@gobing-ai/spur 0.3.36 → 0.3.38

package/config/corpus-baseline.json

@@ -15,34 +15,6 @@
             "reason": "GENUINE PRE-FIX BYPASS. Closed 2026-08-06, well after the rule existed (2026-07-24), via the `--no-lifecycle` hole closed on 2026-08-07. Its Solution needs one file:line citation. The only entry here representing real unpaid debt.",
             "since": "2026-08-07"
         },
-        {
-            "kind": "feature",
-            "id": "M",
-            "code": "L3.ac-bdd-error",
-            "reason": "CHECKER GAP, not corpus debt. M is a wayfinder MAP; its Acceptance Criteria section carries an explicit prose disclaimer ('This feature is a wayfinder MAP... It has no acceptance criteria — its target is the ## Goal'). The BDD validator requires a `Feature:` declaration and has no notion of the map feature type. Correct fix is to teach `feature check` about wayfinder maps, not to bolt fake Gherkin onto a map.",
-            "since": "2026-08-07"
-        },
-        {
-            "kind": "feature",
-            "id": "M",
-            "code": "L3.ac-bdd-invalid",
-            "reason": "Downstream of the M ac-bdd-error entry — same missing-Feature-declaration cause, reported twice by the validator.",
-            "since": "2026-08-07"
-        },
-        {
-            "kind": "feature",
-            "id": "F82",
-            "code": "L3.ac-bdd-error",
-            "reason": "CHECKER GAP, same class as M: wayfinder map with a deliberate no-AC prose disclaimer (plus a noted exception for two implementation-ready child tickets). Not a syntax error to fix.",
-            "since": "2026-08-07"
-        },
-        {
-            "kind": "feature",
-            "id": "F82",
-            "code": "L3.ac-bdd-invalid",
-            "reason": "Downstream of the F82 ac-bdd-error entry — same cause, reported twice.",
-            "since": "2026-08-07"
-        },
         {
             "kind": "feature",
             "id": "F821",

package/config/templates/AGENTS.md

@@ -140,7 +140,7 @@ spur <noun> <verb> … --json
 spur <noun> --help
 ```
 
-**Long-tail:** Additional `/sp:dev-*` commands (handover, gitmsg, fixall, dogfood, reverse, arch,
+**Long-tail:** Additional `/sp:dev-*` commands (handover, gitmsg, fixall, findconflict, dogfood, reverse, arch,
 …) are indexed in the project plugin README (`plugins/sp/README.md` when present).
 
 **Outside spur-cli:** Nouns not fully documented in `sp:spur-cli` (`agent`, `history`, `message`,

package/config/workflows/task-pipeline.yaml

@@ -57,9 +57,11 @@ vars:
   # `--vars '{"agent":"claude"}'`. Pinned (not left to the AiRunner's <default>
   # selection) so a broken/misconfigured agent on the box can't silently capture the run.
   agent: "omp"
-  # Implement-only executor override (R1, task 0454). Defaults to same as agent.
-  # Override with `--vars '{"implementAgent":"omp-zai"}'` to pin implement to a
-  # specific executor while other hops keep the default agent.
+  # Implement-only executor override (R1, task 0454). Resolves to this YAML literal
+  # unless overridden. The `--agent` flag (execution-batch.md §3.2) forwards into BOTH
+  # `agent` and `implementAgent`, so a pinned `--agent X` reaches implement too. To
+  # pin ONLY implement while other hops keep the default, pass
+  # `--vars '{"implementAgent":"omp-zai"}'`.
   implementAgent: "omp"
   # Step-level timeout for agentic hops (review / verify / test-fix) in ms.
   # Soft quality-gate shells are unbounded by this var (host shell only).
@@ -90,6 +92,12 @@ vars:
   # project can point it at its own formatter; invoked best-effort (a missing or
   # failing formatter must never abort a run — the quality gate is the real gate).
   formatCmd: "bun run format"
+  # Bounded `file:line` anchors extracted from the failing quality-gate log by the
+  # `test` / `test-recheck` hops (deduped, max 20, space-separated on one line).
+  # `test-fix` reads `.spur/run/<wbs>-test-gate.findings` into this var and names the
+  # anchors directly in the /sp:dev-fixall input, so the fix agent starts AT the failing
+  # file:line instead of re-deriving it from a fresh gate run (0482 R3).
+  gateFindings: ""
