@ancleto/spec 0.11.0 → 0.12.0

package/agents/orchestrator.md

@@ -1,7 +1,7 @@
 ---
 description: Orchestrates tasks and delegates to subagents for spec-driven development
 mode: primary
-model: opencode-go/qwen3.7-plus
+model: opencode-go/deepseek-v4.1-flash
 color: '#6366f1'
 tools:
   read: true

package/agents/reviewer.md

@@ -1,7 +1,7 @@
 ---
 description: Reviews completed changes for correctness, conventions, and approved-scope compliance
 mode: subagent
-model: opencode-go/qwen3.6-plus
+model: opencode-go/deepseek-v4.1-flash
 temperature: 0.1
 color: '#ef4444'
 tools:

package/agents/spec-writer.md

@@ -1,7 +1,7 @@
 ---
 description: Generates aspec change artifacts for spec-driven development
 mode: subagent
-model: opencode-go/qwen3.7-plus
+model: opencode-go/deepseek-v4.1-flash
 temperature: 0.2
 color: '#f59e0b'
 tools:

package/commands/cleto-update.md

@@ -0,0 +1,11 @@
+---
+description: Update a change's artifacts when a definition changed
+---
+
+Invoke the `ancleto-update` skill with the Skill tool and follow it exactly; do not improvise steps.
+
+**Input**: the argument after `/cleto-update` is a change name (kebab-case) and what changed (a definition to apply, or a spec that already changed). If the change name is omitted, check if it can be inferred from conversation context. If vague or ambiguous you MUST prompt for available changes.
+
+This is the artifact-update skill, not the CLI `ancleto update` (which reinstalls the package).
+
+Work Item grounding (when the request references a Work Item) is owned by `@context-resolver`.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ancleto/spec",
-  "version": "0.11.0",
+  "version": "0.12.0",
   "description": "Orquestador SDD liviano con subagentes optimizados para costo/tokens",
   "type": "module",
   "bin": {

