@fission-ai/openspec 1.14.0 → 1.14.2

package/dist/core/archive.js

@@ -247,6 +247,14 @@ function toArchiveDiagnostic(error) {
     if (isRootSelectionError(error)) {
         return error.diagnostic;
     }
+    if (error instanceof RetirementCleanupError) {
+        return {
+            severity: 'error',
+            code: 'archive_retirement_cleanup_failed',
+            message: error.message,
+            fix: 'Inspect the archived change and all recovery paths in this diagnostic; preserve any needed content before cleanup.',
+        };
+    }
     return {
         severity: 'error',
         code: 'archive_error',
@@ -379,7 +387,7 @@ async function assertCopiedDirectoryUnchanged(stagedSource, destination, expecte
  */
 class MoveDestinationRetainedError extends Error {
 }
-class RetirementBackupsRetainedError extends Error {
+class RetirementCleanupError extends Error {
 }
 function isFallbackRenameCode(code) {
     return code === 'EPERM' || code === 'EXDEV';
@@ -1012,12 +1020,12 @@ async function finalizeRetirementBackups(snapshots, mainSpecsDir) {
             snapshot.displacedPath = undefined;
         }
         catch (error) {
-            errors.push(`Could not remove the committed retirement backup at ${displacedPath} ` +
+            errors.push(`Could not finalize the retirement backup at ${displacedPath} ` +
                 `(${error instanceof Error ? error.message : String(error)}).`);
         }
     }
     if (errors.length > 0) {
-        throw new RetirementBackupsRetainedError(`${errors.join(' ')} The change remains archived and each listed backup was retained for recovery.`);
+        throw new RetirementCleanupError(`${errors.join(' ')} The change was archived, but retirement cleanup did not complete. Inspect all reported recovery paths before recovery or cleanup.`);
     }
 }
 export class ArchiveCommand {
@@ -1070,13 +1078,22 @@ export class ArchiveCommand {
         const changesDir = root.changesDir;
         const archiveDir = root.archiveDir;
         const mainSpecsDir = root.specsDir;
-        for (const [allowedDirectory, managedDir] of [
-            [root.path, changesDir],
-            [changesDir, archiveDir],
-            [root.path, mainSpecsDir],
+        const openspecDir = path.dirname(changesDir);
+        // openspec/, changes/ and specs/ may be project-owned symlinks to another
+        // directory; archive/ may not leave the changes directory it lives in.
+        for (const [allowedDirectory, managedDir, allowLinkedLeaf] of [
+            [root.path, openspecDir, true],
+            [openspecDir, changesDir, true],
+            [changesDir, archiveDir, false],
+            [openspecDir, mainSpecsDir, true],
         ]) {
             try {
-                FileSystemUtils.assertPathWithin(allowedDirectory, managedDir);
+                if (allowLinkedLeaf) {
+                    FileSystemUtils.assertPathWithinAllowingLinkedLeaf(allowedDirectory, managedDir);
+                }
+                else {
+                    FileSystemUtils.assertPathWithin(allowedDirectory, managedDir);
+                }
             }
             catch {
                 throw new ArchiveBlockedError('archive_path_outside_root', `Refusing to archive through a path outside the OpenSpec root: ${managedDir}`);
@@ -1736,6 +1753,9 @@ export class ArchiveCommand {
                             if (hasRetirements) {
                                 await assertRetirementAuthorization(changeDir, retirementAuthorizationFingerprint);
                             }
+                            // update.source is canonical (symlinks resolved), so measure it from
+                            // the canonical change directory; changes/ may itself be a symlink.
+                            const canonicalChangeDir = FileSystemUtils.canonicalizeExistingPath(changeDir);
                             const verifyArchivedDeltas = async (stagedSource) => {
                                 if (hasRetirements) {
                                     await assertRetirementAuthorization(archivePath, retirementAuthorizationFingerprint, 
@@ -1749,13 +1769,13 @@ export class ArchiveCommand {
                                     }
                                 }
                                 for (const proposed of prepared) {
-                                    const archivedSource = path.join(archivePath, path.relative(changeDir, proposed.update.source));
+                                    const archivedSource = path.join(archivePath, path.relative(canonicalChangeDir, proposed.update.source));
                                     if ((await fingerprintPortableContent(archivedSource)) !==
                                         proposed.sourceContentFingerprint) {
                                         throw new Error(`The archived delta for '${proposed.update.id}' changed during the final move.`);
                                     }
                                     if (stagedSource) {
-                                        const stagedDelta = path.join(stagedSource, path.relative(changeDir, proposed.update.source));
+                                        const stagedDelta = path.join(stagedSource, path.relative(canonicalChangeDir, proposed.update.source));
                                         if ((await fingerprintPortableContent(stagedDelta)) !==
                                             proposed.sourceContentFingerprint) {
                                             throw new Error(`The active delta for '${proposed.update.id}' changed during the fallback copy.`);
@@ -1777,11 +1797,11 @@ export class ArchiveCommand {
                                     await finalizeRetirementBackups(specSnapshots, mainSpecsDir);
                                 }
                                 catch (cleanupError) {
-                                    throw new RetirementBackupsRetainedError(`${error.message} ${cleanupError instanceof Error ? cleanupError.message : String(cleanupError)}`);
+                                    throw new RetirementCleanupError(`${error.message} ${cleanupError instanceof Error ? cleanupError.message : String(cleanupError)}`);
                                 }
                                 throw error;
                             }
-                            if (error instanceof RetirementBackupsRetainedError)
+                            if (error instanceof RetirementCleanupError)
                                 throw error;
                             const rollbackErrors = [];
                             try {

