specky-sdd 3.7.3 → 3.9.0

package/.apm/skills/specky-spec-engineer/SKILL.md

@@ -0,0 +1,27 @@
+---
+name: specky-spec-engineer
+description: "Use for Phase 2 (Specify): write SPECIFICATION.md with EARS, REQ-IDs, and acceptance criteria. Trigger on sdd_write_spec, sdd_turnkey_spec, sdd_validate_ears, or /specky-specify."
+---
+
+# Phase 2 — Specify
+
+## Prerequisites
+- CONSTITUTION.md and RESEARCH.md exist on `spec/NNN-*`
+
+## Workflow
+1. Read CONSTITUTION.md and RESEARCH.md
+2. Call `sdd_write_spec` or `sdd_turnkey_spec`
+3. Optional: call `sdd_figma_to_spec`
+4. Call `sdd_validate_ears` and fix every failure
+5. Present SPECIFICATION.md for LGTM at the Phase 2 gate
+
+## EARS
+Use the canonical 6 patterns in `../specky-sdd-pipeline/references/ears-notation.md`.
+
+## REQ-ID Format
+`REQ-{DOMAIN}-{NNN}` — unique, uppercase domain, zero-padded sequence.
+
+## Hard Rules
+- Every requirement needs an EARS pattern, REQ-ID, and measurable acceptance criteria
+- Always run `sdd_validate_ears` before presenting
+- Branch must be `spec/NNN-*`

package/.apm/skills/specky-task-planner/SKILL.md

@@ -0,0 +1,20 @@
+---
+name: specky-task-planner
+description: "Use for Phase 5 (Tasks): produce TASKS.md and CHECKLIST.md with dependencies, REQ traceability, and complexity. Trigger on sdd_write_tasks, sdd_checklist, or /specky-tasks."
+---
+
+# Phase 5 — Tasks
+
+## Prerequisites
+- Approved DESIGN.md at the Phase 4 LGTM gate
+
+## Workflow
+1. Read DESIGN.md and SPECIFICATION.md
+2. Call `sdd_write_tasks` to create TASK-NNN items with [P], S/M/L/XL, dependencies, and REQ links
+3. Call `sdd_checklist` for security, testing, and NFR checks
+4. Present TASKS.md and CHECKLIST.md for LGTM at the Phase 5 gate
+
+## Hard Rules
+- Every task traces to at least one REQ-ID
+- Parallel tasks are marked `[P]`
+- Dependencies are explicit

package/.apm/skills/{test-verifier → specky-test-verifier}/SKILL.md

@@ -1,5 +1,5 @@
 ---
-name: test-verifier
+name: specky-test-verifier
 description: "This skill should be used when the user asks to 'verify tests', 'check coverage', 'detect phantom completions', 'check spec drift', or needs guidance on Phase 8 verification. Also trigger on 'sdd test', 'test traceability', 'verification report', or 'gate criteria'."
 ---
 
@@ -214,4 +214,4 @@ Produce standardized verification artifact:
 
 ## Companion Agent
 
-**@test-verifier** — Phase 8 agent that calls these tools in sequence. Load this skill as first step.
+**@specky-test-verifier** — Phase 8 agent that calls these tools in sequence. Load this skill as first step.

package/CHANGELOG.md

@@ -7,6 +7,62 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ## [Unreleased]
 
