@gobing-ai/spur 0.3.41 → 0.3.43

package/.claude-plugin/marketplace.json

@@ -0,0 +1,15 @@
+{
+    "name": "spur",
+    "owner": {
+        "name": "Robin Min",
+        "email": "minlongbing@gmail.com"
+    },
+    "plugins": [
+        {
+            "version": "0.3.43",
+            "name": "sp",
+            "source": "./plugins/sp",
+            "description": "Spur - my harness toolkits"
+        }
+    ]
+}

package/README.md

@@ -23,6 +23,20 @@ spur --help
 bunx @gobing-ai/spur --help
 ```
 
+#### Install the `sp` plugin to your coding agents
+
+The npm package ships the `sp` plugin and its marketplace manifest alongside the CLI. Install it
+into your supported coding agents without cloning this repository:
+
+```bash
+# point superskill at the installed @gobing-ai/spur package root
+superskill install sp --marketplace $(npm root -g)/@gobing-ai/spur
+```
+
+(With Bun: `bun install -g @gobing-ai/spur`; the package root is `$(npm root -g)/@gobing-ai/spur`
+or `$(bun pm bin -g)/../lib/node_modules/@gobing-ai/spur`.) This registers the marketplace and
+installs the `sp` plugin to Claude Code, Codex, Gemini CLI, pi, omp, OpenCode, Antigravity, etc.
+
 ### If you don't have Bun — standalone binary
 
 A self-contained executable (Bun embedded) for macOS and Linux. No runtime to install.
@@ -50,7 +64,7 @@ Windows: use the Bun path under WSL.
 The published tarball is a self-contained Bun bundle plus static assets:
 
 | Path | Purpose |
-|------|---------|
+| ------ | --------- |
 | `spur.js` | CLI entry (`bin.spur`) |
 | `config/` | Default rules, workflows, tasks, templates, plugins (ADR-015 SSOT) |
 | `web/` | Spur Board SPA served by `spur serve` |

package/config/templates/AGENTS.md

@@ -36,7 +36,7 @@ All product development work goes through the harness by default.
 | ------ | ---------- | -------- |
 | Plan a feature (intake → AC → tasks) | `/sp:dev-plan`, `/sp:dev-idea` | Freeform feature files without gates |
 | Drive one task end-to-end | `/sp:dev-run <wbs>` or **`sp:super-planner`** | Implement with no task / no pipeline |
-| Batch or parallel task runs | `/sp:dev-runall`, `/sp:dev-parallel` → **`sp:super-planner`** | Unordered multi-task thrash |
+| Batch or parallel task runs | `/sp:dev-runall` (host sequential; **`sp:super-planner`** explicit/parallel), `/sp:dev-parallel` | Unordered multi-task thrash |
 | Batch-refine tasks under a feature | `/sp:dev-refineall --feature <id> --auto` | Hand-looping `/sp:dev-refine` per WBS |
 | Multi-step corpus CLI (tasks/features/rules/workflows) | **`sp:expert-spur`** | Raw Write/Edit on corpus files |
 | Look up `spur` verbs / flags / `--json` | Skill **`sp:spur-cli`** | Inventing flags from memory |
@@ -64,8 +64,10 @@ All product development work goes through the harness by default.
 5. **Keep tool ownership explicit** — project lifecycle/corpus/gates → Spur; plugin installation and
    capability lifecycle → Superskill. Do not hand-maintain per-platform adapters Superskill generates.
 6. **Run dev skills inline by default** — direct model-bearing `/sp:dev-*` commands execute in the
-   current coding-agent session. `--subprocess` or a named dispatch-surface trigger uses
-   `spur agent run`; direct `spur agent run` and workflow `agent.run` remain subprocess surfaces.
+   current coding-agent session. Interactive `/sp:dev-run --mode full` and sequential
+   `/sp:dev-runall` with omit/`--agent inline` interpret `task-pipeline.yaml` in-session; `--agent
+   auto`, a name, parallel/headless execution, direct `spur agent run`, and engine-driven workflow
+   `agent.run` remain subprocess surfaces.
