@gobing-ai/spur 0.3.26 → 0.3.28

package/config/rules/recommended-pre-check.yaml

@@ -12,3 +12,4 @@ extends:
   - boundary
   - surface
   - ui
+  - strict

package/config/rules/strict/runtime-boundaries.yaml

@@ -1,11 +1,5 @@
 $schema: "@gobing-ai/spur/schemas/rule-file.schema.json"
-# [STRICT — opt-in] Runtime boundaries. Absorbed from
-# ts-libs/.spur/rules/typescript/runtime-boundaries.yaml. NOT in
-# recommended-pre-check: Spur consumes ts-runtime's ProcessExecutor/FileSystem
-# seams but also does light direct fs/spawn at app edges, so these run as
-# opt-in hygiene with explicit allowlists for the sanctioned sites.
-# `no-direct-process-env` is intentionally omitted — config-from-env is Spur's
-# design (packages/config, apps/cli/context).
+# Runtime boundaries: process execution and fs IO hygiene.
 include:
   - "apps/**/src/**/*.ts"
   - "packages/**/src/**/*.ts"
@@ -17,8 +11,11 @@ exclude:
 
 rules:
   - id: no-direct-process-spawn
-    description: "Agent/process execution must go through ts-ai-runner / ts-runtime's ProcessExecutor. The only sanctioned direct spawn is `spur agent edit` opening $EDITOR."
-    severity: warning
+    description: >
+      Process execution must go through @gobing-ai/ts-runtime ProcessExecutor
+      (or ts-ai-runner for agents). Do not call Bun.spawn/spawnSync, import
+      node:child_process, or pull in execa/zx at app/package sources.
+    severity: error
     evaluator:
       type: forbidden-import
       config:
@@ -37,11 +34,9 @@ rules:
             - "**/tests/**"
             - "**/*.test.ts"
             - "**/dist/**"
-            # `spur agent edit` opens the operator's $EDITOR interactively.
-            - "apps/cli/src/commands/agent.ts"
 
   - id: no-direct-fs-io
-    description: "Prefer ts-runtime's FileSystem seam for fs IO. Light direct fs at app edges (service stat/access, migration loading) is allowlisted."
+    description: "Prefer ts-runtime's FileSystem seam for fs IO."
     severity: warning
     evaluator:
       type: forbidden-import
@@ -59,7 +54,19 @@ rules:
             - "**/tests/**"
             - "**/*.test.ts"
             - "**/dist/**"
-            # Sanctioned direct-fs sites (no local FileSystem seam re-implemented):
-            - "packages/app/src/services/workflow-service.ts"
-            - "packages/app/src/services/agent-service.ts"
-            - "packages/domain/src/migrations.ts"
+
+            # Low-level system primitives (O_EXCL locks, FD byte-tailing, FS watcher, atomic registry, Vite glob fallback):
+            - "packages/domain/src/planning/locks.ts" # POSIX atomic O_EXCL file locks
+            - "packages/app/src/services/token-ledger-service.ts" # FD byte-window log tailing
+            - "packages/app/src/services/token-ledger-watcher.ts" # node:fs watch() live watcher
+            - "packages/app/src/services/project-registry.ts" # atomic projects.json persistence
+            - "apps/web/src/modules/discover.ts" # Vite/Astro module scanner fallback under bun test
+
+            # Synchronous bootstrap & path resolution:
+            - "packages/config/src/bundled-config.ts" # sync bundledConfigRoot() directory walk
+            - "packages/config/src/loader.ts" # sync resolveConfigFile() / schema specifier lookup
+            - "packages/app/src/services/project-start.ts" # sync CLI binary path checks before daemon spawn
+
+            # Synchronous template & workflow resolvers:
+            - "apps/cli/src/commands/task.ts" # sync loadTemplateContent/Bodies callbacks
+            - "apps/cli/src/workflow/make-lifecycle-adapter.ts" # sync resolveWorkflowPath lookup

package/config/rules/ui/ui-import-boundary.yaml

@@ -34,14 +34,17 @@ rules:
     description: >
       daisyUI COMPONENT classes (btn, card, badge, modal, ...) must not appear in
       className strings outside `apps/web/src/components/ui/`. Layout/utility classes
-      (flex, grid, gap-*, p-*) are unaffected — the pattern is anchored to a
-      className context and word-bounded to the component-class allowlist only.
-      `components/ui/` stays excluded: it is the sanctioned class-authoring site.
+      (flex, grid, gap-*, p-*, select-none, [user-select:none]) are unaffected -
+      the pattern is anchored to a className context and word-bounded to the
+      component-class allowlist only. `select` is matched as a standalone class
+      token (followed by whitespace or quote) to avoid colliding with Tailwind's
+      `select-*` utilities and CSS `user-select` property. `components/ui/` stays
+      excluded: it is the sanctioned class-authoring site.
     severity: error
     evaluator:
       type: rg
       config:
-        pattern: "className=[\"'][^\"']*\\b(btn|card|badge|modal|menu|navbar|drawer|tabs|alert|dropdown|collapse|join|tooltip|loading|select|checkbox|toggle)\\b"
+        pattern: "className=[\"'][^\"']*\\b(btn|card|badge|modal|menu|navbar|drawer|tabs|alert|dropdown|collapse|join|tooltip|loading|checkbox|toggle)\\b|className=[\"'][^\"']*\\bselect[\\s\"']"
     include:
       - "apps/web/src/**/*.tsx"
     exclude:

package/config/tasks/section-matrix.yaml

@@ -135,25 +135,25 @@ variants:
   meta:
     backlog:
       required: [Background]
-      optional: [Requirements, Acceptance Criteria, Q&A, Design, Plan, Solution, Testing, Review]
+      optional: [Requirements, Acceptance Criteria, Q&A, Design, Plan, Root Cause, Solution, Testing, Review]
     todo:
       required: [Background, Plan]
-      optional: [Requirements, Acceptance Criteria, Q&A, Design, Solution, Testing, Review]
+      optional: [Requirements, Acceptance Criteria, Q&A, Design, Root Cause, Solution, Testing, Review]
     wip:
       required: [Background, Plan]
-      optional: [Requirements, Acceptance Criteria, Q&A, Design, Solution, Testing, Review]
+      optional: [Requirements, Acceptance Criteria, Q&A, Design, Root Cause, Solution, Testing, Review]
     testing:
       required: [Background, Plan]
-      optional: [Requirements, Acceptance Criteria, Q&A, Design, Solution, Testing, Review]
+      optional: [Requirements, Acceptance Criteria, Q&A, Design, Root Cause, Solution, Testing, Review]
     done:
       required: [Background, Plan]
-      optional: [Requirements, Acceptance Criteria, Q&A, Design, Solution, Testing, Review]
+      optional: [Requirements, Acceptance Criteria, Q&A, Design, Root Cause, Solution, Testing, Review]
     blocked:
       required: [Background]
-      optional: [Requirements, Acceptance Criteria, Q&A, Design, Plan, Solution, Testing, Review]
+      optional: [Requirements, Acceptance Criteria, Q&A, Design, Plan, Root Cause, Solution, Testing, Review]
     cancelled:
       required: []
-      optional: [Background, Requirements, Acceptance Criteria, Q&A, Design, Plan, Solution, Testing, Review]
+      optional: [Background, Requirements, Acceptance Criteria, Q&A, Design, Plan, Root Cause, Solution, Testing, Review]
 
   # Brainstorm template (minimal idea capture).
   brainstorm:

package/config/templates/AGENTS.md

@@ -33,10 +33,10 @@ All product development work goes through the harness by default.
 ### Harness tool routing
 
 | Need | Route to | Avoid |
-|------|----------|--------|
+| ------ | ---------- | -------- |
 | Plan a feature (intake → AC → tasks) | `/sp:dev-plan`, `/sp:dev-idea` | Freeform feature files without gates |
-| Drive one task end-to-end | `/sp:dev-run <wbs>` or **`sp:super-coder`** | Implement with no task / no pipeline |
-| Batch or parallel task runs | `/sp:dev-runall`, `/sp:dev-parallel` → **`sp:super-coder`** | Unordered multi-task thrash |
+| Drive one task end-to-end | `/sp:dev-run <wbs>` or **`sp:super-planner`** | Implement with no task / no pipeline |
+| Batch or parallel task runs | `/sp:dev-runall`, `/sp:dev-parallel` → **`sp:super-planner`** | Unordered multi-task thrash |
 | Batch-refine tasks under a feature | `/sp:dev-refineall --feature <id> --auto` | Hand-looping `/sp:dev-refine` per WBS |
 | Multi-step corpus CLI (tasks/features/rules/workflows) | **`sp:expert-spur`** | Raw Write/Edit on corpus files |
 | Look up `spur` verbs / flags / `--json` | Skill **`sp:spur-cli`** | Inventing flags from memory |
@@ -59,7 +59,7 @@ All product development work goes through the harness by default.
 2. **Gates before done** — `spur task check` / `spur feature check` / `spur rule run`; pipeline done
    needs a real verify **PASS**.
 3. **`--json` for machines** — parse CLI with `--json`.
-4. **Route, don’t invent** — verbs → `sp:spur-cli`; lifecycle → `/sp:dev-*` / `sp:super-coder`;
+4. **Route, don’t invent** — verbs → `sp:spur-cli`; lifecycle → `/sp:dev-*` / `sp:super-planner`;
    multi-noun corpus → `sp:expert-spur`; review → `sp:super-reviewer`; docs process → `sp:doc-evolve`.
 5. **Keep tool ownership explicit** — project lifecycle/corpus/gates → Spur; plugin installation and
    capability lifecycle → Superskill. Do not hand-maintain per-platform adapters Superskill generates.
@@ -84,7 +84,7 @@ authority first, then derived docs, then this file.
 ### Doc map
 
 | Doc | Owns | Authority | When |
-|------|------|-----------|------|
+| ------ | ------ | ----------- | ------ |
 | `docs/00_ADR.md` | **WHY** | Authoritative (content) | Structural change; dated entry before diverging |
 | `docs/01_PRD.md` | **WHAT** | Authoritative on scope | New feature/command |
 | `docs/02_ROADMAP.md` | **WHEN** | Derived | Phase placement |
@@ -134,7 +134,7 @@ _(Fill from package manifests / README — or during `sp:doc-evolve` customize.)
 ## Spur CLI surface
 
