great-cto 2.15.0 → 2.17.0

package/dist/companion.js

@@ -0,0 +1,142 @@
+/**
+ * Companion plugin installer — superpowers + beads.
+ *
+ * great_cto requires these two plugins to be present. This module installs
+ * them automatically during `great-cto init/install` so users get a working
+ * setup in one command without reading the "Requires:" line in the README.
+ *
+ * Install strategy:
+ *   - Clone (depth=1) the latest semver tag from GitHub into
+ *     ~/.claude/plugins/cache/local/<name>/<version>/
+ *   - Enable <name>@local in ~/.claude/settings.json
+ *   - Idempotent — skips if any version is already present in the cache dir
+ *   - Best-effort — never fails the parent install; logs a human-friendly
+ *     hint if git is unavailable or clone fails
+ */
+import { spawnSync, execFileSync } from "node:child_process";
+import { existsSync, mkdirSync, readdirSync } from "node:fs";
+import { homedir } from "node:os";
+import { join } from "node:path";
+import { dim, success, log, warn } from "./ui.js";
+import { enablePlugin } from "./settings.js";
+export const COMPANION_PLUGINS = [
+    {
+        name: "superpowers",
+        pluginKey: "superpowers@local",
+        repoUrl: "https://github.com/obra/superpowers.git",
+    },
+    {
+        name: "beads",
+        pluginKey: "beads@local",
+        repoUrl: "https://github.com/steveyegge/beads.git",
+    },
+];
+function getPluginCacheDir(name) {
+    return join(homedir(), ".claude", "plugins", "cache", "local", name);
+}
+/** Returns true if any version folder already exists in the cache dir. */
+function isAlreadyInstalled(name) {
+    const base = getPluginCacheDir(name);
+    if (!existsSync(base))
+        return null;
+    try {
+        const versions = readdirSync(base).filter((v) => /\S/.test(v));
+        return versions.length > 0 ? versions[0] : null;
+    }
+    catch {
+        return null;
+    }
+}
+/** Detect the latest semver tag from a remote repo without cloning. */
+function detectLatestTag(repoUrl) {
+    try {
+        const out = execFileSync("git", ["ls-remote", "--tags", repoUrl], {
+            encoding: "utf-8",
+            timeout: 15_000,
+            stdio: ["ignore", "pipe", "pipe"],
+        });
+        const tags = out
+            .split("\n")
+            .map((line) => line.match(/refs\/tags\/v?([0-9]+\.[0-9]+\.[0-9]+)(?!\^)/)?.[1])
+            .filter((t) => !!t)
+            .sort((a, b) => {
+            const pa = a.split(".").map(Number);
+            const pb = b.split(".").map(Number);
+            for (let i = 0; i < 3; i++) {
+                const d = (pb[i] ?? 0) - (pa[i] ?? 0);
+                if (d !== 0)
+                    return d;
+            }
+            return 0;
+        });
+        return tags[0] ?? null;
+    }
+    catch {
+        return null;
+    }
+}
+/**
+ * Install a single companion plugin.
+ * Silent no-op if already present. Best-effort on failure.
+ */
+export function installCompanionPlugin(plugin) {
+    const { name, pluginKey, repoUrl } = plugin;
+    // ── already installed? ─────────────────────────────────────────────────
+    const existing = isAlreadyInstalled(name);
+    if (existing) {
+        // Make sure it's enabled in settings even if it was manually placed
+        enablePlugin(pluginKey);
+        return { name, status: "already_present", version: existing };
+    }
+    // ── git available? ─────────────────────────────────────────────────────
+    try {
+        execFileSync("git", ["--version"], { stdio: "ignore", timeout: 5_000 });
+    }
+    catch {
+        const msg = `git not found — install git, then run: npx great-cto install`;
+        warn(`${name}: ${msg}`);
+        return { name, status: "skipped", version: "—", reason: msg };
+    }
+    // ── resolve version ────────────────────────────────────────────────────
+    const tag = detectLatestTag(repoUrl);
+    const version = tag ?? "main";
+    const ref = tag ? `v${tag}` : "main";
+    const destDir = join(getPluginCacheDir(name), version);
+    mkdirSync(getPluginCacheDir(name), { recursive: true });
+    log(dim(`  installing ${name} ${version}…`));
+    // ── clone ──────────────────────────────────────────────────────────────
+    const cloneArgs = tag
+        ? ["clone", "--depth=1", "--branch", ref, repoUrl, destDir]
+        : ["clone", "--depth=1", repoUrl, destDir];
+    const result = spawnSync("git", cloneArgs, {
+        stdio: ["ignore", "pipe", "pipe"],
+        timeout: 60_000,
+    });
+    if (result.status !== 0) {
+        const stderr = (result.stderr?.toString() ?? "").slice(0, 200);
+        const msg = `clone failed: ${stderr}`;
+        warn(`${name}: ${msg}`);
+        warn(`  install manually: claude plugin install github.com/${repoUrl.replace("https://github.com/", "").replace(".git", "")}`);
+        return { name, status: "skipped", version: "—", reason: msg };
+    }
+    // ── enable in settings ─────────────────────────────────────────────────
+    enablePlugin(pluginKey);
+    success(`${name} ${version} installed`);
+    return { name, status: "installed", version };
+}
+/**
+ * Install all companion plugins declared in COMPANION_PLUGINS.
+ * Returns a summary array. Never throws — best-effort for all.
+ */
+export function installAllCompanions() {
+    return COMPANION_PLUGINS.map((plugin) => {
+        try {
+            return installCompanionPlugin(plugin);
+        }
+        catch (e) {
+            const msg = e instanceof Error ? e.message : String(e);
+            warn(`${plugin.name}: unexpected error — ${msg}`);
+            return { name: plugin.name, status: "skipped", version: "—", reason: msg };
+        }
+    });
+}

