Spectackle

Provider-agnostic AI governance rules for any project.

Spectackle is a framework that installs structured, spec-driven AI development rules into any codebase. It generates provider-specific configuration (CLAUDE.md, .kiro/steering/, .cursor/rules/, GEMINI.md, etc.) from a single source of truth — keeping AI agents disciplined and within safe boundaries.

Quick Start

Install into a project

bash spectackle/install.sh

Interactive installer walks you through:

• Scope: Install per-project or globally
• Providers: Choose which AI tools you use (Claude, Kiro, GitHub Copilot, Cursor, Gemini, Codex)
• Stack adapters: Auto-detect your runtime (Node.js, Python, Java, Drupal, Laravel, Django, Rails, Spring Boot, Quarkus, Shell, Cloudflare Workers)
• Auto-pilot: Optional orchestrator for running tasks in parallel across git worktrees

Report to Dashboard

spk report --api-key YOUR_KEY
# or
SPECTACKLE_API_KEY=YOUR_KEY spk report .

Sends repository metadata + rule hashes to spectackle.dev for drift detection.

What it does

Spectackle generates AI configuration from 6 core steering rules:

• AI Security — Prompt injection defense, protected paths, data handling
• Development Workflow — TDD sequence (Analyse → Propose → Apply), atomic commits
• Code Quality Gates — Coverage thresholds, linting rules, complexity limits
• Architecture Decisions — ADR template, SOLID principles, code organization
• TDD Methodology — Red-Green-Refactor cycle, validation commands
• Autonomous Development — Git worktree strategy, parallel task execution

Each adapter (Claude, Kiro, Copilot, Cursor, Gemini, Codex) translates these rules into its native format — keeping your governance consistent across providers.

Key differentiator: Cloudflare Workers

Spectackle is the only AI governance framework with first-class Cloudflare Workers support. The adapter:

• Blocks wrangler deploy (human-only gate)
• Blocks wrangler d1 export and remote SQL queries (data exfiltration prevention)
• Blocks wrangler tail / wrangler logpush (live log exfiltration prevention)
• Protects .dev.vars secrets
• Requires explicit human approval for --env production and --remote

Available Stack Adapters

Enforce command boundaries and best practices per runtime:

• Cloudflare Workers (CF-specific governance)
• Node.js / Express
• Python / Django
• Java / Spring Boot / Quarkus
• Drupal
• Laravel / Rails
• Shell Script

Commands

spk init                # Install into project or globally
spk add-skill <name>    # Install a skill into all active providers
spk sync                # Refresh steering files and project skills (context-aware triggers)
spk update              # Check and update local steering rules
spk upgrade             # Self-upgrade Spectackle CLI
spk set-adapter <name>  # Configure stack adapter for the project
spk create-adapter      # Scaffold a new stack adapter
spk create-skill        # Scaffold a new skill (V2 Consultative)
spk list-skills         # List available skills (bundled + remote registry)
spk report              # Send project status to Dashboard API
spk fleet <dir>         # Fleet status across multiple repos (dir = parent directory to scan, default: ..)
spk status <dir>        # Show installed providers and skills (dir = single project, default: .)
spk validate-skill      # Validate a SKILL.md against spec
spk test-skill          # Behavioral audit of a skill (V2)
spk auto-pilot          # Run autonomous development from local tasks.yaml (GitLab issue queue: planned)
spk harden              # Security hardening workflow (init/list/status)
spk tracking            # Manage finding lifecycle (list/show/close/reopen)
spk work                # Persistent workflow state (list/start/show/advance/done)
spk repair              # Reconcile stale file references in Spectackle state

Architecture

spectackle/
├── install.sh                  # Interactive entry point
├── spk                         # CLI dispatcher
├── report                      # Dashboard reporting
├── adapters/
│   ├── claude.sh / kiro.sh / copilot.sh / cursor.sh / gemini.sh / codex.sh
│   ├── stack-adapter-dispatcher.sh
│   └── stacks/
│       ├── cloudflare-workers/
│       ├── node-express/
│       ├── django/
│       ├── spring-boot/
│       └── ...
├── source/
│   ├── steering/               # 6 core governance rules
│   └── prompts/                # Slash command templates
├── skills/                     # Custom skills registry
├── auto-pilot/                 # Parallel orchestrator
└── ci/                         # GitHub Actions + GitLab CI/CD

Dashboard

spectackle.dev — Fleet management console

Documentation

• docs.spectackle.dev — Full documentation
• CLAUDE.md — Claude Code setup and constraints
• GEMINI.md — Google Gemini setup
• AGENTS.md — Agent orchestration guide
• CONTRIBUTING.md — Contributor guide

License

Spectackle is maintained by Revax Intelligence Lab.

• CLI & Core Rules: Free and open source
• Dashboard & Fleet Management: SaaS via spectackle.dev