docs: update release notes with OpenCode bootstrap change

Move bootstrap injection from experimental.chat.system.transform to
experimental.chat.messages.transform, prepending to the first user
message instead of adding a system message.

This avoids two issues:
- System messages repeated every turn inflate token usage (#750)
- Multiple system messages break Qwen and other models (#894)

Tested on OpenCode 1.3.2 with Claude Sonnet 4.5 — brainstorming skill
fires correctly on "Let's make a React to do list" prompt.

.claude-plugin/marketplace.json

@@ -9,7 +9,7 @@
     {
       "name": "superpowers",
       "description": "Core skills library for Claude Code: TDD, debugging, collaboration patterns, and proven techniques",
-      "version": "5.0.7",
+      "version": "5.0.6",
       "source": "./",
       "author": {
         "name": "Jesse Vincent",

.claude-plugin/plugin.json

@@ -1,7 +1,7 @@
 {
   "name": "superpowers",
   "description": "Core skills library for Claude Code: TDD, debugging, collaboration patterns, and proven techniques",
-  "version": "5.0.7",
+  "version": "5.0.6",
   "author": {
     "name": "Jesse Vincent",
     "email": "jesse@fsck.com"

.cursor-plugin/plugin.json

@@ -2,7 +2,7 @@
   "name": "superpowers",
   "displayName": "Superpowers",
   "description": "Core skills library: TDD, debugging, collaboration patterns, and proven techniques",
-  "version": "5.0.7",
+  "version": "5.0.6",
   "author": {
     "name": "Jesse Vincent",
     "email": "jesse@fsck.com"

.github/ISSUE_TEMPLATE/config.yml

@@ -1,5 +1,5 @@
 blank_issues_enabled: false
 contact_links:
   - name: Questions & Help
-    url: https://discord.gg/35wsABTejz
+    url: https://discord.gg/Jd8Vphy9jq
     about: For usage questions, troubleshooting help, and general discussion, please visit our Discord instead of opening an issue.

.version-bump.json

@@ -1,19 +0,0 @@
-{
-  "files": [
-    { "path": "package.json", "field": "version" },
-    { "path": ".claude-plugin/plugin.json", "field": "version" },
-    { "path": ".cursor-plugin/plugin.json", "field": "version" },
-    { "path": ".claude-plugin/marketplace.json", "field": "plugins.0.version" },
-    { "path": "gemini-extension.json", "field": "version" }
-  ],
-  "audit": {
-    "exclude": [
-      "CHANGELOG.md",
-      "RELEASE-NOTES.md",
-      "node_modules",
-      ".git",
-      ".version-bump.json",
-      "scripts/bump-version.sh"
-    ]
-  }
-}