package/dist/core/artifact-graph/outputs.js

@@ -4,6 +4,41 @@ import fg from 'fast-glob';
 import { FileSystemUtils } from '../../utils/file-system.js';
 const EXTGLOB_RE = /[!*+?@]\([^(]*\)/u;
 const BRACE_EXPANSION_SEPARATORS_RE = /,|\.\./u;
+// braces <=3.0.3 (fast-glob > micromatch) has no depth guard (GHSA-vfj7-8cjw-p6xm),
+// so reject nesting no real artifact pattern needs before it reaches the parser.
+const MAX_BRACE_NESTING = 16;
+function assertBraceNesting(pattern) {
+    // Mirror the braces parser: `[...]` and quoted runs are literal, `(` nests like
+    // `{`, and a closer only closes the innermost group of its own kind.
+    const open = [];
+    for (let index = 0; index < pattern.length; index += 1) {
+        const char = pattern[index];
+        if (char === '[') {
+            for (let brackets = 1; brackets > 0 && index + 1 < pattern.length;) {
+                index += 1;
+                if (pattern[index] === '[')
+                    brackets += 1;
+                else if (pattern[index] === ']')
+                    brackets -= 1;
+            }
+        }
+        else if (char === '"' || char === "'" || char === '`') {
+            const end = pattern.indexOf(char, index + 1);
+            index = end === -1 ? pattern.length : end;
+        }
+        else if (char === '{' || char === '(') {
+            open.push(char);
+            if (open.length > MAX_BRACE_NESTING) {
+                // A pattern this deep can run to thousands of characters; quote only its start.
+                const shown = pattern.length > 80 ? `${pattern.slice(0, 80)}...` : pattern;
+                throw new Error(`Artifact output pattern nests braces more than ${MAX_BRACE_NESTING} levels deep: ${shown}`);
+            }
+        }
+        else if ((char === '}' && open.at(-1) === '{') || (char === ')' && open.at(-1) === '(')) {
+            open.pop();
+        }
+    }
+}
 function hasBraceExpansion(pattern) {
     const openings = [];
     for (let index = 0; index < pattern.length; index += 1) {
@@ -90,8 +125,11 @@ function assertGlobDirectoryTraversal(changeDir, currentDir, directorySegments,
  * Returns absolute file paths. Glob matches are sorted for deterministic output.
  */
 export function resolveArtifactOutputs(changeDir, generates) {
+    const isGlob = isGlobPattern(generates);
+    if (isGlob)
+        assertBraceNesting(FileSystemUtils.toPosixPath(generates));
     const outputPath = resolveArtifactOutputPath(changeDir, generates);
-    if (!isGlobPattern(generates)) {
+    if (!isGlob) {
         try {
             return fs.statSync(outputPath).isFile()
                 ? [FileSystemUtils.canonicalizeExistingPath(outputPath)]

