@nightink/pi-spec-flow

Pi adapter for spec-flow: nine lifecycle/allocation/review tools, the /spec command, commit-gate interception and the bundled autonomous-delivery skill. The harness-neutral engine/CLI is a separate dependency, @nightink/spec-flow-core@^0.4.0.

Install

Requires Node.js >=22.19.0, Git and a trusted Pi 1.x host. Version 0.4.0 is a local release candidate until the maintainer publishes it:

# After npm publication:
pi install npm:@nightink/pi-spec-flow@0.4.0
pi list
# In an existing Pi session, reload explicitly:
# /reload

Git installation is also supported via the private workspace root's Pi manifest. Do not install the root pi-spec-flow package from npm. Host-provided @earendil-works/pi-coding-agent and typebox are optional peers, not bundled dependencies; Pi supplies their module mappings. No build step is required for the TypeScript extension.

Use

Run /spec to inspect the project. The tools are spec_alloc, spec_new, spec_begin, spec_impl, spec_review, spec_audit, spec_attest, spec_done and spec_board. Use /skill:autonomous-delivery for the delivery workflow. Tools return typed structured results; impl/audit failures use isError, not success text containing an emoji.

The default v4 review checks the complete Spec and each acceptance, carrying the complete previous report and worker responses between rounds. It does not require paragraph coverage or restoration of private artifact chains. last_review and ordinary repository-relative previousReport JSON preserve continuity across agents/clones. Old review jobs keep their original interpretation.

spec_audit {action:"prepare",id} is free. Running a reviewer requires an existing, explicitly authorized finite grant; installation or simulation does not authorize paid calls. spec_attest requires actual human confirmation and evidence. Headless/declined confirmation never writes attestation. Static review is not runtime acceptance or completed delivery.

Commit interception executes the target project's real gates. It is a workflow guard, not a security sandbox: extensions run with the host's OS permissions. The adapter does not install target-project dependencies, alter host settings or restart production processes.

Release acceptance

The repository's npm run release:verify -- /absolute/local-output packs both npm packages, installs them outside the source tree, and checks exports/CLI, package discovery, real Pi tool execution, gate failures, UI/confirmation boundaries, synthetic-review attachment and three provider serializers. Supply SPECFLOW_PI_SDK pointing to an already-installed trusted Pi package; the verifier never installs a SDK or calls a model. Synthetic tool/reviewer inputs exercise plumbing, not model comprehension or real human verification.

Publish core first, then this adapter. Registry authentication, permissions, publication and post-publication install verification remain maintainer actions. Tests on macOS/Linux do not certify Windows or a production daemon's loaded version.