specrails-core 6.6.4 → 6.6.5

package/dist/agent-runtime/graph/archive-preflight.d.ts

@@ -1,29 +1,14 @@
-export interface ArchiveRequirementFinding {
-    path: string;
-    line: number;
-    requirement: string;
-}
 export type ArchivePreflight = {
     valid: true;
 } | {
     valid: false;
     reason: string;
-    findings: ArchiveRequirementFinding[];
 };
-/**
- * Requirements OpenSpec rejects when it rebuilds a main spec on archive: its spec parser reads only
- * the first non-empty body line before any heading and needs SHALL or MUST there. Delta validation
- * skips `**Key**:` metadata lines, so a delta (or a pre-existing main-spec requirement) can pass
- * `openspec validate` and still abort the archive.
- */
-export declare function requirementsWithoutKeyword(markdown: string): Array<{
-    line: number;
-    requirement: string;
-}>;
 /**
  * Dry-runs `openspec archive` on a disposable copy of `openspec/`, so a change that validates but
- * cannot be archived is caught while its author can still edit the plan. Nothing in the
- * artifact root is written.
+ * cannot be archived is caught while its author can still edit the plan. Delta validation does not
+ * check deltas against the main specs; archive rejects a MODIFIED or RENAMED requirement the main
+ * spec lacks and an ADDED one it already has. Nothing in the artifact root is written.
  */
 export declare function previewOpenSpecArchive(artifactRoot: string, change: string, signal?: AbortSignal): Promise<ArchivePreflight>;
 /** Plain-text guidance for the planning role's history. */

package/dist/agent-runtime/graph/archive-preflight.js

@@ -1,36 +1,8 @@
-import { cpSync, existsSync, lstatSync, mkdtempSync, readdirSync, readFileSync, rmSync } from 'node:fs';
+import { cpSync, existsSync, mkdtempSync, readdirSync, rmSync } from 'node:fs';
 import os from 'node:os';
 import path from 'node:path';
 import { artifactPath, OpenSpecCommandError, resolveOpenSpecCli, runOpenSpec } from '../openspec.js';
 const ANSI = new RegExp(String.fromCharCode(27) + '\\[[0-9;]*m', 'g');
-/**
- * Requirements OpenSpec rejects when it rebuilds a main spec on archive: its spec parser reads only
- * the first non-empty body line before any heading and needs SHALL or MUST there. Delta validation
- * skips `**Key**:` metadata lines, so a delta (or a pre-existing main-spec requirement) can pass
- * `openspec validate` and still abort the archive.
- */
-export function requirementsWithoutKeyword(markdown) {
-    const lines = markdown.split('\n'), findings = [];
-    for (let index = 0; index < lines.length; index++) {
-        const header = lines[index].match(/^###\s+Requirement:\s*(.*)$/);
-        if (!header)
-            continue;
-        let body;
-        for (let next = index + 1; next < lines.length; next++) {
-            const text = lines[next].trim();
-            if (text.startsWith('#'))
-                break;
-            if (text) {
-                body = next;
-                break;
-            }
-        }
-        const text = body === undefined ? header[1] : lines[body];
-        if (!text.includes('SHALL') && !text.includes('MUST'))
-            findings.push({ line: (body ?? index) + 1, requirement: header[1].trim() });
-    }
-    return findings;
-}
 function assertNoSymlinks(root) {
     for (const entry of readdirSync(root, { withFileTypes: true })) {
         if (entry.isSymbolicLink())
@@ -39,26 +11,11 @@ function assertNoSymlinks(root) {
             assertNoSymlinks(path.join(root, entry.name));
     }
 }
-function capabilityFindings(artifactRoot, change) {
-    const deltas = path.join(artifactRoot, 'openspec/changes', change, 'specs');
-    if (!existsSync(deltas))
-        return [];
-    const findings = [];
-    for (const capability of readdirSync(deltas).sort()) {
-        for (const relative of [`openspec/changes/${change}/specs/${capability}/spec.md`, `openspec/specs/${capability}/spec.md`]) {
-            const file = path.join(artifactRoot, relative);
-            if (!existsSync(file) || !lstatSync(file).isFile())
-                continue;
-            for (const finding of requirementsWithoutKeyword(readFileSync(file, 'utf8')))
-                findings.push({ path: relative, ...finding });
-        }
-    }
-    return findings;
-}
 /**
  * Dry-runs `openspec archive` on a disposable copy of `openspec/`, so a change that validates but
- * cannot be archived is caught while its author can still edit the plan. Nothing in the
- * artifact root is written.
+ * cannot be archived is caught while its author can still edit the plan. Delta validation does not
+ * check deltas against the main specs; archive rejects a MODIFIED or RENAMED requirement the main
+ * spec lacks and an ADDED one it already has. Nothing in the artifact root is written.
  */
 export async function previewOpenSpecArchive(artifactRoot, change, signal) {
     const source = artifactPath(artifactRoot, 'openspec');
@@ -80,7 +37,7 @@ export async function previewOpenSpecArchive(artifactRoot, change, signal) {
         if (archived && !existsSync(path.join(staging, 'openspec/changes', change)))
             return { valid: true };
         const reason = output.replace(ANSI, '').split('\n').map(line => line.trimEnd()).filter(Boolean).join('\n').slice(-2000);
-        return { valid: false, reason, findings: capabilityFindings(artifactRoot, change) };
+        return { valid: false, reason };
     }
     finally {
         rmSync(staging, { recursive: true, force: true });
@@ -88,11 +45,9 @@ export async function previewOpenSpecArchive(artifactRoot, change, signal) {
 }
 /** Plain-text guidance for the planning role's history. */
 export function describeArchivePreflight(change, preflight) {
-    const located = preflight.findings.map(finding => `- ${finding.path}:${finding.line} "${finding.requirement}"`).join('\n');
     return [
         `OpenSpec validates change ${change}, but archiving it would fail. OpenSpec's archive output:`,
         preflight.reason,
-        ...(located ? ['Requirements whose first body line has no SHALL or MUST (OpenSpec reads only that line when it rebuilds a main spec):', located,
-            'Put the SHALL/MUST statement on the line right after "### Requirement: …". For a requirement that only exists in openspec/specs, restate it under "## MODIFIED Requirements" in this change\'s delta with the corrected first line.'] : []),
+        'Reconcile each delta with openspec/specs: MODIFIED and RENAMED headers must name an existing requirement exactly, and ADDED requirements must not exist yet.',
     ].join('\n');
 }