package/dist/core/completion-tip.js

@@ -22,7 +22,6 @@ import { getGlobalConfigPath } from './global-config.js';
 import { writeFileAtomically } from './file-state.js';
 import { isCiEnvironment } from '../utils/ci.js';
 import { detectShell } from '../utils/shell-detection.js';
-import { CompletionFactory } from './completions/factory.js';
 export const COMPLETION_TIP_MESSAGE = "Tip: Run 'openspec completion install' for shell completions";
 function isSuppressedByEnv() {
     // isCiEnvironment, not a CI==='true' string check: providers set CI to "True",
@@ -54,6 +53,9 @@ async function decideTip() {
         if (!shell) {
             return 'retire';
         }
+        // Loaded only here: every shell's generator and installer, needed only on
+        // the rare run that still owes the tip.
+        const { CompletionFactory } = await import('./completions/factory.js');
         return (await CompletionFactory.createInstaller(shell).isInstalled())
             ? 'retire'
             : 'show';

package/dist/core/completions/completion-provider.js

@@ -1,5 +1,4 @@
 import { getActiveChangeIds, getSpecIds } from '../../utils/item-discovery.js';
-import { listSchemas } from '../artifact-graph/index.js';
 /**
  * Provides dynamic completion suggestions for OpenSpec items (changes and specs).
  * Implements a 2-second cache to avoid excessive file system operations during
@@ -74,7 +73,10 @@ export class CompletionProvider {
         if (this.schemaCache && now - this.schemaCache.timestamp < this.cacheTTL) {
             return this.schemaCache.data;
         }
-        // Fetch fresh data
+        // Fetch fresh data. The resolver (and the yaml and zod it parses schemas
+        // with) loads only here: completing changes or specs never needs it, and
+        // the artifact-graph barrel would also pull in fast-glob.
+        const { listSchemas } = await import('../artifact-graph/resolver.js');
         const schemaNames = listSchemas(this.projectRoot);
         // Update cache
         this.schemaCache = {

package/dist/core/config-schema.d.ts

@@ -10,9 +10,9 @@ export declare const GlobalConfigSchema: z.ZodObject<{
         core: "core";
     }>>>;
     delivery: z.ZodDefault<z.ZodOptional<z.ZodEnum<{
-        commands: "commands";
         both: "both";
         skills: "skills";
+        commands: "commands";
     }>>>;
     workflows: z.ZodOptional<z.ZodArray<z.ZodString>>;
     defaultStore: z.ZodOptional<z.ZodString>;

package/dist/core/parsers/requirement-blocks.d.ts

@@ -70,6 +70,15 @@ export interface OrphanedRequirement {
     section: string | null;
     line: number;
 }
+/**
+ * Authored text archive does not carry into the main spec: a non-delta `## `
+ * section, text above the first `## `, or prose before the first requirement
+ * in ADDED/MODIFIED. `section` is null for text above the first `## `.
+ */
+export interface UnappliedContent {
+    section: string | null;
+    line: number;
+}
 export interface DeltaPlan {
     added: RequirementBlock[];
     modified: RequirementBlock[];
@@ -83,6 +92,7 @@ export interface DeltaPlan {
     unpairedRenames: UnpairedRename[];
     /** Canonical requirement blocks written outside every delta section. */
     orphanedRequirements: OrphanedRequirement[];
+    unappliedContent: UnappliedContent[];
     skippedHeaders: SkippedHeader[];
     sectionPresence: {
         added: boolean;
@@ -95,6 +105,7 @@ export interface DeltaPlan {
  * Parse a delta-formatted spec change file content into a DeltaPlan with raw blocks.
  */
 export declare function parseDeltaSpec(content: string): DeltaPlan;
+export declare function describeUnappliedContent(content: UnappliedContent, sentenceStart?: boolean): string;
 /** Both directions of the scenario-name comparison, plus the two totals. */
 export interface ScenarioNameDiff {
     /** Names the current block has that the incoming block does not cover. */

