Release 1.9.5

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

Author: clawplays

assets/for-ai/ar/change-protocol.md

@@ -10,7 +10,7 @@
 
 1. أنشئ العمل الجديد عبر `ospec change <change-name> [path]`، ويبقى `ospec new` alias للتوافق.
 2. إذا وُجد active change مطابق فتابعه ولا تنشئ نسخة مكررة.
-3. تدخل تغييرات batch إلى queue وتُنفذ بالتتابع في worktree المشترك.
+3. تدخل تغييرات batch إلى queue وتُنفذ بالتتابع في worktree المشترك. يجب استخدام worktree تسلسلياً: يُحظر الإغلاق (verify/finalize/archive) عند وجود ملفات غير مودعة خارج نطاق `affects` وعقد التوثيق في proposal، لذا أودع أو خزّن أو اعزل التغييرات غير المنسوبة، وصرّح بـ `affects` بصدق، ولا تدع تعديلات جلسة متزامنة تنزلق إلى الأرشيف.
 4. حافظ فقط على `proposal.md` و`tasks.md` و`state.json` و`verification.md` و`review.md`، ولا تنشئ design أو plan أو task graph أو worker أو review provenance artifacts الخاصة بـ Goal.
 5. شغّل فحوص المشروع المرتبطة فعلاً بالتغيير وسجّل الأوامر والنتائج في `verification.md`، ولا تفرض build أو lint أو test أو TDD أو debug غير ذي صلة.
 6. ينفذ AI الحالي مراجعة خفيفة واحدة. يمكن إغلاق `APPROVED` و`APPROVED_WITH_CONCERNS` تلقائياً، بينما توقف `PENDING` و`NEEDS_CHANGES` و`BLOCKED` الإغلاق.

assets/for-ai/en-US/change-protocol.md

@@ -10,7 +10,7 @@ At start, read `.skillrc`, the relevant `SKILL.index.json` entries, `proposal.md
 
 1. Create new work with `ospec change <change-name> [path]`; `ospec new` remains a compatibility alias.
 2. Continue an existing matching active change instead of duplicating it.
-3. Batch changes go through the queue and run sequentially in the shared worktree.
+3. Batch changes go through the queue and run sequentially in the shared worktree. The worktree must be used serially: closeout (verify/finalize/archive) blocks on uncommitted files outside the proposal `affects` and documentation scopes, so commit, stash, or isolate unattributed dirty files, declare `affects` honestly, and never let a concurrent session's edits ride along into the archive.
 4. Keep only `proposal.md`, `tasks.md`, `state.json`, `verification.md`, and `review.md` aligned. Do not create Goal design, plan, task graph, worker, or review-provenance artifacts.
 5. Run project checks relevant to the actual change and record commands and results in `verification.md`; do not require unrelated build, lint, test, TDD, or debug commands.
 6. The current AI performs one lightweight review. `APPROVED` and `APPROVED_WITH_CONCERNS` may close automatically; `PENDING`, `NEEDS_CHANGES`, and `BLOCKED` stop closeout.

assets/for-ai/ja-JP/change-protocol.md

@@ -10,7 +10,7 @@
 
 1. 新規作業は `ospec change <change-name> [path]` で作成し、`ospec new` は互換 alias として残します。
 2. 一致する active change が既にあれば重複作成せず継続します。
-3. batch change は queue に入れ、共有 worktree で順番に実行します。
+3. batch change は queue に入れ、共有 worktree で順番に実行します。worktree は直列で使用します。closeout（verify/finalize/archive）は proposal の `affects` と文書契約の範囲外にある未コミットファイルでブロックされるため、帰属不明の変更は先にコミット・stash・隔離し、`affects` を正しく宣言し、並行セッションの編集をアーカイブに紛れ込ませないでください。
 4. `proposal.md`、`tasks.md`、`state.json`、`verification.md`、`review.md` だけを同期し、Goal の design、plan、task graph、worker、review provenance artifacts は作りません。
 5. 実際の change に関連する project check だけを実行して command と結果を `verification.md` に記録します。無関係な build、lint、test、TDD、debug は要求しません。
 6. 現在の AI が軽量 review を 1 回行います。`APPROVED` と `APPROVED_WITH_CONCERNS` は自動 closeout 可能で、`PENDING`、`NEEDS_CHANGES`、`BLOCKED` は停止します。