package/dist/agent-runtime/graph/artifacts.js

@@ -195,7 +195,7 @@ async function archiveWithOpenSpec(context, change, active, signal, adapter) {
                     // created specification. Preserve that provenance during fork replay;
                     // authored text and all byte-for-byte publication guards stay intact.
                     if (sourceChange && before === null && after !== null)
-                        after = after.replace(`\n## Purpose\nTBD - created by archiving change ${change}. Update Purpose after archive.\n## Requirements\n`, `\n## Purpose\nTBD - created by archiving change ${sourceChange}. Update Purpose after archive.\n## Requirements\n`);
+                        after = after.replace(`\n## Purpose\nTBD - created by archiving change ${change}. Update Purpose after archive.\n`, `\n## Purpose\nTBD - created by archiving change ${sourceChange}. Update Purpose after archive.\n`);
                     return { path: 'openspec/specs/' + name, before, after };
                 }).filter(item => item.before !== item.after) };
             write(receipt, JSON.stringify(plan));

package/dist/agent-runtime/openspec.d.ts

@@ -1,6 +1,6 @@
 import { type AgentRole, type CliProvider, type RoleDescriptor, type AgentAccess, type ArtifactAccess, type OpenSpecSkill } from './executor-types.js';
 import { z } from 'zod';
-export declare const OPENSPEC_VERSION = "1.4.1";
+export declare const OPENSPEC_VERSION = "1.14.3";
 export declare const ROLE_SKILLS: {
     readonly architect: 'openspec-ff-change';
     readonly developer: 'openspec-apply-change';