   # Max R-items in ## Requirements before size precheck fails (R2, task 0454).
   # Override with `--vars '{"maxImplementReqs":"12"}'`.
   maxImplementReqs: "5"
@@ -147,7 +155,7 @@ states:
             SIZE_FILE=".spur/run/$wbs-precheck-size.status" &&
             mkdir -p .spur/run &&
             bun plugins/sp/scripts/task-size-precheck.ts "$wbs"
-            --max-reqs "$maxImplementReqs" --max-plan-items "$maxImplementPlanItems" &&
+            --spur-bin "$spurBin" --max-reqs "$maxImplementReqs" --max-plan-items "$maxImplementPlanItems" &&
             exit 0
 
   - id: implement
@@ -214,10 +222,14 @@ states:
           command: >-
             mkdir -p .spur/run &&
             STATUS_FILE=".spur/run/$wbs-test-gate.status" &&
+            LOG_FILE=".spur/run/$wbs-test-gate.log" &&
             ATTEMPT_FILE=".spur/run/$wbs-test-fix-attempt" &&
             echo 0 > "$ATTEMPT_FILE" &&
             set +e &&
-            ( sh -c "$qualityGateCmd" ); gate_rc=$?; set -e &&
+            ( sh -c "$qualityGateCmd" ) > "$LOG_FILE" 2>&1; gate_rc=$?; set -e &&
+            cat "$LOG_FILE" &&
+            FINDINGS_FILE=".spur/run/$wbs-test-gate.findings" &&
+            set +e; grep -oE '[A-Za-z0-9_./-]+\.[A-Za-z]+:[0-9]+' "$LOG_FILE" | sort -u | head -20 | tr '\n' ' ' > "$FINDINGS_FILE"; set -e &&
             if [ "$gate_rc" -eq 0 ]; then
               printf 'PASS\n' > "$STATUS_FILE";
             else
@@ -238,10 +250,19 @@ states:
             ATTEMPT_FILE=".spur/run/$wbs-test-fix-attempt" &&
             n=$(cat "$ATTEMPT_FILE" 2>/dev/null || echo 0) &&
             printf '%s\n' "$((n + 1))" > "$ATTEMPT_FILE"
+      # R3 (0482): project the extracted gate anchors into a var so the dispatch input
+      # can NAME the failing file:line, not merely point at a log. A vars template cannot
+      # run a shell, so the read is an action, not an inline `$(cat ...)` substitution.
+      - kind: file.read.into-var
+        options:
+          path: .spur/run/${vars.wbs}-test-gate.findings
+          var: gateFindings
       - kind: agent.run
         options:
           agent: ${vars.agent}
-          input: /sp:dev-fixall "${vars.qualityGateCmd}"
+          # R3 (0482): `--findings` names the failing anchors inline; `--gate-log` remains
+          # the full-context escape hatch when the digest is not enough.
+          input: /sp:dev-fixall "${vars.qualityGateCmd}" --gate-log .spur/run/${vars.wbs}-test-gate.log --findings "${vars.gateFindings}"
           timeoutMs: ${vars.stepTimeoutMs}
 
   - id: test-recheck
@@ -256,8 +277,12 @@ states:
           command: >-
             mkdir -p .spur/run &&
             STATUS_FILE=".spur/run/$wbs-test-gate.status" &&
+            LOG_FILE=".spur/run/$wbs-test-gate.log" &&
             set +e &&
-            ( sh -c "$qualityGateCmd" ); gate_rc=$?; set -e &&
+            ( sh -c "$qualityGateCmd" ) > "$LOG_FILE" 2>&1; gate_rc=$?; set -e &&
+            cat "$LOG_FILE" &&
+            FINDINGS_FILE=".spur/run/$wbs-test-gate.findings" &&
+            set +e; grep -oE '[A-Za-z0-9_./-]+\.[A-Za-z]+:[0-9]+' "$LOG_FILE" | sort -u | head -20 | tr '\n' ' ' > "$FINDINGS_FILE"; set -e &&
             if [ "$gate_rc" -eq 0 ]; then
               printf 'PASS\n' > "$STATUS_FILE";
             else

package/package.json

@@ -1,6 +1,6 @@
 {
     "name": "@gobing-ai/spur",
-    "version": "0.3.36",
+    "version": "0.3.38",
     "description": "Spur CLI — local-first harness for mainstream coding agents: constraint checking, workflow orchestration, agent health, and history analytics. Bun-native; exposes the `spur` command.",
     "keywords": [
         "spur",

package/spur.js

@@ -60540,7 +60540,7 @@ var init_schema4 = __esm(() => {
     {
       schema_version: STAGE_REGISTRY_SCHEMA_VERSION,
       id: "test",
-      aliases: ["dev-unit"],
+      aliases: ["dev-unit", "dev-fixall"],
       description: "dev-unit: generate/extend tests to coverage target",
       artifacts: [{ kind: "test-file", direction: "output", required: true }],
       reasoning_skill: "sp:code-testing",
@@ -60572,7 +60572,10 @@ var init_schema4 = __esm(() => {
       retry: { max_attempts: 2, terminal_stop: "escalate" },
       model_policy: {
         min_tier: "capable-1",
-        fallback: []
+        fallback: [
+          { tier: "capable-2", trigger: "resource-exhaustion" },
+          { tier: "capable-2", trigger: "gate-fail" }
+        ]
       },
       context_layers: [],
       observability: [],
@@ -60635,7 +60638,10 @@ var init_schema4 = __esm(() => {
       retry: { max_attempts: 3, terminal_stop: "block" },
       model_policy: {
         min_tier: "capable-1",
-        fallback: []
+        fallback: [
+          { tier: "capable-2", trigger: "resource-exhaustion" },
+          { tier: "capable-2", trigger: "gate-fail" }
+        ]
       },
       context_layers: [],
       observability: [],
@@ -61762,7 +61768,7 @@ function normalizeFeatureStatus(raw) {
   }
   return resolved;
 }
