open-spec-mesh
Open Spec Mesh 官方工具的 Node.js 运行时
插件会安装到这里；不确定时保持 web。
npx -y @deepseek-ai/dsh plugin --profile web add github:kedamitch/open-spec-mesh#24822d36ffadcf7f5b08fd15e78ca79515e2cd69Open Spec Mesh 以 open-spec-mesh 发布，当前版本为 0.1.0。Plugin Hub 会校验它的 manifest，并保存精确安装来源，便于复现安装结果。
Node.js tools and reusable Agent/Skill guidance for Quick and human-driven SDD development. Automatic SDD lifecycle commands are retired.
Public npm release 0.0.1 is published. The commands below install that version. If a mirror returns E404, verify the registry rather than treating a local pack as publication.
# 1. Install the command (does not modify host configuration).
npm install --global open-spec-mesh@0.0.1 --registry=https://registry.npmjs.org/
open-spec-mesh --version
# 2. Preview and explicitly configure Codex.
open-spec-mesh install --host codex --skip-tools --dry-run
open-spec-mesh install --host codex --skip-tools
The expected command version is 0.0.1. Start a new host session after installation so it loads the updated rules, roles and Skills.
--skip-tools installs the core toolkit without installing Research tools. It does not claim Research MCP availability and does not enable System One. npm installation has no postinstall hook that configures Home; the explicit open-spec-mesh install step is required.
# Default homes: ~/.codex, ~/.config/opencode, ~/.claude, ~/.dsh.
open-spec-mesh install --host codex --skip-tools
open-spec-mesh install --host opencode --skip-tools
open-spec-mesh install --host claude --skip-tools
open-spec-mesh install --host dsh --skip-tools
# Optional custom configuration home (quote paths containing spaces).
open-spec-mesh install --host codex --host-home "/path/to/codex home" --skip-tools
open-spec-mesh natively supports running as a DSH bundle plugin, providing the sdd模式 agent preset:
# Install to DSH web profile
dsh plugin --profile web add open-spec-mesh
Once installed, select sdd模式 in the DSH Web UI preset picker. It provides automated L0/L1/L2 complexity triage with progressive skill gating.
Default homes also honor CODEX_HOME, OPENCODE_CONFIG_DIR and CLAUDE_CONFIG_DIR. --codex-home remains a Codex compatibility option. Host startup examples are in the operations guide.
npm exec --yes --registry=https://registry.npmjs.org/ --package=open-spec-mesh@0.0.1 -- \
open-spec-mesh install --host codex --skip-tools
# From this repository: globally link the checkout; retain its directory.
npm ci
npm install --global .
open-spec-mesh install --host codex --skip-tools
# Or build a portable artifact; dependencies still need npm access/cache.
npm pack
npm install --global ./open-spec-mesh-0.0.1.tgz
open-spec-mesh install --host codex --skip-tools
# Upgrade the command, then explicitly upgrade the managed host assets.
npm install --global open-spec-mesh@latest --registry=https://registry.npmjs.org/
open-spec-mesh install --host codex --skip-tools --dry-run
open-spec-mesh install --host codex --skip-tools
# Remove only the global command; this does not remove configured host assets.
npm uninstall --global open-spec-mesh
PATH (on Linux/macOS, typically $(npm prefix -g)/bin). For permission errors, use a user-owned Node installation/global prefix rather than automatically running host configuration with sudo.Public npm 0.0.1 still uses open-spec-mesh. The local source now includes osm; run npm ci and npm install -g . in the checkout to use it (not a registry upgrade).
osm --dry-run # Preview the default Codex install without writing Home.
osm # Equivalent to open-spec-mesh install --host codex --skip-tools.
osm --help
osm --version
osm install --host opencode --skip-tools
Running osm explicitly performs installation; it is not an npm postinstall. The legacy entry still shows help with no arguments. A clear request such as “publish 0.0.2” automatically selects $sdd-release and authorizes npm publication of that target version; users need not type a skill invocation. Requests for release materials alone do not authorize upload.
role_desc, for example explorer_module_flow or librarian_node_backend; keep configured role IDs unchanged.When you select SDD mode, Main explains the current stage, suggests the matching sdd-* skill with a ready-to-use invocation, and points to the next entry when the stage is complete. Skill completion does not approve another stage.
