@gobing-ai/spur 0.3.25 → 0.3.27

package/config/rules/recommended-pre-check.yaml

@@ -12,3 +12,4 @@ extends:
   - boundary
   - surface
   - ui
+  - strict

package/config/rules/strict/runtime-boundaries.yaml

@@ -1,11 +1,5 @@
 $schema: "@gobing-ai/spur/schemas/rule-file.schema.json"
-# [STRICT — opt-in] Runtime boundaries. Absorbed from
-# ts-libs/.spur/rules/typescript/runtime-boundaries.yaml. NOT in
-# recommended-pre-check: Spur consumes ts-runtime's ProcessExecutor/FileSystem
-# seams but also does light direct fs/spawn at app edges, so these run as
-# opt-in hygiene with explicit allowlists for the sanctioned sites.
-# `no-direct-process-env` is intentionally omitted — config-from-env is Spur's
-# design (packages/config, apps/cli/context).
+# Runtime boundaries: process execution and fs IO hygiene.
 include:
   - "apps/**/src/**/*.ts"
   - "packages/**/src/**/*.ts"
@@ -17,8 +11,11 @@ exclude:
 
 rules:
   - id: no-direct-process-spawn
-    description: "Agent/process execution must go through ts-ai-runner / ts-runtime's ProcessExecutor. The only sanctioned direct spawn is `spur agent edit` opening $EDITOR."
-    severity: warning
+    description: >
+      Process execution must go through @gobing-ai/ts-runtime ProcessExecutor
+      (or ts-ai-runner for agents). Do not call Bun.spawn/spawnSync, import
+      node:child_process, or pull in execa/zx at app/package sources.
+    severity: error
     evaluator:
       type: forbidden-import
       config:
@@ -37,11 +34,9 @@ rules:
             - "**/tests/**"
             - "**/*.test.ts"
             - "**/dist/**"
-            # `spur agent edit` opens the operator's $EDITOR interactively.
-            - "apps/cli/src/commands/agent.ts"
 
   - id: no-direct-fs-io
-    description: "Prefer ts-runtime's FileSystem seam for fs IO. Light direct fs at app edges (service stat/access, migration loading) is allowlisted."
+    description: "Prefer ts-runtime's FileSystem seam for fs IO."
     severity: warning
     evaluator:
       type: forbidden-import
@@ -59,7 +54,19 @@ rules:
             - "**/tests/**"
             - "**/*.test.ts"
             - "**/dist/**"
-            # Sanctioned direct-fs sites (no local FileSystem seam re-implemented):
-            - "packages/app/src/services/workflow-service.ts"
-            - "packages/app/src/services/agent-service.ts"
-            - "packages/domain/src/migrations.ts"
+
+            # Low-level system primitives (O_EXCL locks, FD byte-tailing, FS watcher, atomic registry, Vite glob fallback):
+            - "packages/domain/src/planning/locks.ts" # POSIX atomic O_EXCL file locks
+            - "packages/app/src/services/token-ledger-service.ts" # FD byte-window log tailing
+            - "packages/app/src/services/token-ledger-watcher.ts" # node:fs watch() live watcher
+            - "packages/app/src/services/project-registry.ts" # atomic projects.json persistence
+            - "apps/web/src/modules/discover.ts" # Vite/Astro module scanner fallback under bun test
+
+            # Synchronous bootstrap & path resolution:
+            - "packages/config/src/bundled-config.ts" # sync bundledConfigRoot() directory walk
+            - "packages/config/src/loader.ts" # sync resolveConfigFile() / schema specifier lookup
+            - "packages/app/src/services/project-start.ts" # sync CLI binary path checks before daemon spawn
+
+            # Synchronous template & workflow resolvers:
+            - "apps/cli/src/commands/task.ts" # sync loadTemplateContent/Bodies callbacks
+            - "apps/cli/src/workflow/make-lifecycle-adapter.ts" # sync resolveWorkflowPath lookup

