@gobing-ai/spur 0.3.13 → 0.3.15

package/spur.js

@@ -48,10 +48,7 @@ var __esm = (fn, res) => () => (fn && (res = fn(fn = 0)), res);
 var __require = import.meta.require;
 
 // ../../node_modules/.bun/@gobing-ai+ts-utils@0.4.10/node_modules/@gobing-ai/ts-utils/dist/errors.js
-function isAppError(error) {
-  return error instanceof AppError;
-}
-var ErrorCode, AppError, NotFoundError;
+var ErrorCode;
 var init_errors = __esm(() => {
   ErrorCode = {
     NotFound: "NOT_FOUND",
@@ -59,20 +56,6 @@ var init_errors = __esm(() => {
     Conflict: "CONFLICT",
     Internal: "INTERNAL"
   };
-  AppError = class AppError extends Error {
-    code;
-    constructor(code, message) {
-      super(message);
-      this.name = "AppError";
-      this.code = code;
-    }
-  };
-  NotFoundError = class NotFoundError extends AppError {
-    constructor(message) {
-      super(ErrorCode.NotFound, message);
-      this.name = "NotFoundError";
-    }
-  };
 });
 
 // ../../node_modules/.bun/@gobing-ai+ts-utils@0.4.10/node_modules/@gobing-ai/ts-utils/dist/api-response.js
@@ -50904,7 +50887,7 @@ class AgentService {
     return results.some((result) => !result.usable && result.tier === 1) ? 1 : 0;
   }
   async run(prompt, flags, deps) {
-    const outcome = await this.executeRun(prompt, flags, deps, false);
+    const outcome = await this.executeRun(prompt, flags, deps, { silent: false });
     if (!outcome.ok) {
       this.ctx.output.error(outcome.message);
       return outcome.exitCode;
@@ -50922,7 +50905,7 @@ class AgentService {
     return 3;
   }
   async runCapture(prompt, flags, deps) {
-    const outcome = await this.executeRun(prompt, flags, deps, true);
+    const outcome = await this.executeRun(prompt, flags, deps, { silent: true });
     if (!outcome.ok) {
       return { exitCode: outcome.exitCode, answer: "" };
     }
@@ -50936,7 +50919,25 @@ class AgentService {
       stderr: result.stderr
     };
   }
-  async executeRun(prompt, flags, deps, silent) {
+  async runTraced(prompt, flags, deps) {
+    const outcome = await this.executeRun(prompt, flags, deps, { silent: true, nonInteractive: true });
+    if (!outcome.ok) {
+      return { exitCode: outcome.exitCode, stdout: "", message: outcome.message };
+    }
+    const result = outcome.result;
+    const exitCode = result.exitCode === 0 ? 0 : 3;
+    return {
+      exitCode,
+      invocation: outcome.invocation,
+      stdout: result.stdout,
+      stderr: result.stderr,
+      durationMs: result.durationMs,
+      ...result.signal !== undefined ? { signal: result.signal } : {}
+    };
+  }
+  async executeRun(prompt, flags, deps, options) {
+    const silent = options.silent;
+    const nonInteractive = options.nonInteractive === true;
     const mode = stringFlag(flags, "mode", "text");
     if (mode !== "text" && mode !== "json") {
       return { ok: false, exitCode: 2, message: `Invalid mode: ${mode} (must be text or json)` };
@@ -50960,7 +50961,9 @@ class AgentService {
       return { ok: false, exitCode: 2, message: "Prompt is required" };
     }
     const jsonOutput = silent || booleanFlag(flags, "json");
-    const outputPolicy = jsonOutput ? { mode: "buffered" } : { mode: "stream", isTTY: isatty3(1) };
+    const forceBuffered = silent || nonInteractive;
+    const outputPolicy = forceBuffered ? { mode: "buffered" } : jsonOutput ? { mode: "buffered" } : { mode: "stream", isTTY: isatty3(1) };
+    const outputMode = outputPolicy.mode;
     const runner = deps?.runner ?? new AiRunner({
       processExecutor: new NodeProcessExecutor3({
         output: outputPolicy,
@@ -50979,7 +50982,8 @@ class AgentService {
     if (!jsonOutput && TIER2_AGENTS.has(agent)) {
       this.ctx.output.error(`Warning: ${agent} is a Tier-2 agent (TUI/gateway only)`);
     }
-    const input = prompt !== undefined && isClaudeStyleSlashCommand(prompt) ? translateSlashCommand(agent, prompt) : prompt;
+    const translated = prompt !== undefined && isClaudeStyleSlashCommand(prompt) ? translateSlashCommand(agent, prompt) : undefined;
+    const input = translated ?? prompt;
     const purpose = stringFlag(flags, "purpose", "") || undefined;
     const tags = parseTagsFlag(flags);
     const systemPrompt = stringFlag(flags, "system-prompt", "") || undefined;
@@ -50996,9 +51000,9 @@ class AgentService {
       ...systemPrompt !== undefined ? { systemPrompt } : {},
       ...taskId !== undefined ? { taskId } : {}
     };
+    let shimCommand;
     try {
-      const shim = getAgentShim(agent);
