specky-sdd 3.9.0 → 3.10.1

package/.apm/instructions/cursor-instructions.instructions.md

@@ -2,19 +2,68 @@
 applyTo: '**'
 ---
 
-# Specky SDD - Cursor Instructions
+# Specky SDD — Cursor Instructions
 
-1. EARS notation is mandatory: use the 6 canonical patterns from `.agents/skills/specky-sdd-pipeline/references/ears-notation.md`.
-2. REQ-ID traceability is required on every requirement, task, design decision, and test.
-3. Pipeline artifacts live in `.specs/NNN-feature/`; Phases 0-7 run on `spec/NNN-*` branches from `develop`.
-4. Active pipeline (`.sdd-state.json`) routes through `@specky-orchestrator`; otherwise start with `@specky-onboarding`.
-5. Load the companion SKILL.md before phase work: `.agents/skills/{agent-name}/SKILL.md`.
-6. Cursor MCP is configured in `.cursor/mcp.json` with the `specky` server.
+This project uses Spec-Driven Development (SDD) via the Specky pipeline.
+
+## Key Rules
+
+1. **EARS notation is mandatory.** Every requirement must follow one of the 6 EARS patterns (see `.agents/skills/specky-sdd-pipeline/references/ears-notation.md`).
+2. **REQ-ID traceability is non-negotiable.** Every test, task, and design decision traces to a REQ-ID.
+3. **Model routing matters.** Use a fast model class for lightweight scaffolding (Phase 0, 9), a balanced model class for iterative delivery (Phase 1, 5-7), and a reasoning-focused model class for complex analysis and design (Phase 2-4, 8).
+4. **Never skip hooks.** Blocking hooks (specky-security-scan, specky-release-gate, specky-artifact-validator, specky-phase-gate) must pass before release.
+5. **Artifacts live in `.specs/NNN-feature/`.** CONSTITUTION.md, RESEARCH.md, SPECIFICATION.md, DESIGN.md, TASKS.md, VERIFICATION.md, ANALYSIS.md.
+6. **One branch per spec.** Create `spec/NNN-feature-name` from `develop` for all pipeline work (Phases 0-7). Merge to `develop` after verification, then `stage` for QA, then `main` for production.
+7. **Load companion SKILL.md first.** Every agent reads `.agents/skills/{skill-name}/SKILL.md` as the first workflow step. Phase agents have dedicated skills (specky-sdd-init, specky-spec-engineer, specky-sdd-clarify, specky-design-architect, specky-task-planner, specky-quality-reviewer); shared pipeline context lives in specky-sdd-pipeline.
+8. **Orchestrator is the single entry point.** When `.specs/` exists with an active pipeline (`.sdd-state.json` present), ALL work MUST flow through `@specky-orchestrator`. If unsure where to start, invoke `@specky-onboarding`.
+
+## Available Agents
+
+- @specky-onboarding — Interactive wizard and default entry point
+- @specky-orchestrator — Full pipeline coordinator (all 10 phases)
+- @specky-sdd-init — Initialize pipeline (Phase 0)
+- @specky-requirements-engineer — Produce FRD + NFRD
+- @specky-research-analyst — Technical research (Phase 1)
+- @specky-spec-engineer — Write SPECIFICATION.md with EARS (Phase 2)
+- @specky-sdd-clarify — Resolve ambiguities (Phase 3)
+- @specky-design-architect — Write DESIGN.md + diagrams (Phase 4)
+- @specky-task-planner — Write TASKS.md + CHECKLIST.md (Phase 5)
+- @specky-quality-reviewer — Completeness audit + compliance (Phase 6)
+- @specky-implementer — Implementation scaffolding (Phase 7)
+- @specky-test-verifier — Coverage verification (Phase 8)
+- @specky-release-engineer — Release preparation (Phase 9)
+
+## Available Commands
+
+Use slash commands in Cursor (`/prompt-name`):
+
+**Quick Start:** /specky-onboarding, /specky-orchestrate, /specky-greenfield, /specky-brownfield, /specky-migration, /specky-api
+**Pipeline:** /specky-research, /specky-clarify, /specky-specify, /specky-design, /specky-tasks, /specky-implement, /specky-verify, /specky-release, /specky-deploy
+**Special:** /specky-from-figma, /specky-from-meeting, /specky-check-drift, /specky-resolve-conflict
+**Debug:** /specky-debug-hook, /specky-pipeline-status, /specky-reset-phase
 
 ## Quality Gates
 
-Cursor installs native hooks at `.cursor/hooks.json` and `.cursor/hooks/scripts/` when `dist/cursor-hooks.json` is available. Blocking gates deny unsafe artifact, phase, security, and release actions; advisory gates warn for branch, pipeline, LGTM, drift, and checkpoint workflows.
+Cursor installs native hooks at `.cursor/hooks.json` and `.cursor/hooks/scripts/`:
+
+- **Blocking gates:** specky-artifact-validator, specky-phase-gate, specky-security-scan, specky-release-gate (failClosed)
+- **Advisory gates:** specky-branch-validator, specky-pipeline-guard, specky-lgtm-gate, specky-drift-monitor, specky-auto-checkpoint
+- **LGTM gates:** Phases 2 (Specify), 4 (Design), 5 (Tasks) pause for human review
+- **Server-enforced gates:** Analysis APPROVE is required before implement-phase MCP tools run
+
+If hooks are unavailable, enforce the same gates through MCP tools and agent workflows.
+
+## MCP Server
+
+The specky-sdd MCP server (58 tools) is configured in `.cursor/mcp.json` and runs via npx.
 