-var TASK_STATUSES, FEATURE_STATUSES, TASK_STATUS_ICONS, FEATURE_STATUS_ICONS, PRIORITIES, PROFILES, TASK_TYPES, TASK_VARIANTS, DEFAULT_TASK_VARIANT = "standard", FEATURE_ID_PATTERN, TASK_STATUS_ALIASES, FEATURE_STATUS_ALIASES, isoDateString, featureId, wbsString, taskFrontmatterSchema, featureFrontmatterSchema, TASK_TEMPLATES, taskBatchItemSchema, taskBatchSchema;
+var TASK_STATUSES, FEATURE_STATUSES, TASK_STATUS_ICONS, FEATURE_STATUS_ICONS, PRIORITIES, PROFILES, TASK_TYPES, TASK_VARIANTS, DEFAULT_TASK_VARIANT = "standard", FEATURE_ID_PATTERN, WAYFINDER_MAP_TAG = "wayfinder-map", TASK_STATUS_ALIASES, FEATURE_STATUS_ALIASES, isoDateString, featureId, wbsString, taskFrontmatterSchema, featureFrontmatterSchema, TASK_TEMPLATES, taskBatchItemSchema, taskBatchSchema;
 var init_schema6 = __esm(() => {
   init_zod();
   TASK_STATUSES = ["backlog", "todo", "wip", "testing", "blocked", "done", "cancelled"];
@@ -62359,6 +62365,7 @@ __export(exports_src, {
   acquireCreateLock: () => acquireCreateLock,
   WorkspaceDao: () => WorkspaceDao,
   WorkflowStateDao: () => WorkflowStateDao,
+  WAYFINDER_MAP_TAG: () => WAYFINDER_MAP_TAG,
   VOLATILE_LAYER_NAMES: () => VOLATILE_LAYER_NAMES,
   UNKNOWN_MODEL_PRICING: () => UNKNOWN_MODEL_PRICING,
   UNIVERSAL_SECTIONS: () => UNIVERSAL_SECTIONS,
@@ -62602,7 +62609,6 @@ class AgentService {
     let currentModel = resolved.model;
     let currentSource = resolved.source;
     let currentStage = resolved.stage;
-    const maxEscalations = currentStage?.policy.fallback.length ?? 0;
     const attemptedExecutors = new Set(currentStage ? [currentStage.executorName] : []);
     if (!jsonOutput && TIER2_AGENTS.has(currentAgent)) {
       this.ctx.output.error(`Warning: ${currentAgent} is a Tier-2 agent (TUI/gateway only)`);
@@ -62722,12 +62728,16 @@ class AgentService {
         if (result.exitCode === 0)
           break;
         const escalationSignal = classifyObjectiveFailure(result);
-        if (escalationSignal === undefined || currentStage === undefined || attempt >= maxEscalations) {
+        if (escalationSignal === undefined || currentStage === undefined) {
+          break;
+        }
+        const matchingFallbacks = currentStage.policy.fallback.filter((fallback) => fallback.trigger === escalationSignal);
+        if (matchingFallbacks.length === 0 || escalationSignal !== "resource-exhaustion" && attempt >= matchingFallbacks.length) {
           break;
         }
         runFlags.signal = escalationSignal;
         runFlags["from-executor"] = currentStage.executorName;
-        const nextResolved = await this.resolveAgent(prompt, runFlags, doctorRunner);
+        const nextResolved = await this.resolveAgent(prompt, runFlags, doctorRunner, attemptedExecutors);
         if (!nextResolved.ok || nextResolved.stage === undefined || attemptedExecutors.has(nextResolved.stage.executorName)) {
           if (!jsonOutput) {
             this.ctx.output.error(`Escalation chain exhausted after ${attempt + 1} attempt(s); executors tried: ${[...attemptedExecutors].join(", ")}`);
@@ -62774,26 +62784,58 @@ class AgentService {
       ...observer !== undefined ? { observer } : {}
     };
   }
-  async resolveAgent(prompt, flags, doctorRunner) {
+  async resolveAgent(prompt, flags, doctorRunner, exclude) {
     const raw = stringFlag(flags, "agent", "auto");
     if (raw === "auto")
-      return this.resolveAgentAuto(prompt, flags, doctorRunner);
+      return this.resolveAgentAuto(prompt, flags, doctorRunner, exclude);
     if (raw === "inline")
-      return this.resolveAgentAuto(prompt, flags, doctorRunner);
-    return this.resolveExecutorSelector(raw, doctorRunner, "explicit");
+      return this.resolveAgentAuto(prompt, flags, doctorRunner, exclude);
+    return this.resolvePinned(raw, prompt, flags, doctorRunner, exclude);
+  }
+  async resolvePinned(selector, prompt, flags, doctorRunner, exclude) {
+    if (stringFlag(flags, "signal", "") !== "") {
+      const stageRecord2 = this.resolveCanonicalStage(prompt, flags);
+      if (stageRecord2 !== undefined) {
+        const stageRes = await this.resolveStageModelPolicy(stageRecord2, flags, doctorRunner, exclude);
+        if (stageRes !== undefined)
+          return stageRes;
+      }
+    }
+    const base2 = await this.resolveExecutorSelector(selector, doctorRunner, "explicit");
+    if (!base2.ok)
+      return base2;
+    const stageRecord = this.resolveCanonicalStage(prompt, flags);
+    if (stageRecord !== undefined) {
+      const executors = this.ctx.agentConfig?.executors;
+      const pinned = executors?.find((e) => e.name === selector);
+      const tier = pinned !== undefined ? getExecutorTier(pinned) : stageRecord.model_policy.min_tier;
+      return {
+        ...base2,
+        stage: {
+          stageId: stageRecord.id,
+          policy: stageRecord.model_policy,
+          executorName: selector,
+          executorTier: tier
+        }
+      };
+    }
+    return base2;
   }
-  async resolveAgentAuto(prompt, flags, doctorRunner) {
-    const config4 = this.ctx.agentConfig;
+  resolveCanonicalStage(prompt, flags) {
     const phase = extractPhase(prompt);
     const stageFlag = stringFlag(flags, "stage", "");
     const targetStageId = stageFlag !== "" ? stageFlag : phase !== undefined ? phase : undefined;
