@christang/keel 5.3.0 → 5.3.3

package/assets/bootstrap/AGENTS.md

@@ -1,8 +1,8 @@
-<!-- keel:start version=5.3.0 -->
+<!-- keel:start version=5.3.3 -->
 ## Keel Bootstrap
 
 - Start every session with `keel context`; OpenSpec artifacts and Git are the only durable authority — never native memory, goals, or transcripts.
-- Obey the selected task capsule: `keel gate task-start` before implementing, record its fingerprint in the task Evidence `Contract` line, and pass `keel gate task-complete` before checking complete. Touch is the write boundary; on Claude a passing `task-start` guards it by default (`--no-guard`/`keel guard clear` opt out).
+- Obey the selected task capsule: `keel gate task-start` before implementing, record its fingerprint in Evidence `Contract`, and pass `keel gate task-complete` before checking complete. Touch is the write boundary for product files; on Claude a passing `task-start` guards it by default (`--no-guard`/`keel guard clear` opt out).
 - One current agent owns writes; helpers return read-only report/evidence only. No commit, sync, or archive without explicit authorization.
 - Native plugin projections (SessionStart context) are disposable views, never authority; without the plugin or hook, run the commands manually.
 - Keel skills and hooks come from the `keel` native plugin (`codex plugin add` / `claude plugin install`); `keel --init` owns only the OpenSpec schema, overlays, and this bootstrap.

package/assets/openspec/schemas/keel-spec-driven/schema.yaml

@@ -139,8 +139,18 @@ artifacts:
       are `none` or carry a durable owner — a `Discard reason:`/`Discard
       rationale:` prefix, a `keel/archive/…` path, or an existing
       `openspec/changes/…` artifact; `keel/HANDOFF.md` is never the owner.
-      tasks.md ends with a `## Expectation Coverage` section that change-close
-      requires: one `- E<n>: <expectation> Covered by: <task ids>` line per
+      tasks.md carries two change-level sections beside its tasks.
+      `## Invalidates` is required by task-start, before any task of the
+      change runs: one `- I<n>: "the wording that is now wrong" — where it lives.`
+      line per statement this change makes stale, closed by `Updated by: <task
+      ids>` naming tasks of this change, a `Durable owner:`, or a `Discard
+      reason:`, or `- None.` when the change makes no existing statement wrong.
+      Quote the wording a reader would search for rather than only listing
+      files, because the text that goes stale is the text the author was not
+      already holding in mind; naming it while tasks are authored is what lets
+      the affected paths be declared in Touch instead of forcing a
+      reauthorization mid-task. `## Expectation Coverage` is required by
+      change-close: one `- E<n>: <expectation> Covered by: <task ids>` line per
       critical expectation (or a `Durable owner:` / `Discard reason:` closure),
       or `- None.` when the change has no critical expectations.
     requires:

package/assets/openspec/schemas/keel-spec-driven/templates/tasks.md

@@ -76,6 +76,22 @@
       - Findings: pending
     - Blocker: none
 
+## Invalidates
+
+<!-- task-start requires this section before any task of this change runs, so
+     the statements this change makes stale can be named while their paths can
+     still be declared in Touch instead of forcing a reauthorization later.
+     Each entry quotes the wording a reader would SEARCH for — not just the
+     files you already remembered, because the text that goes stale is the text
+     you were not thinking about — then says where it lives, then closes:
+     `Updated by: 1.1` (tasks of this change), `Durable owner: <url or path>`,
+     or `Discard reason: why it stands`. Use `- None.` when this change makes
+     no existing statement wrong.
+
+     - I1: "the exact wording that is now wrong" — where that wording lives. Updated by: 1.1
+     -->
+- None.
+
 ## Expectation Coverage
 
 <!-- change-close requires this section. One line per critical expectation:

package/package.json

@@ -2,7 +2,7 @@
   "name": "@christang/keel",
   "displayName": "Keel",
   "description": "Keel OpenSpec execution discipline CLI for Claude Code, Codex, and OpenCode.",
-  "version": "5.3.0",
+  "version": "5.3.3",
   "license": "MIT",
   "repository": {
     "type": "git",

package/plugins/keel/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "keel",
-  "version": "5.3.0",
+  "version": "5.3.3",
   "description": "Keel OpenSpec execution discipline: stateless continuity, task capsules, deterministic gates, and expectation alignment for Codex and Claude Code.",
   "author": {
     "name": "TanglmChris",

package/plugins/keel/.codex-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "keel",
-  "version": "5.3.0",
+  "version": "5.3.3",
   "description": "Keel OpenSpec execution discipline: stateless continuity, task capsules, deterministic gates, and expectation alignment for Codex and Claude Code.",
   "author": {
     "name": "TanglmChris",

package/plugins/keel/scripts/session-start.js

@@ -15,6 +15,11 @@ const fs = require("fs");
 const path = require("path");
 const { spawnSync } = require("child_process");
 
+// This text is injected into the agent and never rendered for the human, so
+// without an explicit instruction the projection reaches nobody who can catch
+// it being wrong. Every branch carries the same phrase, degraded ones included.
+const DISCLOSURE = "to the user in your first reply";
+
 const TIMEOUT_MS = Number(process.env.KEEL_HOOK_TIMEOUT_MS || 8000) || 8000;
 const MAX_REASONS = 3;
 const MAX_REASON_LENGTH = 300;
@@ -51,7 +56,8 @@ function runKeel(cwd, args) {
 function fallback(reason) {
   emit(
     `Keel hook fallback: ${reason} Run \`keel context\` manually; `
-      + "OpenSpec and Git remain the durable authority."
+      + "OpenSpec and Git remain the durable authority. Report this failure "
+      + `and that command ${DISCLOSURE}.`
   );
 }
 
@@ -145,6 +151,7 @@ function main() {
         + "does not guess among candidates."
     );
   }
+  lines.push(`- report this state ${DISCLOSURE}; it authorizes nothing.`);
   emit(lines.join("\n"));
   return 0;
 }