package/dist/core/parsers/requirement-blocks.js

@@ -136,6 +136,7 @@ export function parseDeltaSpec(content) {
         renamed: renamedPairs,
         unpairedRenames,
         orphanedRequirements: findOrphanedRequirements(lines, fenceMask),
+        unappliedContent: findUnappliedContent(lines, fenceMask),
         skippedHeaders,
         sectionPresence: {
             added: addedLookup.found,
@@ -187,6 +188,62 @@ function findOrphanedRequirements(lines, fenceMask) {
     }
     return orphans;
 }
+export function describeUnappliedContent(content, sentenceStart = false) {
+    const text = content.section === null
+        ? 'text above the first "## " section'
+        : DELTA_SECTION_TITLES.has(content.section.toLowerCase())
+            ? `text before the first requirement in "## ${content.section}"`
+            : `section "## ${content.section}"`;
+    return sentenceStart ? text.charAt(0).toUpperCase() + text.slice(1) : text;
+}
+/**
+ * Where text the merge never reads begins. HTML comments, `# ` titles, Purpose
+ * (warned about separately), REMOVED/RENAMED bodies, and stray `###` headers
+ * before the first requirement (INFO since #498) are not reported.
+ */
+function findUnappliedContent(lines, fenceMask) {
+    // Blank out comments outside fences, keeping line count; an unterminated one
+    // runs to EOF. Comments only decide whether a line holds text: sections come
+    // from the same split the merge reads, where a `## ` line inside a comment is
+    // still a boundary. Fenced lines keep their text, so a `<!--` in a code sample
+    // never hides what follows the fence.
+    const comments = lines
+        .map((line, i) => (fenceMask[i] ? '' : line))
+        .join('\n')
+        .replace(/<!--[\s\S]*?(?:--!?>|$)/g, (m) => m.replace(/[^\n]/g, ' '))
+        .split('\n');
+    const masked = lines.map((line, i) => (fenceMask[i] ? line : comments[i]));
+    const sections = splitTopLevelSections(lines, fenceMask);
+    const firstText = (from, to, skip) => {
+        for (let i = from; i < to; i++)
+            if (masked[i].trim() && !skip?.test(masked[i]))
+                return i;
+        return -1;
+    };
+    const found = [];
+    const preamble = firstText(0, sections.length ? sections[0].body.bodyStartLine - 2 : lines.length, /^#\s/);
+    if (preamble !== -1)
+        found.push({ section: null, line: preamble + 1 });
+    for (const { title, body } of sections) {
+        const folded = title.toLowerCase();
+        const start = body.bodyStartLine - 1;
+        if (folded === 'added requirements' || folded === 'modified requirements') {
+            const block = body.lines.findIndex((l, i) => !body.fenceMask[i] && REQUIREMENT_HEADER_REGEX.test(l));
+            const first = firstText(start, start + (block === -1 ? body.lines.length : block), /^###\s/);
+            if (first !== -1)
+                found.push({ section: title, line: first + 1 });
+        }
+        else if (!DELTA_SECTION_TITLES.has(folded)) {
+            // The Purpose carry-over reads past commented-out headers, so only a
+            // `## Purpose` outside a comment is the one archive handles.
+            if (folded === 'purpose' && masked[start - 1].trim())
+                continue;
+            if (firstText(start, start + body.lines.length) !== -1)
+                found.push({ section: title, line: start });
+        }
+    }
+    return found;
+}
 /**
  * Every `## ` section, as a LIST rather than a title-keyed record.
  *

