@gobing-ai/spur 0.3.45 → 0.3.47

package/.claude-plugin/marketplace.json

@@ -6,7 +6,7 @@
     },
     "plugins": [
         {
-            "version": "0.3.45",
+            "version": "0.3.47",
             "name": "sp",
             "source": "./plugins/sp",
             "description": "Spur - my harness toolkits"

package/config/templates/docs/99_PROJECT_CONSTITUTION.md

@@ -3,7 +3,7 @@ name: Project Constitution
 doc: 99_PROJECT_CONSTITUTION
 owns: PROCESS — how the key files are maintained
 authority: authoritative-on-process
-version: 1.3.0
+version: 1.4.0
 created_at: {{init-date}}
 updated_at: {{init-date}}
 edit_rules: 99 §6.8
@@ -148,6 +148,10 @@ Rules:
   same change.
 - `AGENTS.md` may **add** project facts; it may never **contradict** the numbered docs. On
   contradiction, the numbered doc wins — fix `AGENTS.md`.
+- In a monorepo, subdirectory `AGENTS.md` files merge with the root: the agent reads the root
+  first, then the file for the package it is working in. Each level carries only its own scope —
+  the root holds what spans packages, a package file holds what is true of that package alone.
+  Never restate one level's facts at another.
 
 ### 4.5 Index + satellite docs (`04`/`05` and their folders)
 
@@ -344,11 +348,19 @@ with raw file writes.
 1. Factual blocks that mirror code — the command surface, the workspace layout, tool versions —
    are **regenerated from code**, never edited from memory. Verify with the actual registrations
    (e.g. list the CLI's registered nouns/verbs) before writing the block.
-2. Keep it lean: link to the owning doc instead of restating its facts. `AGENTS.md` repeats only
+2. File structure is the most perishable thing you can write down: paths move, and a stale path
+   sends an agent confidently to a file that is not there. Prefer capabilities and domain
+   vocabulary — which outlive layout — over directory listings; where a concrete path is genuinely
+   needed, regenerate it from code per rule 1.
+3. Keep it lean: link to the owning doc instead of restating its facts. `AGENTS.md` repeats only
    what an agent needs in the first 30 seconds of a session.
-3. Surfaces that are decided-but-unbuilt are flagged as planned with their ADR pointer, and
+4. Keep the instruction count inside a budget: roughly 150–200 instructions, beyond which an agent
+   attends to them unevenly and the marginal rule buys nothing (MEDIUM confidence — secondary
+   citation, not measured here). Over budget, cut the rule or move it to its owning doc and link
+   per rule 3.
+5. Surfaces that are decided-but-unbuilt are flagged as planned with their ADR pointer, and
    marked "do not invoke as if they exist".
-4. Re-synced whenever this file changes the map or process (§4.4).
+6. Re-synced whenever this file changes the map or process (§4.4).
 
 ### 6.8 This file (`99`)
 

package/package.json

@@ -1,6 +1,6 @@
 {
     "name": "@gobing-ai/spur",
-    "version": "0.3.45",
+    "version": "0.3.47",
     "description": "Spur CLI — local-first harness for mainstream coding agents: constraint checking, workflow orchestration, agent health, and history analytics. Bun-native; exposes the `spur` command.",
     "keywords": [
         "spur",
@@ -53,14 +53,14 @@
     },
     "devDependencies": {
         "@commander-js/extra-typings": "^14.0.0",
-        "@gobing-ai/ts-db": "^0.4.30",
-        "@gobing-ai/ts-ai-runner": "^0.4.30",
-        "@gobing-ai/ts-dual-workflow-engine": "^0.4.30",
-        "@gobing-ai/ts-infra": "^0.4.30",
-        "@gobing-ai/ts-llm-jsonl-importer": "^0.4.30",
-        "@gobing-ai/ts-rule-engine": "^0.4.30",
-        "@gobing-ai/ts-runtime": "^0.4.30",
-        "@gobing-ai/ts-utils": "^0.4.30",
+        "@gobing-ai/ts-db": "^0.4.31",
+        "@gobing-ai/ts-ai-runner": "^0.4.31",
+        "@gobing-ai/ts-dual-workflow-engine": "^0.4.31",
+        "@gobing-ai/ts-infra": "^0.4.31",
+        "@gobing-ai/ts-llm-jsonl-importer": "^0.4.31",
+        "@gobing-ai/ts-rule-engine": "^0.4.31",
+        "@gobing-ai/ts-runtime": "^0.4.31",
+        "@gobing-ai/ts-utils": "^0.4.31",
         "@types/bun": "1.3.14",
         "@types/figlet": "^1.7.0",
         "@types/node-notifier": "8.0.5",