-      const shimCommand = shim.getPromptCommand(promptOptions);
+      shimCommand = typeof runner.buildPromptCommand === "function" ? runner.buildPromptCommand(agent, promptOptions, { cwd: cwd || undefined }) : getAgentShim(agent).getPromptCommand(promptOptions);
       if (!jsonOutput) {
         const version3 = (await detector.detectOne(agent)).version;
         this.ctx.output.error(`\u2699\uFE0F  ${agent}${version3 !== null ? ` v${version3}` : ""}
@@ -51007,6 +51011,21 @@ class AgentService {
     } catch (error51) {
       return { ok: false, exitCode: 2, message: error51 instanceof Error ? error51.message : String(error51) };
     }
+    const traceInput = input === undefined ? undefined : traceSafePrompt(input);
+    const invocation = {
+      agent,
+      source: resolved.source,
+      command: shimCommand.command,
+      argv: sanitizeInvocationArgv(shimCommand.args, input, traceInput),
+      ...cwd !== "" ? { cwd } : {},
+      mode,
+      outputMode,
+      ...timeoutMs !== undefined ? { timeoutMs } : {},
+      continue: continueFlag,
+      stdinInteractive: false,
+      ...model !== undefined ? { model } : {},
+      ...translated !== undefined && prompt !== undefined ? { translatedFrom: traceSafePrompt(prompt) } : {}
+    };
     let result;
     const controller = new AbortController;
     const onTerminate = () => controller.abort();
@@ -51024,7 +51043,7 @@ class AgentService {
       process.off("SIGTERM", onTerminate);
       process.off("SIGINT", onTerminate);
     }
-    return { ok: true, result };
+    return { ok: true, result, invocation };
   }
   async resolveAgent(prompt, flags, doctorRunner) {
     const raw = stringFlag(flags, "agent", "auto");
@@ -51148,6 +51167,32 @@ class AgentService {
 function toJson(value) {
   return JSON.stringify(value, null, 2);
 }
+function traceSafePrompt(prompt) {
+  const trimmed = prompt.trim();
+  if (!TRACE_SAFE_SLASH_COMMAND.test(trimmed)) {
+    return `[redacted prompt: ${prompt.length} chars]`;
+  }
+  const [command = "", ...tokens] = trimmed.split(/\s+/);
+  const safeTokens = tokens.map((token) => TRACE_SAFE_SLASH_TOKEN.test(token) ? token : "[redacted]");
+  return [command, ...safeTokens].join(" ");
+}
+function sanitizeInvocationArgv(argv, rawInput, traceInput) {
+  let redactNext = false;
+  return argv.map((arg) => {
+    if (redactNext) {
+      redactNext = false;
+      return "[redacted]";
+    }
+    if (SENSITIVE_FLAG.test(arg)) {
+      redactNext = true;
+      return arg;
+    }
+    if (rawInput !== undefined && traceInput !== undefined && arg.includes(rawInput)) {
+      return traceInput;
+    }
+    return arg.replace(SENSITIVE_INLINE_FLAG, "$1[redacted]").replace(/\bBearer\s+\S+/gi, "Bearer [redacted]").replace(/\b(?:sk|ghp|github_pat)-?[A-Za-z0-9_]{12,}\b/g, "[redacted]");
+  });
+}
 function extractPhase(prompt) {
   if (prompt === undefined)
     return;
@@ -51248,9 +51293,14 @@ function parseTagsFlag(flags) {
   const tags = raw.split(",").map((tag) => tag.trim()).filter(Boolean);
   return tags.length > 0 ? tags : undefined;
 }
+var TRACE_SAFE_SLASH_COMMAND, TRACE_SAFE_SLASH_TOKEN, SENSITIVE_FLAG, SENSITIVE_INLINE_FLAG;
 var init_agent_service = __esm(() => {
   init_dist7();
   init_dist5();
+  TRACE_SAFE_SLASH_COMMAND = /^(?:\/skill:(?:sp|rd3)-|\/(?:sp|rd3)[:-]|\$(?:sp|rd3)-)[A-Za-z0-9._-]+(?:\s|$)/;
+  TRACE_SAFE_SLASH_TOKEN = /^(?:\d{4}|--(?:auto|next|force|bdd)|--(?:mode|fix|focus)|implement|test|review|verify|all|none|blockers-first|quick|requirements|background|constraints|acceptance)$/;
+  SENSITIVE_FLAG = /^--?(?:api[-_]?key|authorization|credential|password|secret|token)$/i;
+  SENSITIVE_INLINE_FLAG = /^(--?(?:api[-_]?key|authorization|credential|password|secret|token)=).+$/i;
 });
 
 // ../../packages/domain/src/analytics/models.ts
@@ -58399,6 +58449,8 @@ var init_schema4 = __esm(() => {
     priority: exports_external.enum(PRIORITIES).optional(),
     tags: exports_external.array(exports_external.string()).optional(),
     dependencies: exports_external.array(exports_external.string()).optional(),
+    done_forced: exports_external.preprocess((v) => typeof v === "string" ? v === "true" : v, exports_external.boolean().optional()),
+    done_reason: exports_external.string().optional(),
     created_at: isoDateString,
     updated_at: isoDateString
   });
@@ -59046,6 +59098,110 @@ var init_corpus_migrator = __esm(() => {
   NULL_PRESERVING_KEYS = new Set(["parent_wbs"]);
 });
 
+// ../../packages/app/src/services/done-transition-guard.ts