package/dist/core/specs-apply.js

@@ -8,7 +8,7 @@ import { promises as fs } from 'fs';
 import { randomUUID } from 'crypto';
 import path from 'path';
 import chalk from 'chalk';
-import { extractRequirementsSection, diffScenarioNames, describeScenarioBalance, foldRequirementName, parseDeltaSpec, normalizeRequirementName, } from './parsers/requirement-blocks.js';
+import { extractRequirementsSection, diffScenarioNames, describeScenarioBalance, describeUnappliedContent, foldRequirementName, parseDeltaSpec, normalizeRequirementName, } from './parsers/requirement-blocks.js';
 import { findMainSpecStructureIssues } from './parsers/spec-structure.js';
 import { buildCodeFenceMask } from './parsers/code-fence.js';
 import { MarkdownParser } from './parsers/markdown-parser.js';
@@ -145,6 +145,10 @@ export async function buildUpdatedSpec(update, changeName, options = {}) {
             `which is not a delta section, so it was not applied. ` +
             `Move it under ADDED/MODIFIED/REMOVED/RENAMED Requirements.`);
     }
+    // Archive carries requirement blocks only; name any other text it leaves behind.
+    for (const lost of plan.unappliedContent) {
+        warn(`${specName} - ${describeUnappliedContent(lost)} (line ${lost.line}) is not carried into the main spec.`);
+    }
     // Pre-validate duplicates within sections
     const addedNames = new Set();
     for (const add of plan.added) {

package/dist/core/templates/workflows/apply-change.js

@@ -66,7 +66,7 @@ ${PROJECT_ROOT_GUARD}
    - If \`state: "blocked"\`: show the message and pause implementation.
      - If \`missingArtifacts\` is non-empty: ${BLOCKED_STATE_HANDOFF}
      - Otherwise, follow the CLI instruction to create or repair the schema-configured tracking file from existing planning artifacts. Do not assume another artifact is ready or start implementation while blocked.
-   - If \`state: "all_done"\`: congratulate, suggest archive
+   - If \`state: "all_done"\`: report that all tracked tasks are complete and suggest review or verification as appropriate before archiving
    - Otherwise: proceed to implementation
 
    Treat \`context\` as a required prompt-level input. Read and consider it, and
@@ -125,7 +125,7 @@ ${PROJECT_ROOT_GUARD}
    Display:
    - Tasks completed this session
    - Overall progress: "N/M tasks complete"
-   - If all done: suggest archive
+   - If all done: report that tracked tasks are complete and suggest review or verification as appropriate before archiving
    - If paused: explain why and wait for guidance
 
 **Output During Implementation**
@@ -156,7 +156,8 @@ Working on task 4/7: <task description>
 - [x] Task 2
 ...
 
-All tasks complete! ${ARCHIVE_HANDOFF}
+All tracked tasks are complete. Review or verify the change as appropriate
+before archiving. ${ARCHIVE_HANDOFF}
 \`\`\`
 
 **Output On Pause (Issue Encountered)**

package/dist/core/templates/workflows/continue-change.js

@@ -7,6 +7,15 @@ import { PROJECT_ROOT_GUARD } from './project-root.js';
  * optional-workflow.ts).
  */
 const PLANNING_COMPLETE_HANDOFF = optionalWorkflow('apply', 'You can now implement this change with `/opsx:apply`.', 'You can now implement this change - `openspec instructions apply --change "<name>" --json` returns the tasks and how to work them.') + ' ' + optionalWorkflow('archive', 'Once implementation and any tracked work are complete, archive it with `/opsx:archive`.', 'Once implementation and any tracked work are complete, archive it with `openspec archive "<name>"`.');
+/**
+ * A glob artifact reads `done` once one matching file exists, so a run
+ * interrupted while writing several files leaves it `done` with files missing,
+ * and the next run would move on without reading its instruction again (#2034).
+ */
+const PARTIAL_ARTIFACT_CHECK = `**Before anything else, finish a partly written artifact**:
+   - An artifact whose output is a glob pattern (e.g. \`specs/**/*.md\`) reads \`done\` as soon as one matching file exists, so a run interrupted while writing its files leaves it \`done\` with some still missing
+   - For each such \`done\` artifact, first get its instructions and read any completed dependencies needed to determine the expected files. Then compare those files with \`artifactPaths.<id>.existingOutputPaths\`. For spec-driven's \`specs\`, read the proposal and check for one \`specs/<capability-path>/spec.md\` per capability it lists; resolve each expected path against \`changeRoot\` before comparing path identity
+   - If any are missing, write only the missing files, and STOP - that counts as this invocation's ONE artifact. If you cannot tell whether a file was left out on purpose, ask the user`;
 export function getContinueChangeSkillTemplate() {
     return {
         name: 'openspec-continue-change',
@@ -51,6 +60,10 @@ ${PROJECT_ROOT_GUARD}
 