AGENTS.md

@@ -1 +0,0 @@
-CLAUDE.md

CLAUDE.md

@@ -1,85 +0,0 @@
-# Superpowers — Contributor Guidelines
-
-## If You Are an AI Agent
-
-Stop. Read this section before doing anything.
-
-This repo has a 94% PR rejection rate. Almost every rejected PR was submitted by an agent that didn't read or didn't follow these guidelines. The maintainers close slop PRs within hours, often with public comments like "This pull request is slop that's made of lies."
-
-**Your job is to protect your human partner from that outcome.** Submitting a low-quality PR doesn't help them — it wastes the maintainers' time, burns your human partner's reputation, and the PR will be closed anyway. That is not being helpful. That is being a tool of embarrassment.
-
-Before you open a PR against this repo, you MUST:
-
-1. **Read the entire PR template** at `.github/PULL_REQUEST_TEMPLATE.md` and fill in every section with real, specific answers. Not summaries. Not placeholders.
-2. **Search for existing PRs** — open AND closed — that address the same problem. If duplicates exist, STOP and tell your human partner. Do not open another duplicate.
-3. **Verify this is a real problem.** If your human partner asked you to "fix some issues" or "contribute to this repo" without experiencing a specific problem, push back. Ask them what broke, what failed, what the user experience was.
-4. **Confirm the change belongs in core.** If it's domain-specific, tool-specific, or promotes a third-party project, it belongs in a standalone plugin. Tell your human partner.
-5. **Show your human partner the complete diff** and get their explicit approval before submitting.
-
-If any of these checks fail, do not open the PR. Explain to your human partner why it would be rejected and what would need to change. They will thank you for saving them the embarrassment.
-
-## Pull Request Requirements
-
-**Every PR must fully complete the PR template.** No section may be left blank or filled with placeholder text. PRs that skip sections will be closed without review.
-
-**Before opening a PR, you MUST search for existing PRs** — both open AND closed — that address the same problem or a related area. Reference what you found in the "Existing PRs" section. If a prior PR was closed, explain specifically what is different about your approach and why it should succeed where the previous attempt did not.
-
-**PRs that show no evidence of human involvement will be closed.** A human must review the complete proposed diff before submission.
-
-## What We Will Not Accept
-
-### Third-party dependencies
-
-PRs that add optional or required dependencies on third-party projects will not be accepted unless they are adding support for a new harness (e.g., a new IDE or CLI tool). Superpowers is a zero-dependency plugin by design. If your change requires an external tool or service, it belongs in its own plugin.
-
-### "Compliance" changes to skills
-
-Our internal skill philosophy differs from Anthropic's published guidance on writing skills. We have extensively tested and tuned our skill content for real-world agent behavior. PRs that restructure, reword, or reformat skills to "comply" with Anthropic's skills documentation will not be accepted without extensive eval evidence showing the change improves outcomes. The bar for modifying behavior-shaping content is very high.
-
-### Project-specific or personal configuration
-
-Skills, hooks, or configuration that only benefit a specific project, team, domain, or workflow do not belong in core. Publish these as a separate plugin.
-
-### Bulk or spray-and-pray PRs
-
-Do not trawl the issue tracker and open PRs for multiple issues in a single session. Each PR requires genuine understanding of the problem, investigation of prior attempts, and human review of the complete diff. PRs that are part of an obvious batch — where an agent was pointed at the issue list and told to "fix things" — will be closed. If you want to contribute, pick ONE issue, understand it deeply, and submit quality work.
-
-### Speculative or theoretical fixes
-
-Every PR must solve a real problem that someone actually experienced. "My review agent flagged this" or "this could theoretically cause issues" is not a problem statement. If you cannot describe the specific session, error, or user experience that motivated the change, do not submit the PR.
-
-### Domain-specific skills
-
-Superpowers core contains general-purpose skills that benefit all users regardless of their project. Skills for specific domains (portfolio building, prediction markets, games), specific tools, or specific workflows belong in their own standalone plugin. Ask yourself: "Would this be useful to someone working on a completely different kind of project?" If not, publish it separately.
-
-### Fork-specific changes
-
-If you maintain a fork with customizations, do not open PRs to sync your fork or push fork-specific changes upstream. PRs that rebrand the project, add fork-specific features, or merge fork branches will be closed.
-
-### Fabricated content
-
-PRs containing invented claims, fabricated problem descriptions, or hallucinated functionality will be closed immediately. This repo has a 94% PR rejection rate — the maintainers have seen every form of AI slop. They will notice.
-
-### Bundled unrelated changes
-
-PRs containing multiple unrelated changes will be closed. Split them into separate PRs.
-
-## Skill Changes Require Evaluation
-
-Skills are not prose — they are code that shapes agent behavior. If you modify skill content:
-
-- Use `superpowers:writing-skills` to develop and test changes
-- Run adversarial pressure testing across multiple sessions
-- Show before/after eval results in your PR
-- Do not modify carefully-tuned content (Red Flags tables, rationalization lists, "human partner" language) without evidence the change is an improvement
-
-## Understand the Project Before Contributing
-
-Before proposing changes to skill design, workflow philosophy, or architecture, read existing skills and understand the project's design decisions. Superpowers has its own tested philosophy about skill design, agent behavior shaping, and terminology (e.g., "your human partner" is deliberate, not interchangeable with "the user"). Changes that rewrite the project's voice or restructure its approach without understanding why it exists will be rejected.
-
-## General
-
-- Read `.github/PULL_REQUEST_TEMPLATE.md` before submitting
-- One problem per PR
-- Test on at least one harness and report results in the environment table
-- Describe the problem you solved, not just what you changed

README.md

@@ -185,6 +185,10 @@ MIT License - see LICENSE file for details
 
 Superpowers is built by [Jesse Vincent](https://blog.fsck.com) and the rest of the folks at [Prime Radiant](https://primeradiant.com).
 