+async function readVerdictArtifact(fs3, runDir, wbs) {
+  const path9 = `${runDir}/${wbs}-verdict.json`;
+  let exists2;
+  try {
+    exists2 = await fs3.exists(path9);
+  } catch {
+    exists2 = true;
+  }
+  if (!exists2) {
+    return { artifact: undefined, path: path9 };
+  }
+  let raw;
+  try {
+    raw = await fs3.readFile(path9);
+  } catch (err) {
+    return { artifact: undefined, path: path9, readError: `unreadable artifact: ${err.message}` };
+  }
+  let parsed;
+  try {
+    parsed = JSON.parse(raw);
+  } catch (err) {
+    return { artifact: undefined, path: path9, readError: `malformed JSON: ${err.message}` };
+  }
+  if (typeof parsed !== "object" || parsed === null || !("verdict" in parsed)) {
+    return { artifact: undefined, path: path9, readError: "missing required `verdict` field" };
+  }
+  return { artifact: parsed, path: path9 };
+}
+function computeAggregate(artifact) {
+  const reqs = artifact.requirements ?? [];
+  const acs = artifact.acceptanceCriteria ?? [];
+  if (reqs.length === 0 && acs.length === 0) {
+    return artifact.verdict;
+  }
+  if (reqs.some((r) => r.status === "UNMET") || acs.some((a2) => a2.status === "UNMET")) {
+    return "FAIL";
+  }
+  if (reqs.some((r) => r.status === "PARTIAL") || acs.some((a2) => a2.status === "PARTIAL")) {
+    return "PARTIAL";
+  }
+  return "PASS";
+}
+function formatDenialMessage(args) {
+  const { wbs, taskFilePath, verdictPath, verdict, inconsistency, artifact } = args;
+  const lines = [
+    `Cannot transition task ${wbs} to done: verify verdict is ${verdict}.`,
+    `  task:    ${taskFilePath}`,
+    `  verdict: ${verdictPath}`
+  ];
+  if (inconsistency) {
+    lines.push(`  warning: artifact is self-inconsistent \u2014 stored aggregate ${inconsistency.stored} contradicts rows (computed ${inconsistency.computed}). Treated as non-PASS.`);
+  }
+  const reqCount = artifact?.requirements?.length ?? 0;
+  const acCount = artifact?.acceptanceCriteria?.length ?? 0;
+  const rowCount = reqCount + acCount;
+  if (verdict === "UNKNOWN" && artifact !== undefined && (artifact.source === "spur-task-verdict" || rowCount === 0)) {
+    const source = artifact.source ?? "unknown";
+    lines.push(`  source:  ${source} artifact contains ${rowCount} structured row${rowCount === 1 ? "" : "s"} ` + `(${reqCount} requirement${reqCount === 1 ? "" : "s"}, ${acCount} AC${acCount === 1 ? "" : "s"}). ` + `UNKNOWN means the verify answer file carried no parseable markdown tables ` + `(\`| Req | Status | Evidence |\` and \`| AC | Status | Evidence Type | Evidence |\`).`);
+    lines.push(`           see sp:spur-cli \`tasks/verbs.md\` \xA7Answer-file shape for the expected format. ` + `Re-run \`/sp:dev-verify ${wbs}\` so the skill authors the tables; do not loosen the parser.`);
+  }
+  lines.push("  remediation: re-run `/sp:dev-verify " + wbs + "` until PASS, or override with `spur task update " + wbs + ' done --force-done --reason "<why>"`.');
+  return lines.join(`
+`);
+}
+function formatNoopMessage(wbs, status) {
+  return `${wbs}: already ${status} \u2014 no transition`;
+}
+function evaluateDoneTransition(input) {
+  const { wbs, taskFilePath, currentStatus, targetStatus, forced, reason, artifact } = input;
+  if (targetStatus === currentStatus) {
+    return { kind: "noop", fromStatus: currentStatus, message: formatNoopMessage(wbs, currentStatus) };
+  }
+  if (artifact === undefined) {
+    return { kind: "allow", reason: "no-artifact" };
+  }
+  if (forced) {
+    return { kind: "allow", reason: "forced" };
+  }
+  const computed = computeAggregate(artifact);
+  const effective = harshnessMax(artifact.verdict, computed);
+  if (effective === "PASS") {
+    return { kind: "allow", reason: "pass" };
+  }
+  const verdictPath = `.spur/run/${wbs}-verdict.json`;
+  const inconsistency = artifact.verdict !== computed ? { stored: artifact.verdict, computed } : undefined;
+  return {
+    kind: "deny",
+    verdict: effective,
+    message: formatDenialMessage({
+      wbs,
+      taskFilePath,
+      verdictPath,
+      verdict: effective,
+      inconsistency,
+      artifact
+    })
+  };
+}
+function harshnessMax(a2, b) {
+  const rank = { PASS: 0, UNKNOWN: 1, PARTIAL: 2, FAIL: 3 };
+  return rank[a2] >= rank[b] ? a2 : b;
+}
+
 // ../../packages/app/src/services/event-names.ts
 function event(name, source, renderer, payloadPolicy = "metadata-only", tier = "default") {
   return {
@@ -61467,6 +61623,10 @@ function isPlaceholderBody(body) {
   const stripped = body.replace(/<!--[\s\S]*?-->/g, "").replace(/^\s*>\s*TBD\s*$/gim, "").trim();