-    if (targetStageId !== undefined) {
-      const stageRecord = getCanonicalStage(targetStageId);
-      if (stageRecord !== undefined) {
-        const stageRes = await this.resolveStageModelPolicy(stageRecord, flags, doctorRunner);
-        if (stageRes !== undefined) {
-          return stageRes;
-        }
+    if (targetStageId === undefined)
+      return;
+    return getCanonicalStage(targetStageId);
+  }
+  async resolveAgentAuto(prompt, flags, doctorRunner, exclude) {
+    const config4 = this.ctx.agentConfig;
+    const stageRecord = this.resolveCanonicalStage(prompt, flags);
+    if (stageRecord !== undefined) {
+      const stageRes = await this.resolveStageModelPolicy(stageRecord, flags, doctorRunner, exclude);
+      if (stageRes !== undefined) {
+        return stageRes;
       }
     }
     if (config4?.default !== undefined) {
@@ -62803,7 +62845,7 @@ class AgentService {
     }
     return this.resolveAgentPriority(doctorRunner);
   }
-  async resolveStageModelPolicy(stageRecord, flags, doctorRunner) {
+  async resolveStageModelPolicy(stageRecord, flags, doctorRunner, exclude) {
     const executors = this.ctx.agentConfig?.executors;
     if (!executors || executors.length === 0) {
       return;
@@ -62812,6 +62854,44 @@ class AgentService {
     const signalRaw = stringFlag(flags, "signal", "");
     const signal = signalRaw.length > 0 ? signalRaw : undefined;
     const fromExecutor = stringFlag(flags, "from-executor", "") || undefined;
+    if (signal === "resource-exhaustion" && fromExecutor !== undefined) {
+      const failed = executors.find((e) => e.name === fromExecutor);
+      if (failed !== undefined) {
+        const failedTier = getExecutorTier(failed);
+        const failedCanonical = resolveAgentName(failed.agent);
+        const exhaustedAgents2 = new Set(executors.filter((executor) => executor.name === fromExecutor || (exclude?.has(executor.name) ?? false)).map((executor) => resolveAgentName(executor.agent)).filter((agent) => agent !== undefined));
+        const sideways = executors.filter((e) => {
+          const canonical = resolveAgentName(e.agent);
+          return e.name !== fromExecutor && getExecutorTier(e) === failedTier && canonical !== failedCanonical && (canonical === undefined || !exhaustedAgents2.has(canonical)) && !(exclude?.has(e.name) ?? false);
+        });
+        for (const executor of sideways) {
+          const canonical = resolveAgentName(executor.agent);
+          if (canonical === undefined) {
+            return {
+              ok: false,
+              exitCode: 2,
+              message: `Executor '${executor.name}' for stage '${stageRecord.id}' maps to unknown agent '${executor.agent}'`
+            };
+          }
+          const usable = await this.checkUsable(canonical, doctorRunner);
+          if (usable.ok) {
+            this.ctx.output.error(`Failover: ${fromExecutor} (tier ${failedTier}) exhausted; using same-tier ${executor.name} on a different binary`);
+            return {
+              ok: true,
+              agent: canonical,
+              model: executor.model,
+              source: "stage",
+              stage: {
+                stageId: stageRecord.id,
+                policy,
+                executorName: executor.name,
+                executorTier: getExecutorTier(executor)
+              }
+            };
+          }
+        }
+      }
+    }
     let targetTier = policy.min_tier;
     if (signal !== undefined) {
       const currentExec = executors.find((e) => e.name === fromExecutor);
@@ -62824,7 +62904,11 @@ class AgentService {
         }
       }
     }
-    const eligible = executors.filter((e) => isTierEligible(getExecutorTier(e), targetTier));
+    const exhaustedAgents = signal === "resource-exhaustion" ? new Set(executors.filter((executor) => exclude?.has(executor.name) ?? false).map((executor) => resolveAgentName(executor.agent)).filter((agent) => agent !== undefined)) : undefined;
+    const eligible = executors.filter((e) => {
+      const canonical = resolveAgentName(e.agent);
+      return isTierEligible(getExecutorTier(e), targetTier) && !(exclude?.has(e.name) ?? false) && (canonical === undefined || !(exhaustedAgents?.has(canonical) ?? false));
+    });
     if (eligible.length === 0) {
       return;
     }
@@ -63098,7 +63182,7 @@ function classifyObjectiveFailure(result) {
   if (result.exitCode === 0)
     return;
   const text4 = `${result.stderr} ${result.stdout}`.toLowerCase();
-  if (/\b(rate[\s-]?limit|429|too many requests|quota|token limit|token budget|context length|maximum context|context window)\b/.test(text4)) {
+  if (/\b(rate[\s_-]?limit(?:_exceeded|_error)?|429|529|too many requests|quota|usage[\s_-]?limit|limit[\s_-]?(reached|will[\s_-]?reset|resets?)|out of tokens?|insufficient[\s_-]?(credits?|balance|quota|funds)|token[\s_-]?(limit|budget)|context[\s_-]?(length|window)|maximum context|overloaded)\b/.test(text4)) {
     return "resource-exhaustion";
   }
   return;
@@ -64174,7 +64258,7 @@ var init_feature_check = __esm(() => {
       const status = fm.status ?? "backlog";