    ---
 
+   ${PARTIAL_ARTIFACT_CHECK}
+
+   ---
+
    **If all planning artifacts are complete (\`isPlanningComplete: true\`, or legacy \`isComplete: true\`)**:
    - Congratulate the user
    - Show final status including the schema used
@@ -169,6 +182,10 @@ ${PROJECT_ROOT_GUARD}
 
    ---
 
+   ${PARTIAL_ARTIFACT_CHECK}
+
+   ---
+
    **If all planning artifacts are complete (\`isPlanningComplete: true\`, or legacy \`isComplete: true\`)**:
    - Congratulate the user
    - Show final status including the schema used

package/dist/core/templates/workflows/explore.js

@@ -178,6 +178,8 @@ If the user mentions a change or you detect one is relevant:
 
    \`<capability-path>\` is the spec directory relative to \`specs/\` (for example, \`user-auth\` or \`identity/user-auth\`). Preserve an existing capability's full path and follow the project's established organization for new capabilities.
 
+   The files below are the default spec-driven schema's. With another schema, capture each insight in whichever artifact from \`artifactPaths\` fits it, and name that artifact in your offer; never create an artifact the schema does not define.
+
     | Insight Type               | Where to Capture                    |
     |----------------------------|-------------------------------------|
     | New requirement discovered | \`specs/<capability-path>/spec.md\` |
@@ -187,7 +189,7 @@ If the user mentions a change or you detect one is relevant:
     | New work identified        | \`tasks.md\`                        |
     | Assumption invalidated     | Relevant artifact                   |
 
-   Example offers:
+   Example offers (default schema):
    - "That's a design decision. Capture it in design.md?"
    - "This is a new requirement. Add it to specs?"
    - "This changes scope. Update the proposal?"
@@ -316,7 +318,7 @@ You: That changes everything.
 There's no required ending. Discovery might:
 
 - **Flow into a proposal**: "${DISCOVERY_END_HANDOFF}"
-- **Result in artifact updates**: "Updated design.md with these decisions"
+- **Result in artifact updates**: "Updated the design with these decisions"
 - **Just provide clarity**: User has what they need, moves on
 - **Continue later**: "We can pick this up anytime"
 
@@ -511,6 +513,8 @@ If the user mentions a change or you detect one is relevant:
 
    \`<capability-path>\` is the spec directory relative to \`specs/\` (for example, \`user-auth\` or \`identity/user-auth\`). Preserve an existing capability's full path and follow the project's established organization for new capabilities.
 
+   The files below are the default spec-driven schema's. With another schema, capture each insight in whichever artifact from \`artifactPaths\` fits it, and name that artifact in your offer; never create an artifact the schema does not define.
+
     | Insight Type               | Where to Capture                    |
     |----------------------------|-------------------------------------|
     | New requirement discovered | \`specs/<capability-path>/spec.md\` |
@@ -520,7 +524,7 @@ If the user mentions a change or you detect one is relevant:
     | New work identified        | \`tasks.md\`                        |
     | Assumption invalidated     | Relevant artifact                   |
 
-   Example offers:
+   Example offers (default schema):
    - "That's a design decision. Capture it in design.md?"
    - "This is a new requirement. Add it to specs?"
    - "This changes scope. Update the proposal?"
@@ -545,7 +549,7 @@ If the user mentions a change or you detect one is relevant:
 There's no required ending. Discovery might:
 
 - **Flow into a proposal**: "${DISCOVERY_END_HANDOFF}"
-- **Result in artifact updates**: "Updated design.md with these decisions"
+- **Result in artifact updates**: "Updated the design with these decisions"
 - **Just provide clarity**: User has what they need, moves on
 - **Continue later**: "We can pick this up anytime"
 

package/dist/core/templates/workflows/update-change.js

@@ -64,7 +64,7 @@ ${CONTINUE_SCOPE_NOTE}
 
    The artifact ids and paths come from the active schema - do NOT assume them, and do NOT branch on hardcoded artifact names. Custom schemas must work unchanged.
 