   return stripped.length === 0;
 }
+function isPlaceholderCell(cell) {
+  const c3 = cell.trim();
+  return c3 === "" || /^[\u2014\u2013-]+$/.test(c3) || /^n\/?a$/i.test(c3);
+}
 function hasPopulatedPriorityTable(body) {
   for (const line of body.split(`
 `)) {
@@ -61476,7 +61636,7 @@ function hasPopulatedPriorityTable(body) {
     const severityIdx = cells.findIndex((c3) => /^\s*P[1-4]\s*$/.test(c3));
     if (severityIdx === -1)
       continue;
-    const hasContent = cells.some((c3, i2) => i2 !== severityIdx && c3.trim().length > 0);
+    const hasContent = cells.some((c3, i2) => i2 !== severityIdx && !isPlaceholderCell(c3));
     if (hasContent)
       return true;
   }
@@ -61498,7 +61658,7 @@ function isReviewScaffold(body) {
       continue;
     const cells = line.split("|").map((c3) => c3.trim());
     const isSeparator = cells.every((c3) => c3 === "" || /^:?-+:?$/.test(c3));
-    const isEmptyPRow = cells.every((c3) => c3 === "" || /^P[1-4]$/.test(c3)) && cells.some((c3) => /^P[1-4]$/.test(c3));
+    const isEmptyPRow = cells.every((c3) => isPlaceholderCell(c3) || /^P[1-4]$/.test(c3)) && cells.some((c3) => /^P[1-4]$/.test(c3));
     const isHeader = cells.some((c3) => /severity|file|finding|recommendation/i.test(c3));
     if (isEmptyPRow)
       sawEmptyPRow = true;
@@ -61663,6 +61823,18 @@ var init_task_check = __esm(() => {
       }
     }
     async runL4(doc2, fm, findings, featuresDir, tasksDir) {
+      const template = typeof fm.template === "string" ? fm.template : DEFAULT_TASK_VARIANT;
+      if (template === DEFAULT_TASK_VARIANT) {
+        const designBody = doc2.getSection("Design");
+        if (designBody !== null && isPlaceholderBody(designBody)) {
+          findings.push({
+            layer: "L4",
+            severity: "warning",
+            section: "Design",
+            message: "Design section is present but empty (placeholder-only) \u2014 populate it so the task retains an explicit implementation approach"
+          });
+        }
+      }
       const featureId2 = fm.feature_id ?? fm["feature-id"];
       const parentWbs = fm.parent_wbs ?? fm["parent-wbs"];
       const deps = fm.dependencies;
@@ -62360,9 +62532,15 @@ class TaskService {
     return this.writeService.transition(ref, toStatus, actor ?? this.ctx.actor ?? "system");
   }
   async updateField(wbs, key, value) {
-    const allowed = new Set(["feature_id", "parent_wbs", "priority"]);
-    if (!allowed.has(key)) {
-      throw new Error(`Field "${key}" is not settable via update; allowed: ${[...allowed].join(", ")}.`);
+    const allowed = {
+      feature_id: true,
+      parent_wbs: true,
+      priority: true,
+      done_forced: true,
+      done_reason: true
+    };
+    if (!(key in allowed)) {
+      throw new Error(`Field "${key}" is not settable via update; allowed: ${Object.keys(allowed).join(", ")}.`);
     }
     const filePath = await this.resolveTaskFile(wbs);
     const ref = { kind: "task", id: wbs, filePath, folder: this.ctx.tasksDir };
@@ -63710,55 +63888,46 @@ class AgentRunActionRunner {
     const expectFile = asOptionalString(options.expectFile);
     const capture = asOptionalBoolean(options.capture) || answerFile !== undefined;
     const agentLabel = agent ?? "<default>";
-    if (capture) {
-      const captured = await this.agentService.runCapture(input, flags);
-      const { exitCode: exitCode2, answer } = captured;
-      const ok2 = exitCode2 === 0;
-      if (answerFile !== undefined) {
-        const target = isAbsolute2(answerFile) ? answerFile : join12(cwd, answerFile);
-        await mkdir(dirname10(target), { recursive: true });
-        await writeFile(target, answer, "utf8");
-      }
-      if (ok2 && expectFile !== undefined) {
-        const target = isAbsolute2(expectFile) ? expectFile : join12(cwd, expectFile);
-        if (!existsSync7(target)) {
-          return {
-            ok: false,
-            data: { exitCode: exitCode2, agent: agentLabel, answer },
-            error: `agent.run (${agentLabel}) exited 0 but expected file is absent: ${expectFile}`
-          };
-        }
-      }
-      if (!ok2) {
-        await writePartialWorkArtifact(context4, agentLabel, model, captured, cwd);
-      }
-      return {
-        ok: ok2,
-        data: { exitCode: exitCode2, agent: agentLabel, answer },
-        error: ok2 ? undefined : `agent.run (${agentLabel}) exited with code ${exitCode2}`,
-        setVars: ok2 ? { __agentSession: "open" } : undefined
