@esneiderbravo/speclaw 2.0.13 → 2.0.14

package/dist/cli/commands/init.js

@@ -56,7 +56,7 @@ export async function runInit(flags) {
             agents: () => clack.multiselect({
                 message: "Which agents do you use? (space to select)",
                 options: AGENTS.map((a) => ({ value: a.id, label: a.label })),
-                initialValues: ["claude"],
+                initialValues: ["agents"],
                 required: true,
             }),
         };
@@ -77,7 +77,8 @@ export async function runInit(flags) {
         packs = answers.packs ?? [];
     }
     else {
-        agents = list(flags.agents).length ? list(flags.agents) : ["claude"];
+        // Default: one agent-facing folder, `.agents/`, linked into ai-specs/.
+        agents = list(flags.agents).length ? list(flags.agents) : ["agents"];
         packs = list(flags.packs);
     }
     const unknownAgents = agents.filter((a) => !agentById(a));

package/dist/cli/lib/help.js

@@ -129,7 +129,7 @@ npx @esneiderbravo/speclaw@latest init so the scaffold matches the latest releas
 
 Options
   --yes, -y               Accept the defaults without prompting
-  --agents <ids>          Comma-separated agents to configure (claude, cursor, …)
+  --agents <ids>          Agents to configure (default: agents → only .agents/; also claude, cursor, codex, windsurf)
   --packs <ids>           Comma-separated tool packs to install
   --project-name <name>   Project name for the templates
   --minimal               Omit setup/lifecycle MCP tools

package/dist/modules/foundation/assets/AGENTS.template.md

@@ -42,8 +42,8 @@ Claude-specific notes: [`CLAUDE.md`](CLAUDE.md). The law: [`LAWS.md`](LAWS.md).
    [`docs/standards/base-standards.md`](docs/standards/base-standards.md) and
    [`docs/standards/conventions.md`](docs/standards/conventions.md).
 6. **Use the skills and role agents.** `ai-specs/` is the canonical home for
-   skills, commands, rules, and agents, mirrored to each IDE directory via
-   symlinks.
+   skills, commands, rules, and agents; agents read them through the symlinks
+   in `.agents/` (plus an IDE folder only for an agent added explicitly).
 7. **Ask before irreversible or outward-facing actions** — destructive commands;
    writing to a real data store (DB rows or files with real user data, including
    for tests — verify against an isolated/throwaway store); publishing

package/dist/modules/foundation/assets/CLAUDE.template.md

@@ -82,8 +82,9 @@ its neighbors, comments that carry constraints (never ticket IDs). Full rules:
 
 ## Rule 5 — Skills and role agents are law-adjacent
 
-Skills, commands, rules, and agents live in `ai-specs/` (symlinked into
-`.claude/`, `.cursor/`, `.codex/`, `.agents/`). When a skill or role matches
+Skills, commands, rules, and agents live in `ai-specs/`, read through the
+symlinks in `.agents/` (an IDE folder such as `.claude/` exists only for an
+agent added explicitly with `speclaw agent add`). When a skill or role matches
 the task, use it — do not improvise a parallel process.
 
 ## Rule 6 — Stop conditions

package/dist/modules/foundation/dialects/copilot.js

@@ -6,11 +6,9 @@ import { frontmatter, lawSlug, } from "./types.js";
 export const copilotDialect = {
     id: "copilot-instructions",
     compile(laws, ctx) {
-        // Emit when explicitly wanted: agent id "copilot" or always if .github exists —
-        // orchestrator passes agents; treat missing copilot as skip unless "agents" generic.
-        const want = ctx.agents.includes("copilot") ||
-            ctx.agents.includes("github-copilot") ||
-            ctx.agents.includes("agents");
+        // Only for Copilot: the generic agent reads scoped laws from AGENTS.md
+        // (agentsmd dialect), so it gets no `.github/instructions/` folder.
+        const want = ctx.agents.includes("copilot") || ctx.agents.includes("github-copilot");
         if (!want)
             return [];
         const scoped = laws.filter((l) => (l.status ?? "active") !== "draft" && l.scope.length > 0);

package/dist/modules/foundation/scaffold.js

@@ -50,21 +50,6 @@ function ensureLawManifest(projectPath, report) {
     }
     return manifest;
 }
-/**
- * Write `.github/workflows/speclaw.yml` from the shipped template when the
- * path does not exist. Never overwrite — the user's CI is theirs.
- */
-function ensureVerifyWorkflow(projectPath, report) {
-    const dest = path.join(projectPath, ".github", "workflows", "speclaw.yml");
-    if (fs.existsSync(dest)) {
-        report.skipped.push(dest);
-        return;
-    }
-    const src = path.join(ASSETS, "workflows", "speclaw.yml");
-    fs.mkdirSync(path.dirname(dest), { recursive: true });
-    fs.copyFileSync(src, dest);
-    report.written.push(dest);
-}
 /**
  * Render the foundation: walk the module's assets/, mirror its structure into
  * the project, stripping the `.template` marker (foo.template.md -> foo.md).
@@ -163,6 +148,9 @@ export function scaffold(projectPath, profile, packNames, agents = [], opts = {}
     // it out of the module assets) plus the local .speclaw.json manifest — local,
     // per-checkout content, reconstructed by init/update, never committed.
     ensureGitignore(projectPath, "ai-specs/", "speclaw workflow content (regenerated by init/update; never commit)", report);
+    // The integrity lock is local tool state: it guards this checkout's rule
+    // files and is rebuilt by init/update, so it is not committed.
+    ensureGitignore(projectPath, "speclaw.lock", "speclaw local integrity lock (never commit)", report);
     for (const id of agents)
         configureAgent(projectPath, id, report); // only the chosen agents
     // Compile the declared laws into agent hooks for every hook-capable agent just
@@ -185,7 +173,6 @@ export function scaffold(projectPath, profile, packNames, agents = [], opts = {}
             report.lockError = err.message;
         }
     }
-    ensureVerifyWorkflow(projectPath, report);
     report.hooks = installHooks(projectPath, agents, lawManifest, report, {
         baselines: managedOpts.baselines,
         backup: managedOpts.backup,