-   The files to edit are \`artifactPaths.<id>.existingOutputPaths\` - the concrete files that exist on disk, already glob-expanded for glob artifacts (e.g. \`specs/**/*.md\`). Do NOT write to \`resolvedOutputPath\`: for a glob artifact it is still the glob pattern, not a real file.
+   The files to edit are \`artifactPaths.<id>.existingOutputPaths\` - the concrete files that exist on disk, already glob-expanded for glob artifacts (e.g. \`specs/**/*.md\`), plus any confirmed concrete path allowed under a partly populated glob artifact (step 4). Do NOT write to \`resolvedOutputPath\`: for a glob artifact it is still the glob pattern, not a real file.
 
 3. **Understand the request**
    - If the user asked for a specific revision ("the design now uses X"), that is the starting edit.
@@ -108,7 +108,7 @@ After each invocation, show:
 **Guardrails**
 - Planning artifacts only - NEVER edit implementation code. If the revised plan implies code changes, ${APPLY_GUARDRAIL}.
 - Use the artifact ids and paths reported by \`openspec status\`; never branch on hardcoded artifact names.
-- Edit only the concrete files in \`existingOutputPaths\`; never write to a glob \`resolvedOutputPath\`.
+- Edit only the concrete files in \`existingOutputPaths\`, plus any confirmed concrete path allowed under a partly populated glob artifact (step 4); never write to a glob \`resolvedOutputPath\`.
 - Do not advance the build frontier: if an artifact has empty \`existingOutputPaths\` and status \`ready\` or \`blocked\`, ${CONTINUE_FRONTIER}. Leave \`skipped\` artifacts untouched. The only new-file scope is a confirmed concrete path under a glob artifact whose \`existingOutputPaths\` is non-empty.
 - Confirm every edit with the user before writing.
 - If the request changes the change's *intent* rather than refining it, ${INTENT_CHANGE_GUARDRAIL}.`,
@@ -163,7 +163,7 @@ ${CONTINUE_SCOPE_NOTE}
 
    The artifact ids and paths come from the active schema - do NOT assume them, and do NOT branch on hardcoded artifact names. Custom schemas must work unchanged.
 
-   The files to edit are \`artifactPaths.<id>.existingOutputPaths\` - the concrete files that exist on disk, already glob-expanded for glob artifacts (e.g. \`specs/**/*.md\`). Do NOT write to \`resolvedOutputPath\`: for a glob artifact it is still the glob pattern, not a real file.
+   The files to edit are \`artifactPaths.<id>.existingOutputPaths\` - the concrete files that exist on disk, already glob-expanded for glob artifacts (e.g. \`specs/**/*.md\`), plus any confirmed concrete path allowed under a partly populated glob artifact (step 4). Do NOT write to \`resolvedOutputPath\`: for a glob artifact it is still the glob pattern, not a real file.
 
 3. **Understand the request**
    - If the user asked for a specific revision ("the design now uses X"), that is the starting edit.
@@ -207,7 +207,7 @@ After each invocation, show:
 **Guardrails**
 - Planning artifacts only - NEVER edit implementation code. If the revised plan implies code changes, ${APPLY_GUARDRAIL}.
 - Use the artifact ids and paths reported by \`openspec status\`; never branch on hardcoded artifact names.
-- Edit only the concrete files in \`existingOutputPaths\`; never write to a glob \`resolvedOutputPath\`.
+- Edit only the concrete files in \`existingOutputPaths\`, plus any confirmed concrete path allowed under a partly populated glob artifact (step 4); never write to a glob \`resolvedOutputPath\`.
 - Do not advance the build frontier: if an artifact has empty \`existingOutputPaths\` and status \`ready\` or \`blocked\`, ${CONTINUE_FRONTIER}. Leave \`skipped\` artifacts untouched. The only new-file scope is a confirmed concrete path under a glob artifact whose \`existingOutputPaths\` is non-empty.
 - Confirm every edit with the user before writing.
 - If the request changes the change's *intent* rather than refining it, ${INTENT_CHANGE_GUARDRAIL}.`