-      };
-    }
-    const exitCode = await this.agentService.run(input, flags);
+    const traced = await this.agentService.runTraced(input, flags);
+    const { exitCode, stdout: answer } = traced;
     const ok = exitCode === 0;
+    const invocation = traced.invocation;
+    if (capture && answerFile !== undefined) {
+      const target = isAbsolute2(answerFile) ? answerFile : join12(cwd, answerFile);
+      await mkdir(dirname10(target), { recursive: true });
+      await writeFile(target, answer, "utf8");
+    }
     if (ok && expectFile !== undefined) {
       const target = isAbsolute2(expectFile) ? expectFile : join12(cwd, expectFile);
       if (!existsSync7(target)) {
         return {
           ok: false,
-          data: { exitCode, agent: agentLabel },
+          data: buildResultData(exitCode, agentLabel, capture, answer, invocation),
           error: `agent.run (${agentLabel}) exited 0 but expected file is absent: ${expectFile}`
         };
       }
     }
+    if (!ok) {
+      await writePartialWorkArtifact(context4, agentLabel, model, traced, cwd);
+    }
+    const stepLabel = context4.stateOrNodeId;
+    const error51 = ok ? undefined : traced.signal !== undefined ? timeoutMs !== undefined ? `agent.run '${stepLabel}' (${agentLabel}) terminated by signal ${traced.signal} (configured timeout: ${timeoutMs}ms; timeout or cancellation); see partial-work artifact` : `agent.run '${stepLabel}' (${agentLabel}) was cancelled by signal ${traced.signal}; see partial-work artifact` : traced.message !== undefined ? `agent.run '${stepLabel}' (${agentLabel}) dispatch failed: ${traced.message}` : `agent.run '${stepLabel}' (${agentLabel}) exited with code ${exitCode}`;
     return {
       ok,
-      data: { exitCode, agent: agentLabel },
-      error: ok ? undefined : `agent.run (${agentLabel}) exited with code ${exitCode}`,
+      data: buildResultData(exitCode, agentLabel, capture, answer, invocation),
+      error: error51,
       setVars: ok ? { __agentSession: "open" } : undefined
     };
   }
 }
+function buildResultData(exitCode, agentLabel, capture, answer, invocation) {
+  const data = { exitCode, agent: agentLabel };
+  if (capture)
+    data.answer = answer;
+  if (invocation !== undefined)
+    data.invocation = invocation;
+  return data;
+}
 function asOptionalString(value) {
   if (value === undefined || value === null)
     return;
@@ -63786,13 +63955,16 @@ function asOptionalNumber(value) {
   }
   return;
 }
-async function writePartialWorkArtifact(context4, agentLabel, model, captured, cwd) {
+async function writePartialWorkArtifact(context4, agentLabel, model, traced, cwd) {
   try {
-    const exitReason = captured.signal !== undefined ? `killed by signal ${captured.signal} (likely timeout)` : `exited with code ${captured.exitCode}`;
+    const signal = traced.signal;
+    const exitReason = signal !== undefined ? `killed by signal ${signal} (likely timeout or cancellation)` : traced.message !== undefined ? `dispatch error: ${traced.message}` : `exited with code ${traced.exitCode}`;
     const diffStat = await gitDiffStat(cwd);
-    const stdoutTail = tail(captured.answer, PARTIAL_ARTIFACT_TAIL_CHARS);
-    const stderrTail = tail(captured.stderr ?? "", PARTIAL_ARTIFACT_TAIL_CHARS);
+    const stdoutTail = tail(traced.stdout, PARTIAL_ARTIFACT_TAIL_CHARS);
+    const stderrTail = tail(traced.stderr ?? "", PARTIAL_ARTIFACT_TAIL_CHARS);
     const headerLine = model !== undefined ? `${agentLabel} (model: ${model})` : agentLabel;
+    const inv = traced.invocation;
+    const argvLine = inv ? `${inv.command} ${inv.argv.join(" ")}` : "(invocation not captured)";
     const body = [
       `# Partial-work handoff \u2014 ${headerLine}`,
       "",
@@ -63801,7 +63973,18 @@ async function writePartialWorkArtifact(context4, agentLabel, model, captured, c
       `- agent: ${agentLabel}`,
       `- model: ${model ?? "(default)"}`,
       `- exit reason: ${exitReason}`,
-      `- elapsed: ${captured.durationMs ?? "unknown"}ms`,
+      `- elapsed: ${traced.durationMs ?? "unknown"}ms`,
+      "",
+      "## resolved invocation",
+      "",
+      `- command: ${argvLine}`,
+      `- cwd: ${inv?.cwd ?? "(inherit)"}`,
+      `- mode: ${inv?.mode ?? "unknown"}`,
+      `- timeoutMs: ${inv?.timeoutMs ?? "(none)"}`,
+      `- continue: ${inv?.continue ?? false}`,
+      `- output: ${inv?.outputMode ?? "unknown"}`,
+      `- stdinInteractive: ${inv?.stdinInteractive ?? false}`,
+      `- translatedFrom: ${inv?.translatedFrom ?? "(none)"}`,