package/dist/agent-runtime/openspec.js

@@ -7,8 +7,11 @@ import path from 'node:path';
 import { fileURLToPath } from 'node:url';
 import { BUILTIN_ROLE_POLICY, isBuiltinRole } from './executor-types.js';
 import { z } from 'zod';
-export const OPENSPEC_VERSION = '1.4.1';
+export const OPENSPEC_VERSION = '1.14.3';
 export const ROLE_SKILLS = { architect: 'openspec-ff-change', developer: 'openspec-apply-change', reviewer: 'openspec-verify-change' };
+/** Where `openspec init --tools` writes each provider's skills (Codex and Kimi moved in 1.14). */
+const OPENSPEC_SKILL_DIRECTORIES = { claude: '.claude', codex: '.agents', gemini: '.gemini', kimi: '.kimi-code' };
+const DEFAULT_PROJECT_CONFIG = 'schema: spec-driven\n';
 /** Saved built-in contexts retain their original shape; new roles carry explicit policy. */
 export function openSpecPolicy(context) {
     const legacy = isBuiltinRole(context.role) ? BUILTIN_ROLE_POLICY[context.role] : undefined;
@@ -144,7 +147,7 @@ export function prepareOpenSpec(root, change, directory) {
             });
             for (const provider of ['claude', 'codex', 'gemini', 'kimi']) {
                 for (const name of Object.values(ROLE_SKILLS)) {
-                    const content = readFileSync(path.join(target, '.' + provider, 'skills', name, 'SKILL.md'), 'utf8');
+                    const content = readFileSync(path.join(target, OPENSPEC_SKILL_DIRECTORIES[provider], 'skills', name, 'SKILL.md'), 'utf8');
                     const destination = path.join(skillRoot, provider, name);
                     mkdirSync(destination, { recursive: true });
                     writeFileSync(path.join(destination, 'SKILL.md'), content, { mode: 0o600 });
@@ -163,8 +166,11 @@ export function prepareOpenSpec(root, change, directory) {
         }
     if (existsSync(path.join(root, 'openspec/schemas/spec-driven')))
         throw new Error('Custom spec-driven schema overrides are not supported by this runtime');
-    const config = artifactPath(root, 'openspec/config.yaml');
-    identity.projectConfig = existsSync(config) ? hash(readFileSync(config, 'utf8')) : 'absent';
+    // Same precedence as OpenSpec. `new change` scaffolds DEFAULT_PROJECT_CONFIG when no config exists;
+    // it is equivalent to none, so the architect's first write does not change the run's identity.
+    const config = ['openspec/config.yaml', 'openspec/config.yml'].map(file => artifactPath(root, file)).find(file => existsSync(file));
+    const projectConfig = config ? readFileSync(config, 'utf8') : undefined;
+    identity.projectConfig = projectConfig === undefined || projectConfig === DEFAULT_PROJECT_CONFIG ? 'absent' : hash(projectConfig);
     return { cli, skillRoot, identity };
 }
 export function roleOpenSpecContext(prepared, root, change, directory, roleOrDescriptor, provider) {
@@ -349,7 +355,7 @@ export const OPENSPEC_TOOL_DEFINITION = { type: 'function', function: { name: 'o
 export function openSpecPrompt(context) {
     if (!isBuiltinRole(context.role))
         return `\n## Official OpenSpec workflow binding\nExecute ${openSpecSkill(context)} for change ${context.change}. Load action=load_skill using openspec_workflow and follow the pinned official skill. Use scoped tools for status, instructions, validation and permitted artifact writes. Workspace access: ${openSpecPolicy(context).access}; artifacts: ${openSpecPolicy(context).artifacts}. Read required artifact instructions before writing. Never archive or coordinate another role.\n`;
-    return `\n## Official OpenSpec workflow binding\nExecute ${openSpecSkill(context)} for change ${context.change}. This headless transport loads the official, version-pinned skill through the openspec_workflow tool (MCP server specrails_openspec, tool workflow on CLI providers). This is explicit skill-document adaptation, not a native slash command.\nFirst call action=load_skill and follow the returned complete official skill. Bind its openspec CLI commands to this tool: new change -> action=new; status -> status; instructions <artifact> -> instructions with artifact; validate -> validate. Author each artifact yourself using write_artifact with its change-relative path and content; read the official instructions first. Do not reproduce templates from memory or return the artifacts in final JSON. The tool fixes the change identity and runs OpenSpec ${OPENSPEC_VERSION}.\nRead source/dependencies with your normal read tools. For this frozen scope, change selection is already answered. Bind AskUserQuestion to a low-confidence final result with question (architect), or a reported blocking issue (other roles); LangGraph asks the requester. Bind TodoWrite to concise progress narration and, for developer, persist the current handoff through action=write_progress with progress {summary, completedTasks, nextTasks, checks: [{command, outcome}], blockers}. Save after each completed task or changed blocker, at most 8 KB. This host journal is separate from frozen OpenSpec artifacts; never write runtime files directly. Developer/reviewer receive savedProgress from load_skill and can refresh with read_progress. Reconcile this advisory history with current files; old test outcomes never replace required host verification. Do not invoke another role, apply/archive from architect, or archive from developer/reviewer. Return the Specrails JSON report after the official workflow. For developer and reviewer, load_skill already executes status and instructions apply and returns their real outputs in planning; read planning.apply.contextFiles and perform the rest of the official skill. You may refresh instructions apply when needed. Verify is a skill, not an instructions artifact.\n`;
+    return `\n## Official OpenSpec workflow binding\nExecute ${openSpecSkill(context)} for change ${context.change}. This headless transport loads the official, version-pinned skill through the openspec_workflow tool (MCP server specrails_openspec, tool workflow on CLI providers). This is explicit skill-document adaptation, not a native slash command.\nFirst call action=load_skill and follow the returned complete official skill. Bind its openspec CLI commands to this tool: new change -> action=new; status -> status; instructions <artifact> -> instructions with artifact; validate -> validate. Author each artifact yourself using write_artifact with its change-relative path and content; read the official instructions first. Do not reproduce templates from memory or return the artifacts in final JSON. The tool fixes the change identity and runs OpenSpec ${OPENSPEC_VERSION}.\nRead source/dependencies with your normal read tools. For this frozen scope, change selection is already answered, and so are the skill's store selection and project check: no store is selected (never pass --store or run store commands), and the host has admitted this repository as the OpenSpec project, so action=new may create its repo-local openspec/ root; do not run openspec list to check for one. Bind AskUserQuestion to a low-confidence final result with question (architect), or a reported blocking issue (other roles); LangGraph asks the requester. Bind TodoWrite to concise progress narration and, for developer, persist the current handoff through action=write_progress with progress {summary, completedTasks, nextTasks, checks: [{command, outcome}], blockers}. Save after each completed task or changed blocker, at most 8 KB. This host journal is separate from frozen OpenSpec artifacts; never write runtime files directly. Developer/reviewer receive savedProgress from load_skill and can refresh with read_progress. Reconcile this advisory history with current files; old test outcomes never replace required host verification. Do not invoke another role, apply/archive from architect, or archive from developer/reviewer. Return the Specrails JSON report after the official workflow. For developer and reviewer, load_skill already executes status and instructions apply and returns their real outputs in planning; read planning.apply.contextFiles and perform the rest of the official skill. You may refresh instructions apply when needed. Verify is a skill, not an instructions artifact.\n`;
 }
 export function writeOpenSpecBridge(context, directory) {
     const file = path.join(directory, 'openspec-context.json');