| Stage or need | Skill | Example |
|---|---|---|
| Document scaffolding, only when needed | $sdd-init | $sdd-init Initialize the project document scaffold |
| Requirements | $sdd-req | $sdd-req Create or refine the requirements for this Change |
| Overall design | $sdd-design | $sdd-design Requirements are confirmed; write the overall design |
| Execution plan: task breakdown and task-level design | $sdd-plan | $sdd-plan Overall design is confirmed; write the execution plan and task designs |
| Implementation and validation | $sdd-do | $sdd-do The execution plan is confirmed; implement serially and validate |
| Delivery and archiving after confirmation | $sdd-close | $sdd-close Summarize actual implementation and validation for my confirmation |
Skip initialization if a suitable scaffold already exists. Use $sdd-migrate for conflicting legacy document structures, $sdd-research for reusable research/long-term ADRs when needed, and $sdd-diagnose only when diagnostics are requested. A clear request to publish a target version automatically selects $sdd-release and authorizes that version’s npm upload; requests for materials alone do not authorize publication. Natural-language authorization is also valid. If a skill is not installed or available in the session, Main must say so and guide installation/loading rather than claim it was invoked.
The broad $sdd-change skill and former sdd-requirements name are no longer managed; use $sdd-req for requirements. Old sdd-change/scripts/ entrypoints have been removed. During upgrade, a previously registered old directory is preserved in a private local ZIP under open-spec-mesh/retired-skills/ before leaving skill discovery, including local edits. Recovery archives are not automatically cleaned up; unregistered user directories are retained with a warning rather than removed by name.
open-spec-mesh --help
open-spec-mesh init-project --root /path/to/project
open-spec-mesh new-change feature --root /path/to/project
# After human confirmation:
open-spec-mesh ensure-design CHG-YYYYMMDD-feature --root /path/to/project
open-spec-mesh new-task CHG-YYYYMMDD-feature capability --root /path/to/project
open-spec-mesh validate-docs --root /path/to/project
Change creation writes only requirements; task creation writes macro Markdown and a human-readable plan. Neither creates execution state. observe/diagnose collect read-only evidence. Release commands prepare documents, not deployment. Integration and validation use ordinary Git/project tools.
Research tooling additionally uses CONTEXT7_API_KEY / TAVILY_API_KEY; export your own values in the invoking environment before running installation without --skip-tools. Credentials are not included in the npm package or written by npm installation.
System One is optional and disabled by default. The self-hosted GPU service is removed; only the Node.js HTTP/MCP client for an external compatible inference service remains. It does not download models, start local inference or execute Python. The managed bridge is currently Codex-only.
For contributors, from a source checkout:
npm ci
npm run validate:core
npm run validate:full
Full validation additionally requires real host CLIs, Docker, Mermaid and Research tooling. Missing prerequisites are failures, not successful placeholders. First-party tools, tests and automation are Node.js-only; the audit requires zero first-party Python sources. Core results do not prove full external-host or inference readiness.
See rules, tool guide, document guidance and project documentation.
The complete documentation layout remains: C01/C02/C03, independent Task documents, Delivery, and navigation. Shared facts are referenced instead of rewritten. Delegate only for a plausible net benefit; serial work stays with Main. Designs separate binding behavioral/security/public contracts, adjustable implementation choices, and unverified assumptions. See the collaboration guide.
# Read-only installed-file inspection, not proof of active-session settings
node bin/open-spec-mesh.js inspect-host --host codex --format json
# Explicit scenario checks of normalized observations; no model calls or approvals
node bin/open-spec-mesh.js evaluate-collaboration --list
node bin/open-spec-mesh.js evaluate-collaboration --report PRIVATE_REPORT --scenario local-fix
# Readable report; incomplete exits 3 only with this explicit strict option
node bin/open-spec-mesh.js evaluate-collaboration --report PRIVATE_REPORT --scenario local-fix --format md --fail-on-incomplete
# Source maintenance; preserves project-specific AGENTS content outside COMMON markers
npm run check:workflow
npm run sync:workflow
Without a historical Graph, legacy first-pass/rework measures are not applicable or unknown, never fabricated zeroes. Observed Main/child token deltas are deduplicated per session/slice; complete totals require complete coverage. Pricing and real savings remain unknown. Optional operator rework marks and a fixed-baseline comparison are documented in the evaluation guide. Static checks, deterministic fixtures, trace-action checks, and actual model performance are different evidence levels. These changes do not mean public 0.0.2 or an existing Host Home has been upgraded.
Evaluation defaults to JSON and retains the existing exit behavior: incomplete can exit 0. Opt in to --fail-on-incomplete for exit 3; action failures exit 1 and argument errors exit 2. Even supported_checks_passed leaves semantic quality and human acceptance unverified.
New goals default to Quick: neither end-to-end requests nor loading sdd-do creates a formal Change/Task/Delivery chain. Preserve existing structure; use short single-task SDD examples only when SDD is explicitly selected. Codex install can explicitly migrate only the legacy fallback with --migrate-legacy-agent-defaults, preserving Main and other overrides. node scripts/verify_codex_live.js --run --output PRIVATE_DIR opts into paid real inference, never a routine/core/full check.