-If hooks are unavailable, enforce the same gates through MCP tools, agent workflows, and this rule. Do not claim non-Cursor hook or MCP locations are Cursor runtime paths.
+## EARS Patterns
 
-For the full phase workflow, invoke `/specky-onboarding` or read `.agents/skills/specky-sdd-pipeline/SKILL.md`.
+| Pattern | Format |
+|---------|--------|
+| Ubiquitous | The system shall... |
+| Event-driven | When [event], the system shall... |
+| State-driven | While [state], the system shall... |
+| Optional | Where [condition], the system shall... |
+| Unwanted | If [condition], then the system shall... |
+| Complex | While [state], when [event], the system shall... |

package/.apm/instructions/opencode-instructions.instructions.md

@@ -0,0 +1,45 @@
+---
+applyTo: '**'
+---
+
+# Specky SDD — OpenCode Instructions
+
+This project uses Spec-Driven Development (SDD) via the Specky pipeline.
+
+## Bootstrap
+
+OpenCode requires two steps after install:
+
+1. `specky install --target=opencode` — agents, commands, skills, MCP in `opencode.json`
+2. `specky compile --target=opencode` — writes `AGENTS.md` root context
+
+## Key Rules
+
+1. **EARS notation is mandatory.** Every requirement must follow one of the 6 EARS patterns.
+2. **REQ-ID traceability is non-negotiable.** Every test, task, and design decision traces to a REQ-ID.
+3. **Artifacts live in `.specs/NNN-feature/`.** CONSTITUTION.md, SPECIFICATION.md, DESIGN.md, TASKS.md, ANALYSIS.md, VERIFICATION.md.
+4. **One branch per spec.** Create `spec/NNN-feature-name` from `develop` for pipeline work (Phases 0-7).
+5. **Load companion SKILL.md first.** Read `.agents/skills/{skill-name}/SKILL.md` before phase work.
+6. **Orchestrator is the single entry point.** When `.specs/` has an active pipeline, route work through `@specky-orchestrator` or `/specky-orchestrate`.
+
+## Available Agents
+
+- @specky-onboarding, @specky-orchestrator, @specky-sdd-init, @specky-spec-engineer, @specky-sdd-clarify
+- @specky-design-architect, @specky-task-planner, @specky-quality-reviewer, @specky-implementer
+- @specky-test-verifier, @specky-release-engineer, @specky-research-analyst, @specky-requirements-engineer
+
+## Tool Tokens
+
+OpenCode agents use native tools: `read`, `edit`, `bash`, `fetch`, `agent`, `todo`, and `specky/sdd_*` MCP tools.
+
+## Quality Gates
+
+OpenCode has no native hook runtime. Enforce gates via MCP tools:
+
+- Run `sdd_run_analysis` and obtain APPROVE before implementation tools
+- Use `/specky-pipeline-status` to check phase and gate state
+- LGTM review at Specify, Design, and Tasks phases
+
+## MCP Server
+
+Configured in `opencode.json` under `mcp.specky` — runs via `npx specky-sdd serve`.

package/.apm/skills/specky-sdd-pipeline/SKILL.md

@@ -91,6 +91,14 @@ The pipeline includes 16 automation hooks for customization:
 
 Hooks are configured in `sdd-hooks.json` with PreToolUse and PostToolUse matchers.
 
+## Server-Enforced Analysis Gate (v3.10+)
+
+Once the pipeline reaches **Analyze**, implement/verify/release MCP tools require `gate_decision: APPROVE` from `sdd_run_analysis`. The server blocks tools such as `sdd_implement`, `sdd_generate_iac`, and `sdd_create_pr` centrally via `validateGateForTool` — not only when calling `sdd_advance_phase`.
+
+Rewriting SPECIFICATION.md, DESIGN.md, or TASKS.md invalidates the gate; re-run analysis before implementation.
+
+Phase bookkeeping: write-tools call `ensurePhasesThrough` so skipping `sdd_advance_phase` does not leave orphan phases (e.g. Discover stuck in `in_progress`).
+
 ## Key Artifacts per Phase
 
 - **CONSTITUTION.md** (Phase 0 — Init) — Project charter, scope boundaries, success criteria, stakeholder register

package/CHANGELOG.md

@@ -7,6 +7,65 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ## [Unreleased]
 
+## [3.10.1] - 2026-07-13
+
+Patch release: dual TASKS.md parser (table + checkbox), honest COMPLIANCE/VERIFICATION persistence, Analyze-phase remediation for blocked gates, and generation quality fixes.
+
+### Added
+
+- **Shared `parseTasksFromMarkdown`** (`src/utils/task-parser.ts`) — reads canonical task tables and legacy checkbox lines, merges by task id.
+- **`deriveDesignStubs`** — minimal DESIGN.md section content from SPECIFICATION.md when optional write_design fields are omitted.
+- Regression coverage for table→verify/export round-trip, remediation phase rules, user-story titles, and design stubs.
+
+### Fixed
+
+- **TASKS.md mismatch** — `sdd_verify_tasks`, `sdd_implement`, `sdd_export_work_items`, git progress, and Gantt diagrams no longer fail or return empty results on table-format TASKS.md.
+- **COMPLIANCE.md / VERIFICATION.md** — persisted reports use pre-rendered table rows (no `[TODO:` placeholders).
+- **Analyze dead-end** — `sdd_write_spec` / `sdd_write_design` / `sdd_write_tasks` allowed in Analyze when gate is absent, `BLOCK`, or `CHANGES_NEEDED` (implement remains gated).
+- **User story titles** — use EARS prose instead of the `(event_driven)` heading label.
+- **Spec FN/NFR split** and design stubs derived from requirements in write_spec / write_design / auto-pipeline.
+
+### Changed
+
+- `extractRequirementIds` unified via `id-contracts.ts` in pipeline writers.
+- **Documentation layout** — `GETTING-STARTED.md` and `CONTRIBUTING.md` moved under `docs/`; release notes and audit reports organized into `docs/releases/` and `docs/audits/`; root keeps only essential public files.
+
+## [3.10.0] - 2026-07-13
+
+Pipeline MCP hardening and harness completeness: server-enforced analysis gates, strict phase bookkeeping, and expanded per-target doctor/install coverage.
+
+### Added
+
+- **Central analysis gate enforcement** via `validateGateForTool` in tool-enforcement — implement/verify/release tools require `gate_decision: APPROVE` once the pipeline reaches Analyze.
+- **`ensurePhasesThrough`** closes orphan phase states when write-tools run without intermediate `sdd_advance_phase` calls.
+- **`invalidateGateDecision`** clears stale approvals when SPEC/DESIGN/TASKS are rewritten.
+- **Strict feature resolution** — wrong `feature_number` throws instead of silently falling back to `features[0]`.
+- **OpenCode instruction primitive** (`.apm/instructions/opencode-instructions.instructions.md`) and target-aware `specky compile --target=opencode`.
+- **Expanded Cursor instructions** with full agent/command/gate documentation.
+- **Doctor checks:** Copilot hooks manifest, Claude hooks-in-settings, agent-skills skill count, OpenCode AGENTS.md advisory, improved workspace target inference (Cursor/OpenCode/agent-skills).
+- **Regression tests:** pipeline gate MCP integration, Cursor full install, mcp-writer dual VS Code schema, expanded pipeline-honesty and state-integrity coverage.
+
+### Changed
+
+- **`sdd_write_spec`** persists `discovery_answers` in SPECIFICATION.md, computes real EARS scores, blocks invalid EARS without `force: true`, and reorders phase recording (start-before-write).
+- **`sdd_run_analysis`** marks Analyze completed only on APPROVE; BLOCK/CHANGES_NEEDED leave Analyze in progress.
+- **`sdd_clarify`** no longer auto-completes Clarify — only starts the phase.
+- **`sdd_discover`** completes Discover phase and uses correct MCP `readOnlyHint`.
+- **`sdd_advance_phase`** loads `pipeline.require_lgtm` dynamically; LGTM check runs inside the state-machine lock.
+- **VS Code MCP registration** writes both `servers` and `mcpServers` for legacy compatibility.
+- **Claude/Cursor tool map** includes `MultiEdit` for `workspace.edit` parity with hook permissions.
+- **Doctor default targets** returns empty scope with guidance when no install metadata or signals are found (no more silent claude+copilot default).
+
+### Fixed
+
+- Analysis gate was only enforced on `sdd_advance_phase`, not on downstream implement tools.
+- Phase state could become inconsistent when skipping `advance_phase` between discover and specify.
+- Stale `gate_decision` survived artifact rewrites.
+- Multi-feature silent fallback to the wrong feature directory.
+- Cognitive-debt timing improved via start-before-write phase recording on write tools.
+- Audited public documentation and website assets (carried from unreleased work).
+- Aligned container security claims with the workflow (SBOM always; Cosign optional).
+
 ## [3.9.0] - 2026-07-09
 