-- **Discord**: [Join us](https://discord.gg/35wsABTejz) for community support, questions, and sharing what you're building with Superpowers
+For community support, questions, and sharing what you're building with Superpowers, join us on [Discord](https://discord.gg/Jd8Vphy9jq).
+
+## Support
+
+- **Discord**: [Join us on Discord](https://discord.gg/Jd8Vphy9jq)
 - **Issues**: https://github.com/obra/superpowers/issues
-- **Release announcements**: [Sign up](https://primeradiant.com/superpowers/) to get notified about new versions
+- **Marketplace**: https://github.com/obra/superpowers-marketplace

RELEASE-NOTES.md

@@ -1,6 +1,6 @@
 # Superpowers Release Notes
 
-## v5.0.7 (2026-03-31)
+## Unreleased
 
 ### GitHub Copilot CLI Support
 

gemini-extension.json

@@ -1,6 +1,6 @@
 {
   "name": "superpowers",
   "description": "Core skills library: TDD, debugging, collaboration patterns, and proven techniques",
-  "version": "5.0.7",
+  "version": "5.0.6",
   "contextFileName": "GEMINI.md"
 }

package.json

@@ -1,6 +1,6 @@
 {
   "name": "superpowers",
-  "version": "5.0.7",
+  "version": "5.0.6",
   "type": "module",
   "main": ".opencode/plugins/superpowers.js"
 }