package/skills/ancleto-update/SKILL.md

@@ -0,0 +1,87 @@
+---
+name: ancleto-update
+description: Update the artifacts of an existing change when a definition changed (a main spec, the scope, or a design decision). Merges in place or writes a rev2, preserving unmentioned content. No external binaries required.
+license: MIT
+compatibility: No external binaries required. Works with any agent runtime.
+metadata:
+  author: ancleto
+  version: '1.0'
+---
+
+# aspec Update
+
+**Artifacts language**: write artifact content in the user's conversation language (or the project's configured `language` in `.ancletorc`). Keywords (`Requirement`, `Scenario`, `SHALL`, `WHEN`/`THEN`/`AND`, `ADDED/MODIFIED/REMOVED/RENAMED Requirements`) and file/directory names are literal and MUST NOT be translated.
+
+Update the artifacts of an existing change when a definition changed. This skill edits the change's own artifacts with a non-destructive merge; it does not implement code.
+
+**Name disambiguation**: this skill (`ancleto-update`, command `/cleto-update`) updates change artifacts. It is NOT the CLI `ancleto update`, which reinstalls the package over an existing install. Never confuse the two.
+
+**Input**: a change name (e.g., `add-auth`) and what changed — either a definition the user describes, or a spec that already changed. If the change name is omitted, infer it from conversation context; if vague or ambiguous you MUST list the directories under `aspec/changes/` (excluding `archive/`) and ask the user to select.
+
+**IMPORTANT**: Do NOT guess or auto-select a change. If the name resolves inside `aspec/changes/archive/`, STOP and report it — never edit an archived change.
+
+## Steps
+
+### 1. Select the change
+
+- A name is provided → use it.
+- Omitted → infer from context. If ambiguous, list `aspec/changes/` (excluding `archive/`) and ask.
+- If it resolves to `aspec/changes/archive/<name>/`, report and stop.
+
+### 2. Read the artifacts
+
+Read every present artifact — they constrain what you write:
+
+- `proposal.md` — what & why
+- `specs/<capability>/spec.md` — delta requirements
+- `design.md` — how
+- `tasks.md` — implementation checklist
+
+If `context.md` exists, read it as background (Work Item title, description, acceptance criteria); it is NOT an artifact and MUST NOT be copied into output.
+
+### 3. Consolidate what changed
+
+Two sources, and they are **additive** (neither replaces the other):
+
+- **Drift (delta ↔ main)**: for each delta spec at `aspec/changes/<name>/specs/<capability>/spec.md`, compare against the main spec at `aspec/specs/<capability>/spec.md`. Report requirements present in the delta but absent or changed in the main spec (and vice versa).
+- **User-described change**: the definition change the user states.
+
+If neither source yields anything actionable, report and stop.
+
+### 4. Classify by owner and apply a non-destructive merge
+
+Each change has exactly one owning artifact:
+
+| What changed | Owning artifact |
+|---|---|
+| Requirement / specified behavior | `specs/<capability>/spec.md` (`## MODIFIED Requirements`) |
+| Design decision | `design.md` |
+| Scope | `proposal.md` |
+| New work | `tasks.md` |
+
+Apply the **minimal** edit to each owning artifact and **preserve everything not mentioned**:
+
+- **specs/**: use `## MODIFIED Requirements`, adding or editing scenarios only. Do NOT copy existing scenarios; preserve requirements the delta does not mention.
+- **tasks.md**: add new tasks at the end of their phase; preserve `- [x]` marks; do NOT reorder existing tasks.
+- **proposal.md / design.md**: edit the affected section; leave the rest intact.
+
+The merge MUST be idempotent: running twice with the same change yields the same result.
+
+### 5. Choose the write mode (ask the user)
+
+Ask the user which write mode to use, and do NOT pick one yourself:
+
+- **in-place**: edit the owning artifact in place, then append an entry recording the applied change to a `## Change Log` section in `proposal.md` (create the section if missing).
+- **rev2**: write only the affected artifacts under `aspec/changes/<name>/rev2/`, mirroring their relative paths (`rev2/proposal.md`, `rev2/specs/<capability>/spec.md`, …), leaving the originals untouched; also write `rev2/README.md` with the reason, the date, and the source of the change.
+
+### 6. Report and offer verify
+
+Summarize the artifacts updated and the drift resolved. If the change altered specified behavior, offer `ancleto-verify`.
+
+## Guardrails
+
+- **Merge, not overwrite**: preserve all content the change does not mention; be idempotent.
+- **Scope**: only the change's own artifacts. NEVER edit `aspec/changes/archive/`, the main specs under `aspec/specs/` (that is `ancleto-sync-specs`), or implementation code (that is `ancleto-apply`).
+- **Ask, don't guess**: if the change, the owning artifact, or the write mode is unclear, ask.
+- **Never auto-select** the change; exclude `archive/` from the candidate list.
+- Never conflate this skill with the CLI `ancleto update`.

package/skills/ancleto-workflow/SKILL.md

@@ -15,12 +15,13 @@ Map of the spec-driven lifecycle. It does not execute work — it routes: given
 ## The Lifecycle
 
 ```
-explore → new/propose/ff → continue* → apply → verify → archive
+explore → new/propose/ff → continue* → update? → apply → verify → archive
                 ↑              ↓
              onboard      bulk-archive (batches)
 ```
 
 `*` continue runs once per missing artifact until the set is complete.
+`?` update runs only when a definition changes (a main spec, the scope, or a design decision).
 