       const entry = this.resolveMatrixEntry(isGroupFeature(fm), status);
       this.runL2(doc2, entry, findings);
-      this.runL3(doc2, findings);
+      this.runL3(doc2, findings, fm);
       if (options?.featuresDir) {
         await this.checkOneActiveGoal(fm, featureId2, options.featuresDir, findings, options.asStatus);
         await this.checkChildrenLimit(featureId2, options.featuresDir, findings);
@@ -64186,55 +64270,59 @@ var init_feature_check = __esm(() => {
       await this.runL4(doc2, featureId2, status, taskScanDirs, dogfoodDir, runDir, findings);
       return { id: featureId2, ...this.summarizeWithStatus(status, findings, strict, options?.severityOverrides) };
     }
-    runL3(doc2, findings) {
+    runL3(doc2, findings, fm) {
       const rawAc = doc2.getSection("Acceptance Criteria");
       if (rawAc !== null && rawAc.trim().length > 0) {
-        const acBody = stripAcFence(rawAc);
-        const checklist = parseChecklist(acBody);
-        const looksGherkin = /^\s*(Feature:|Scenario:|Scenario Outline:)/m.test(acBody);
-        if (checklist.length > 0 && !looksGherkin) {
-          const emptyItems = checklist.filter((c3) => c3.text.length === 0);
-          for (const item of emptyItems) {
+        const tags = Array.isArray(fm.tags) ? fm.tags : [];
+        const isWayfinderMap = tags.includes(WAYFINDER_MAP_TAG);
+        if (!isWayfinderMap) {
+          const acBody = stripAcFence(rawAc);
+          const checklist = parseChecklist(acBody);
+          const looksGherkin = /^\s*(Feature:|Scenario:|Scenario Outline:)/m.test(acBody);
+          if (checklist.length > 0 && !looksGherkin) {
+            const emptyItems = checklist.filter((c3) => c3.text.length === 0);
+            for (const item of emptyItems) {
+              findings.push({
+                layer: "L3",
+                code: FINDING_CODES.L3_AC_CHECKLIST_TEXT,
+                severity: "warning",
+                section: "Acceptance Criteria",
+                line: item.line,
+                message: "Checklist item has no text"
+              });
+            }
+            return;
+          }
+          const bddResult = validateAcceptanceCriteria(acBody);
+          for (const err of bddResult.errors) {
+            findings.push({
+              layer: "L3",
+              code: FINDING_CODES.L3_AC_BDD_ERROR,
+              severity: "error",
+              section: "Acceptance Criteria",
+              line: err.line,
+              message: `BDD: ${err.message}`
+            });
+          }
+          for (const warn of bddResult.warnings) {
             findings.push({
               layer: "L3",
-              code: FINDING_CODES.L3_AC_CHECKLIST_TEXT,
+              code: FINDING_CODES.L3_AC_BDD_WARNING,
               severity: "warning",
               section: "Acceptance Criteria",
-              line: item.line,
-              message: "Checklist item has no text"
+              line: warn.line,
+              message: `BDD: ${warn.message}`
+            });
+          }
+          if (!bddResult.valid) {
+            findings.push({
+              layer: "L3",
+              code: FINDING_CODES.L3_AC_BDD_INVALID,
+              severity: "error",
+              section: "Acceptance Criteria",
+              message: "Acceptance Criteria validation failed; fix BDD syntax errors"
             });
           }
-          return;
-        }
-        const bddResult = validateAcceptanceCriteria(acBody);
-        for (const err of bddResult.errors) {
-          findings.push({
-            layer: "L3",
-            code: FINDING_CODES.L3_AC_BDD_ERROR,
-            severity: "error",
-            section: "Acceptance Criteria",
-            line: err.line,
-            message: `BDD: ${err.message}`
-          });
-        }
-        for (const warn of bddResult.warnings) {
-          findings.push({
-            layer: "L3",
-            code: FINDING_CODES.L3_AC_BDD_WARNING,
-            severity: "warning",
-            section: "Acceptance Criteria",
-            line: warn.line,
-            message: `BDD: ${warn.message}`
-          });
-        }
-        if (!bddResult.valid) {
-          findings.push({
-            layer: "L3",
-            code: FINDING_CODES.L3_AC_BDD_INVALID,
-            severity: "error",
-            section: "Acceptance Criteria",
-            message: "Acceptance Criteria validation failed; fix BDD syntax errors"
-          });
         }
       }
       const scopeBody = doc2.getSection("Scope");
@@ -64659,6 +64747,10 @@ class FeatureService {
       throw new Error(`Field "${key}" is not settable via update \u2014 status changes go through the lifecycle ` + `transition (spur feature update ${id} <status>); id and timestamps are machine-owned.`);
     }
     const ref = await this.refFor(id);
+    if (key === "tags") {
+      const tags = value.split(",").map((t) => t.trim()).filter(Boolean);
+      return this.ctx.writeService.updateFrontmatterArray(ref, key, tags);
+    }
     return this.ctx.writeService.updateFrontmatter(ref, key, value);
   }
   async transition(id, toStatus, actor) {
