
Security News
Deno Goes the Way of the Dinosaur
Cloudflare is acquiring Deno’s team, which will provide another year of bug fixes and security updates before ending support for the runtime.
pi-superpowers-plus
Advanced tools

Structured workflow skills and active enforcement extensions for pi.
Your coding agent doesn't just know the rules - it follows them. Skills teach the agent what to do (brainstorm before building, write tests before code, verify before claiming done). Extensions enforce it in real time (the workflow monitor watches every file write and warns when you skip the test).
12 workflow skills that guide the agent through a structured development process - from brainstorming ideas through shipping code.
3 extensions that run silently in the background:
subagent tool for dispatching implementation and review work to isolated subprocess agents, with bundled agent definitions and structured results.After installation:
git commit / git push / gh pr create without passing tests, it gets gated.docs/plans/ (writes elsewhere trigger a process violation).The agent sees these warnings as part of its normal tool output - no configuration needed.
More detail:
docs/oversight-model.md — how skills + runtime enforcement work together, and how warnings escalatedocs/workflow-phases.md — what each workflow phase permits (especially thinking-phase write boundaries)pi install npm:pi-superpowers-plus
Or from git:
pi install git:github.com/coctostan/pi-superpowers-plus
Or add to .pi/settings.json (project-level) or ~/.pi/agent/config.json (global):
{
"packages": ["npm:pi-superpowers-plus"]
}
No configuration required. Skills and extensions activate automatically.
ROADMAP.mdCONTRIBUTING.mdpi-superpowersIf you're currently using pi-superpowers, pi-superpowers-plus is intended as a drop-in upgrade: you keep the same skill names and workflow, but you also get active, runtime enforcement via extensions.
/skill:brainstorming, /skill:writing-plans, /skill:executing-plans, etc.)pi-superpowers-plusgit commit / git push / gh pr create until passing tests are run (suppressed during active plan execution)/workflow-next handoff)plan_tracker) for task lists + TUI progressReplace pi-superpowers with pi-superpowers-plus in your config:
{
"packages": ["npm:pi-superpowers-plus"]
}
Notes:
pi-superpowers-plus is more "opinionated" at runtime: it will inject warnings into tool output and may gate shipping commands until verification has passed.pi-superpowers-plus uses pi's runtime capabilities alongside skill content:
plan_tracker store execution state outside the prompt.workflow_reference provides extended detail on demand, keeping skill files focused while making deep guidance available when the agent needs it.To make this concrete, here's the size of each skill's SKILL.md compared to the original coctostan/pi-superpowers (approximate KB, at time of writing). Across the shared skills, total SKILL.md content went from 67.5KB → 66.5KB. Skills that shrank moved content into on-demand workflow_reference topics; skills that grew restored inline red flags, rationalizations, and verification checklists for self-contained guidance.
| Skill | pi-superpowers (KB) | pi-superpowers-plus (KB) | Change |
|---|---|---|---|
brainstorming | 2.5 | 2.9 | +16% |
dispatching-parallel-agents | 6.2 | 6.1 | -2% |
executing-plans | 2.7 | 3.5 | +30% |
finishing-a-development-branch | 4.3 | 4.4 | +2% |
receiving-code-review | 6.2 | 5.8 | -6% |
requesting-code-review | 2.9 | 3.0 | +3% |
subagent-driven-development | 10.2 | 11.3 | +11% |
systematic-debugging | 9.8 | 7.2 | -27% |
test-driven-development | 9.8 | 8.1 | -17% |
using-git-worktrees | 5.5 | 6.1 | +11% |
verification-before-completion | 4.1 | 4.3 | +5% |
writing-plans | 3.3 | 3.8 | +15% |
The skills guide the agent through a consistent development cycle:
Brainstorm → Plan → Execute → Verify → Review → Finish
| Phase | Skill | What Happens |
|---|---|---|
| Brainstorm | /skill:brainstorming | Refines your idea into a design document via Socratic dialogue |
| Plan | /skill:writing-plans | Breaks the design into bite-sized TDD tasks with exact file paths and code |
| Execute | /skill:executing-plans or /skill:subagent-driven-development | Works through tasks in batches with review checkpoints |
| Verify | /skill:verification-before-completion | Runs tests and proves everything works - evidence before claims |
| Review | /skill:requesting-code-review | Dispatches a reviewer subagent to catch issues before merge |
| Finish | /skill:finishing-a-development-branch | Presents merge/PR/keep/discard options and cleans up |
The workflow tracker shows progress in the TUI status bar as the agent moves through phases:
-brainstorm → ✓plan → [execute] → verify → review → finish
Phases are detected automatically from skill invocations, artifact writes under docs/plans/, and plan tracker initialization. At phase boundaries, the agent is prompted (once) with options to continue, start a fresh session, skip, or discuss.