package/dist/modules/lawbook/anchors.js

@@ -241,7 +241,8 @@ export function sealCapability(projectPath, capability, markdown, opts = {}) {
         const now = opts.now ?? new Date().toISOString();
         const sha = headSha(projectPath);
         const specId = opts.specId ?? capability;
-        const rows = resolveCandidates(db, projectPath, extractCandidates(markdown), specId, now, sha);
+        const fresh = resolveCandidates(db, projectPath, extractCandidates(markdown), specId, now, sha);
+        const rows = keepUnchangedStamps(readAnchorsFile(projectPath, capability), fresh);
         const dest = writeAnchorsFile(projectPath, {
             anchorsVersion: 1,
             capability,
@@ -262,6 +263,42 @@ export function sealCapability(projectPath, capability, markdown, opts = {}) {
         db.close();
     }
 }
+/** Fields that identify one anchor across seals. */
+function anchorKey(a) {
+    return [a.requirementId, a.scenarioId, a.symbolName, a.anchorKind, a.source].join("\0");
+}
+/** Fields whose change means the anchor was really re-sealed. */
+function sealedState(a) {
+    return JSON.stringify([
+        a.specId,
+        a.filePath,
+        a.resolution,
+        a.contentHash,
+        a.rawHash,
+        a.normalizerVersion,
+    ]);
+}
+/**
+ * Keep the previous `archivedAt` / `commitSha` of every anchor whose sealed
+ * state did not change, so a reseal rewrites only the anchors that moved —
+ * an unchanged capability stays byte-identical and the drift age of an
+ * untouched anchor still counts from when it was really sealed.
+ *
+ * @param previous - The capability's anchors file before this seal, if any.
+ * @param fresh - The anchors just resolved, stamped with this seal's time and sha.
+ * @returns The anchors to write.
+ */
+function keepUnchangedStamps(previous, fresh) {
+    if (!previous)
+        return fresh;
+    const old = new Map(previous.anchors.map((a) => [anchorKey(a), a]));
+    return fresh.map((a) => {
+        const prior = old.get(anchorKey(a));
+        return prior && sealedState(prior) === sealedState(a)
+            ? { ...a, archivedAt: prior.archivedAt, commitSha: prior.commitSha }
+            : a;
+    });
+}
 /** Seal every canonical capability under lawbook/specs/ that has a spec.md. */
 export function resealAll(projectPath) {
     const specsRoot = path.join(projectPath, "lawbook", "specs");

package/dist/shared/agents.js

@@ -37,7 +37,7 @@ export const AGENTS = [
         id: "agents",
         label: "Generic (AGENTS.md)",
         ideDir: ".agents",
-        linkTargets: ["skills", "agents"],
+        linkTargets: ["skills", "commands", "agents", "rules"],
     },
 ];
 /**
@@ -141,6 +141,12 @@ export function configureAgent(projectPath, agentId, report) {
     if (!agent)
         throw new Error(`Unknown agent "${agentId}". Known: ${AGENTS.map((a) => a.id).join(", ")}`);
     const ideRoot = path.join(projectPath, agent.ideDir);
+    // An agent folder speclaw creates holds only links into the gitignored
+    // ai-specs/ and per-developer wiring: keep it out of version control. A
+    // folder that already existed is the user's and is left as it is.
+    if (!fs.existsSync(ideRoot)) {
+        ensureGitignore(projectPath, `${agent.ideDir}/`, `speclaw ${agent.label} links (regenerated by init; never commit)`, report);
+    }
     for (const target of agent.linkTargets) {
         const sourceDir = path.join(projectPath, "ai-specs", target);
         if (!fs.existsSync(sourceDir))

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@esneiderbravo/speclaw",
-  "version": "2.0.13",
+  "version": "2.0.14",
   "publishConfig": {
     "access": "public"
   },

package/dist/modules/foundation/assets/workflows/speclaw.yml

@@ -1,26 +0,0 @@
-# Consumer template. init/update write this only when the path is missing.
-# Never the untrusted PR trigger. The verify job has no secrets.
-name: ⚖️ speclaw
-on: pull_request
-
-permissions: {}
-
-jobs:
-  verify:
-    name: ⚖️ Verify laws
-    runs-on: ubuntu-latest
-    permissions:
-      contents: read
-      security-events: write
-    steps:
-      - name: 📥 Checkout
-        uses: actions/checkout@v5
-        with:
-          fetch-depth: 0
-      - name: ⚖️ Verify
-        uses: esneiderbravo/speclaw@v2
-      - name: 🛡️ Upload SARIF
-        uses: github/codeql-action/upload-sarif@v4
-        if: always()
-        with:
-          sarif_file: speclaw.sarif