 Cursor-native hook automation, six dedicated phase skills, full `specky doctor` install parity across harnesses, and cross-target instruction isolation fixes.

package/README.md

@@ -32,7 +32,7 @@
 
   <p>
     <a href="https://getspecky.ai">Website</a> ·
-    <a href="GETTING-STARTED.md">Getting Started</a> ·
+    <a href="docs/GETTING-STARTED.md">Getting Started</a> ·
     <a href="https://www.npmjs.com/package/specky-sdd">npm</a> ·
     <a href="SECURITY.md">Security</a>
   </p>
@@ -45,7 +45,7 @@
 | **Start** | [What is Specky?](#what-is-specky) | Overview and ecosystem |
 | | [What's Included](#whats-included) | Agents, prompts, skills, hooks, and MCP tools |
 | | [Why Specifications Matter](#why-specifications-matter-in-the-ai-era) | Vibe coding vs deterministic development |
-| | [Getting Started](GETTING-STARTED.md) | Complete educational guide |
+| | [Getting Started](docs/GETTING-STARTED.md) | Complete educational guide |
 | **Use** | [Quick Start](#quick-start) | Install via npm CLI |
 | | [Where Specifications Live](#where-specifications-live) | File structure and naming conventions |
 | | [Input Methods](#input-methods-6-ways-to-start) | 6 ways to feed Specky |
@@ -57,7 +57,7 @@
 | **Enterprise** | [Compliance Frameworks](#compliance-frameworks) | HIPAA, SOC2, GDPR, PCI-DSS, ISO 27001 |
 | | [Enterprise Ready](#enterprise-ready) | Security, audit trail, quality gates |
 | **Platform** | [The SDD Platform](#the-spec-driven-development-platform) | Built on Spec-Kit, everything included |
-| | [Roadmap](#roadmap) | v3.7 current, v3.8+ planned |
+| | [Roadmap](#roadmap) | v3.10 current, v3.11+ planned |
 
 ## What is Specky?
 
@@ -169,7 +169,7 @@ Specky adds a **deterministic engine** between your intent and your code:
 - **Cross-Artifact Analysis**: Automatic alignment checking between spec, design, and tasks. Orphaned requirements are flagged instantly.
 - **MCP-to-MCP Architecture**: Specky outputs structured JSON that your AI client routes to GitHub, Azure DevOps, Jira, Terraform, Figma, and Docker MCP servers. No vendor lock-in.
 
-> **The AI is the operator; Specky is the engine.** The AI's creativity is channeled through a validated pipeline instead of producing unstructured guesswork. For a complete educational walkthrough, see [GETTING-STARTED.md](GETTING-STARTED.md).
+> **The AI is the operator; Specky is the engine.** The AI's creativity is channeled through a validated pipeline instead of producing unstructured guesswork. For a complete educational walkthrough, see [GETTING-STARTED.md](docs/GETTING-STARTED.md).
 
 ### What Makes Specky Different
 
@@ -1218,9 +1218,9 @@ npm run dev
 echo '{"jsonrpc":"2.0","id":1,"method":"initialize","params":{"protocolVersion":"2025-03-26","capabilities":{},"clientInfo":{"name":"test","version":"1.0"}}}' | node dist/index.js 2>/dev/null
 
 # Run the published image from GHCR (multi-arch: linux/amd64 + linux/arm64)
-docker pull ghcr.io/paulasilvatech/specky:latest        # or pin a release: :3.9.0
+docker pull ghcr.io/paulasilvatech/specky:latest        # or pin a release: :3.10.1
 docker run --rm -p 3200:3200 ghcr.io/paulasilvatech/specky:latest
-curl http://localhost:3200/health                       # -> {"status":"ok","version":"3.9.0"}
+curl http://localhost:3200/health                       # -> {"status":"ok","version":"3.10.1"}
 
 # Or build and run locally from source
 docker build -t specky-sdd:dev .
@@ -1235,7 +1235,7 @@ deployments (enterprise profile, token auth, TLS proxy, private packages) see
 
 ## Roadmap
 
-### v3.7 (current)
+### v3.10 (current)
 
 | Capability | Status |
 |------------|--------|
@@ -1262,7 +1262,7 @@ deployments (enterprise profile, token auth, TLS proxy, private packages) see
 | 6 input types (transcript, PDF, DOCX, Figma, codebase, raw text) | Stable |
 | Test generation for 6 frameworks (vitest, jest, playwright, pytest, junit, xunit) | Stable |
 | MCP-to-MCP routing (GitHub, Azure DevOps, Jira, Terraform, Figma, Docker) | Stable |
-| SBOM + cosign signing on Docker image | Stable |
+| CycloneDX SBOM artifact + optional Cosign signing on Docker image | Stable |
 | JSONL audit logger (optional) | Stable |
 | RBAC foundation (opt-in role-based access control) | Stable |
 | Rate limiting for HTTP transport (opt-in) | Stable |
@@ -1270,9 +1270,14 @@ deployments (enterprise profile, token auth, TLS proxy, private packages) see
 | Enterprise profile (`profile: enterprise` — audit/RBAC/rate-limit defaults ON, opt-in) | Stable |
 | Identity-based RBAC over HTTP (`SDD_HTTP_TOKENS_FILE`: token → principal + role) | Stable |
 | Tamper-evident audit trail (HMAC-signed entries, fail-closed mode, `sdd_verify_audit`) | Stable |
-| Server-enforced LGTM gates (opt-in `pipeline.require_lgtm`) | Stable |
+| Server-enforced analysis gate on implement tools | Stable |
+| Strict phase bookkeeping (`ensurePhasesThrough`) | Stable |
+| Stale gate invalidation on artifact rewrite | Stable |
+| Strict multi-feature resolution | Stable |
+| OpenCode two-step bootstrap (`install` + `compile`) | Stable |
+| VS Code MCP dual schema (`servers` + `mcpServers`) | Stable |
 