package/config/rules/ui/ui-import-boundary.yaml

@@ -34,14 +34,17 @@ rules:
     description: >
       daisyUI COMPONENT classes (btn, card, badge, modal, ...) must not appear in
       className strings outside `apps/web/src/components/ui/`. Layout/utility classes
-      (flex, grid, gap-*, p-*) are unaffected — the pattern is anchored to a
-      className context and word-bounded to the component-class allowlist only.
-      `components/ui/` stays excluded: it is the sanctioned class-authoring site.
+      (flex, grid, gap-*, p-*, select-none, [user-select:none]) are unaffected -
+      the pattern is anchored to a className context and word-bounded to the
+      component-class allowlist only. `select` is matched as a standalone class
+      token (followed by whitespace or quote) to avoid colliding with Tailwind's
+      `select-*` utilities and CSS `user-select` property. `components/ui/` stays
+      excluded: it is the sanctioned class-authoring site.
     severity: error
     evaluator:
       type: rg
       config:
-        pattern: "className=[\"'][^\"']*\\b(btn|card|badge|modal|menu|navbar|drawer|tabs|alert|dropdown|collapse|join|tooltip|loading|select|checkbox|toggle)\\b"
+        pattern: "className=[\"'][^\"']*\\b(btn|card|badge|modal|menu|navbar|drawer|tabs|alert|dropdown|collapse|join|tooltip|loading|checkbox|toggle)\\b|className=[\"'][^\"']*\\bselect[\\s\"']"
     include:
       - "apps/web/src/**/*.tsx"
     exclude:

package/config/tasks/section-matrix.yaml

@@ -135,25 +135,25 @@ variants:
   meta:
     backlog:
       required: [Background]
-      optional: [Requirements, Acceptance Criteria, Q&A, Design, Plan, Solution, Testing, Review]
+      optional: [Requirements, Acceptance Criteria, Q&A, Design, Plan, Root Cause, Solution, Testing, Review]
     todo:
       required: [Background, Plan]
-      optional: [Requirements, Acceptance Criteria, Q&A, Design, Solution, Testing, Review]
+      optional: [Requirements, Acceptance Criteria, Q&A, Design, Root Cause, Solution, Testing, Review]
     wip:
       required: [Background, Plan]
-      optional: [Requirements, Acceptance Criteria, Q&A, Design, Solution, Testing, Review]
+      optional: [Requirements, Acceptance Criteria, Q&A, Design, Root Cause, Solution, Testing, Review]
     testing:
       required: [Background, Plan]
-      optional: [Requirements, Acceptance Criteria, Q&A, Design, Solution, Testing, Review]
+      optional: [Requirements, Acceptance Criteria, Q&A, Design, Root Cause, Solution, Testing, Review]
     done:
       required: [Background, Plan]
-      optional: [Requirements, Acceptance Criteria, Q&A, Design, Solution, Testing, Review]
+      optional: [Requirements, Acceptance Criteria, Q&A, Design, Root Cause, Solution, Testing, Review]
     blocked:
       required: [Background]
-      optional: [Requirements, Acceptance Criteria, Q&A, Design, Plan, Solution, Testing, Review]
+      optional: [Requirements, Acceptance Criteria, Q&A, Design, Plan, Root Cause, Solution, Testing, Review]
     cancelled:
       required: []
-      optional: [Background, Requirements, Acceptance Criteria, Q&A, Design, Plan, Solution, Testing, Review]
+      optional: [Background, Requirements, Acceptance Criteria, Q&A, Design, Plan, Root Cause, Solution, Testing, Review]
 
   # Brainstorm template (minimal idea capture).
   brainstorm:

package/config/workflows/task-pipeline.yaml

@@ -20,6 +20,15 @@
 kind: state-machine
 name: task-pipeline
 description: "Standard task execution pipeline (precheck → implement → test → review → approve → verify → record → done)"
+# Task entity lifecycle (owned by task-lifecycle.yaml):
+#   normal: backlog → todo → wip → testing → done
+#   blocked is bidirectional with todo/wip/testing; done may reopen to wip.
+#   any non-terminal state may transition to cancelled.
+# Guards:
+#   wip → testing:  spur task check <wbs>
+#   testing → done: spur task check <wbs> --strict-core, then PASS-verdict provenance
+# Invalid: todo → testing, todo → done, and wip → done.
+# Pipeline states below are orchestration states, not task statuses.
 iterationBound: 20
 initialState: precheck
 terminalStates:

package/package.json

@@ -1,6 +1,6 @@
 {
     "name": "@gobing-ai/spur",
-    "version": "0.3.25",
+    "version": "0.3.27",
     "description": "Spur CLI — local-first harness for mainstream coding agents: constraint checking, workflow orchestration, agent health, and history analytics. Bun-native; exposes the `spur` command.",
     "keywords": [
         "spur",