These skills are used within the main workflow as needed:
| Skill | When It's Used |
|---|---|
/skill:test-driven-development | During execution - enforced by the TDD monitor |
/skill:systematic-debugging | When tests fail repeatedly - enforced by the debug monitor |
/skill:using-git-worktrees | Before execution - creates isolated branch workspace |
/skill:dispatching-parallel-agents | When multiple independent problems need solving concurrently |
/skill:receiving-code-review | When acting on review feedback - prevents blind agreement |
Runs in the background observing every tool call and result. Zero configuration.
Detects when the agent writes production code without a failing test and injects a warning into the tool result. The warning is advisory — a nudge to consider whether a test is needed, not a hard block. The agent's skill instructions and agent profiles include three-scenario TDD guidance (new feature → full TDD, modifying tested code → run existing tests, trivial change → use judgment).
Tracks the TDD cycle: RED → GREEN → REFACTOR → idle. Resets on git commit.
TUI widget shows the current phase, color-coded:
TDD: RED (red)
TDD: GREEN (green)
TDD: REFACTOR (accent)
Activates after 2 consecutive failing test runs (excluding intentional TDD red verification). When active:
Warns on git commit, git push, and gh pr create when the agent hasn't run passing tests. Requires a fresh passing test run before shipping. Automatically clears after successful verification. During active plan execution, verification prompts are suppressed to avoid disrupting flow.
Inside a git repo, the workflow monitor also tries to prevent "oops I just edited main" mistakes:
📌 Current branch: <branch-or-sha>.Outside a git repo, it stays silent.
Tracks which workflow phase the agent is in and shows a phase strip in the TUI widget. Detection signals:
/skill:brainstorming, /skill:writing-plans, etc.)docs/plans/ (*-design.md → brainstorm, *-implementation.md → plan)plan_tracker init calls → execute phaseAt phase boundaries, prompts the agent once (non-enforcing) with options:
/workflow-nextWhen transitioning into finish, the monitor pre-fills the editor with a reminder to consider documentation updates and to capture learnings before merging/shipping.
The /workflow-next command starts a new session with artifact context:
/workflow-next plan docs/plans/2026-02-10-my-feature-design.md
/workflow-next execute docs/plans/2026-02-11-my-feature-implementation.md
/workflow-next verify
Valid phases: brainstorm, plan, execute, verify, review, finish.
Serves detailed guidance on demand, keeping skill files lean while making reference content available when the agent needs it:
workflow_reference({ topic: "tdd-rationalizations" }) - Why order matters, excuse table
workflow_reference({ topic: "tdd-examples" }) - Good/bad code examples, bug fix walkthrough
workflow_reference({ topic: "tdd-when-stuck" }) - Blocker solutions, verification checklist
workflow_reference({ topic: "tdd-anti-patterns" }) - Mock pitfalls, test-only methods
workflow_reference({ topic: "debug-rationalizations" }) - Why investigation-first matters
workflow_reference({ topic: "debug-tracing" }) - Root cause tracing technique
workflow_reference({ topic: "debug-defense-in-depth" }) - Multi-layer validation after fix
workflow_reference({ topic: "debug-condition-waiting" }) - Replace timeouts with conditions
The plan_tracker tool stores task state in the session and shows progress in the TUI:
Tasks: ✓✓→○○ (2/5) Task 3: Recovery modes
plan_tracker({ action: "init", tasks: ["Task 1: Setup", "Task 2: Core", ...] })
plan_tracker({ action: "update", index: 0, status: "complete" })
plan_tracker({ action: "status" })
plan_tracker({ action: "clear" })
Skills are markdown files the agent reads to learn what to do. Extensions are TypeScript modules that enforce the discipline in real time.
| Agent Behavior | Skill (teaches) | Extension (enforces) |
|---|---|---|
| Write test before code | test-driven-development (three-scenario) | TDD monitor warns on violation (advisory) |
| Investigate before fixing | systematic-debugging | Debug monitor warns on fix-without-investigation |
| Run tests before claiming done | verification-before-completion | Verification gate warns on commit/push/PR |
| Follow workflow phases | All skills cross-reference each other | Workflow tracker detects phases, prompts at boundaries |
| Dispatch implementation work | subagent-driven-development | Subagent extension spawns isolated agents |
| Review before merge | requesting-code-review | Subagent dispatches code-reviewer agent |
| The orchestrating agent's enforcement is advisory (warnings injected into tool results). |
A bundled subagent tool lets the orchestrating agent spawn isolated subprocess agents for implementation and review tasks. No external dependencies required.
| Agent | Purpose | Tools | Extensions |
|---|---|---|---|
implementer | Strict TDD implementation | read, write, edit, bash, lsp | — |
worker | General-purpose task execution | read, write, edit, bash, lsp | — |
code-reviewer | Production readiness review | read, bash (read-only) | — |
spec-reviewer | Plan/spec compliance check | read, bash (read-only) | — |
Agent definitions live in agents/*.md and use YAML frontmatter to declare tools, model, extensions, and a system prompt body.
subagent({ agent: "implementer", task: "Implement the retry logic per docs/plans/retry-plan.md Task 3" })
subagent({
tasks: [
{ agent: "worker", task: "Fix failing test in auth.test.ts" },
{ agent: "worker", task: "Fix failing test in cache.test.ts" },
],
})
Single-agent results include:
filesChanged — list of files written/editedtestsRan — whether any test commands were executedstatus — "completed" or "failed"Add .md files to an agents/ directory at your project root. They override bundled agents of the same name. Frontmatter fields:
---
name: my-agent
description: What this agent does
tools: read, write, edit, bash
model: claude-sonnet-4-5
extensions: ../extensions/my-guard.ts
---
System prompt body here.