-### v3.8+ (planned)
+### v3.11+ (planned)
 
 | Feature | Description |
 |---------|-------------|
@@ -1295,13 +1300,15 @@ drop-in GitHub Action that verifies EARS + the quality gate on every PR.
 
 ## Contributing
 
-See [CONTRIBUTING.md](CONTRIBUTING.md) for architecture details and how to add tools, templates, or services.
+See [CONTRIBUTING.md](docs/CONTRIBUTING.md) for architecture details and how to add tools, templates, or services.
 
 ## Links
 
+- [docs/README.md](docs/README.md): Documentation index
+- [docs/GETTING-STARTED.md](docs/GETTING-STARTED.md): Complete educational guide
 - [CHANGELOG.md](CHANGELOG.md): Version history and release notes
 - [SECURITY.md](SECURITY.md): Vulnerability disclosure policy and OWASP Top 10 coverage
-- [CONTRIBUTING.md](CONTRIBUTING.md): How to add tools, templates, or services
+- [docs/CONTRIBUTING.md](docs/CONTRIBUTING.md): How to add tools, templates, or services
 - [Spec-Kit](https://github.com/paulasilvatech/spec-kit): The SDD methodology foundation
 - [npm package](https://www.npmjs.com/package/specky-sdd): `specky-sdd` on npm
 

package/apm.lock.yaml

@@ -2,7 +2,7 @@
 schemaVersion: 1
 package:
   name: specky-sdd
-  version: 3.9.0
+  version: 3.10.1
 primitives:
   .apm/agents/specky-design-architect.agent.md: sha256:a9411a98bd2fe4c4aa1e6eab66e84eaf9a010897d408e1737a279fe58f7023b2
   .apm/agents/specky-implementer.agent.md: sha256:76c546fe70fe3f5399ba25f0e6de3d9b280880fe7c12d88f093cee55c0b02ece
@@ -37,7 +37,8 @@ primitives:
   .apm/hooks/specky-run.sh: sha256:0cb829414419cc05d5a592df130630045ef94d319f292815203b378b571bd721
   .apm/instructions/claude-instructions.instructions.md: sha256:9b3b77bb220950b3d087b0d5b5999bc60aa4a6d7a07b87fff914e4c1aa872982
   .apm/instructions/copilot-instructions.instructions.md: sha256:9acf227bde8f64f18b15c174171fa148f6d08dec48f163ad4524da77b4a0c93c
-  .apm/instructions/cursor-instructions.instructions.md: sha256:f78a40113030173b91f36723a0b1f86ae5fdf93c19550d3cc0f0520b8f78f4e2
+  .apm/instructions/cursor-instructions.instructions.md: sha256:ee58c87b29de0c58f373834ebee31c469943821f655153febec6bd1f6c649051
+  .apm/instructions/opencode-instructions.instructions.md: sha256:a93d80cef598d99ea4d5116aa64c1e5c8c392316dea31b0448975677a9aac450
   .apm/prompts/specky-api.prompt.md: sha256:4a13ba39ba58773cbb0bf39c12e462a80d2348aa5fdc4ce612f924658f00c7ed
   .apm/prompts/specky-brownfield.prompt.md: sha256:0f66839cc82434fead66a7dd5e26934f385afc95a3537b414471f3603b31b4ec
   .apm/prompts/specky-check-drift.prompt.md: sha256:f3a04b00ef10167cbd1cdcf63f8b8595d3bc8196d107b48963f8b123f711f3af
@@ -72,9 +73,9 @@ primitives:
   .apm/skills/specky-sdd-markdown-standard/SKILL.md: sha256:ca74b956fa30cc40f2223e6692797f3d7048ddf5b3e082835476fa3e0de1af66
   .apm/skills/specky-sdd-pipeline/references/ears-notation.md: sha256:580dc051802750904ef409b9f89873ad250326bc17c992bd53366b3b1a04f1c5
   .apm/skills/specky-sdd-pipeline/references/model-routing.md: sha256:6ca9bd5cde2a8d227c795d37c4d43b712dd183c10d5d87b987514b494f7c28f3
-  .apm/skills/specky-sdd-pipeline/SKILL.md: sha256:1d3eeeb14120ee9a4f8424f4ac013d3a74f4be249891203960195578a8b0309f
+  .apm/skills/specky-sdd-pipeline/SKILL.md: sha256:a056e76afcc13964ace69f5fdca001d02870c83e171286b0763919048bbd1027
   .apm/skills/specky-spec-engineer/SKILL.md: sha256:b5722dacc513a69b54a2d474e1dfa4a25029c5f6f2a930fae3b0ed8f3c9eb49e
   .apm/skills/specky-task-planner/SKILL.md: sha256:bf391eaa0541ae507f99eacd18a8747b597bcde4ff84d9a389fdc4aad5e76ed7
   .apm/skills/specky-test-verifier/SKILL.md: sha256:7e663a68f597f409a7209e07830b90b467052583bde8557eed389848baaa8609
   apm-policy.yml: sha256:421910c17b1a7431f1336d8374538c111245c0c1de58adc6d8eddc185010a639
-  apm.yml: sha256:7b0da15a6684b1494d2061ed1c648fdbf1347131e6e63c5812081092378bbc17
+  apm.yml: sha256:faaad94df10783caf1226b684caac659685a418e70e3f4172610bdbfc89cdb5e

package/apm.yml

@@ -1,5 +1,5 @@
 name: specky-sdd
-version: 3.9.0
+version: 3.10.1
 description: "Agentic Spec-Driven Development — 10-phase pipeline with 58 MCP tools, 13 agents, 22 prompts, 14 skills, 16 hooks, EARS notation, model routing, and enterprise security"
 author: Paula Silva
 license: MIT