       "",
       "## git diff --stat",
       "```",
@@ -65068,6 +65251,7 @@ __export(exports_src2, {
   renderReview: () => renderReview,
   registerSystemEventTap: () => registerSystemEventTap,
   registerSpurBuiltins: () => registerSpurBuiltins,
+  readVerdictArtifact: () => readVerdictArtifact,
   readVerdict: () => readVerdict,
   parseVerdict: () => parseVerdict,
   parsePsOutput: () => parsePsOutput,
@@ -65077,10 +65261,14 @@ __export(exports_src2, {
   hitlConfirmDefault: () => hitlConfirmDefault,
   hitlAutoApproveEnabled: () => hitlAutoApproveEnabled,
   hasPopulatedPriorityTable: () => hasPopulatedPriorityTable,
+  formatNoopMessage: () => formatNoopMessage,
+  formatDenialMessage: () => formatDenialMessage,
   extractSystemEventActor: () => extractSystemEventActor,
   extractReviewSectionBody: () => extractReviewSectionBody,
+  evaluateDoneTransition: () => evaluateDoneTransition,
   deriveVerdict: () => deriveVerdict,
   createPsProcessInspector: () => createPsProcessInspector,
+  computeAggregate: () => computeAggregate,
   clampToolUseLimit: () => clampToolUseLimit,
   bridgeEventBus: () => bridgeEventBus,
   WorkflowAppService: () => WorkflowAppService,
@@ -73122,7 +73310,7 @@ import { join as join15, resolve as resolve5 } from "path";
 var CLI_CONFIG = {
   binaryName: "spur",
   binaryLabel: "spur",
-  binaryVersion: "0.3.13",
+  binaryVersion: "0.3.15",
   configDir: ".spur",
   configFile: ".spur/config.yaml",
   databaseFile: ".spur/spur.db"
@@ -78973,18 +79161,15 @@ var contextInjector = (appRt) => async function contextInjectorMiddleware(c3, ne
   await next();
 };
 
-// ../server/src/middleware/error-handler.ts
-init_dist();
-
 // ../server/src/errors.ts
-init_src3();
+init_errors5();
 
 // ../server/src/middleware/error-handler.ts
 function hasHttpStatus(err) {
   return typeof err === "object" && err !== null && "status" in err && typeof err.status === "number";
 }
 function isAppErrorLike(err) {
-  return isAppError(err);
+  return typeof err === "object" && err !== null && "code" in err && typeof err.code === "string" && "message" in err && typeof err.message === "string";
 }
 function errorEnvelope(code, message, details) {
   return { ok: false, error: { code, message, ...details !== undefined ? { details } : {} } };
@@ -79661,7 +79846,6 @@ var contract = {
 
 // ../server/src/modules/feature/handlers.ts
 init_schema4();
-init_dist();
 var os2 = implement(contract);
 function createResponseShape(r2) {
   return { id: r2.ref.id, filePath: r2.ref.filePath };
@@ -79684,7 +79868,7 @@ function createFeatureHandlers(ctx) {
     show: os2.feature.show.handler(async ({ input }) => {
       const result = await ctx.featureService().show(input.id);
       if (!result)
-        throw new NotFoundError(`Feature ${input.id} not found`);
+        throw new HTTPException(404, { message: `Feature ${input.id} not found` });
       return {
         ok: true,
         data: {
@@ -79713,7 +79897,7 @@ function createFeatureHandlers(ctx) {
       const folders = ctx.planningFolders();
       const feature = await ctx.featureService().show(input.id);
       if (!feature)
-        throw new NotFoundError(`Feature ${input.id} not found`);
+        throw new HTTPException(404, { message: `Feature ${input.id} not found` });
       const { FeatureCheckService: FeatureCheckService2 } = await Promise.resolve().then(() => (init_feature_check(), exports_feature_check));
       const svc = new FeatureCheckService2(ctx.fs);
       return {
@@ -79727,7 +79911,7 @@ function createFeatureHandlers(ctx) {
     body: os2.feature.body.handler(async ({ input }) => {
       const feature = await ctx.featureService().show(input.id);
       if (!feature)
-        throw new NotFoundError(`Feature ${input.id} not found`);
+        throw new HTTPException(404, { message: `Feature ${input.id} not found` });
       await ctx.featureService().updateBody(input.id, input.body);
       return { ok: true, data: {} };
     }),
@@ -79899,17 +80083,33 @@ function parseLimit(raw2, fallback) {
 }
 
 // ../server/src/modules/observability/index.ts
-init_src3();
 var ledgerWatcher;
+var ledgerWatcherLoad;
 var watcherPath;
-function getLedgerWatcher(path9) {
-  if (!ledgerWatcher || watcherPath !== path9) {
-    ledgerWatcher?.stop();
-    ledgerWatcher = new TokenLedgerWatcher({ ledgerPath: path9 });
-    watcherPath = path9;
-    ledgerWatcher.start();
+async function getLedgerWatcher(path9) {
+  if (watcherPath === path9) {
+    if (ledgerWatcher)
+      return ledgerWatcher;