Based on Superpowers by Jesse Vincent, ported to pi as pi-superpowers, then extended with active enforcement.
| Superpowers | pi-superpowers | pi-superpowers-plus | |
|---|---|---|---|
| Platform | Claude Code | pi | pi |
| Skills | 12 workflow skills | Same 12 skills (pi port) | Same 12 skills (three-scenario TDD, restored inline guidance) |
| TDD enforcement | Skill tells agent the rules | Skill tells agent the rules | Extension watches and injects warnings |
| TDD widget | — | — | TUI: RED → GREEN → REFACTOR |
| Debug enforcement | Manual discipline | Manual discipline | Extension escalates after repeated failures |
| Verification gating | — | — | Blocks commit/push/PR until tests pass |
| Workflow tracking | — | — | Phase strip, boundary prompts, /workflow-next |
| Subagent dispatch | — | — | Bundled subagent tool + 4 agent definitions |
| TDD in subagents | — | — | Three-scenario TDD instructions in agent profiles + prompt templates + runtime warnings |
| Structured results | — | — | filesChanged, testsRan per agent |
| Reference content | Everything in SKILL.md | Everything in SKILL.md | Inline guidance + on-demand workflow_reference tool for extended detail |
| Plan tracker | — | — | plan_tracker tool with TUI progress widget |
pi-superpowers-plus/
├── agents/ # Bundled agent definitions (4 agents)
│ ├── implementer.md # Strict TDD implementation agent
│ ├── worker.md # General-purpose task agent
│ ├── code-reviewer.md # Production readiness reviewer
│ └── spec-reviewer.md # Plan/spec compliance reviewer
├── extensions/
│ ├── logging.ts # File-based diagnostic logger (10KB truncation, time-based rotation)
│ ├── plan-tracker.ts # Task tracking tool + TUI widget
│ ├── workflow-monitor.ts # Extension entry point (event wiring)
│ ├── workflow-monitor/
│ │ ├── tdd-monitor.ts # TDD phase state machine
│ │ ├── debug-monitor.ts # Debug mode escalation
│ │ ├── verification-monitor.ts # Commit/push/PR gating
│ │ ├── workflow-tracker.ts # Workflow phase tracking + parseSkillName
│ │ ├── workflow-transitions.ts # Phase boundary prompt definitions
│ │ ├── workflow-handler.ts # Testable core logic (combines monitors)
│ │ ├── heuristics.ts # File classification (test vs source)
│ │ ├── test-runner.ts # Test command/result detection
│ │ ├── investigation.ts # Investigation signal detection
│ │ ├── git.ts # Git branch/SHA detection (branch safety)
│ │ ├── warnings.ts # Violation warning content
│ │ ├── skip-confirmation.ts # Phase-skip confirmation logic
│ │ └── reference-tool.ts # On-demand reference loading
│ └── subagent/
│ ├── index.ts # Subagent tool registration + execution
│ └── agents.ts # Agent discovery + frontmatter parsing
├── skills/ # 12 workflow skills (24 markdown files)
│ ├── brainstorming/
│ ├── writing-plans/
│ ├── executing-plans/
│ ├── subagent-driven-development/
│ ├── test-driven-development/
│ ├── systematic-debugging/
│ ├── verification-before-completion/
│ ├── requesting-code-review/
│ ├── receiving-code-review/
│ ├── dispatching-parallel-agents/
│ ├── using-git-worktrees/
│ └── finishing-a-development-branch/
└── tests/ # 373 tests across 39 files
npm test # Run all tests
npx vitest run tests/extension/workflow-monitor/tdd-monitor.test.ts # Run one file
Skill content adapted from Superpowers by Jesse Vincent (MIT). This package builds on pi-superpowers with active enforcement extensions, leaner skill files, on-demand reference content, and workflow tracking.
MIT - see LICENSE for details.
FAQs
Superpowers workflow skills adapted for pi
We found that pi-superpowers-plus demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Security News
Cloudflare is acquiring Deno’s team, which will provide another year of bug fixes and security updates before ending support for the runtime.

Security News
Anthropic’s free OSS Scanner uses Mythos and other Claude models to find open source vulnerabilities and send maintainers reports with proposed fixes.

Security News
On Front Lines’ Early Adopters: CISO podcast, Andrew Becherer shares lessons from Datadog, weighs the long-term costs of AI-built tools, and explains how founders can actually gain a CISO’s trust.