package/dist/installer/commands/init.js

@@ -340,7 +340,7 @@ function readPinnedVersion(scriptDir, key, fallback) {
  *  3. neither set    → `runCommand('npx', ['--yes', '-p', '@fission-ai/openspec@<pinned>', '--', 'openspec', 'init', …])`
  *     (default online path — users never need a global install).
  */
-export function buildOpenSpecInvocation(repoRoot, provider, env = process.env, pinnedVersion = readPinnedVersion(resolveScriptDir(), 'openspec', '1.4.1')) {
+export function buildOpenSpecInvocation(repoRoot, provider, env = process.env, pinnedVersion = readPinnedVersion(resolveScriptDir(), 'openspec', '1.14.3')) {
     const bin = env.SPECRAILS_OPENSPEC_BIN;
     const node = env.SPECRAILS_OPENSPEC_NODE;
     const initArgs = ['init', '--tools', provider, '--profile', 'custom', repoRoot];

package/dist/installer/phases/prereqs.d.ts

@@ -1,6 +1,6 @@
 import { type Provider, type ProviderAvailability } from './provider-detect.js';
 /**
- * OpenSpec 1.4.1, which the installer invokes during the default init/update
+ * OpenSpec 1.14.3, which the installer invokes during the default init/update
  * flow, requires Node >=20.19.0. Keep this floor independent from Kimi's npm
  * package requirement: SpecRails launches an externally installed Kimi CLI and
  * does not require the Kimi npm distribution.