scripts/bump-version.sh

@@ -1,220 +0,0 @@
-#!/usr/bin/env bash
-#
-# bump-version.sh — bump version numbers across all declared files,
-# with drift detection and repo-wide audit for missed files.
-#
-# Usage:
-#   bump-version.sh <new-version>   Bump all declared files to new version
-#   bump-version.sh --check         Report current versions (detect drift)
-#   bump-version.sh --audit         Check + grep repo for old version strings
-#
-set -euo pipefail
-
-SCRIPT_DIR="$(cd "$(dirname "$0")" && pwd)"
-REPO_ROOT="$(cd "$SCRIPT_DIR/.." && pwd)"
-CONFIG="$REPO_ROOT/.version-bump.json"
-
-if [[ ! -f "$CONFIG" ]]; then
-  echo "error: .version-bump.json not found at $CONFIG" >&2
-  exit 1
-fi
-
-# --- helpers ---
-
-# Read a dotted field path from a JSON file.
-# Handles both simple ("version") and nested ("plugins.0.version") paths.
-read_json_field() {
-  local file="$1" field="$2"
-  # Convert dot-path to jq path: "plugins.0.version" -> .plugins[0].version
-  local jq_path
-  jq_path=$(echo "$field" | sed -E 's/\.([0-9]+)/[\1]/g' | sed 's/^/./' | sed 's/\.\././g')
-  jq -r "$jq_path" "$file"
-}
-
-# Write a dotted field path in a JSON file, preserving formatting.
-write_json_field() {
-  local file="$1" field="$2" value="$3"
-  local jq_path
-  jq_path=$(echo "$field" | sed -E 's/\.([0-9]+)/[\1]/g' | sed 's/^/./' | sed 's/\.\././g')
-  local tmp="${file}.tmp"
-  jq "$jq_path = \"$value\"" "$file" > "$tmp" && mv "$tmp" "$file"
-}
-
-# Read the list of declared files from config.
-# Outputs lines of "path<TAB>field"
-declared_files() {
-  jq -r '.files[] | "\(.path)\t\(.field)"' "$CONFIG"
-}
-
-# Read the audit exclude patterns from config.
-audit_excludes() {
-  jq -r '.audit.exclude[]' "$CONFIG" 2>/dev/null
-}
-
-# --- commands ---
-
-cmd_check() {
-  local has_drift=0
-  local versions=()
-
-  echo "Version check:"
-  echo ""
-
-  while IFS=$'\t' read -r path field; do
-    local fullpath="$REPO_ROOT/$path"
-    if [[ ! -f "$fullpath" ]]; then
-      printf "  %-45s  MISSING\n" "$path ($field)"
-      has_drift=1
-      continue
-    fi
-    local ver
-    ver=$(read_json_field "$fullpath" "$field")
-    printf "  %-45s  %s\n" "$path ($field)" "$ver"
-    versions+=("$ver")
-  done < <(declared_files)
-
-  echo ""
-
-  # Check if all versions match
-  local unique
-  unique=$(printf '%s\n' "${versions[@]}" | sort -u | wc -l | tr -d ' ')
-  if [[ "$unique" -gt 1 ]]; then
-    echo "DRIFT DETECTED — versions are not in sync:"
-    printf '%s\n' "${versions[@]}" | sort | uniq -c | sort -rn | while read -r count ver; do
-      echo "  $ver ($count files)"
-    done
-    has_drift=1
-  else
-    echo "All declared files are in sync at ${versions[0]}"
-  fi
-
-  return $has_drift
-}
-
-cmd_audit() {
-  # First run check
-  cmd_check || true
-  echo ""
-
-  # Determine the current version (most common across declared files)
-  local current_version
-  current_version=$(
-    while IFS=$'\t' read -r path field; do
-      local fullpath="$REPO_ROOT/$path"
-      [[ -f "$fullpath" ]] && read_json_field "$fullpath" "$field"
-    done < <(declared_files) | sort | uniq -c | sort -rn | head -1 | awk '{print $2}'
-  )
-
-  if [[ -z "$current_version" ]]; then
-    echo "error: could not determine current version" >&2
-    return 1
-  fi
-
-  echo "Audit: scanning repo for version string '$current_version'..."
-  echo ""
-
-  # Build grep exclude args
-  local -a exclude_args=()
-  while IFS= read -r pattern; do
-    exclude_args+=("--exclude=$pattern" "--exclude-dir=$pattern")
-  done < <(audit_excludes)
-
-  # Also always exclude binary files and .git
-  exclude_args+=("--exclude-dir=.git" "--exclude-dir=node_modules" "--binary-files=without-match")
-
-  # Get list of declared paths for comparison
-  local -a declared_paths=()
-  while IFS=$'\t' read -r path _field; do
-    declared_paths+=("$path")
-  done < <(declared_files)
-
-  # Grep for the version string
-  local found_undeclared=0
-  while IFS= read -r match; do
-    local match_file
-    match_file=$(echo "$match" | cut -d: -f1)
-    # Make path relative to repo root
-    local rel_path="${match_file#$REPO_ROOT/}"
-
-    # Check if this file is in the declared list
-    local is_declared=0
-    for dp in "${declared_paths[@]}"; do
-      if [[ "$rel_path" == "$dp" ]]; then
-        is_declared=1
-        break
-      fi
-    done
-
-    if [[ "$is_declared" -eq 0 ]]; then
-      if [[ "$found_undeclared" -eq 0 ]]; then
-        echo "UNDECLARED files containing '$current_version':"
-        found_undeclared=1
-      fi
-      echo "  $match"
-    fi
-  done < <(grep -rn "${exclude_args[@]}" -F "$current_version" "$REPO_ROOT" 2>/dev/null || true)
-
-  if [[ "$found_undeclared" -eq 0 ]]; then
-    echo "No undeclared files contain the version string. All clear."
-  else
-    echo ""
-    echo "Review the above files — if they should be bumped, add them to .version-bump.json"
-    echo "If they should be skipped, add them to the audit.exclude list."
-  fi
-}
-
-cmd_bump() {
-  local new_version="$1"
-
-  # Validate semver-ish format
-  if ! echo "$new_version" | grep -qE '^[0-9]+\.[0-9]+\.[0-9]+'; then
-    echo "error: '$new_version' doesn't look like a version (expected X.Y.Z)" >&2
-    exit 1
-  fi
-
-  echo "Bumping all declared files to $new_version..."
-  echo ""
-
-  while IFS=$'\t' read -r path field; do
-    local fullpath="$REPO_ROOT/$path"
-    if [[ ! -f "$fullpath" ]]; then
-      echo "  SKIP (missing): $path"
-      continue
-    fi
-    local old_ver
-    old_ver=$(read_json_field "$fullpath" "$field")
-    write_json_field "$fullpath" "$field" "$new_version"
-    printf "  %-45s  %s -> %s\n" "$path ($field)" "$old_ver" "$new_version"
-  done < <(declared_files)
-
-  echo ""
-  echo "Done. Running audit to check for missed files..."
-  echo ""
-  cmd_audit
-}
-
-# --- main ---
-
-case "${1:-}" in
-  --check)
-    cmd_check
-    ;;
-  --audit)
-    cmd_audit
-    ;;
-  --help|-h|"")
-    echo "Usage: bump-version.sh <new-version> | --check | --audit"
-    echo ""
-    echo "  <new-version>  Bump all declared files to the given version"
-    echo "  --check        Show current versions, detect drift"
-    echo "  --audit        Check + scan repo for undeclared version references"
-    exit 0
-    ;;
-  --*)
-    echo "error: unknown flag '$1'" >&2
-    exit 1
-    ;;
-  *)
-    cmd_bump "$1"
-    ;;
-esac