package/dist/detect.js

@@ -1185,6 +1185,7 @@ function mineReadmeKeywords(dir) {
         "ccpa", "cpra", "california consumer privacy",
         "california privacy rights", "cppa", "california residents",
         "california users", "do not sell", "opt-out of sale",
+        "data subject rights california", "dsr california",
         // UK
         "uk gdpr", "information commissioner", "dpa 2018",
         "uk users", "uk customers", "united kingdom", "british users",

package/dist/jurisdictions.js

@@ -44,7 +44,7 @@ export const JURISDICTION_SIGNALS = {
     "eu": {
         keywords: [
             // Legal / regulatory terms
-            "gdpr", "dsgvo", "rgpd", "data protection officer",
+            "gdpr", "dsgvo", "rgpd", "data protection officer", "dpo",
             "right to erasure", "right to be forgotten", "data subject request",
             "article 6", "article 9", "legitimate interest", "lawful basis",
             "privacy by design", "privacy notice", "cookie consent",

package/dist/main.js

@@ -7,6 +7,7 @@
 //   4. confirm with user (unless -y)
 //   5. install plugin (git clone)
 //   6. enable in ~/.claude/settings.json
+//   6b. install companion plugins (superpowers + beads)
 //   7. bootstrap .great_cto/PROJECT.md
 //   8. print next steps
 import { resolve } from "node:path";
@@ -15,6 +16,7 @@ import { detect } from "./detect.js";
 import { pickArchetype, suggestCompliance } from "./archetypes.js";
 import { install, findInstalledVersions } from "./installer.js";
 import { enableGreatCto } from "./settings.js";
+import { installAllCompanions } from "./companion.js";
 import { bootstrap } from "./bootstrap.js";
 import { shouldUseLlmFallback, suggestArchetypeFromLlm } from "./llm-fallback.js";
 import { readFileSync, copyFileSync, chmodSync, existsSync as fsExistsSync } from "node:fs";
@@ -659,6 +661,27 @@ async function runInit(args) {
         }
         catch { /* best-effort — don't block install */ }
     }
+    // ── 4b-companion. install superpowers + beads ────────────
+    // These are required companion plugins. Auto-install so users don't need
+    // a separate manual step after reading "Requires:" in the README.
+    // Idempotent — silently skips if already present.
+    {
+        log("");
+        step(4, 5, "installing companion plugins (superpowers + beads)");
+        const companions = installAllCompanions();
+        for (const r of companions) {
+            if (r.status === "installed") {
+                log(`  ${dim(`${r.name} ${r.version} installed`)}`);
+            }
+            else if (r.status === "already_present") {
+                log(`  ${dim(`${r.name} ${r.version} already installed`)}`);
+            }
+            else {
+                warn(`  ${r.name} skipped — ${r.reason ?? "unknown reason"}`);
+                warn(`  install manually: claude plugin install github.com/obra/${r.name === "superpowers" ? "superpowers" : ""} or github.com/steveyegge/beads`);
+            }
+        }
+    }
     // ── 4c. bootstrap skills catalog (v1.0.140+) ─────────────
     // Clone external skill repos + run skill-discover.sh so agents have
     // the catalog locally from session 1, not after first SessionStart hook.

package/dist/settings.js

@@ -7,9 +7,13 @@ import { dim, success, warn } from "./ui.js";
 export function getSettingsPath() {
     return join(homedir(), ".claude", "settings.json");
 }
-export function enableGreatCto() {
+/**
+ * Enable a plugin key in ~/.claude/settings.json.
+ * Idempotent — no-op if the key is already present.
+ * Takes an optional backup of the existing file before writing.
+ */
+export function enablePlugin(pluginKey) {
     const path = getSettingsPath();
-    const pluginKey = "great_cto@local";
     const backupPath = existsSync(path) ? `${path}.bak-${Date.now()}` : null;
     mkdirSync(dirname(path), { recursive: true });
     // Read existing
@@ -53,3 +57,7 @@ export function enableGreatCto() {
     }
     return { settingsPath: path, enabled: true, alreadyEnabled: false, backupPath };
 }
+/** Convenience alias — kept for backward compatibility with existing callers. */
+export function enableGreatCto() {
+    return enablePlugin("great_cto@local");
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "great-cto",
-  "version": "2.15.0",
+  "version": "2.17.0",
   "description": "One command install for the great_cto Claude Code plugin. Auto-detects your stack, picks the right archetype, bootstraps PROJECT.md.",
   "keywords": [
     "claude-code",