package/dist/installer/phases/prereqs.js

@@ -6,7 +6,7 @@ import { info, ok, warn } from '../util/logger.js';
 import { gitInstalled, initRepo, isGitRepo, repoRoot } from '../util/git.js';
 import { assertClaudeAuthenticated, assertKimiAuthenticated, claudeVersion, detectAvailability, isSupportedKimiVersion, kimiVersion, MIN_KIMI_VERSION, resolveProvider, } from './provider-detect.js';
 /**
- * OpenSpec 1.4.1, which the installer invokes during the default init/update
+ * OpenSpec 1.14.3, which the installer invokes during the default init/update
  * flow, requires Node >=20.19.0. Keep this floor independent from Kimi's npm
  * package requirement: SpecRails launches an externally installed Kimi CLI and
  * does not require the Kimi npm distribution.
@@ -34,7 +34,7 @@ export async function checkPrerequisites(options) {
     const nodeVersion = process.versions.node;
     if (!isSupportedNodeVersion(nodeVersion)) {
         throw new PrerequisiteError(`Node.js ${nodeVersion} is unsupported. SpecRails requires Node.js ` +
-            `${MIN_NODE_VERSION} or newer because OpenSpec 1.4.1 uses that runtime floor. ` +
+            `${MIN_NODE_VERSION} or newer because OpenSpec 1.14.3 uses that runtime floor. ` +
             'Install a supported Node.js release from https://nodejs.org/');
     }
     ok(`Node.js: ${nodeVersion}`);

package/dist/installer/phases/scaffold.js

@@ -125,9 +125,8 @@ export function scaffoldInstallation(input) {
     // --- Directory skeleton ---
     mk(path.join(input.artifactRoot, input.providerDir));
     if (input.provider === 'codex') {
-        // Codex skills live under <providerDir>/skills/ (e.g. .codex/skills/).
-        // The pre-§18 code wrote to `.agents/skills/` which codex doesn't read;
-        // that was a placeholder name from the gated state.
+        // Specrails' Codex skills live under <providerDir>/skills/ (e.g. .codex/skills/).
+        // OpenSpec's own Codex skills live under `.agents/skills/`.
         mk(path.join(input.artifactRoot, input.providerDir, 'skills'));
     }
     else if (input.provider === 'gemini') {
@@ -1039,9 +1038,7 @@ function pruneLegacyArtifacts(input) {
         path.join(input.artifactRoot, '.specrails-version'),
     ];
     if (input.provider === 'codex') {
-        // Pre-§18 layout used `.agents/skills/` — prune any leftovers from a
-        // legacy install before settling on the canonical `.codex/skills/`.
-        legacyPaths.push(path.join(input.artifactRoot, '.agents'));
+        // `.agents/skills/` is not pruned: OpenSpec 1.14+ writes its Codex skills there.
         legacyPaths.push(path.join(input.artifactRoot, input.providerDir, 'skills', 'setup'));
     }
     else if (input.provider === 'gemini') {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "specrails-core",
-  "version": "6.6.4",
+  "version": "6.6.5",
   "description": "Agent workflow engine for specrails-desktop: provider-independent installer and programmatic agent runtime for Claude Code and Codex",
   "type": "module",
   "exports": {
@@ -88,7 +88,7 @@
     "ci": "npm run typecheck && npm run test:scripts && npm run test:coverage && npm run check:package"
   },
   "dependencies": {
-    "@fission-ai/openspec": "1.4.1",
+    "@fission-ai/openspec": "1.14.3",
     "@langchain/core": "1.2.14",
     "@langchain/langgraph": "1.4.18",
     "@langchain/langgraph-checkpoint": "1.1.5",

package/pinned-versions.json

@@ -1,4 +1,4 @@
 {
   "$comment": "Pinned versions of third-party tools the installer fetches via npx. Edit and commit to bump deliberately.",
-  "openspec": "1.4.1"
+  "openspec": "1.14.3"
 }