scripts/sync-to-codex-plugin.sh

@@ -1,382 +0,0 @@
-#!/usr/bin/env bash
-#
-# sync-to-codex-plugin.sh
-#
-# Sync this superpowers checkout → prime-radiant-inc/openai-codex-plugins.
-# Clones the fork fresh into a temp dir, rsyncs upstream content, regenerates
-# the Codex overlay file (.codex-plugin/plugin.json) inline, commits, pushes a
-# sync branch, and opens a PR.
-# Path/user agnostic — auto-detects upstream from script location.
-#
-# Deterministic: running twice against the same upstream SHA produces PRs with
-# identical diffs, so two back-to-back runs can verify the tool itself.
-#
-# Usage:
-#   ./scripts/sync-to-codex-plugin.sh                              # full run
-#   ./scripts/sync-to-codex-plugin.sh -n                           # dry run
-#   ./scripts/sync-to-codex-plugin.sh -y                           # skip confirm
-#   ./scripts/sync-to-codex-plugin.sh --local PATH                 # existing checkout
-#   ./scripts/sync-to-codex-plugin.sh --base BRANCH                # default: main
-#   ./scripts/sync-to-codex-plugin.sh --bootstrap --assets-src DIR # create initial plugin
-#
-# Bootstrap mode: skips the "plugin must exist on base" check and seeds
-# plugins/superpowers/assets/ from --assets-src <dir> which must contain
-# PrimeRadiant_Favicon.svg and PrimeRadiant_Favicon.png. Run once by one
-# team member to create the initial PR; every subsequent run is a normal
-# (non-bootstrap) sync.
-#
-# Requires: bash, rsync, git, gh (authenticated), python3.
-
-set -euo pipefail
-
-# =============================================================================
-# Config — edit as upstream or canonical plugin shape evolves
-# =============================================================================
-
-FORK="prime-radiant-inc/openai-codex-plugins"
-DEFAULT_BASE="main"
-DEST_REL="plugins/superpowers"
-
-# Paths in upstream that should NOT land in the embedded plugin.
-# The Codex-only paths are here too — they're managed by generate/bootstrap
-# steps, not by rsync.
-#
-# All patterns use a leading "/" to anchor them to the source root.
-# Unanchored patterns like "scripts/" would match any directory named
-# "scripts" at any depth — including legitimate nested dirs like
-# skills/brainstorming/scripts/. Anchoring prevents that.
-# (.DS_Store is intentionally unanchored — Finder creates them everywhere.)
-EXCLUDES=(
-  # Dotfiles and infra — top-level only
-  "/.claude/"
-  "/.claude-plugin/"
-  "/.codex/"
-  "/.cursor-plugin/"
-  "/.git/"
-  "/.gitattributes"
-  "/.github/"
-  "/.gitignore"
-  "/.opencode/"
-  "/.version-bump.json"
-  "/.worktrees/"
-  ".DS_Store"
-
-  # Root ceremony files
-  "/AGENTS.md"
-  "/CHANGELOG.md"
-  "/CLAUDE.md"
-  "/GEMINI.md"
-  "/RELEASE-NOTES.md"
-  "/gemini-extension.json"
-  "/package.json"
-
-  # Directories not shipped by canonical Codex plugins
-  "/commands/"
-  "/docs/"
-  "/hooks/"
-  "/lib/"
-  "/scripts/"
-  "/tests/"
-  "/tmp/"
-
-  # Codex-only paths — managed outside rsync
-  "/.codex-plugin/"
-  "/assets/"
-)
-
-# =============================================================================
-# Generated overlay file
-# =============================================================================
-
-# Writes the Codex plugin manifest to "$1" with the given upstream version.
-# Args: dest_path, version
-generate_plugin_json() {
-  local dest="$1"
-  local version="$2"
-  mkdir -p "$(dirname "$dest")"
-  cat > "$dest" <<EOF