@@ -68585,9 +68677,14 @@ var init_task_check = __esm(() => {
       if (taskAc.trim().length === 0)
         return;
       let featureAc;
+      let featureTags = [];
       try {
         const raw = await this.fs.readFile(featurePath);
-        featureAc = stripAcFence(MarkdownDocument.parse(raw, "feature").getSection("Acceptance Criteria") ?? "");
+        const featureDoc = MarkdownDocument.parse(raw, "feature");
+        featureTags = Array.isArray(featureDoc.frontmatterData?.tags) ? featureDoc.frontmatterData.tags.filter((t) => typeof t === "string") : [];
+        if (featureTags.includes(WAYFINDER_MAP_TAG))
+          return;
+        featureAc = stripAcFence(featureDoc.getSection("Acceptance Criteria") ?? "");
       } catch {
         return;
       }
@@ -71304,7 +71401,7 @@ class AgentRunActionRunner {
         };
       }
       if (!ok) {
-        await writePartialWorkArtifact(context4, agentLabel, model, traced, cwd);
+        await writePartialWorkArtifact(context4, agentLabel, model, traced, cwd, sessionDir);
       }
       const partialWorkHint = `partial work (if any) preserved at .spur/run/${context4.runId}-${stepLabel}-partial.md; resume from that tree per the timed-out-implement runbook (plugins/sp/skills/spur-dev/references/execution-workflow.md)`;
       const error51 = ok ? undefined : traced.signal !== undefined ? timeoutMs !== undefined ? `agent.run '${stepLabel}' (${agentLabel}) terminated by signal ${traced.signal} (configured timeout: ${timeoutMs}ms; timeout or cancellation); ${partialWorkHint}` : `agent.run '${stepLabel}' (${agentLabel}) was cancelled by signal ${traced.signal}; ${partialWorkHint}` : traced.message !== undefined ? `agent.run '${stepLabel}' (${agentLabel}) dispatch failed: ${traced.message}` : `agent.run '${stepLabel}' (${agentLabel}) exited with code ${exitCode}; ${partialWorkHint}`;
@@ -71332,7 +71429,7 @@ class AgentRunActionRunner {
       }
       return {
         ok,
-        data: buildResultData(exitCode, agentLabel, capture, answer, invocation),
+        data: buildResultData(exitCode, agentLabel, capture, answer, invocation, ok ? undefined : traced.stdout, ok ? undefined : traced.stderr ?? undefined, this.agentConfig.secretValues),
         error: error51,
         setVars: ok ? {
           __agentSession: resumeRetried ? "no-resume" : "open",
@@ -71373,12 +71470,19 @@ async function discoverSessionId(sessionDir) {
     return;
   }
 }
-function buildResultData(exitCode, agentLabel, capture, answer, invocation) {
+function buildResultData(exitCode, agentLabel, capture, answer, invocation, stdout, stderr, secretValues = []) {
   const data = { exitCode, agent: agentLabel };
-  if (capture)
-    data.answer = answer;
+  if (capture) {
+    data.answer = exitCode === 0 ? answer : tail(redactAndBound(answer, secretValues, Number.MAX_SAFE_INTEGER), 4096);
+  }
   if (invocation !== undefined)
     data.invocation = invocation;
+  if (stdout !== undefined && stdout.length > 0) {
+    data.stdoutTail = tail(redactAndBound(stdout, secretValues, Number.MAX_SAFE_INTEGER), 4096);
+  }
+  if (stderr !== undefined && stderr.length > 0) {
+    data.stderrTail = tail(redactAndBound(stderr, secretValues, Number.MAX_SAFE_INTEGER), 4096);
+  }
   return data;
 }
 function asOptionalString(value) {
@@ -71438,7 +71542,7 @@ function extractCompletedRequirementsHeuristic(taskMarkdown) {
   }
   return found.size > 0 ? [...found] : ["unknown \u2014 Solution empty and Plan checkboxes open"];
 }
-async function writePartialWorkArtifact(context4, agentLabel, model, traced, cwd) {
+async function writePartialWorkArtifact(context4, agentLabel, model, traced, cwd, sessionDir) {
   try {
     const signal = traced.signal;
     const exitReason = signal !== undefined ? `killed by signal ${signal} (likely timeout or cancellation)` : traced.message !== undefined ? `dispatch error: ${traced.message}` : `exited with code ${traced.exitCode}`;
@@ -71448,6 +71552,16 @@ async function writePartialWorkArtifact(context4, agentLabel, model, traced, cwd
     const headerLine = model !== undefined ? `${agentLabel} (model: ${model})` : agentLabel;
     const inv = traced.invocation;
     const argvLine = inv ? `${inv.command} ${inv.argv.join(" ")}` : "(invocation not captured)";
+    const latchedSessionPath = join17(cwd, ".spur", "run", `${context4.runId}-agent-session.json`);
+    const resumeContext = [
+      "",
+      "## resume context",
+      "",
+      `- session dir: ${sessionDir ?? "(none captured)"}`,
+      `- latched session file: ${latchedSessionPath}`,
+      ""
+    ].join(`
+`);
     let completedSection = "";
     const wbs = String(context4.vars.wbs ?? "");
     if (wbs) {
@@ -71508,6 +71622,7 @@ async function writePartialWorkArtifact(context4, agentLabel, model, traced, cwd
       "```",
       stderrTail || "(empty)",
       "```",
+      resumeContext,
       completedSection
     ].join(`
 `);
@@ -71551,12 +71666,16 @@ async function gitHasNonCorpusChanges(cwd, excludeGlobs = ["docs/tasks3/*", "doc
 function tail(text4, maxChars) {
   if (text4.length <= maxChars)
     return text4;
-  return `... (truncated) ...