assets/for-ai/zh-CN/change-protocol.md

@@ -10,7 +10,7 @@
 
 1. 新工作使用 `ospec change <change-name> [path]`；`ospec new` 保留为兼容别名。
 2. 已有匹配的 active change 时继续它，不要重复创建。
-3. 批量 change 进入 queue，在共享工作区依次执行。
+3. 批量 change 进入 queue，在共享工作区依次执行。工作区必须串行使用：闭环（verify/finalize/archive）会阻塞在超出 proposal `affects` 与文档契约范围的未提交文件上；发现无主脏文件时先提交、暂存或隔离，并如实声明 `affects`，不得把并发会话的改动卷入归档。
 4. 只维护 `proposal.md`、`tasks.md`、`state.json`、`verification.md` 和 `review.md`；不要创建 Goal 的设计、计划、task graph、worker 或 review provenance artifacts。
 5. 只运行与实际改动有关的项目检查，并把命令和结果记录到 `verification.md`；不得强制执行无关的 build、lint、test、TDD 或 debug 命令。
 6. 当前 AI 完成一次轻量 review。`APPROVED` 和 `APPROVED_WITH_CONCERNS` 可以自动收口；`PENDING`、`NEEDS_CHANGES` 和 `BLOCKED` 必须停止。

assets/global-skills/codex/ospec-change/SKILL.md

@@ -77,6 +77,7 @@ ospec finalize [changes/active/<change>] --force-archive --confirm-force-archive
 ## Guardrails
 
 - Progress checklists track reality: tick each proposal.md acceptance criterion as it is actually verified — archiving blocks while proposal.md has unchecked items. review.md stays your one lightweight review; record its decision and complete its checklist before closeout. Never tick an item whose work was not done.
+- The worktree is serial: closeout blocks on uncommitted files outside the proposal `affects` and documentation scopes. Declare `affects` honestly, and when unattributed dirty files appear (for example another session's edits), commit, stash, or isolate them instead of archiving over them.
 - Do not assume dashboard workflows exist.
 - Do not confuse repository initialization with change execution.
 - Do not enter queue mode unless the user explicitly asks for queue behavior.

dist/cli.js

@@ -62,7 +62,7 @@ const VerifyCommand_1 = require("./commands/VerifyCommand");
 const WorkflowCommand_1 = require("./commands/WorkflowCommand");
 const LayoutCommand_1 = require("./commands/LayoutCommand");
 const services_1 = require("./services");
-const CLI_VERSION = '1.9.4';
+const CLI_VERSION = '1.9.5';
 function showInitUsage() {
     console.log('Usage: ospec init [root-dir] [--summary "..."] [--tech-stack node,react] [--architecture "..."] [--document-language en-US|zh-CN|ja-JP|ar]');
 }

dist/commands/NewCommand.d.ts

@@ -21,6 +21,13 @@ export interface NewCommandOptions {
 }
 export declare class NewCommand extends BaseCommand {
     execute(featureName: string, rootDir?: string, options?: NewCommandOptions): Promise<void>;
+    /**
+     * Classic changes assume serial execution in a shared worktree; closeout
+     * blocks on uncommitted files outside the change's declared scope. Surface
+     * pre-existing dirt at creation time so unrelated concurrent work is
+     * committed, stashed, or isolated before implementation starts.
+     */
+    private warnOnDirtyWorkspace;
     private acquireChangeCreationLease;
     private releaseChangeCreationLease;
     private readChangeCreationLockOwner;

