superpowers-manager 0.4.0 → 0.5.1

package/dist/skill-validation.js

@@ -0,0 +1,52 @@
+import { lstat, readdir, readFile, readlink, stat } from "node:fs/promises";
+import { pythonSplitlines, pythonStrip } from "./python-text.js";
+export const DEFAULT_FS_DEPS = {
+    lstat,
+    stat,
+    readdir,
+    readlink,
+    readFile,
+};
+const STRICT_DECODER = new TextDecoder("utf-8", {
+    fatal: true,
+    ignoreBOM: true,
+});
+export async function validateSkillFrontmatter(skillMd, skillName, errors, deps) {
+    let contents;
+    try {
+        contents = STRICT_DECODER.decode(await deps.readFile(skillMd));
+    }
+    catch {
+        errors.push(`skill \`${skillName}\` has unreadable UTF-8 \`SKILL.md\``);
+        return;
+    }
+    if (contents === "") {
+        errors.push(`skill \`${skillName}\` has empty \`SKILL.md\``);
+        return;
+    }
+    const lines = pythonSplitlines(contents);
+    if (lines.length === 0 || lines[0] !== "---") {
+        errors.push(`skill \`${skillName}\` must start with \`---\``);
+        return;
+    }
+    const closingIndex = lines.indexOf("---", 1);
+    if (closingIndex === -1) {
+        errors.push(`skill \`${skillName}\` frontmatter is not closed`);
+        return;
+    }
+    const frontmatter = lines.slice(1, closingIndex);
+    for (const key of ["name", "description"]) {
+        const matches = frontmatter.filter((line) => line.startsWith(`${key}:`));
+        if (matches.length !== 1) {
+            errors.push(`skill \`${skillName}\` frontmatter must contain exactly one top-level \`${key}:\``);
+            continue;
+        }
+        const value = pythonStrip(matches[0].slice(matches[0].indexOf(":") + 1));
+        if (value === "" ||
+            value === "''" ||
+            value === '""' ||
+            value.startsWith("#")) {
+            errors.push(`skill \`${skillName}\` frontmatter field \`${key}\` must be non-empty`);
+        }
+    }
+}

package/dist/upstream-workspace.js

@@ -0,0 +1,8 @@
+import { isAbsolute, join, resolve } from "node:path";
+export function upstreamCacheRoot(root, env, cwd) {
+    const configured = env.SUPERPOWERS_CACHE_DIR || join(root, ".cache", "upstream");
+    const cacheParent = isAbsolute(configured)
+        ? configured
+        : resolve(cwd, configured);
+    return join(cacheParent, "superpowers");
+}

package/dist/validate-generated-plugin-cli.js

@@ -1,6 +1,6 @@
 import { realpathSync } from "node:fs";
 import { oneLine, parseFlags, UsageError } from "./cli-arguments.js";
-import { validateGeneratedPlugin, } from "./generated-plugin.js";
+import { validateGeneratedPlugin, } from "./harnesses/codex/generated-plugin.js";
 const FLAGS = [
     "plugin-root",
     "source",

package/dist/validator.js

@@ -68,7 +68,7 @@ function signalGroup(child, signal) {
         /* the group exited between the timer firing and this call */
     }
 }
-export function runValidator(argv, policy, env, workspace) {
+export function runValidator(argv, policy, env, workspace, cwd) {
     return new Promise((resolveRun) => {
         const [command, ...args] = argv;
         const limit = policy.kind === "bounded" ? policy.maxBytesPerStream : null;
@@ -111,6 +111,7 @@ export function runValidator(argv, policy, env, workspace) {
         try {
             child = spawn(command, args, {
                 env: { ...process.env, ...env, TMPDIR: workspace },
+                cwd,
                 stdio: ["ignore", "pipe", "pipe"],
                 // D4: under the BOUNDED policy only, the child leads its own process group
                 // so a timeout can signal the GROUP -- signalling the process alone leaves

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "superpowers-manager",
-  "version": "0.4.0",
-  "description": "Install and update the latest stable obra/superpowers release directly from upstream, without waiting for agent marketplaces to catch up. Codex supported today.",
+  "version": "0.5.1",
+  "description": "Install obra/superpowers directly from upstream for Codex and Pi. Stay on a known-good release or commit, try a branch, and upgrade when you choose.",
   "keywords": [
     "superpowers",
     "obra-superpowers",
@@ -14,19 +14,23 @@
     "plugin-manager",
     "cli",
     "installer",
-    "updater"
+    "updater",
+    "pi",
+    "pi-coding-agent",
+    "version-pinning"
   ],
   "license": "MIT",
   "type": "module",
-  "packageManager": "pnpm@11.25.0",
+  "packageManager": "pnpm@12.3.4",
   "scripts": {
-    "lint": "oxlint src/ tests/bin/ tests/unit/ tests/baseline/ tests/lib/ tests/tools/ tests/run-node-suites.ts tests/assert-matcher-gate.ts",
-    "format": "prettier --write src/ tests/bin/ tests/unit/ tests/baseline/ tests/lib/ tests/tools/ tests/run-node-suites.ts tests/assert-matcher-gate.ts",
-    "format:check": "prettier --check src/ tests/bin/ tests/unit/ tests/baseline/ tests/lib/ tests/tools/ tests/run-node-suites.ts tests/assert-matcher-gate.ts",
+    "lint": "oxlint src/ tests/bin/ tests/unit/ tests/baseline/ tests/lib/ tests/tools/ tests/container/ tests/run-node-suites.ts tests/assert-matcher-gate.ts",
+    "format": "prettier --write src/ tests/bin/ tests/unit/ tests/baseline/ tests/lib/ tests/tools/ tests/container/ tests/run-node-suites.ts tests/assert-matcher-gate.ts",
+    "format:check": "prettier --check src/ tests/bin/ tests/unit/ tests/baseline/ tests/lib/ tests/tools/ tests/container/ tests/run-node-suites.ts tests/assert-matcher-gate.ts",
     "test": "node tests/run-node-suites.ts",
     "test:unit": "node tests/run-node-suites.ts --group unit",
     "test:integration": "node tests/run-node-suites.ts --group integration",
-    "test:harness:codex": "sh tests/container.sh codex-spike",
+    "test:harness:codex": "sh tests/container.sh harness-codex",
+    "test:harness:pi": "sh tests/container.sh harness-pi",
     "test:acceptance": "sh tests/acceptance.sh",
     "check:static": "pnpm run format:check && pnpm run lint && pnpm run typecheck",
     "check": "pnpm run check:static && pnpm run test",