package/config.yml

@@ -1,5 +1,5 @@
 audit_enabled: true
-version: "3.9.0"
+version: "3.10.1"
 pipeline:
   phases: [0, 1, 2, 3, 4, 5, 6, 7, 8, 9]
   phase_names:

package/dist/cli/commands/compile.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"compile.d.ts","sourceRoot":"","sources":["../../../src/cli/commands/compile.ts"],"names":[],"mappings":"AASA,MAAM,WAAW,cAAc;IAC3B,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,OAAO,CAAC;IAChB,SAAS,CAAC,EAAE,MAAM,CAAC;CACtB;AAyFD,wBAAsB,UAAU,CAAC,IAAI,EAAE,cAAc,GAAG,OAAO,CAAC,MAAM,CAAC,CAsCtE"}
+{"version":3,"file":"compile.d.ts","sourceRoot":"","sources":["../../../src/cli/commands/compile.ts"],"names":[],"mappings":"AASA,MAAM,WAAW,cAAc;IAC3B,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,OAAO,CAAC;IAChB,SAAS,CAAC,EAAE,MAAM,CAAC;CACtB;AA0FD,wBAAsB,UAAU,CAAC,IAAI,EAAE,cAAc,GAAG,OAAO,CAAC,MAAM,CAAC,CAsCtE"}

package/dist/cli/commands/compile.js

@@ -45,8 +45,9 @@ function instructionFileForTarget(target) {
         case "claude":
             return "claude-instructions.instructions.md";
         case "cursor":
-        case "opencode":
             return "cursor-instructions.instructions.md";
+        case "opencode":
+            return "opencode-instructions.instructions.md";
         default:
             return "copilot-instructions.instructions.md";
     }