+## [3.9.0] - 2026-07-09
+
+Cursor-native hook automation, six dedicated phase skills, full `specky doctor` install parity across harnesses, and cross-target instruction isolation fixes.
+
+### Added
+
+- **Cursor-native hook automation.** `specky install --target=cursor` now installs `.cursor/hooks.json` (Cursor schema v1), the `.cursor/hooks/specky-run.sh` stdin adapter, and `.cursor/hooks/scripts/` (16 scripts). Blocking gates (artifact validation, phase gate, security scan, release gate) deny unsafe actions with `failClosed`; advisory gates warn without blocking.
+- **Six dedicated phase companion skills** (14 total): `specky-sdd-init`, `specky-spec-engineer`, `specky-sdd-clarify`, `specky-design-architect`, `specky-task-planner`, and `specky-quality-reviewer`. Each phase agent loads its dedicated skill first; `specky-sdd-pipeline` remains the shared cross-phase overview.
+- **Dedicated Cursor instruction primitive** compiled to `.cursor/rules/specky-sdd.mdc` with `alwaysApply` and a neutral title.
+- **Dedicated Claude instruction primitive** compiled to `.claude/rules/specky-sdd.md` with neutral naming (no Copilot title or `@workspace` references).
+- **Full `specky doctor` install parity** for Cursor (11 checks), Claude (10), Copilot (9), and OpenCode (7): agent/prompt/skill/hook-script counts, rule format, MCP registration, and a cross-target leakage scan.
+- Regression suites: `cursor-target`, `copilot-target`, `claude-target`, and `opencode-target`.
+- APM policy now allows the Cursor-native hook events (`sessionStart`, `beforeSubmitPrompt`, `beforeMCPExecution`, `afterMCPExecution`, `preToolUse`, `postToolUse`, `stop`).
+
+### Changed
+
+- Renamed the hook-manifest generator `scripts/build-claude-hooks.mjs` → `scripts/build-hook-manifests.mjs`; it now emits Claude, Copilot, **and** Cursor manifests from the single `.apm/hooks/sdd-hooks.json` source of truth.
+- `specky compile` is now target-aware: each target renders only its own instruction primitive (with the Copilot primitive as the neutral fallback) instead of concatenating every primitive into each root context file.
+- EARS notation is unified to the canonical six patterns (Ubiquitous, Event-driven, State-driven, Optional, Unwanted, Complex) across the rule, phase agents, and the `specky-sdd-pipeline` skill.
+- All slash-command prompts now carry an `argument-hint`.
+
+### Fixed
+
+- Copilot installs no longer copy the Cursor/Claude instruction primitives into `.github/instructions/` (cross-target leak); only the Copilot instruction is installed and stale primitives are removed.
+- Claude installs no longer receive the Copilot-named rule (`copilot-instructions.md`) or `@workspace`/`applyTo` leakage; the stale file is removed on install.
+- Copilot instruction content: merged the orphaned `## Rule #7`/`## Rule #8` headings back into the Key Rules list and replaced the outdated `@workspace /prompt-name` invocation with `/prompt-name`.
+- Corrected duplicated workflow step numbering in phase agents.
+
+## [3.8.0] - 2026-07-07
+
+Wave 1 multi-harness APM targets (Cursor, OpenCode, Agent Skills) plus a multi-feature phase-advancement fix.
+
+### Added
+
+- Wave 1 APM target support for `cursor`, `opencode`, and `agent-skills`, including target-native compiler registration, install paths, MCP config writers, and regression coverage.
+- `specky install --target=<targets>` as the canonical APM-aligned install selector. The legacy `--ide` flag remains as a deprecated alias for backward compatibility.
+- `specky compile --target=<targets>` for compiling instruction primitives into root context files (`.github/copilot-instructions.md`, `CLAUDE.md`, or `AGENTS.md`).
+- `.markdownlint.json` configuration codifying the repository's Markdown conventions (Keep a Changelog sibling headings, intentional inline HTML in `README.md`) so documentation lint is clean.
+- Regression test verifying that pre-existing Claude hooks in `.claude/settings.json` are removed when Copilot is installed into the same workspace, while non-hook user settings are preserved.
+
+### Changed
+
+- **All APM primitives are now namespaced with a `specky-` prefix** (agents, skills, and hook scripts; prompts already carried the prefix) to avoid collisions with other packages installed in the same workspace. Agent mentions change accordingly (for example `@spec-engineer` is now `@specky-spec-engineer`). The Copilot instruction primitive keeps the reserved `.github/copilot-instructions.md` filename.
+- `specky doctor` now validates installed `targets[]` metadata instead of assuming only Copilot/Claude IDE scopes.
+- Copilot-inclusive installs strip Claude hooks from `.claude/settings.json` even when installing both Copilot and Claude assets, preventing Copilot hook cross-read blocks.
+- APM manifest and policy now use canonical target names and include Cursor/OpenCode target isolation checks.
+
+### Fixed
+
+- Fixed multi-feature phase advancement so artifact validation uses the requested feature number instead of always validating `state.features[0]`.
+- Confirmed existing diagram persistence and REQ-ID test generation regressions remain covered by passing tests.
+
+## [3.7.3] - 2026-07-07
+
+APM governance, primitive lockfiles, and enterprise package validation.
+
 ### Added
 
 - APM governance commands: `specky apm validate`, `specky apm lock`, `specky apm verify-lock`, `specky apm policy`, `specky apm audit`, and `specky apm sbom`.
@@ -481,6 +537,7 @@ default array.
 **Regression test (`tests/integration/status-detection.test.ts`):**
 
 4 new tests covering:
+
 1. Greenfield (no `.specs/`) → features:[] + current_phase:init ✅
 2. Single feature in progress → detected with correct phase/progress ✅
 3. Multiple features → aggregated independently with per-feature state ✅