-{
-  "name": "superpowers",
-  "version": "$version",
-  "description": "Core skills library for Codex: planning, TDD, debugging, and collaboration workflows.",
-  "author": {
-    "name": "Jesse Vincent",
-    "email": "jesse@fsck.com",
-    "url": "https://github.com/obra"
-  },
-  "homepage": "https://github.com/obra/superpowers",
-  "repository": "https://github.com/obra/superpowers",
-  "license": "MIT",
-  "keywords": [
-    "skills",
-    "planning",
-    "tdd",
-    "debugging",
-    "code-review",
-    "workflow"
-  ],
-  "skills": "./skills/",
-  "interface": {
-    "displayName": "Superpowers",
-    "shortDescription": "Planning, TDD, debugging, and delivery workflows for coding agents",
-    "longDescription": "Use Superpowers to guide agent work through brainstorming, implementation planning, test-driven development, systematic debugging, parallel execution, code review, and finish-the-branch workflows adapted for Codex.",
-    "developerName": "Jesse Vincent",
-    "category": "Coding",
-    "capabilities": [
-      "Interactive",
-      "Read",
-      "Write"
-    ],
-    "brandColor": "#F59E0B",
-    "composerIcon": "./assets/superpowers-small.svg",
-    "logo": "./assets/app-icon.png",
-    "screenshots": []
-  }
-}
-EOF
-}
-
-# =============================================================================
-# Args
-# =============================================================================
-
-SCRIPT_DIR="$(cd "$(dirname "$0")" && pwd)"
-UPSTREAM="$(cd "$SCRIPT_DIR/.." && pwd)"
-BASE="$DEFAULT_BASE"
-DRY_RUN=0
-YES=0
-LOCAL_CHECKOUT=""
-BOOTSTRAP=0
-ASSETS_SRC=""
-
-usage() {
-  sed -n 's/^# \{0,1\}//;2,27p' "$0"
-  exit "${1:-0}"
-}
-
-while [[ $# -gt 0 ]]; do
-  case "$1" in
-    -n|--dry-run)  DRY_RUN=1; shift ;;
-    -y|--yes)      YES=1; shift ;;
-    --local)       LOCAL_CHECKOUT="$2"; shift 2 ;;
-    --base)        BASE="$2"; shift 2 ;;
-    --bootstrap)   BOOTSTRAP=1; shift ;;
-    --assets-src)  ASSETS_SRC="$2"; shift 2 ;;
-    -h|--help)     usage 0 ;;
-    *)             echo "Unknown arg: $1" >&2; usage 2 ;;
-  esac
-done
-
-# =============================================================================
-# Preflight
-# =============================================================================
-
-die() { echo "ERROR: $*" >&2; exit 1; }
-
-command -v rsync >/dev/null   || die "rsync not found in PATH"
-command -v git >/dev/null     || die "git not found in PATH"
-command -v gh >/dev/null      || die "gh not found — install GitHub CLI"
-command -v python3 >/dev/null || die "python3 not found in PATH"
-
-gh auth status >/dev/null 2>&1 || die "gh not authenticated — run 'gh auth login'"
-
-[[ -d "$UPSTREAM/.git" ]]         || die "upstream '$UPSTREAM' is not a git checkout"
-[[ -f "$UPSTREAM/package.json" ]] || die "upstream has no package.json — cannot read version"
-
-# Bootstrap-mode validation
-if [[ $BOOTSTRAP -eq 1 ]]; then
-  [[ -n "$ASSETS_SRC" ]] || die "--bootstrap requires --assets-src <path>"
-  ASSETS_SRC="$(cd "$ASSETS_SRC" 2>/dev/null && pwd)" || die "assets source '$ASSETS_SRC' is not a directory"
-  [[ -f "$ASSETS_SRC/PrimeRadiant_Favicon.svg" ]] || die "assets source missing PrimeRadiant_Favicon.svg"
-  [[ -f "$ASSETS_SRC/PrimeRadiant_Favicon.png" ]] || die "assets source missing PrimeRadiant_Favicon.png"
-fi
-
-# Read the upstream version from package.json
-UPSTREAM_VERSION="$(python3 -c 'import json,sys; print(json.load(open(sys.argv[1]))["version"])' "$UPSTREAM/package.json")"