package/dist/cli/commands/compile.js.map

@@ -1 +1 @@
-{"version":3,"file":"compile.js","sourceRoot":"","sources":["../../../src/cli/commands/compile.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,WAAW,EAAE,YAAY,EAAE,QAAQ,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AACpG,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAC7C,OAAO,EAAE,WAAW,EAAE,iBAAiB,EAAsB,MAAM,yBAAyB,CAAC;AAC7F,OAAO,EAAE,WAAW,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAC;AAQ3D,MAAM,cAAc,GAAmD;IACnE,gBAAgB,EAAE,SAAS;IAC3B,MAAM,EAAE,SAAS;IACjB,aAAa,EAAE,QAAQ;IACvB,IAAI,EAAE,MAAM;IACZ,GAAG,EAAE,KAAK;CACb,CAAC;AAEF,SAAS,aAAa,CAAC,OAAwB;IAC3C,OAAO,CAAC,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC;AACjC,CAAC;AAED,SAAS,gBAAgB,CAAC,KAAa;IACnC,MAAM,UAAU,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAC9C,MAAM,OAAO,GAAG,cAAc,CAAC,UAAU,CAAC,IAAI,UAAU,CAAC;IACzD,IAAI,OAAO,KAAK,MAAM;QAAE,OAAO,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC;IACrD,IAAI,OAAO,KAAK,KAAK;QAAE,OAAO,iBAAiB,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,KAAK,cAAc,CAAC,CAAC;IAC9F,IAAI,iBAAiB,CAAC,QAAQ,CAAC,OAAwB,CAAC;QAAE,OAAO,CAAC,OAAwB,CAAC,CAAC;IAC5F,MAAM,IAAI,KAAK,CACX,oCAAoC,KAAK,yBAAyB,iBAAiB,CAAC,IAAI,CAAC,IAAI,CAAC,aAAa,CAC9G,CAAC;AACN,CAAC;AAED,SAAS,cAAc,CAAC,MAAe;IACnC,IAAI,CAAC,MAAM,IAAI,MAAM,KAAK,MAAM;QAAE,OAAO,CAAC,SAAS,CAAC,CAAC;IACrD,OAAO,aAAa,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC,CAAC;AACtE,CAAC;AAED,SAAS,gBAAgB,CAAC,OAAe;IACrC,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,OAAO,CAAC;QAAE,OAAO,OAAO,CAAC;IACjD,MAAM,GAAG,GAAG,OAAO,CAAC,OAAO,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC;IAC1C,IAAI,GAAG,GAAG,CAAC;QAAE,OAAO,OAAO,CAAC;IAC5B,OAAO,OAAO,CAAC,KAAK,CAAC,GAAG,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC,SAAS,EAAE,CAAC;AAC7D,CAAC;AAED,SAAS,wBAAwB,CAAC,MAAqB;IACnD,QAAQ,MAAM,EAAE,CAAC;QACb,KAAK,QAAQ;YACT,OAAO,qCAAqC,CAAC;QACjD,KAAK,QAAQ,CAAC;QACd,KAAK,UAAU;YACX,OAAO,qCAAqC,CAAC;QACjD;YACI,OAAO,sCAAsC,CAAC;IACtD,CAAC;AACL,CAAC;AAED;;;;GAIG;AACH,SAAS,wBAAwB,CAAC,eAAuB,EAAE,MAAqB;IAC5E,IAAI,CAAC,UAAU,CAAC,eAAe,CAAC;QAAE,OAAO,IAAI,CAAC;IAC9C,MAAM,UAAU,GAAG;QACf,wBAAwB,CAAC,MAAM,CAAC;QAChC,sCAAsC;KACzC,CAAC;IACF,KAAK,MAAM,SAAS,IAAI,UAAU,EAAE,CAAC;QACjC,MAAM,IAAI,GAAG,OAAO,CAAC,eAAe,EAAE,SAAS,CAAC,CAAC;QACjD,IAAI,UAAU,CAAC,IAAI,CAAC,IAAI,QAAQ,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC;YAC9C,OAAO,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QACtC,CAAC;IACL,CAAC;IACD,OAAO,IAAI,CAAC;AAChB,CAAC;AAED,SAAS,mBAAmB,CAAC,SAAiB,EAAE,MAAqB;IACjE,QAAQ,MAAM,EAAE,CAAC;QACb,KAAK,SAAS;YACV,OAAO,OAAO,CAAC,SAAS,EAAE,iCAAiC,CAAC,CAAC;QACjE,KAAK,QAAQ;YACT,OAAO,OAAO,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC;QAC3C,KAAK,QAAQ,CAAC;QACd,KAAK,UAAU;YACX,OAAO,OAAO,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC;QAC3C,KAAK,cAAc;YACf,OAAO,IAAI,CAAC;IACpB,CAAC;AACL,CAAC;AAED,SAAS,aAAa,CAAC,IAAY,EAAE,OAAe,EAAE,MAAe;IACjE,IAAI,MAAM;QAAE,OAAO;IACnB,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC9C,aAAa,CAAC,IAAI,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC;AACzC,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,IAAoB;IACjD,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC;IAClD,MAAM,GAAG,GAAG,WAAW,EAAE,CAAC;IAC1B,MAAM,GAAG,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC;IAC7B,MAAM,OAAO,GAAG,cAAc,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAE5C,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,eAAe,CAAC,IAAI,WAAW,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACpF,OAAO,CAAC,KAAK,CAAC,uDAAuD,GAAG,CAAC,eAAe,EAAE,CAAC,CAAC;QAC5F,OAAO,CAAC,CAAC;IACb,CAAC;IAED,MAAM,OAAO,GAAG,IAAI,GAAG,EAAU,CAAC;IAClC,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;QAC3B,MAAM,GAAG,GAAG,mBAAmB,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;QACnD,IAAI,CAAC,GAAG,EAAE,CAAC;YACP,OAAO,CAAC,GAAG,CAAC,oBAAoB,MAAM,0BAA0B,CAAC,CAAC;YAClE,SAAS;QACb,CAAC;QACD,IAAI,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;YACnB,OAAO,CAAC,GAAG,CAAC,oBAAoB,MAAM,wBAAwB,GAAG,EAAE,CAAC,CAAC;YACrE,SAAS;QACb,CAAC;QAED,MAAM,OAAO,GAAG,wBAAwB,CAAC,GAAG,CAAC,eAAe,EAAE,MAAM,CAAC,CAAC;QACtE,IAAI,CAAC,OAAO,EAAE,CAAC;YACX,OAAO,CAAC,KAAK,CAAC,oBAAoB,MAAM,kCAAkC,CAAC,CAAC;YAC5E,SAAS;QACb,CAAC;QAED,MAAM,QAAQ,GAAG,WAAW,CAAC,MAAM,CAAC,CAAC;QACrC,MAAM,IAAI,GAAG,gBAAgB,CAAC,QAAQ,CAAC,kBAAkB,CAAC,OAAO,CAAC,CAAC,CAAC;QACpE,MAAM,QAAQ,GAAG,8DAA8D,IAAI,EAAE,CAAC;QACtF,aAAa,CAAC,GAAG,EAAE,QAAQ,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;QAC1C,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACjB,OAAO,CAAC,GAAG,CAAC,oBAAoB,MAAM,KAAK,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,OAAO,IAAI,GAAG,EAAE,CAAC,CAAC;IAC/F,CAAC;IAED,OAAO,CAAC,CAAC;AACb,CAAC"}