 
 **Platform fallback:** Platforms without slash commands and/or subagents still use the harness.
 Install the plugin through Superskill for the target platform, then use skills `sp:spur-dev`,

package/config/workflows/task-pipeline.yaml

@@ -131,11 +131,29 @@ states:
       # semantics are deliberately untouched; the gate lives here.
       # R4 (0487): one divergence line when the two executors differ (legitimate
       # when only implementAgent is pinned, but it must be visible in the log).
+      # R2 (0503): omp/pi env-key probe misses are soft because the CLI process
+      # cannot see relay-owned credentials; explicit non-omp auth failures remain hard.
       - kind: shell
         options:
           command: >-
             mkdir -p .spur/run &&
             DOCTOR_FILE=".spur/run/$wbs-precheck-doctor.status" &&
+            classifyDoctorProbe() {
+              PROBE_DETAIL="$1";
+              PROBE_AGENT="$2";
+              case "$PROBE_AGENT" in
+                omp|omp-*|pi|pi-*)
+                  if printf '%s' "$PROBE_DETAIL" | grep -Eiq 'API key not found for provider|no probe registered'; then
+                    printf 'env-miss\n';
+                    return;
+                  fi;;
+              esac;
+              if printf '%s' "$PROBE_DETAIL" | grep -Eiq 'invalid (API )?key|unauthori[sz]ed|forbidden|authentication failed|credential(s)? rejected'; then
+                printf 'auth-fail\n';
+              else
+                printf 'unknown\n';
+              fi;
+            } &&
             STATUS=PASS;
             if [ -n "$implementAgent" ] && [ "$implementAgent" != "$agent" ]; then
               echo "precheck: agent=$agent implementAgent=$implementAgent (executors diverge)";
@@ -152,10 +170,16 @@ states:
               };
               AUTH=$(printf '%s' "$OUT" | jq -r '.agents[0].authenticated // "unknown"' 2>/dev/null || echo unknown);
               DETAIL=$(printf '%s' "$OUT" | jq -r '.agents[0].modelStatus.detail // ""' 2>/dev/null || echo "");
-              echo "precheck: $EXE auth=$AUTH $DETAIL";
+              PROBE=$(classifyDoctorProbe "$DETAIL" "$EXE");
+              echo "precheck: $EXE auth=$AUTH probe=$PROBE $DETAIL";
               if [ "$AUTH" = unauthenticated ]; then
-                echo "precheck: FAIL - executor $EXE is unauthenticated; $DETAIL";
-                STATUS=FAIL;
+                case "$EXE:$PROBE" in
+                  omp*:env-miss|pi*:env-miss|omp*:unknown|pi*:unknown)
+                    echo "precheck: SOFT - executor $EXE auth probe cannot see agent-owned credentials";;
+                  *)
+                    echo "precheck: FAIL - executor $EXE is unauthenticated; fix agent.default or pass --vars '{\"agent\":\"<authenticated-executor>\"}' ($spurBin agent doctor $EXE --json); $DETAIL";
+                    STATUS=FAIL;;
+                esac;
               fi;
             done;
             echo "$STATUS" > "$DOCTOR_FILE";
@@ -164,6 +188,11 @@ states:
       # a tree already dirty with another task's implementation is how 0485's diff
       # got swept into 0486's run. Corpus dirs are excluded: the pipeline writes
       # those itself.
+      # R1 (0511): task-corpus dirt gets its own advisory NOTE — docs/tasks* is
+      # excluded from the non-corpus warning, so pre-existing task-corpus edits are
+      # invisible at launch yet can be accidentally staged with the current task
+      # later. Advisory only (never a block): the pipeline legitimately updates
+      # task files, so corpus dirt is launch-time visibility, not a lifecycle guard.
