A governed development framework for AI-assisted engineering
Project description
vaultspec-core
A research-driven framework for coding agents with a paper trail
Vaultspec is a spec-driven development rulebook for artificial intelligence (AI) coding agents. It enforces a structured pipeline around AI-assisted development: research, decide, plan, execute, and review.
Each stage writes durable markdown artifacts in your repository. AI coding agents use those records to share context, and you use them to track development progress.
How it works
vaultspec-core structures AI-assisted development into a repeatable pipeline centered
around features. Two directories form the backbone:
.vaultspec/holds the framework configuration - rules, templates, agent personas, and system prompts that shape how AI tools behave..vault/is the paper trail - research notes, architecture decision records (ADRs), implementation plans, execution logs, and review and audit trails.
Two entry points ship with the framework:
vaultspec-coreis the command-line interface (CLI) that manages your workspace. It installs, syncs, and validates framework resources. See the CLI reference for the full command surface.- MCP server exposes vault discovery and document creation to Model Context Protocol
(MCP) clients like Claude Code. Invoke it with
uv run python -m vaultspec_core.mcp_server.app. Avaultspec-mcpconsole script is also installed, but module invocation avoids binary locking on Windows. See the MCP reference for setup and tool documentation.
The framework manual walks through the development workflow and explains how to customize rules, skills, agents, and system prompts.
Getting started
Prerequisites
- Python 3.13 or later
pipfor the published package, or uv for source development
Install
Install the published package:
pip install vaultspec-core
vaultspec-core --version
For source development:
git clone https://github.com/wgergely/vaultspec-core.git
cd vaultspec-core
uv sync
uv run vaultspec-core --version
Initialize a workspace
vaultspec-core install --target ./my-project
This scaffolds .vaultspec/ and .vault/ inside the target directory. It seeds builtin
resources such as rules, agents, skills, system prompts, templates, hooks, and MCP
definitions. It also syncs generated provider resources to the configured provider
destinations and writes an .mcp.json for MCP-capable clients.
Verify MCP config pickup with vaultspec-core spec mcps status --json; if the status is
not ok, run vaultspec-core sync and rerun the status command.
To install the framework plus one provider destination:
vaultspec-core install claude --target ./my-project
After editing any framework files under .vaultspec/, re-sync to push changes to
provider destinations:
vaultspec-core sync
Start using it
Open your AI tool in the project directory. The install step synced rules, skills,
system prompts, and agent personas into provider-specific destinations such as
.claude/, .gemini/, shared .agents/, and .codex/. It also wrote an .mcp.json
for MCP-capable clients. Your AI tool will pick these up automatically.
The framework requires research and architectural decisions before coding begins. Describe what you want to build in natural language:
"Research options for adding full-text search to the API"
The synced rules guide the AI through the pipeline. They produce structured research
findings in .vault/research/, then progress through architectural decisions, planning,
execution, and review. Each stage writes records to .vault/ and references the output
of earlier stages.
You can also invoke skills explicitly to start a specific stage. The pipeline skills
(vaultspec-research, vaultspec-adr, vaultspec-write, vaultspec-execute,
vaultspec-code-review) read the relevant vault records and structure the AI's output
accordingly. Supporting skills round out the workflow: vaultspec-code-research grounds
work in real reference implementations, vaultspec-documentation drafts user-facing
docs, and vaultspec-curate keeps the vault's links and tags healthy.
The framework manual walks through each stage in detail with examples.
The development workflow
Every feature flows through five stages. The AI does the analytical work; you approve each checkpoint before the next stage starts.
| Stage | You | The AI |
|---|---|---|
| Research | Review and approve the findings | Explores the problem, documents options |
| Decide | Approve the decision record | Drafts an ADR based on research |
| Plan | Review and approve the implementation plan | Breaks the decision into concrete steps |
| Execute | Stay available if the AI gets stuck | Works through each step autonomously |
| Review | Read the report and decide if the work ships | Audits the result, flags any issues |
Everything produced - findings, ADRs, plans, execution records, and review reports - is
saved in .vault/.
Working with the vault
The vaultspec-core vault command group manages documents in .vault/. A few common
operations:
# Scaffold a new document from a template
vaultspec-core vault add research --feature search-api
# List and inspect documents
vaultspec-core vault list --feature search-api
vaultspec-core vault stats --feature search-api
# Validate frontmatter, links, and cross-references (--fix to auto-repair)
vaultspec-core vault check all --fix
# Visualize the dependency graph for a feature
vaultspec-core vault graph --feature search-api
Valid document types are adr, audit, exec, plan, reference, and research.
Generated feature indexes live in .vault/index/ and are managed by
vaultspec-core vault feature index. See the
CLI reference for the full command surface.