+{"version":3,"file":"compile.js","sourceRoot":"","sources":["../../../src/cli/commands/compile.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,WAAW,EAAE,YAAY,EAAE,QAAQ,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AACpG,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAC7C,OAAO,EAAE,WAAW,EAAE,iBAAiB,EAAsB,MAAM,yBAAyB,CAAC;AAC7F,OAAO,EAAE,WAAW,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAC;AAQ3D,MAAM,cAAc,GAAmD;IACnE,gBAAgB,EAAE,SAAS;IAC3B,MAAM,EAAE,SAAS;IACjB,aAAa,EAAE,QAAQ;IACvB,IAAI,EAAE,MAAM;IACZ,GAAG,EAAE,KAAK;CACb,CAAC;AAEF,SAAS,aAAa,CAAC,OAAwB;IAC3C,OAAO,CAAC,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC;AACjC,CAAC;AAED,SAAS,gBAAgB,CAAC,KAAa;IACnC,MAAM,UAAU,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAC9C,MAAM,OAAO,GAAG,cAAc,CAAC,UAAU,CAAC,IAAI,UAAU,CAAC;IACzD,IAAI,OAAO,KAAK,MAAM;QAAE,OAAO,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC;IACrD,IAAI,OAAO,KAAK,KAAK;QAAE,OAAO,iBAAiB,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,KAAK,cAAc,CAAC,CAAC;IAC9F,IAAI,iBAAiB,CAAC,QAAQ,CAAC,OAAwB,CAAC;QAAE,OAAO,CAAC,OAAwB,CAAC,CAAC;IAC5F,MAAM,IAAI,KAAK,CACX,oCAAoC,KAAK,yBAAyB,iBAAiB,CAAC,IAAI,CAAC,IAAI,CAAC,aAAa,CAC9G,CAAC;AACN,CAAC;AAED,SAAS,cAAc,CAAC,MAAe;IACnC,IAAI,CAAC,MAAM,IAAI,MAAM,KAAK,MAAM;QAAE,OAAO,CAAC,SAAS,CAAC,CAAC;IACrD,OAAO,aAAa,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC,CAAC;AACtE,CAAC;AAED,SAAS,gBAAgB,CAAC,OAAe;IACrC,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,OAAO,CAAC;QAAE,OAAO,OAAO,CAAC;IACjD,MAAM,GAAG,GAAG,OAAO,CAAC,OAAO,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC;IAC1C,IAAI,GAAG,GAAG,CAAC;QAAE,OAAO,OAAO,CAAC;IAC5B,OAAO,OAAO,CAAC,KAAK,CAAC,GAAG,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC,SAAS,EAAE,CAAC;AAC7D,CAAC;AAED,SAAS,wBAAwB,CAAC,MAAqB;IACnD,QAAQ,MAAM,EAAE,CAAC;QACb,KAAK,QAAQ;YACT,OAAO,qCAAqC,CAAC;QACjD,KAAK,QAAQ;YACT,OAAO,qCAAqC,CAAC;QACjD,KAAK,UAAU;YACX,OAAO,uCAAuC,CAAC;QACnD;YACI,OAAO,sCAAsC,CAAC;IACtD,CAAC;AACL,CAAC;AAED;;;;GAIG;AACH,SAAS,wBAAwB,CAAC,eAAuB,EAAE,MAAqB;IAC5E,IAAI,CAAC,UAAU,CAAC,eAAe,CAAC;QAAE,OAAO,IAAI,CAAC;IAC9C,MAAM,UAAU,GAAG;QACf,wBAAwB,CAAC,MAAM,CAAC;QAChC,sCAAsC;KACzC,CAAC;IACF,KAAK,MAAM,SAAS,IAAI,UAAU,EAAE,CAAC;QACjC,MAAM,IAAI,GAAG,OAAO,CAAC,eAAe,EAAE,SAAS,CAAC,CAAC;QACjD,IAAI,UAAU,CAAC,IAAI,CAAC,IAAI,QAAQ,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC;YAC9C,OAAO,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QACtC,CAAC;IACL,CAAC;IACD,OAAO,IAAI,CAAC;AAChB,CAAC;AAED,SAAS,mBAAmB,CAAC,SAAiB,EAAE,MAAqB;IACjE,QAAQ,MAAM,EAAE,CAAC;QACb,KAAK,SAAS;YACV,OAAO,OAAO,CAAC,SAAS,EAAE,iCAAiC,CAAC,CAAC;QACjE,KAAK,QAAQ;YACT,OAAO,OAAO,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC;QAC3C,KAAK,QAAQ,CAAC;QACd,KAAK,UAAU;YACX,OAAO,OAAO,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC;QAC3C,KAAK,cAAc;YACf,OAAO,IAAI,CAAC;IACpB,CAAC;AACL,CAAC;AAED,SAAS,aAAa,CAAC,IAAY,EAAE,OAAe,EAAE,MAAe;IACjE,IAAI,MAAM;QAAE,OAAO;IACnB,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC9C,aAAa,CAAC,IAAI,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC;AACzC,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,IAAoB;IACjD,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC;IAClD,MAAM,GAAG,GAAG,WAAW,EAAE,CAAC;IAC1B,MAAM,GAAG,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC;IAC7B,MAAM,OAAO,GAAG,cAAc,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAE5C,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,eAAe,CAAC,IAAI,WAAW,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACpF,OAAO,CAAC,KAAK,CAAC,uDAAuD,GAAG,CAAC,eAAe,EAAE,CAAC,CAAC;QAC5F,OAAO,CAAC,CAAC;IACb,CAAC;IAED,MAAM,OAAO,GAAG,IAAI,GAAG,EAAU,CAAC;IAClC,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;QAC3B,MAAM,GAAG,GAAG,mBAAmB,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;QACnD,IAAI,CAAC,GAAG,EAAE,CAAC;YACP,OAAO,CAAC,GAAG,CAAC,oBAAoB,MAAM,0BAA0B,CAAC,CAAC;YAClE,SAAS;QACb,CAAC;QACD,IAAI,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;YACnB,OAAO,CAAC,GAAG,CAAC,oBAAoB,MAAM,wBAAwB,GAAG,EAAE,CAAC,CAAC;YACrE,SAAS;QACb,CAAC;QAED,MAAM,OAAO,GAAG,wBAAwB,CAAC,GAAG,CAAC,eAAe,EAAE,MAAM,CAAC,CAAC;QACtE,IAAI,CAAC,OAAO,EAAE,CAAC;YACX,OAAO,CAAC,KAAK,CAAC,oBAAoB,MAAM,kCAAkC,CAAC,CAAC;YAC5E,SAAS;QACb,CAAC;QAED,MAAM,QAAQ,GAAG,WAAW,CAAC,MAAM,CAAC,CAAC;QACrC,MAAM,IAAI,GAAG,gBAAgB,CAAC,QAAQ,CAAC,kBAAkB,CAAC,OAAO,CAAC,CAAC,CAAC;QACpE,MAAM,QAAQ,GAAG,8DAA8D,IAAI,EAAE,CAAC;QACtF,aAAa,CAAC,GAAG,EAAE,QAAQ,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;QAC1C,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACjB,OAAO,CAAC,GAAG,CAAC,oBAAoB,MAAM,KAAK,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,OAAO,IAAI,GAAG,EAAE,CAAC,CAAC;IAC/F,CAAC;IAED,OAAO,CAAC,CAAC;AACb,CAAC"}