-${text4.slice(text4.length - maxChars)}`;
+  const marker = `... (truncated) ...
+`;
+  if (maxChars <= marker.length)
+    return marker.slice(0, maxChars);
+  return `${marker}${text4.slice(text4.length - (maxChars - marker.length))}`;
 }
 var PARTIAL_ARTIFACT_TAIL_CHARS = 4000, AGENT_RUN_PROGRESS_INTERVAL_MS = 30000, KIND = "agent.run";
 var init_agent_run = __esm(() => {
   init_dist5();
+  init_agent_execution();
   init_task_locator();
   init_steering();
 });
@@ -72406,8 +72525,9 @@ class WorkflowAppService {
     });
     const runId = opts.runId ?? crypto.randomUUID();
     const isDry = opts.dryRun === true;
+    const warnings = [];
     const runVars = {
-      ...await resolveDefaultAgentVar(this.ctx.cwd, opts.vars),
+      ...await resolveDefaultAgentVar(this.ctx.cwd, opts.vars, (m) => warnings.push(m)),
       ...opts.vars ?? {},
       __runId: runId
     };
@@ -72430,7 +72550,16 @@ class WorkflowAppService {
     }
     await this.stampFailureReason(runId, result);
     await this.maybeLinkPipelineRun(file2, runId, opts);
-    return result;
+    const runResult = result;
+    if (warnings.length > 0) {
+      for (const warning of warnings) {
+        try {
+          this.ctx.warn?.(warning);
+        } catch {}
+      }
+      runResult.warnings = warnings;
+    }
+    return runResult;
   }
   async maybeLinkPipelineRun(file2, runId, opts) {
     const wbs = opts.vars?.wbs;
@@ -72689,10 +72818,13 @@ class WorkflowAppService {
     const processExec = this.ctx.processExecutor?.();
     const host = createDefaultWorkflowEngineHost(processExec !== undefined ? { processExecutor: processExec } : {});
     const bus = this.ctx.observabilityBus?.();
-    let agentSlice = {};
+    let agentSlice = {
+      ...this.ctx.secretValues !== undefined ? { secretValues: this.ctx.secretValues } : {}
+    };
     try {
       const agent = (await loadSpurConfig(this.ctx.cwd)).agent;
       agentSlice = {
+        ...agentSlice,
         ...agent?.default !== undefined ? { default: agent.default } : {},
         ...agent?.sessionAffinity !== undefined ? { sessionAffinity: agent.sessionAffinity } : {}
       };
@@ -72779,15 +72911,28 @@ async function fileExists(path9) {
   const fs3 = createNodeFileSystem3();
   return await fs3.exists(path9);
 }
-async function resolveDefaultAgentVar(cwd, callerVars) {
-  if (callerVars?.agent !== undefined)
-    return {};
+async function resolveDefaultAgentVar(cwd, callerVars, warn) {
+  let config4;
   try {
-    const configured = (await loadSpurConfig(cwd)).agent?.default;
-    return typeof configured === "string" && configured.length > 0 ? { agent: configured } : {};
+    config4 = await loadSpurConfig(cwd);
   } catch {
     return {};
   }
+  const configured = config4.agent?.default;
+  if (typeof configured !== "string" || configured.length === 0) {
+    return {};
+  }
+  const valid = config4.agent?.executors?.some((e) => e.name === configured) === true || resolveAgentName(configured) !== undefined;
+  if (!valid) {
+    warn(`agent.default "${configured}" does not name a configured executor or agent binary; leaving the pipeline's literal agent in force`);
+    return {};
+  }
+  const result = {};
+  if (callerVars?.agent === undefined)
+    result.agent = configured;
+  if (callerVars?.implementAgent === undefined)
+    result.implementAgent = configured;
+  return result;
 }
 async function resolveWorkflowLogRetentionDays(cwd) {
   try {
@@ -72894,6 +73039,7 @@ var TASK_PIPELINE_WORKFLOW = "task-pipeline", EMBEDDED_SCHEMA_PREFIX = "\x00embe
 var init_workflow_service = __esm(() => {
   init_loader();
   init_src2();
+  init_dist9();
   init_dist7();
   init_dist5();
   init_builtins2();
@@ -81317,7 +81463,7 @@ init_dist6();
 var CLI_CONFIG = {
   binaryName: "spur",
   binaryLabel: "spur",
-  binaryVersion: "0.3.36",
+  binaryVersion: "0.3.38",
   configDir: ".spur",
   configFile: ".spur/config.yaml",
   databaseFile: ".spur/spur.db"
@@ -91491,6 +91637,8 @@ function createServerContext(appRt, options) {
     workflowService() {
       workflowSvc ??= new WorkflowAppService({
         cwd,
+        secretValues: configuredSecretValues(options.env ?? process.env),
+        warn: (message) => appRt.logger.warn(message),
         getDb: this.getDb.bind(this),
         agentService: this.agentService.bind(this),
         ruleService: this.ruleService.bind(this),
@@ -92722,7 +92870,16 @@ ${result.content}`);
       context4.setExitCode(1);
     }
   });