Planning and execution
Implementation plans carry structure beyond a flat checklist. A plan declares a
complexity tier (L1 through L4) and organises work into an
Epic > Wave > Phase > Step hierarchy, so a large feature stays navigable as it grows.
The vaultspec-core vault plan command group is the canonical surface for that
structure:
# Inspect a plan's tier, counts, and completion
vaultspec-core vault plan status .vault/plan/2026-06-01-search-api-plan.md
# Validate convention compliance, then apply autofixes
vaultspec-core vault plan check .vault/plan/2026-06-01-search-api-plan.md --fix
Steps, phases, and waves are added, moved, and checked off through the
vaultspec-core vault plan step, vaultspec-core vault plan phase, and
vaultspec-core vault plan wave subcommands, which preserve canonical identifiers so
existing references never shift when work is inserted or removed. Completed features are
archived with vaultspec-core vault feature archive and restored with
vaultspec-core vault feature unarchive.
Schema migrations
When a release of vaultspec-core changes the on-disk shape of .vault/, a versioned
migration registry delivers the new layout. The registry replaces recurring pre-commit
migration hooks. Each registered migration runs once per upgrade and never again.
Three triggers cover every consumer path:
vaultspec-core install --upgraderuns every pending migration after re-seeding builtins.- Any
vaultspec-core vault ...command, for examplevaultspec-core vault add,vaultspec-core vault feature index, orvaultspec-core vault check, lazily applies pending migrations before its primary action. vaultspec-core migrations statusandvaultspec-core migrations rungive explicit control for operators who prefer manual application.
The lazy path keeps consumers current even if they never run
vaultspec-core install --upgrade.
The registry compares each migration's target_version against the workspace manifest's
vaultspec_version. Entries whose target exceeds the manifest run in version order. The
manifest version is bumped only after success. A migration that fails leaves the
manifest version unchanged, so the next invocation re-attempts it.
Further reading
| Guide | What it covers |
|---|---|
| Framework manual | Development workflow, skills, and customization |
| CLI reference | All commands, flags, and options for vaultspec-core |
| MCP reference | MCP server tools, setup, and configuration |
Getting help
Open an issue on GitHub.
Contributing and license
We welcome bug reports, feature ideas, and pull requests. Browse what's in progress on GitHub Issues.
vaultspec-core is released under the MIT License.
Project details
Release history Release notifications | RSS feed
Download files
Download the file for your platform. If you're not sure which to choose, learn more about installing packages.
Source Distribution
Built Distribution
Filter files by name, interpreter, ABI, and platform.
If you're not sure about the file name format, learn more about wheel file names.
Copy a direct link to the current filters
File details
Details for the file vaultspec_core-0.1.34.tar.gz.
File metadata
- Download URL: vaultspec_core-0.1.34.tar.gz
- Upload date:
- Size: 2.1 MB
- Tags: Source
- Uploaded using Trusted Publishing? Yes
- Uploaded via: uv/0.11.24 {"installer":{"name":"uv","version":"0.11.24","subcommand":["publish"]},"python":null,"implementation":{"name":null,"version":null},"distro":{"name":"Ubuntu","version":"24.04","id":"noble","libc":null},"system":{"name":null,"release":null},"cpu":null,"openssl_version":null,"setuptools_version":null,"rustc_version":null,"ci":true}
File hashes
| Algorithm | Hash digest | |
|---|---|---|
| SHA256 |
66dc10713572455f79cc2b25b322ff1ecfe1b288407e009c78859b1239de03bc
|
|
| MD5 |
ca9501de9115edd968fd6f89e8e0d7be
|
|
| BLAKE2b-256 |
396f5b77d53f8ff00d9f6b2d17e7941760cd5ff58086ef872b5424444d1811c6
|
File details
Details for the file vaultspec_core-0.1.34-py3-none-any.whl.
File metadata
- Download URL: vaultspec_core-0.1.34-py3-none-any.whl
- Upload date:
- Size: 904.4 kB
- Tags: Python 3
- Uploaded using Trusted Publishing? Yes
- Uploaded via: uv/0.11.24 {"installer":{"name":"uv","version":"0.11.24","subcommand":["publish"]},"python":null,"implementation":{"name":null,"version":null},"distro":{"name":"Ubuntu","version":"24.04","id":"noble","libc":null},"system":{"name":null,"release":null},"cpu":null,"openssl_version":null,"setuptools_version":null,"rustc_version":null,"ci":true}
File hashes
| Algorithm | Hash digest | |
|---|---|---|
| SHA256 |
dd62ec6c346419fd7b6c6a295a2249b18093e675465efd0ba1599e11b5b46696
|
|
| MD5 |
7d7a1488a815e173aa34d79215f37fdc
|
|
| BLAKE2b-256 |
c141c828a34389968a47031624daab7356e1ffe5ce749b6ff0760df0a6a708cb
|