package/dist/cli/commands/doctor.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"doctor.d.ts","sourceRoot":"","sources":["../../../src/cli/commands/doctor.ts"],"names":[],"mappings":"AAmBA,MAAM,WAAW,aAAa;IAC5B,GAAG,EAAE,OAAO,CAAC;IACb,OAAO,EAAE,OAAO,CAAC;IACjB,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAwXD,wBAAsB,SAAS,CAAC,IAAI,EAAE,aAAa,GAAG,OAAO,CAAC,MAAM,CAAC,CAkEpE"}
+{"version":3,"file":"doctor.d.ts","sourceRoot":"","sources":["../../../src/cli/commands/doctor.ts"],"names":[],"mappings":"AAmBA,MAAM,WAAW,aAAa;IAC5B,GAAG,EAAE,OAAO,CAAC;IACb,OAAO,EAAE,OAAO,CAAC;IACjB,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAwdD,wBAAsB,SAAS,CAAC,IAAI,EAAE,aAAa,GAAG,OAAO,CAAC,MAAM,CAAC,CAkEpE"}

package/dist/cli/commands/doctor.js

@@ -149,12 +149,14 @@ function checkCursorRule(targets) {
     const ruleLines = text.trimEnd().split(/\r?\n/);
     const hasDescription = ruleLines.some((line) => line.startsWith("description:") && line.trim() !== "description:");
     const hasAlwaysApply = ruleLines.some((line) => line.trim() === "alwaysApply: true");
-    const lines = ruleLines.length;
-    const ok = hasDescription && hasAlwaysApply && lines <= 40;
+    const hasSpeckyTitle = text.includes("Specky SDD");
+    const noWorkspaceLeak = !text.includes("@workspace");
+    const ok = hasDescription && hasAlwaysApply && hasSpeckyTitle && noWorkspaceLeak;
     const details = [
         hasDescription ? "description" : "missing description",
         hasAlwaysApply ? "alwaysApply" : "missing alwaysApply",
-        `${lines} lines`,
+        hasSpeckyTitle ? "specky-sdd" : "missing title",
+        noWorkspaceLeak ? "no @workspace" : "has @workspace leak",
     ];
     return { name: "Cursor rule", pass: ok, detail: details.join(", ") };
 }
@@ -173,6 +175,78 @@ function checkNoCopilotLeak(root, workspace, label) {
         detail: hits.length === 0 ? "no Copilot/.vscode tokens" : hits.slice(0, 3).join(", "),
     };
 }
+function checkCopilotHooksManifest(targets) {
+    const manifest = readJsonSafe(targets.copilot.hooksManifest);
+    if (!manifest) {
+        return { name: "Copilot hooks manifest", pass: false, detail: "sdd-hooks.json missing" };
+    }
+    const serialized = JSON.stringify(manifest);
+    const hasSddMatcher = serialized.includes("sdd_");
+    return {
+        name: "Copilot hooks manifest",
+        pass: hasSddMatcher,
+        detail: hasSddMatcher ? "sdd-hooks.json with sdd_* matchers" : "no sdd_* matchers in manifest",
+    };
+}
+function checkClaudeHooksInSettings(targets, installTargets) {
+    if (installTargets.includes("copilot")) {
+        return {
+            name: "Claude hooks in settings",
+            pass: true,
+            detail: "intentionally omitted (Copilot co-install strips .claude hooks)",
+        };
+    }
+    const settings = readJsonSafe(targets.claude.settingsJson);
+    if (!settings?.hooks) {
+        return { name: "Claude hooks in settings", pass: false, detail: "no hooks key in .claude/settings.json" };
+    }
+    const serialized = JSON.stringify(settings.hooks);
+    const hasSpecky = serialized.includes("specky");
+    const hasLifecycle = serialized.includes("PreToolUse") || serialized.includes("preToolUse");
+    return {
+        name: "Claude hooks in settings",
+        pass: hasSpecky && hasLifecycle,
+        detail: hasSpecky && hasLifecycle ? "Specky hooks registered" : "Specky hooks missing from settings",
+    };
+}
+function checkAgentsMd(workspace) {
+    const path = resolve(workspace, "AGENTS.md");
+    if (!existsSync(path)) {
+        return {
+            name: "AGENTS.md context",
+            pass: true,
+            detail: "recommended: run specky compile --target=opencode",
+        };
+    }
+    const text = readFileSync(path, "utf8");
+    const ok = text.includes("Specky SDD");
+    return {
+        name: "AGENTS.md context",
+        pass: ok,
+        detail: ok ? "contains Specky SDD guidance" : "missing Specky SDD section",
+    };
+}
+function detectWorkspaceHarnessTargets(workspace) {
+    const found = [];
+    if (existsSync(resolve(workspace, ".cursor/mcp.json")) || existsSync(resolve(workspace, ".cursor/rules"))) {
+        found.push("cursor");
+    }
+    if (existsSync(resolve(workspace, "opencode.json"))) {
+        found.push("opencode");
+    }
+    if (existsSync(resolve(workspace, ".agents/skills"))) {
+        const skills = readdirSync(resolve(workspace, ".agents/skills"));
+        if (skills.some((name) => name.startsWith("specky-"))) {
+            found.push("agent-skills");
+        }
+    }
+    const detected = detectIde(workspace);
+    if (detected.claudeCode)
+        found.push("claude");
+    if (detected.copilot)
+        found.push("copilot");
+    return [...new Set(found)];
+}
 function checkCursorHooksManifest(targets) {
     const manifest = readJsonSafe(targets.cursor.hooksManifest);
     if (!manifest) {
@@ -207,9 +281,10 @@ function checkCopilotInstall(targets, workspace) {
         checkFileCount(targets.copilot.skills, 14, "Copilot skills", (name, path) => name.startsWith("specky-") && statSync(path).isDirectory()),
         checkFileExists(resolve(targets.copilot.instructions, "copilot-instructions.instructions.md"), "Copilot instruction"),
         checkFileCount(targets.copilot.hooksScripts, 16, "Copilot hook scripts", (name) => name.endsWith(".sh") || name.endsWith(".mjs")),
+        checkCopilotHooksManifest(targets),
     ];
 }
-function checkClaudeInstall(targets, workspace) {
+function checkClaudeInstall(targets, workspace, installTargets) {
     return [
         checkMcpRegistration(targets.shared.claudeMcp, ".mcp.json"),
         checkClaudePermissions(targets),
@@ -219,6 +294,7 @@ function checkClaudeInstall(targets, workspace) {
         checkFileExists(resolve(targets.claude.rules, "specky-sdd.md"), "Claude rule"),
         checkNoCopilotLeak(targets.claude.root, workspace, "Claude leakage"),
         checkFileCount(targets.claude.hooksScripts, 16, "Claude hook scripts", (name) => name.endsWith(".sh") || name.endsWith(".mjs")),
+        checkClaudeHooksInSettings(targets, installTargets),
     ];
 }
 function checkOpenCodeInstall(targets, workspace) {
@@ -228,6 +304,7 @@ function checkOpenCodeInstall(targets, workspace) {
         checkFileCount(targets.opencode.commands, 22, "OpenCode commands", (name) => name.startsWith("specky-") && name.endsWith(".md")),
         checkFileCount(targets.shared.agentSkills, 14, "OpenCode skills", (name, path) => name.startsWith("specky-") && statSync(path).isDirectory()),
         checkNoCopilotLeak(targets.opencode.root, workspace, "OpenCode leakage"),
+        checkAgentsMd(workspace),
     ];
 }
 function loadInstallMeta(path) {
@@ -256,23 +333,24 @@ function resolveInstalledTargets(installMeta, workspace) {
         };
     }
     const detected = detectIde(workspace);
-    if (detected.signals.length > 0) {
+    const harnessTargets = detectWorkspaceHarnessTargets(workspace);
+    if (harnessTargets.length > 0) {
         return {
-            targets: targetsFromIde(detected.recommendation),
+            targets: harnessTargets,
             source: "workspace-signals",
-            detail: `inferred from workspace signals: ${detected.signals.join(", ")}`,
+            detail: `inferred from workspace signals: ${detected.signals.join(", ") || harnessTargets.join(", ")}`,
         };
     }
     return {
-        targets: ["claude", "copilot"],
+        targets: [],
         source: "default",
-        detail: "no install metadata or IDE signals found; validating shared defaults only",
+        detail: "no install metadata or IDE signals found; run specky install --target=<harness>",
     };
 }
 function runConfigChecks(targets, workspace, installTargets) {
     const checks = [];
     if (installTargets.includes("claude")) {
-        checks.push(...checkClaudeInstall(targets, workspace));
+        checks.push(...checkClaudeInstall(targets, workspace, installTargets));
     }
     if (installTargets.includes("copilot")) {
         checks.push(...checkCopilotInstall(targets, workspace));
@@ -283,6 +361,9 @@ function runConfigChecks(targets, workspace, installTargets) {
     if (installTargets.includes("opencode")) {
         checks.push(...checkOpenCodeInstall(targets, workspace));
     }
+    if (installTargets.includes("agent-skills")) {
+        checks.push(checkFileCount(targets.shared.agentSkills, 14, "Agent skills bundle", (name, path) => name.startsWith("specky-") && statSync(path).isDirectory()));
+    }
     return checks;
 }
 function printIntegrity(report, verbose) {