 **Not the verb catalog.** For `task` / `feature` / `rule` / `workflow` flags, exit codes, and
-`--json` shapes → skill **`sp:spur-cli`**. Lifecycle → `/sp:dev-*` / **`sp:super-coder`**.
+`--json` shapes → skill **`sp:spur-cli`**. Lifecycle → `/sp:dev-*` / **`sp:super-planner`**.
 Multi-noun corpus campaigns → **`sp:expert-spur`**.
 
 ```bash

package/config/workflows/task-pipeline.yaml

@@ -20,6 +20,15 @@
 kind: state-machine
 name: task-pipeline
 description: "Standard task execution pipeline (precheck → implement → test → review → approve → verify → record → done)"
+# Task entity lifecycle (owned by task-lifecycle.yaml):
+#   normal: backlog → todo → wip → testing → done
+#   blocked is bidirectional with todo/wip/testing; done may reopen to wip.
+#   any non-terminal state may transition to cancelled.
+# Guards:
+#   wip → testing:  spur task check <wbs>
+#   testing → done: spur task check <wbs> --strict-core, then PASS-verdict provenance
+# Invalid: todo → testing, todo → done, and wip → done.
+# Pipeline states below are orchestration states, not task statuses.
 iterationBound: 20
 initialState: precheck
 terminalStates:
@@ -40,7 +49,15 @@ vars:
   # Step-level timeout for agent.run steps in milliseconds. A timed-out agent
   # subprocess is killed (not abandoned) and the step fails → pipeline routes to
   # `failed`. Override per run with `--vars '{"stepTimeoutMs":120000}'`.
-  stepTimeoutMs: "600000"
+  # Raised 600s → 1800s (task 0398 R4). The H6 dogfood batch lost 3 of its 4
+  # timeouts on `test` steps hitting exactly the 600s wall (0391, 0395 test;
+  # `.spur/run/*-test-partial.md`), the same failure signature that justified
+  # implementTimeoutMs below. Agentic test/review/verify steps read the diff,
+  # run the suite, and write a section — that does not fit in 10 min on this
+  # corpus. Same honesty rule as implementTimeoutMs: 30 min is headroom, not a
+  # licence to run unbounded. If a step still hits this wall, STOP and record it
+  # rather than raising again without operator sign-off.
+  stepTimeoutMs: "1800000"
   # Timeout for the `implement` step specifically (R2a). Implementation is the
   # heaviest agent.run step (full read/write/test-probe loop) and has timed out
   # at the 600s default in five consecutive dogfood runs (bugs 742/744/746/748),

package/package.json

@@ -1,6 +1,6 @@
 {
     "name": "@gobing-ai/spur",
-    "version": "0.3.26",
+    "version": "0.3.28",
     "description": "Spur CLI — local-first harness for mainstream coding agents: constraint checking, workflow orchestration, agent health, and history analytics. Bun-native; exposes the `spur` command.",
     "keywords": [
         "spur",
@@ -50,14 +50,14 @@
     },
     "devDependencies": {
         "@commander-js/extra-typings": "^14.0.0",
-        "@gobing-ai/ts-db": "^0.4.14",
-        "@gobing-ai/ts-ai-runner": "^0.4.14",
-        "@gobing-ai/ts-dual-workflow-engine": "^0.4.14",
-        "@gobing-ai/ts-infra": "^0.4.14",
-        "@gobing-ai/ts-llm-jsonl-importer": "^0.4.14",
-        "@gobing-ai/ts-rule-engine": "^0.4.14",
-        "@gobing-ai/ts-runtime": "^0.4.14",
-        "@gobing-ai/ts-utils": "^0.4.14",
+        "@gobing-ai/ts-db": "^0.4.15",
+        "@gobing-ai/ts-ai-runner": "^0.4.15",
+        "@gobing-ai/ts-dual-workflow-engine": "^0.4.15",
+        "@gobing-ai/ts-infra": "^0.4.15",
+        "@gobing-ai/ts-llm-jsonl-importer": "^0.4.15",
+        "@gobing-ai/ts-rule-engine": "^0.4.15",
+        "@gobing-ai/ts-runtime": "^0.4.15",
+        "@gobing-ai/ts-utils": "^0.4.15",
         "@types/bun": "1.3.14",
         "@types/figlet": "^1.7.0",
         "@types/node-notifier": "8.0.5",