-[[ -n "$UPSTREAM_VERSION" ]] || die "could not read 'version' from upstream package.json"
-
-UPSTREAM_BRANCH="$(cd "$UPSTREAM" && git branch --show-current)"
-UPSTREAM_SHA="$(cd "$UPSTREAM" && git rev-parse HEAD)"
-UPSTREAM_SHORT="$(cd "$UPSTREAM" && git rev-parse --short HEAD)"
-
-confirm() {
-  [[ $YES -eq 1 ]] && return 0
-  read -rp "$1 [y/N] " ans
-  [[ "$ans" == "y" || "$ans" == "Y" ]]
-}
-
-if [[ "$UPSTREAM_BRANCH" != "main" ]]; then
-  echo "WARNING: upstream is on '$UPSTREAM_BRANCH', not 'main'"
-  confirm "Sync from '$UPSTREAM_BRANCH' anyway?" || exit 1
-fi
-
-UPSTREAM_STATUS="$(cd "$UPSTREAM" && git status --porcelain)"
-if [[ -n "$UPSTREAM_STATUS" ]]; then
-  echo "WARNING: upstream has uncommitted changes:"
-  echo "$UPSTREAM_STATUS" | sed 's/^/  /'
-  echo "Sync will use working-tree state, not HEAD ($UPSTREAM_SHORT)."
-  confirm "Continue anyway?" || exit 1
-fi
-
-# =============================================================================
-# Prepare destination (clone fork fresh, or use --local)
-# =============================================================================
-
-CLEANUP_DIR=""
-cleanup() {
-  [[ -n "$CLEANUP_DIR" ]] && rm -rf "$CLEANUP_DIR"
-}
-trap cleanup EXIT
-
-if [[ -n "$LOCAL_CHECKOUT" ]]; then
-  DEST_REPO="$(cd "$LOCAL_CHECKOUT" && pwd)"
-  [[ -d "$DEST_REPO/.git" ]] || die "--local path '$DEST_REPO' is not a git checkout"
-else
-  echo "Cloning $FORK..."
-  CLEANUP_DIR="$(mktemp -d)"
-  DEST_REPO="$CLEANUP_DIR/openai-codex-plugins"
-  gh repo clone "$FORK" "$DEST_REPO" >/dev/null
-fi
-
-DEST="$DEST_REPO/$DEST_REL"
-
-# Checkout base branch
-cd "$DEST_REPO"
-git checkout -q "$BASE" 2>/dev/null || die "base branch '$BASE' doesn't exist in $FORK"
-
-# Plugin-existence check depends on mode
-if [[ $BOOTSTRAP -eq 1 ]]; then
-  [[ ! -d "$DEST" ]] || die "--bootstrap but base branch '$BASE' already has '$DEST_REL/' — use normal sync instead"
-  mkdir -p "$DEST"
-else
-  [[ -d "$DEST" ]] || die "base branch '$BASE' has no '$DEST_REL/' — use --bootstrap + --assets-src, or pass --base <branch>"
-fi
-
-# =============================================================================
-# Create sync branch
-# =============================================================================
-
-TIMESTAMP="$(date -u +%Y%m%d-%H%M%S)"
-if [[ $BOOTSTRAP -eq 1 ]]; then
-  SYNC_BRANCH="bootstrap/superpowers-${UPSTREAM_SHORT}-${TIMESTAMP}"
-else
-  SYNC_BRANCH="sync/superpowers-${UPSTREAM_SHORT}-${TIMESTAMP}"
-fi
-git checkout -q -b "$SYNC_BRANCH"
-
-# =============================================================================
-# Build rsync args
-# =============================================================================
-
-RSYNC_ARGS=(-av --delete)
-for pat in "${EXCLUDES[@]}"; do RSYNC_ARGS+=(--exclude="$pat"); done
-
-# =============================================================================
-# Dry run preview (always shown)
-# =============================================================================
-
-echo ""
-echo "Upstream: $UPSTREAM ($UPSTREAM_BRANCH @ $UPSTREAM_SHORT)"
-echo "Version:  $UPSTREAM_VERSION"
-echo "Fork:     $FORK"
-echo "Base:     $BASE"
-echo "Branch:   $SYNC_BRANCH"
-if [[ $BOOTSTRAP -eq 1 ]]; then
-  echo "Mode:     BOOTSTRAP (creating initial plugin from scratch)"
-  echo "Assets:   $ASSETS_SRC"
-fi
-echo ""
-echo "=== Preview (rsync --dry-run) ==="