       - kind: shell
         options:
           command: >-
@@ -172,6 +201,11 @@ states:
               echo "precheck: WARNING - working tree has uncommitted non-corpus changes; commit or stash before starting a new task:";
               echo "$DIRTY";
             fi;
+            CORPUS_DIRTY=$(git status --porcelain -- ':(glob)docs/tasks*/**' 2>/dev/null);
+            if [ -n "$CORPUS_DIRTY" ]; then
+              echo "precheck: NOTE - task corpus has uncommitted changes; review before staging with this task:";
+              echo "$CORPUS_DIRTY";
+            fi;
             exit 0
       - kind: note
         options:
@@ -238,7 +272,21 @@ states:
           requireDiff: true
       - kind: shell
         options:
-          command: "$spurBin task update $wbs wip --no-lifecycle"
+          command: >-
+            retry_transient() {
+              RETRY_OUTPUT=$("$@" 2>&1); RETRY_RC=$?;
+              printf '%s\n' "$RETRY_OUTPUT";
+              if [ "$RETRY_RC" -eq 0 ]; then return 0; fi;
+              if ! printf '%s' "$RETRY_OUTPUT" | grep -Eq 'ENOENT|EBUSY|ENOTEMPTY|database is locked'; then return "$RETRY_RC"; fi;
+              sleep 2;
+              RETRY_SECOND_OUTPUT=$("$@" 2>&1); RETRY_RC=$?;
+              printf '%s\n' "$RETRY_SECOND_OUTPUT";
+              if [ "$RETRY_RC" -ne 0 ] && printf '%s\n%s' "$RETRY_OUTPUT" "$RETRY_SECOND_OUTPUT" | grep -Eq 'ENOENT|EBUSY|ENOTEMPTY'; then
+                echo "node_modules link/dependency broken — run bun install and retry";
+              fi;
+              return "$RETRY_RC";
+            };
+            retry_transient $spurBin task update "$wbs" wip --no-lifecycle
       # Post-implement cleanup: auto-format any unformatted output the agent produced.
       # The agent may leave files that don't pass `biome check`, which then fails
       # `bun run lint` downstream. Running format here is cheap (< 1 s) and prevents
@@ -265,7 +313,8 @@ states:
   #   test-recheck — soft recheck → review | test-fix | failed (never silent lifecycle abort)
   - id: test
     description: >
-      Soft quality-gate probe (single full gate on the green path). Runs
+      Soft quality-gate probe (single logical gate on the green path; bounded retries only
+      for SQLite lock contention). Runs
       `${vars.qualityGateCmd}`, records PASS|FAIL under
       `.spur/run/<wbs>-test-gate.status`, resets the fix attempt counter, always exit 0.
     onEnter:
@@ -277,8 +326,20 @@ states:
             LOG_FILE=".spur/run/$wbs-test-gate.log" &&
             ATTEMPT_FILE=".spur/run/$wbs-test-fix-attempt" &&
             echo 0 > "$ATTEMPT_FILE" &&
-            set +e &&
-            ( sh -c "$qualityGateCmd" ) > "$LOG_FILE" 2>&1; gate_rc=$?; set -e &&
+            : > "$LOG_FILE" &&
+            gate_attempt=1;
+            while [ "$gate_attempt" -le 5 ]; do
+              ATTEMPT_LOG="$LOG_FILE.attempt-$gate_attempt";
+              sh -c "$qualityGateCmd" > "$ATTEMPT_LOG" 2>&1; gate_rc=$?;
+              gate_locked=0;
+              grep -q 'SQLiteError: database is locked' "$ATTEMPT_LOG" && gate_locked=1;
+              cat "$ATTEMPT_LOG" >> "$LOG_FILE";
+              rm -f "$ATTEMPT_LOG";
+              if [ "$gate_rc" -eq 0 ] || [ "$gate_locked" -ne 1 ] || [ "$gate_attempt" -ge 5 ]; then break; fi;
+              printf 'quality gate: database is locked; retrying (%s/5) in 10s\n' "$gate_attempt" | tee -a "$LOG_FILE";
+              sleep 10;
+              gate_attempt=$((gate_attempt + 1));
+            done &&
             cat "$LOG_FILE" &&
             FINDINGS_FILE=".spur/run/$wbs-test-gate.findings" &&
             set +e; grep -oE '[A-Za-z0-9_./-]+\.[A-Za-z]+:[0-9]+' "$LOG_FILE" | sort -u | head -20 | tr '\n' ' ' > "$FINDINGS_FILE"; set -e &&
@@ -319,7 +380,7 @@ states:
 
   - id: test-recheck
     description: >
-      Soft recheck after fixall. Writes PASS|FAIL (always exit 0). Transitions
+      Soft recheck after fixall with bounded SQLite-lock retry. Writes PASS|FAIL (always exit 0). Transitions
       branch to review (PASS), another test-fix (FAIL and under max attempts),
       or the pipeline `failed` state (FAIL and attempts exhausted) — never a
       raw lifecycle abort that skips the terminal `failed` state.
