026-11-02-pipefail-pipe-race)
 fi
 
 # ── Epic 1: Skill count consistency ───────────────────────────────────────────
@@ -94,7 +94,7 @@ else
     2>/dev/null \
     | grep -v "specs/archive\|specs/epics/archive\|docs/archive/\|\.git\|node_modules\|\.gemini\|\.cursor" \
     | grep -v "CHANGELOG\.md\|specs/verifications/reports/\|PLAN-evolve-structure\.md" \
-    | head -10 >&2
+    | sed -n '1,10p' >&2
 fi
 
 # ── Epic 3: BCP slop guard ────────────────────────────────────────────────────
@@ -107,7 +107,7 @@ if [[ "$BCP_SLOP" -eq 0 ]]; then
 else
   doctrine_fail "'Build Commit Point' found ($BCP_SLOP hits) — canonical term is 'Business Complexity Points'; see docs/references/bcp.md"
   grep -ri "build commit point" . 2>/dev/null \
-    | grep -v "specs/archive\|\.git\|node_modules\|\.gemini\|\.cursor\|validate-doctrine\.sh" | head -5 >&2
+    | grep -v "specs/archive\|\.git\|node_modules\|\.gemini\|\.cursor\|validate-doctrine\.sh" | sed -n '1,5p' >&2
 fi
 
 # ── Epic 4: SKILL.md size cap ─────────────────────────────────────────────────