dist/commands/NewCommand.js

@@ -36,6 +36,7 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.NewCommand = void 0;
 const path = __importStar(require("path"));
 const crypto_1 = require("crypto");
+const child_process_1 = require("child_process");
 const fs_1 = require("fs");
 const constants_1 = require("../core/constants");
 const services_1 = require("../services");
@@ -68,6 +69,7 @@ class NewCommand extends BaseCommand_1.BaseCommand {
             const featureDir = PathUtils_1.PathUtils.getChangeDir(targetDir, placement, featureName, config);
             this.logger.info(`Creating ${placement === constants_1.DIR_NAMES.QUEUED ? 'queued change' : 'change'}: ${featureName}`);
             creationLease = await this.acquireChangeCreationLease(targetDir, config);
+            this.warnOnDirtyWorkspace(targetDir);
             if (placement === constants_1.DIR_NAMES.ACTIVE) {
                 const sessionDir = path.join(targetDir, '.ospec');
                 const jsonPath = path.join(sessionDir, 'session-brief.json');
@@ -213,6 +215,31 @@ class NewCommand extends BaseCommand_1.BaseCommand {
                 await this.releaseChangeCreationLease(creationLease);
         }
     }
+    /**
+     * Classic changes assume serial execution in a shared worktree; closeout
+     * blocks on uncommitted files outside the change's declared scope. Surface
+     * pre-existing dirt at creation time so unrelated concurrent work is
+     * committed, stashed, or isolated before implementation starts.
+     */
+    warnOnDirtyWorkspace(targetDir) {
+        try {
+            const status = (0, child_process_1.spawnSync)('git', ['status', '--porcelain', '--untracked-files=all', '--no-renames'], { cwd: targetDir, encoding: 'utf8', windowsHide: true });
+            if (status.error || status.status !== 0)
+                return;
+            const dirty = status.stdout
+                .split(/\r?\n/)
+                .map(line => line.trimEnd())
+                .filter(line => line.length > 0)
+                .map(line => line.slice(3).trim().replace(/^"|"$/g, '').replace(/\\/g, '/'))
+                .filter(filePath => filePath !== '.skillrc' && !filePath.startsWith('.ospec/'));
+            if (dirty.length === 0)
+                return;
+            this.warn(`Workspace already has ${dirty.length} uncommitted file change(s) (e.g. ${dirty.slice(0, 3).join(', ')}). A classic change assumes serial execution in this worktree, and closeout blocks on files outside the change's declared affects scope. Commit, stash, or isolate unrelated work first.`);
+        }
+        catch {
+            // The workspace warning is best-effort and must never block creation.
+        }
+    }
     async acquireChangeCreationLease(targetDir, config) {
         const changesRoot = (0, ProjectLayout_1.resolveManagedPath)(targetDir, constants_1.DIR_NAMES.CHANGES, config);
         await services_1.services.fileService.ensureDir(changesRoot);

dist/services/ClassicChangeCloseoutService.d.ts

@@ -18,9 +18,23 @@ export interface ClassicChangePluginAnalysis {
     archiveReady: boolean;
     checks: ChangeStatusCheck[];
 }
+export interface ClassicChangeWorkspaceAnalysis {
+    archiveReady: boolean;
+    outOfScopePaths: string[];
+    checks: ChangeStatusCheck[];
+}
 export declare class ClassicChangeCloseoutService {
     private readonly fileService;
     constructor(fileService: FileService);
+    /**
+     * Classic changes assume serial execution in a shared worktree. This guard is
+     * the classic counterpart of the Goal workspace gate: every uncommitted file
+     * must belong to the change (its container, managed OSpec bookkeeping, or the
+     * proposal's declared affects/documentation scopes). Unattributed dirty files
+     * block closeout so another session's concurrent edits cannot be silently
+     * archived with this change. Non-Git directories skip the check.
+     */
+    analyzeWorkspaceScope(projectRoot: string, featureDir: string, proposalPath: string): Promise<ClassicChangeWorkspaceAnalysis>;
     analyzeDocumentationContract(projectRoot: string, proposalPath: string): Promise<ClassicChangeDocumentationAnalysis>;
     analyzeReview(reviewPath: string): Promise<ClassicChangeReviewAnalysis>;
     analyzePluginGates(changePath: string, activatedSteps: string[], workflow: PluginWorkflowComposer): Promise<ClassicChangePluginAnalysis>;