+    if (ledgerWatcherLoad)
+      return ledgerWatcherLoad;
+  }
+  ledgerWatcher?.stop();
+  ledgerWatcher = undefined;
+  watcherPath = path9;
+  const load2 = Promise.resolve().then(() => (init_src3(), exports_src2)).then(({ TokenLedgerWatcher: TokenLedgerWatcher2 }) => {
+    const watcher2 = new TokenLedgerWatcher2({ ledgerPath: path9 });
+    watcher2.start();
+    return watcher2;
+  });
+  ledgerWatcherLoad = load2;
+  const watcher = await load2;
+  if (watcherPath === path9 && ledgerWatcherLoad === load2) {
+    ledgerWatcher = watcher;
+    ledgerWatcherLoad = undefined;
+  } else {
+    watcher.stop();
   }
-  return ledgerWatcher;
+  return watcher;
 }
 function toolUseSsePayload(event2) {
   return {
@@ -79924,7 +80124,7 @@ function handleProcesses(ctx) {
       const snapshot = await ctx.processInventory().snapshot();
       return c3.json(snapshot);
     } catch (err) {
-      if (err instanceof UnsupportedProcessPlatformError) {
+      if (err instanceof Error && "code" in err && err.code === "UNSUPPORTED_PLATFORM") {
         return c3.json({ error: err.message, code: err.code }, 501);
       }
       const message = err instanceof Error ? err.message : String(err);
@@ -79943,7 +80143,7 @@ function handleToolUseGet(ctx) {
           limitRaw = parsed;
       }
       const before = c3.req.query("before") ?? undefined;
-      const limit = clampToolUseLimit(limitRaw);
+      const limit = limitRaw === undefined || !Number.isFinite(limitRaw) || limitRaw <= 0 ? 200 : Math.min(limitRaw, 1000);
       const snapshot = ctx.tokenLedger().snapshot({ limit, before });
       return c3.json(snapshot);
     } catch (err) {
@@ -79972,7 +80172,7 @@ function handleToolUseStream(ctx) {
       closeController();
     };
     const stream = new ReadableStream({
-      start(controller) {
+      async start(controller) {
         const encoder = new TextEncoder;
         closeController = () => {
           try {
@@ -79985,17 +80185,17 @@ function handleToolUseStream(ctx) {
         }
         signal.addEventListener("abort", teardown);
         heartbeatInterval = setInterval(sendSseKeepalive, 15000, closed, controller, encoder);
-        enqueueSseFrame(closed, controller, encoder, {
-          type: "connected",
-          occurredAt: new Date().toISOString()
-        });
         try {
           const path9 = ctx.tokenLedger().path;
-          const watcher = getLedgerWatcher(path9);
+          const watcher = await getLedgerWatcher(path9);
           unsubscribe = watcher.subscribe((event2) => {
             if (!enqueueSseFrame(closed, controller, encoder, toolUseSsePayload(event2)))
               teardown();
           });
+          enqueueSseFrame(closed, controller, encoder, {
+            type: "connected",
+            occurredAt: new Date().toISOString()
+          });
         } catch {
           enqueueSseFrame(closed, controller, encoder, {
             type: "error",
@@ -80027,7 +80227,6 @@ var observabilityModule = {
 
 // ../server/src/modules/task/handlers.ts
 init_schema4();
-init_dist();
 var os3 = implement(contract);
 function toFilters(query) {
   if (!query)
@@ -80068,7 +80267,7 @@ function createTaskHandlers(ctx) {
     show: os3.task.show.handler(async ({ input }) => {
       const result = await ctx.taskService().show(input.wbs);
       if (!result)
-        throw new NotFoundError(`Task ${input.wbs} not found`);
+        throw new HTTPException(404, { message: `Task ${input.wbs} not found` });
       return {
         ok: true,
         data: {
@@ -83546,6 +83745,13 @@ var STATUS_TITLE = {
   done: "Done",
   cancelled: "Canceled"
 };
+function canonicalStatusOrRaw(raw2) {
+  try {
+    return normalizeTaskStatus(raw2);
+  } catch {
+    return raw2;
+  }
+}
 function renderTaskBoard(tasks, boardTitle, color, columns2) {
   const lines = ["", `  ${color.blue(`Kanban Board \u2014 ${boardTitle}`)}`, ""];
   for (const status of columns2) {
@@ -83631,7 +83837,7 @@ ${result.content}`);
       context4.setExitCode(1);
     }
   });
-  task.command("update").summary("Update a task status or replace a section.").argument("<wbs>", "Task WBS number").argument("[status]", "New status (for lifecycle transition)").option("--section <name>", "Section name to replace").option("--from-file <path>", "File to read section body from (requires --section)").option("--feature <id>", "Set the feature_id frontmatter field (traceability edge)").option("--priority <p>", "Set the priority frontmatter field (P0\u2013P3)").option("--no-lifecycle", "Suppress lifecycle workflow run creation (use during pipeline runs to avoid orphaned lifecycle runs)").option("--folder <path>", "Custom tasks folder").option("--json", "Output machine-readable JSON").action(async (wbs, status, options) => {