 ## Routing Rules
 
@@ -32,6 +33,7 @@ explore → new/propose/ff → continue* → apply → verify → archive
 | Start structured work | `ancleto-new` (step by step) or `ancleto-propose` (all artifacts at once) |
 | Full draft when the path is clear | `ancleto-ff` |
 | Resume a change missing artifacts | `ancleto-continue` (repeat until complete) |
+| Update artifacts after a definition changed | `ancleto-update` |
 | Implement tasks from ready artifacts | `ancleto-apply` |
 | Check implementation before closing | `ancleto-verify` |
 | Close one finished change (sync its specs) | `ancleto-archive` |
@@ -48,6 +50,7 @@ explore → new/propose/ff → continue* → apply → verify → archive
 | `specs/` or `design.md` missing | `ancleto-continue` |
 | `tasks.md` missing | `ancleto-continue` |
 | All artifacts present, tasks unchecked | `ancleto-apply` |
+| A definition changed (main spec, scope, design) | `ancleto-update` |
 | All tasks checked | `ancleto-verify`, then `ancleto-archive` |
 | Several changes complete | `ancleto-bulk-archive` |
 

package/src/cli/index.js

@@ -2029,7 +2029,7 @@ async function memoryListCmd(flags) {
     return
   }
   for (const n of nodes) {
-    console.log(`  [${n.type}/${n.scope}${n.status === 'active' ? '' : '/' + n.status}] ${n.memory_key}`)
+    console.log(`  [${n.type}/${n.scope}${n.status === 'active' ? '' : '/' + n.status}] ${n.memory_key} (${n.source})`)
     console.log(`      ${n.content}`)
   }
   console.log(`ancleto: ${nodes.length} nodo(s)`)

package/src/core/memory/engine.js

@@ -182,6 +182,14 @@ function buildEngine(db) {
     return []
   }
 
+  // Procedencia de escritura (runtime-owned, solo auditoria): `source` se resuelve
+  // exclusivamente desde `context.source || 'runtime'` y NUNCA desde `input` (un
+  // `source` forjado en los args del caller se ignora, igual que `id`/`status`/
+  // `confidence`). Vocabulario: `mcp:ancleto-memory` (tools MCP), `cli:import`
+  // (import del CLI), `runtime` (default programatico), `agent:<rol>` (solo si el
+  // runtime confiable lo provee, nunca el caller). Frontera: la procedencia es
+  // descriptiva; el motor NO la usa para autorizar ni denegar escrituras (sin
+  // canal de identidad autenticado no hay enforcement).
   function recordNode(input, context = {}) {
     const memory_key = String(input.memory_key || '').trim()
     const type = input.type
@@ -232,11 +240,11 @@ function buildEngine(db) {
     }
     const clause = where.length ? `WHERE ${where.join(' AND ')}` : ''
     const rows = db.prepare(
-      `SELECT ${PUBLIC_COLUMNS}, status FROM memory_nodes n ${clause}
+      `SELECT ${PUBLIC_COLUMNS}, n.source, status FROM memory_nodes n ${clause}
        ORDER BY CASE n.scope WHEN 'task' THEN 0 WHEN 'feature' THEN 1 WHEN 'project' THEN 2 ELSE 9 END,
                 n.created_at DESC, n.rowid DESC`
     ).all(...params)
-    return rows.map((r) => ({ ...publicNode(r), status: r.status }))
+    return rows.map((r) => ({ ...publicNode(r), source: r.source, status: r.status }))
   }
 
   // Devuelve los nodos activos en el formato de export. Sanitiza paths
@@ -294,7 +302,7 @@ function buildEngine(db) {
             insertNode.run(
               newId, memory_key, entry.type, entry.scope,
               String(entry.content), String(entry.justification || ''),
-              'import', 1, entry.createdAt
+              'cli:import', 1, entry.createdAt
             )
             summary.updated++
           } else {
@@ -311,7 +319,7 @@ function buildEngine(db) {
         insertNode.run(
           randomUUID(), memory_key, entry.type, entry.scope,
           String(entry.content), String(entry.justification || ''),
-          'import', 1, entry.createdAt
+          'cli:import', 1, entry.createdAt
         )
         summary.inserted++
       }