-rsync "${RSYNC_ARGS[@]}" --dry-run --itemize-changes "$UPSTREAM/" "$DEST/"
-echo "=== End preview ==="
-echo ""
-echo "Overlay file (.codex-plugin/plugin.json) will be regenerated with"
-echo "version $UPSTREAM_VERSION regardless of rsync output."
-if [[ $BOOTSTRAP -eq 1 ]]; then
-  echo "Assets (superpowers-small.svg, app-icon.png) will be seeded from:"
-  echo "  $ASSETS_SRC"
-fi
-
-if [[ $DRY_RUN -eq 1 ]]; then
-  echo ""
-  echo "Dry run only. Nothing was changed or pushed."
-  exit 0
-fi
-
-# =============================================================================
-# Apply
-# =============================================================================
-
-echo ""
-confirm "Apply changes, push branch, and open PR?" || { echo "Aborted."; exit 1; }
-
-echo ""
-echo "Syncing upstream content..."
-rsync "${RSYNC_ARGS[@]}" "$UPSTREAM/" "$DEST/"
-
-if [[ $BOOTSTRAP -eq 1 ]]; then
-  echo "Seeding brand assets..."
-  mkdir -p "$DEST/assets"
-  cp "$ASSETS_SRC/PrimeRadiant_Favicon.svg" "$DEST/assets/superpowers-small.svg"
-  cp "$ASSETS_SRC/PrimeRadiant_Favicon.png" "$DEST/assets/app-icon.png"
-fi
-
-echo "Regenerating overlay file..."
-generate_plugin_json "$DEST/.codex-plugin/plugin.json" "$UPSTREAM_VERSION"
-
-# Bail early if nothing actually changed
-cd "$DEST_REPO"
-if [[ -z "$(git status --porcelain "$DEST_REL")" ]]; then
-  echo "No changes — embedded plugin was already in sync with upstream $UPSTREAM_SHORT (v$UPSTREAM_VERSION)."
-  exit 0
-fi
-
-# =============================================================================
-# Commit, push, open PR
-# =============================================================================
-
-git add "$DEST_REL"
-
-if [[ $BOOTSTRAP -eq 1 ]]; then
-  COMMIT_TITLE="bootstrap superpowers v$UPSTREAM_VERSION from upstream main @ $UPSTREAM_SHORT"
-  PR_BODY="Initial bootstrap of the superpowers plugin from upstream \`main\` @ \`$UPSTREAM_SHORT\` (v$UPSTREAM_VERSION).
-
-Creates \`plugins/superpowers/\` from scratch: upstream content via rsync, \`.codex-plugin/plugin.json\` regenerated inline, brand assets seeded from a local Brand Assets directory.
-
-Run via: \`scripts/sync-to-codex-plugin.sh --bootstrap --assets-src <path>\`
-Upstream commit: https://github.com/obra/superpowers/commit/$UPSTREAM_SHA
-
-This is a one-time bootstrap. Subsequent syncs will be normal (non-bootstrap) runs and will not touch the \`assets/\` directory."
-else
-  COMMIT_TITLE="sync superpowers v$UPSTREAM_VERSION from upstream main @ $UPSTREAM_SHORT"
-  PR_BODY="Automated sync from superpowers upstream \`main\` @ \`$UPSTREAM_SHORT\` (v$UPSTREAM_VERSION).
-
-Run via: \`scripts/sync-to-codex-plugin.sh\`
-Upstream commit: https://github.com/obra/superpowers/commit/$UPSTREAM_SHA
-
-Running the sync tool again against the same upstream SHA should produce a PR with an identical diff — use that to verify the tool is behaving."
-fi
-
-git commit --quiet -m "$COMMIT_TITLE
-
-Automated sync via scripts/sync-to-codex-plugin.sh
-Upstream: https://github.com/obra/superpowers/commit/$UPSTREAM_SHA
-Branch:   $SYNC_BRANCH"
-
-echo "Pushing $SYNC_BRANCH to $FORK..."
-git push -u origin "$SYNC_BRANCH" --quiet
-
-echo "Opening PR..."
-PR_URL="$(gh pr create \
-  --repo "$FORK" \
-  --base "$BASE" \
-  --head "$SYNC_BRANCH" \
-  --title "$COMMIT_TITLE" \
-  --body "$PR_BODY")"
-
-PR_NUM="${PR_URL##*/}"
-DIFF_URL="https://github.com/$FORK/pull/$PR_NUM/files"
-
-echo ""
-echo "PR opened: $PR_URL"
-echo "Diff view: $DIFF_URL"