@@ -330,8 +391,20 @@ states:
             mkdir -p .spur/run &&
             STATUS_FILE=".spur/run/$wbs-test-gate.status" &&
             LOG_FILE=".spur/run/$wbs-test-gate.log" &&
-            set +e &&
-            ( sh -c "$qualityGateCmd" ) > "$LOG_FILE" 2>&1; gate_rc=$?; set -e &&
+            : > "$LOG_FILE" &&
+            gate_attempt=1;
+            while [ "$gate_attempt" -le 5 ]; do
+              ATTEMPT_LOG="$LOG_FILE.attempt-$gate_attempt";
+              sh -c "$qualityGateCmd" > "$ATTEMPT_LOG" 2>&1; gate_rc=$?;
+              gate_locked=0;
+              grep -q 'SQLiteError: database is locked' "$ATTEMPT_LOG" && gate_locked=1;
+              cat "$ATTEMPT_LOG" >> "$LOG_FILE";
+              rm -f "$ATTEMPT_LOG";
+              if [ "$gate_rc" -eq 0 ] || [ "$gate_locked" -ne 1 ] || [ "$gate_attempt" -ge 5 ]; then break; fi;
+              printf 'quality gate: database is locked; retrying (%s/5) in 10s\n' "$gate_attempt" | tee -a "$LOG_FILE";
+              sleep 10;
+              gate_attempt=$((gate_attempt + 1));
+            done &&
             cat "$LOG_FILE" &&
             FINDINGS_FILE=".spur/run/$wbs-test-gate.findings" &&
             set +e; grep -oE '[A-Za-z0-9_./-]+\.[A-Za-z]+:[0-9]+' "$LOG_FILE" | sort -u | head -20 | tr '\n' ' ' > "$FINDINGS_FILE"; set -e &&
@@ -396,7 +469,21 @@ states:
     onEnter:
       - kind: shell
         options:
-          command: "$spurBin task record $wbs --solution-from-diff --transition testing"
+          command: >-
+            retry_transient() {
+              RETRY_OUTPUT=$("$@" 2>&1); RETRY_RC=$?;
+              printf '%s\n' "$RETRY_OUTPUT";
+              if [ "$RETRY_RC" -eq 0 ]; then return 0; fi;
+              if ! printf '%s' "$RETRY_OUTPUT" | grep -Eq 'ENOENT|EBUSY|ENOTEMPTY|database is locked'; then return "$RETRY_RC"; fi;
+              sleep 2;
+              RETRY_SECOND_OUTPUT=$("$@" 2>&1); RETRY_RC=$?;
+              printf '%s\n' "$RETRY_SECOND_OUTPUT";
+              if [ "$RETRY_RC" -ne 0 ] && printf '%s\n%s' "$RETRY_OUTPUT" "$RETRY_SECOND_OUTPUT" | grep -Eq 'ENOENT|EBUSY|ENOTEMPTY'; then
+                echo "node_modules link/dependency broken — run bun install and retry";
+              fi;
+              return "$RETRY_RC";
+            };
+            retry_transient $spurBin task record "$wbs" --solution-from-diff --transition testing
       # Best-effort, and portable across layouts. `feature-sync-bounded.ts` is a
       # Spur-monorepo path — `spur init` never scaffolds `plugins/sp/`, so a seeded
       # project must fall back to the plain `spur feature sync` verb rather than
@@ -427,7 +514,21 @@ states:
     onEnter:
       - kind: shell
         options:
-          command: "$spurBin task update $wbs done --no-lifecycle"
+          command: >-
+            retry_transient() {
+              RETRY_OUTPUT=$("$@" 2>&1); RETRY_RC=$?;
+              printf '%s\n' "$RETRY_OUTPUT";
+              if [ "$RETRY_RC" -eq 0 ]; then return 0; fi;
+              if ! printf '%s' "$RETRY_OUTPUT" | grep -Eq 'ENOENT|EBUSY|ENOTEMPTY|database is locked'; then return "$RETRY_RC"; fi;
+              sleep 2;
+              RETRY_SECOND_OUTPUT=$("$@" 2>&1); RETRY_RC=$?;
+              printf '%s\n' "$RETRY_SECOND_OUTPUT";
+              if [ "$RETRY_RC" -ne 0 ] && printf '%s\n%s' "$RETRY_OUTPUT" "$RETRY_SECOND_OUTPUT" | grep -Eq 'ENOENT|EBUSY|ENOTEMPTY'; then
+                echo "node_modules link/dependency broken — run bun install and retry";
+              fi;
+              return "$RETRY_RC";
+            };
+            retry_transient $spurBin task update "$wbs" done --no-lifecycle
       - kind: note
         options:
           message: "Pipeline complete for task ${vars.wbs} (done gate cleared)."

