← All reportsPublic report

fission-ai/openspec

Spec-driven development (SDD) for AI coding assistants.

66k stars TypeScript View on GitHubprofiled 11d ago
Try GitZoid
140PRs this week
30Contributors
18Deps scanned
0Issues found
01 · Repo overview

How openspec is put together

OpenSpec (@fission-ai/openspec) is a Node.js/TypeScript CLI for AI-native, spec-driven development, published to npm as a bin package (`openspec`). It is built with Commander as a command dispatcher: src/cli/index.ts wires global hooks (telemetry tracking, completion tips, color handling) and registers command groups from src/commands/*, which delegate to core modules in src/core/* that manage project scaffolding (`init`), change/spec lifecycle (propose, apply, archive), global/project configuration, worksets/stores, validation, and shell completions. There is no server or datastore; state lives in on-disk files (global config JSON, per-project openspec/ directory with YAML config) and the only outbound network activity is anonymous telemetry plus version-update checks. Tests are Vitest suites under test/ that spawn the real CLI in forked worker processes.

Languages

TypeScriptJavaScript

Frameworks

CommanderVitestESLint (typescript-eslint)@inquirer/promptsZod

Infrastructure

npm registry distribution (bin package)Changesets release automation via CINix flake (flake.nix)Devcontainer (.devcontainer/devcontainer.json)

Major components

CLI entry & dispatch (src/cli/index.ts)

Defines the `openspec` program, registers all commands, and runs preAction/postAction hooks for telemetry, first-run notices, completion tips, and JSON-output error contracts.

Command layer (src/commands/*)

Implements user-facing command groups: spec, change, validate, show, config, schema, store, doctor, context, workset, completion, feedback, plus shared output/gathering helpers.

Core domain logic (src/core/*)

Implements init/scaffolding, update/sync, archive, list/view, root selection, profiles, project config, migration/legacy cleanup, version checks, and working-set/workset management.

Configuration system (src/core/config-schema.ts, global-config.ts, project-config.ts, config-prompts.ts)

Reads/writes global JSON config and per-project YAML config, validates key paths (including prototype-safety checks), coerces values, and serializes commented YAML templates.

Telemetry (src/telemetry/*)

Anonymous usage tracking of executed commands with opt-out via OPENSPEC_TELEMETRY/DO_NOT_TRACK env vars, first-run disclosure notice, and shutdown flushing.

Shell completion engine (src/commands/completion.ts, src/core/completions/, hidden __complete resolver)

Generates Bash/Fish/PowerShell completion scripts and resolves dynamic completions including shared flags.

Utilities (src/utils/*)

File-system helpers, spec/change/item discovery, shell detection, interactive TTY detection, CI detection, date/match helpers.

Skills & docs generation (skills/, scripts/generate-skillssh.mjs, schemas/)

Maintains per-workflow SKILL.md files and the spec-driven schema.yaml consumed by AI tools, regenerated via npm scripts.

Over the past five weeks, OpenSpec has been steadily polishing its developer experience while expanding the number of AI coding tools it supports. The team fixed a long list of edge cases around archiving changes, validating specs, and keeping generated files consistent, and added support for new tools like Zed Agent, Atlassian Rovo Dev CLI, MiniMax Code, and Command Code. Documentation also got a major refresh with a rebuilt docs site and clearer workflow guides.

Week by week

2026-08-24A quiet week focused on routine website dependency maintenance.latest1 change

Chore

Website dependency updates

The project's website received a routine batch of updated building-block libraries to stay current and secure.

2026-08-17A busy week of fixes plus new tool support for Zed Agent and a fully rebuilt documentation site.6 changes

Docs

Rebuilt documentation site

The public docs website was rebuilt from a newer 'docs-lab' source, giving readers an updated home for guides.

Feature

Zed Agent support

OpenSpec can now set itself up for developers using the Zed editor's AI agent.

Feature

Language option at setup

Running openspec init now lets you pick a language so generated plans match your preference.

Fix

Verification steps in task plans

Generated task plans now always include verification steps so work isn't considered done without checking it.

Fix

Safer capability retirement

Archiving a change no longer leaves you stuck when retiring an old capability.

Fix

Cleaner telemetry notice

The first-run data-collection notice now prints where it won't interfere with other program output.

2026-08-10A large week of reliability fixes across validation, archiving, and setup, plus two new Command Code integrations.6 changes

Feature

Command Code support

OpenSpec now works with Command Code both as a full command adapter and as a skills-only tool.

Feature

Validate archived changes

A new --archived flag lets you check whether tasks in already-completed (archived) changes were properly finished.

Fix

Honest scope reporting

When applying a change, deferred work is now clearly surfaced instead of being quietly simplified away.

Fix

Preserve YAML formatting on fork

Forking a schema no longer mangles its YAML formatting.

Fix

Security patches

Known vulnerabilities in bundled dependencies (js-yaml, nanoid) were patched via package overrides.

Fix

No stray escape codes in files

Archiving to a redirected output no longer writes garbled terminal color codes into files.

2026-08-03Big tooling expansion week: Rovo Dev CLI, MiniMax Code, and Copilot cloud-agent support joined OpenSpec.6 changes

Feature

Atlassian Rovo Dev CLI support

Atlassian's Rovo Dev CLI is now a first-class supported tool in OpenSpec.

Feature

MiniMax Code skills support

Developers using MiniMax Code can now use OpenSpec skills with their assistant.

Feature

Copilot coding agent files

openspec init can generate GitHub Copilot coding-agent configuration files, made opt-in after feedback.

Feature

Retire emptied capabilities

Archiving a change can now formally retire a capability that the change emptied out.

Fix

Security patches

Vulnerabilities in fast-uri, postcss, and brace-expansion were patched, and file paths were hardened against misuse.

Fix

Non-English requirements allowed

Validation no longer rejects requirements written in languages other than English.

2026-07-27A wide-ranging polish week improving archive safety, prompts, accessibility, and adapter consistency.6 changes

Feature

Shared agents skills target

Setup can now install skills into a shared agents directory usable by multiple AI tools.

Feature

CLI upgrade prompt

openspec update now offers to upgrade an out-of-date CLI version for you.

Fix

Warn before deleting notes

Archiving now warns you before it would delete a note sitting next to a requirement.

Fix

Windsurf renamed to Devin Desktop

The integration followed the product's rename from Windsurf to Devin Desktop.

Fix

Reduced-motion welcome screen

The init welcome animation is skipped for users who prefer reduced motion.

Docs

Deno install instructions

The installation docs now explain how to install OpenSpec using Deno.

03 · Security check

Dependencies and code review

18 dependencies scanned

Dependency advisories

Security Watch

No known advisories across 18 scanned dependencies.

No known advisories in the scanned dependencies.

Code review

No concrete code-level issues confirmed.

Get this report every week for your repos.

GitZoid learns each repo, reports what changed, and flags what needs attention. One flat price for the whole team.

$19 a month, flat · First 10 outputs free · No card required