+  task.command("update").summary("Update a task status or replace a section.").argument("<wbs>", "Task WBS number").argument("[status]", "New status (for lifecycle transition)").option("--section <name>", "Section name to replace").option("--from-file <path>", "File to read section body from (requires --section)").option("--feature <id>", "Set the feature_id frontmatter field (traceability edge)").option("--priority <p>", "Set the priority frontmatter field (P0\u2013P3)").option("--no-lifecycle", "Suppress lifecycle workflow run creation (use during pipeline runs to avoid orphaned lifecycle runs)").option("--force-done", "Allow transitioning to `done` even when the verify verdict is not PASS; records an override (task 0292)").option("--reason <text>", "Rationale for a forced-done override (paired with --force-done; persisted as done_reason)").option("--verdict-dir <path>", "Directory holding <wbs>-verdict.json artifacts (default: .spur/run)").option("--folder <path>", "Custom tasks folder").option("--json", "Output machine-readable JSON").action(async (wbs, status, options) => {
     const svc = await makeService2(context4, options.folder, options.lifecycle === false);
     try {
       if (options.section !== undefined) {
@@ -83659,6 +83865,7 @@ ${result.content}`);
           context4.output.write(`Set ${key}=${value2} on task ${result.ref.id}`);
         }
       } else if (status !== undefined) {
+        status = canonicalStatusOrRaw(status);
         if (options.lifecycle !== false && (status === "done" || status === "testing")) {
           const adapter = makeLifecycleAdapter(context4, TASK_LIFECYCLE_PROFILE);
           if (adapter === undefined) {
@@ -83671,11 +83878,59 @@ ${result.content}`);
             }
           }
         }
+        let forcedDone = false;
+        let forcedDoneReason;
+        let forcedDoneVerdict;
+        if (status === "done") {
+          const current = await svc.show(wbs);
+          const verdictDir = options.verdictDir ?? join22(context4.cwd, ".spur", "run");
+          const loaded = await readVerdictArtifact(context4.fs, verdictDir, wbs);
+          const guardOutcome = evaluateDoneTransition({
+            wbs,
+            taskFilePath: current.filePath,
+            currentStatus: canonicalStatusOrRaw(String(current.frontmatter.status)),
+            targetStatus: "done",
+            forced: options.forceDone === true,
+            reason: options.reason,
+            artifact: loaded.artifact
+          });
+          if (guardOutcome.kind === "noop") {
+            if (options.json) {
+              context4.output.write(toJson2({ ok: true, noop: true, wbs, status: "done" }));
+            } else {
+              context4.output.write(guardOutcome.message);
+            }
+            return;
+          }
+          if (guardOutcome.kind === "deny") {
+            context4.output.error(guardOutcome.message);
+            context4.setExitCode(1);
+            return;
+          }
+          if (guardOutcome.reason === "forced" && loaded.artifact !== undefined) {
+            forcedDone = true;
+            forcedDoneReason = options.reason;
+            forcedDoneVerdict = loaded.artifact.verdict;
+          }
+        }
         const result = await svc.updateStatus(wbs, status);
+        if (forcedDone) {
+          try {
+            await svc.updateField(wbs, "done_forced", "true");
+            if (forcedDoneReason !== undefined && forcedDoneReason.length > 0) {
+              await svc.updateField(wbs, "done_reason", forcedDoneReason);
+            }
+          } catch (auditErr) {
+            context4.output.error(`warning: failed to record done-forced audit fields: ${String(auditErr)}`);
+          }
+        }
         if (options.json) {
           context4.output.write(toJson2(result));
         } else {
           context4.output.write(`${result.ref.id}: ${result.fromStatus} \u2192 ${result.toStatus}`);
+          if (forcedDone && forcedDoneVerdict !== undefined) {
+            context4.output.write(`\u24D8  Override recorded: task advanced to done despite ${forcedDoneVerdict} verdict (done_forced=true).`);
+          }
         }
         if (status === "done" && !options.json) {
           const task2 = await svc.show(wbs);