package/package.json

@@ -1,6 +1,6 @@
 {
     "name": "@gobing-ai/spur",
-    "version": "0.3.41",
+    "version": "0.3.43",
     "description": "Spur CLI — local-first harness for mainstream coding agents: constraint checking, workflow orchestration, agent health, and history analytics. Bun-native; exposes the `spur` command.",
     "keywords": [
         "spur",
@@ -31,7 +31,9 @@
         "config",
         "schemas",
         "web",
-        "README.md"
+        "README.md",
+        "plugins/",
+        ".claude-plugin/"
     ],
     "engines": {
         "bun": ">=1.3.0"
@@ -43,21 +45,22 @@
         "dev": "bun run src/index.ts",
         "build": "bun run ../../scripts/spur-dev.ts build-cli",
         "build:binaries": "bun run ../../scripts/spur-dev.ts build-binaries",
-        "build:bundle": "bun run ../../scripts/spur-dev.ts bundle-web && bun build src/index.ts --target=bun --outfile spur.js && bun run ../../scripts/spur-dev.ts bundle-config config",
+        "build:bundle": "bun run ../../scripts/spur-dev.ts bundle-web && bun build src/index.ts --target=bun --outfile spur.js && bun run ../../scripts/spur-dev.ts bundle-config config && bun run ../../scripts/spur-dev.ts bundle-plugins",
         "test": "bun test tests --coverage --coverage-dir=../../.coverage --pass-with-no-tests",
         "typecheck": "tsc --noEmit",
-        "prepublishOnly": "bun run build:bundle"
+        "prepack": "bun run build:bundle",
+        "prepublishOnly": "bun run ../../scripts/spur-dev.ts check-marketplace-version"
     },
     "devDependencies": {
         "@commander-js/extra-typings": "^14.0.0",
-        "@gobing-ai/ts-db": "^0.4.23",
-        "@gobing-ai/ts-ai-runner": "^0.4.23",
-        "@gobing-ai/ts-dual-workflow-engine": "^0.4.23",
-        "@gobing-ai/ts-infra": "^0.4.23",
-        "@gobing-ai/ts-llm-jsonl-importer": "^0.4.23",
-        "@gobing-ai/ts-rule-engine": "^0.4.23",
-        "@gobing-ai/ts-runtime": "^0.4.23",
-        "@gobing-ai/ts-utils": "^0.4.23",
+        "@gobing-ai/ts-db": "^0.4.27",
+        "@gobing-ai/ts-ai-runner": "^0.4.27",
+        "@gobing-ai/ts-dual-workflow-engine": "^0.4.27",
+        "@gobing-ai/ts-infra": "^0.4.27",
+        "@gobing-ai/ts-llm-jsonl-importer": "^0.4.27",
+        "@gobing-ai/ts-rule-engine": "^0.4.27",
+        "@gobing-ai/ts-runtime": "^0.4.27",
+        "@gobing-ai/ts-utils": "^0.4.27",
         "@types/bun": "1.3.14",
         "@types/figlet": "^1.7.0",
         "@types/node-notifier": "8.0.5",