-  task.command("update").summary("Update a task status or replace a section.").argument("<wbs>", "Task WBS number").argument("[status]", "New status (for lifecycle transition)").option("--section <name>", "Section name to replace").option("--from-file <path>", "File to read section body from (requires --section)").option("--feature <id>", "Set the feature_id frontmatter field (traceability edge)").option("--priority <p>", "Set the priority frontmatter field (P0\u2013P3)").option("--ac-numbering <mode>", "Set the ac_numbering frontmatter field (task-local) \u2014 opts the task into the Requirements\u2194AC coverage check").option("--no-lifecycle", "Suppress lifecycle workflow run creation (use during pipeline runs to avoid orphaned lifecycle runs)").option("--force-done", "Allow transitioning to `done` even when the verify verdict is not PASS; records an override (task 0292)").option("--reason <text>", "Rationale for a forced-done override (paired with --force-done; persisted as done_reason)").option("--verdict-dir <path>", "Directory holding <wbs>-verdict.json artifacts (default: .spur/run)").option("--folder <path>", "Custom tasks folder").option("--json", "Output machine-readable JSON").action(async (wbs, status, options) => {
+  task.command("update").summary("Update a task status or replace a section.").argument("<wbs>", "Task WBS number").argument("[status]", "New status (for lifecycle transition)").addHelpText("after", [
+    "Lifecycle: `task update <wbs> <status>` moves a task through",
+    "backlog \u2192 todo \u2192 wip \u2192 testing \u2192 done, running the lifecycle guards on",
+    "`wip \u2192 testing` (`spur task check`) and `testing \u2192 done` (`--strict-core`).",
+    "A GuardDeniedError on `testing \u2192 done` means no pipeline run is recorded for the",
+    "task: run `/sp:dev-verify <wbs> --next` to PASS it, or record the audited bypass with",
+    '`SPUR_PROVENANCE_OVERRIDE=1 spur task update <wbs> done --force-done --reason "\u2026"`.',
+    "See the gate checklist (spur-dev/references/gate-checklists.md)."
+  ].join(`
+`)).option("--section <name>", "Section name to replace").option("--from-file <path>", "File to read section body from (requires --section)").option("--feature <id>", "Set the feature_id frontmatter field (traceability edge)").option("--priority <p>", "Set the priority frontmatter field (P0\u2013P3)").option("--ac-numbering <mode>", "Set the ac_numbering frontmatter field (task-local) \u2014 opts the task into the Requirements\u2194AC coverage check").option("--no-lifecycle", "Suppress lifecycle workflow run creation (use during pipeline runs to avoid orphaned lifecycle runs)").option("--force-done", "Allow transitioning to `done` even when the verify verdict is not PASS; records an override (task 0292)").option("--reason <text>", "Rationale for a forced-done override (paired with --force-done; persisted as done_reason)").option("--verdict-dir <path>", "Directory holding <wbs>-verdict.json artifacts (default: .spur/run)").option("--folder <path>", "Custom tasks folder").option("--json", "Output machine-readable JSON").action(async (wbs, status, options) => {
     const svc = await makeService2(context4, options.folder, options.lifecycle === false);
     try {
       if (options.section !== undefined) {
@@ -93721,6 +93878,24 @@ async function spawnAsyncWorkflowWorker(spurBin, cmd) {
     rejectOnError: false
   });
 }
+function asyncRegisterTimeoutMs() {
+  const raw2 = Number(process.env.SPUR_ASYNC_REGISTER_TIMEOUT_MS);
+  return Number.isFinite(raw2) && raw2 > 0 ? raw2 : 5000;
+}
+async function waitForRunRegistration(service, runId, timeoutMs = asyncRegisterTimeoutMs(), pollMs = 250) {
+  const deadline = Date.now() + timeoutMs;
+  for (;; ) {
+    try {
+      await service.trace(runId);
+      return true;
+    } catch {
+      if (Date.now() >= deadline) {
+        return false;
+      }
+      await sleep3(pollMs);
+    }
+  }
+}
 function parseVars(raw2) {
   if (raw2 === undefined) {
     return;
@@ -93759,6 +93934,8 @@ async function resolveWorkflowPaths(cwd) {
 function registerWorkflowCommand(program2, context4) {
   const makeSvc = (json3, bus) => new WorkflowAppService({
     cwd: context4.cwd,
+    secretValues: configuredSecretValues(context4.env),
+    warn: (message) => context4.output.error(`Warning: ${message}`),
     getDb: () => context4.getDb(),
     agentService: () => context4.agentService(),
     ruleService: () => context4.ruleService(),
@@ -93843,6 +94020,17 @@ ${result.errors.map((m) => `  - ${m}`).join(`
         context4.setExitCode(result2.status === "done" ? 0 : 1);
         return;
       }
+      if (!await waitForRunRegistration(makeSvc(options.json), runId2)) {
+        const reason = "async worker failed to start or register the run";
+        const hint = "run the workflow synchronously (omit --async) to see the failure";
+        if (json3) {
+          context4.output.write(toJson2({ status: "failed", reason, hint }));
+        } else if (!silent) {
+          context4.output.write(`async spawn failed: ${reason} \u2014 ${hint}.`);
+        }
+        context4.setExitCode(1);
+        return;
+      }
       const asyncResult = { runId: runId2, status: "started", workflowName: file2 };
       if (json3)
         context4.output.write(toJson2(asyncResult));