dist/services/ClassicChangeCloseoutService.js

@@ -36,6 +36,7 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.ClassicChangeCloseoutService = void 0;
 const path = __importStar(require("path"));
 const fs_1 = require("fs");
+const child_process_1 = require("child_process");
 const helpers_1 = require("../utils/helpers");
 const CHANGE_TYPES = new Set(['bugfix', 'feature', 'maintenance', 'docs']);
 const DOCUMENTATION_IMPACTS = new Set(['none', 'required']);
@@ -54,6 +55,92 @@ class ClassicChangeCloseoutService {
     constructor(fileService) {
         this.fileService = fileService;
     }
+    /**
+     * Classic changes assume serial execution in a shared worktree. This guard is
+     * the classic counterpart of the Goal workspace gate: every uncommitted file
+     * must belong to the change (its container, managed OSpec bookkeeping, or the
+     * proposal's declared affects/documentation scopes). Unattributed dirty files
+     * block closeout so another session's concurrent edits cannot be silently
+     * archived with this change. Non-Git directories skip the check.
+     */
+    async analyzeWorkspaceScope(projectRoot, featureDir, proposalPath) {
+        const skipped = (message) => ({
+            archiveReady: true,
+            outOfScopePaths: [],
+            checks: [
+                {
+                    name: 'change.workspace_scope',
+                    status: 'pass',
+                    message,
+                },
+            ],
+        });
+        const status = (0, child_process_1.spawnSync)('git', ['status', '--porcelain', '--untracked-files=all', '--no-renames'], { cwd: projectRoot, encoding: 'utf8', windowsHide: true });
+        if (status.error || status.status !== 0) {
+            return skipped('Workspace scope check skipped (not a Git repository)');
+        }
+        let affects = [];
+        let documentationUpdates = [];
+        try {
+            const proposal = (0, helpers_1.parseFrontmatterDocument)(await this.fileService.readFile(proposalPath));
+            const normalizeScope = (item) => String(item || '')
+                .trim()
+                .replace(/\\/g, '/')
+                .replace(/^\.\//, '')
+                .replace(/\/+$/, '');
+            affects = Array.isArray(proposal.data?.affects)
+                ? proposal.data.affects.map(normalizeScope).filter(Boolean)
+                : [];
+            documentationUpdates = Array.isArray(proposal.data?.documentation_updates)
+                ? proposal.data.documentation_updates.map(normalizeScope).filter(Boolean)
+                : [];
+        }
+        catch {
+            // Proposal readiness is reported by the documentation contract checks.
+        }
+        const changePrefix = path
+            .relative(projectRoot, featureDir)
+            .replace(/\\/g, '/')
+            .replace(/\/+$/, '');
+        const managedPrefixes = ['.ospec', 'changes', 'for-ai', 'docs/project'];
+        const managedFiles = new Set(['.skillrc', 'SKILL.md', 'SKILL.index.json']);
+        const scopes = [...affects, ...documentationUpdates];
+        const withinScope = (filePath, scope) => filePath === scope || filePath.startsWith(`${scope}/`);
+        const dirtyPaths = status.stdout
+            .split(/\r?\n/)
+            .map(line => line.trimEnd())
+            .filter(line => line.length > 0)
+            .map(line => line.slice(3).trim().replace(/^"|"$/g, '').replace(/\\/g, '/'));
+        const outOfScopePaths = dirtyPaths.filter(filePath => {
+            if (managedFiles.has(filePath))
+                return false;
+            if (changePrefix && withinScope(filePath, changePrefix))
+                return false;
+            if (managedPrefixes.some(prefix => withinScope(filePath, prefix)))
+                return false;
+            return !scopes.some(scope => withinScope(filePath, scope));
+        });
+        if (outOfScopePaths.length === 0) {
+            return skipped(dirtyPaths.length === 0
+                ? 'Workspace is clean'
+                : 'All uncommitted changes belong to this change scope');
+        }
+        const preview = outOfScopePaths.slice(0, 6).join(', ');
+        const suffix = outOfScopePaths.length > 6 ? `, ... +${outOfScopePaths.length - 6} more` : '';
+        return {
+            archiveReady: false,
+            outOfScopePaths,
+            checks: [
+                {
+                    name: 'change.workspace_scope',
+                    status: 'fail',
+                    message: scopes.length === 0
+                        ? `proposal.md declares no affects scope, so ${outOfScopePaths.length} uncommitted file change(s) cannot be attributed to this change: ${preview}${suffix}. Declare affects in proposal.md, or commit/stash/isolate unrelated work before closeout.`
+                        : `Workspace has ${outOfScopePaths.length} uncommitted file change(s) outside this change's declared scope: ${preview}${suffix}. Commit, stash, or isolate unrelated work (or extend proposal.md affects) before closeout.`,
+                },
+            ],
+        };
+    }
     async analyzeDocumentationContract(projectRoot, proposalPath) {
         if (!(await this.fileService.exists(proposalPath))) {
             return {