package/plugins/sp/plugin.json

@@ -1,6 +1,6 @@
 {
     "name": "sp",
-    "version": "0.3.45",
+    "version": "0.3.47",
     "description": "Spur — a local-first harness engineering toolkit that wraps mainstream coding agents with constraint checking, workflow orchestration, and history analytics.",
     "extensions": {
         "pi": ["./hooks/pi/guard-extension.ts"]

package/plugins/sp/skills/issue-finding/SKILL.md

@@ -202,7 +202,7 @@ Before any ad-hoc verification SQL against `history_*` tables, follow the schema
 | `test-loop`       | Same test command run 3+ times with no source edit between runs           | (identical runs − 1) × ~2 min |
 | `guard`           | 3+ `spur task check` calls for the same task before pass                  | (extra checks) × ~3 min       |
 | `compaction`      | Compactions > 5 per session                                               | count × ~2.5 min              |
-| `section-write`   | `spur task update --section` calls > 2× task count                        | (extra writes) × ~2 min       |
+| `section-write`   | `spur task update --section` calls per task > 1.5× the canonical section count for the task's variant/status matrix entry (feature-impl ≈ 9 sections ⇒ flag > ~13 writes/task; one write per canonical section is correct behavior, not waste) | (extra writes) × ~2 min       |
 | `git-red-herring` | `git stash` / `git branch` / `git diff` between test failures             | ~5–20 min per incident        |
 | `verbose-output`  | Unfiltered test output flooding (e.g. bare `tail` without failure filter) | per-run × ~1500 tokens        |
 

package/plugins/sp/skills/issue-finding/references/session-formats.md

@@ -47,12 +47,18 @@ When parsing a line of JSONL, look for tool/function invocations under common sh
 
 | Source family | Typical tool block type / path | Bash/command field |
 |---------------|--------------------------------|--------------------|
-| OMP / omp-agent | `message.content[]` entries with `type: "toolCall"` | `input.command` |
+| OMP / omp-agent | `message.content[]` entries with `type: "toolCall"` | `arguments.command` |
 | Claude Code | `type: "tool_use"` (or nested message content) | `input.command` / `input` |
 | Codex / others | Importer-normalized or vendor-specific; search for `command`, `tool_name`, `name` | best-effort |
 
 Always record **what field path you used** in the inventory Notes so evidence is auditable.
 
+**Fail-loud rule:** a zero tool-command count across a **non-empty** session set means the field map
+is wrong, not that the sessions were idle. Report a probable field-map error instead of an
+idle-session / no-waste finding — a parser that matches nothing must never produce a clean verdict
+(0534 R3; the OMP shape is `arguments.command`, verified: a toolCall block's keys are
+`['arguments','id','intent','name','partialArgs','streamIndex','type']`).
+
 **Loop detection (all sources):** normalize the shell command string and count consecutive or
 near-consecutive identical invocations (≥3) without an intervening source-file edit tool call.
 
@@ -63,7 +69,8 @@ OMP/agent session logs are JSONL under `~/.omp/agent/sessions/-<project>/`:
 - Each line is a JSON object with a `type` field
 - Key event types: `session`, `message`, `compaction`, `title`, `title_change`, `custom`
 - Tool calls live in `message.content` as blocks with `type: "toolCall"` (**not** `tool_use`)
-- Bash tool calls expose `input.command`
+- Bash tool calls expose `arguments.command` (verified live against OMP JSONL: a toolCall block's
+  keys are `['arguments','id','intent','name','partialArgs','streamIndex','type']`)
 - Subagent sessions live in subdirectories (e.g. `Run0376/`, `Refine0378/`)
 - Subagents may have `*.log` beside the JSONL session file
 - Session start: `session.timestamp`

package/plugins/sp/skills/spur-cli/references/agent.md

@@ -23,6 +23,7 @@ that before using `run` for fan-out dispatch.
 | ---- | ------- | --------- |
 | `run <prompt>` | Execute a prompt or slash command via a coding agent | `--agent <name>` `--model <name>` `--mode <mode>` `--continue` `--cwd <path>` `--drain` `--json` |
 | `loop` | Persistent self-draining inbox loop for a team member (supervisor-managed) | `--agent <id>` `--poll <ms>` |
+| `wait <specId>` | Identity-pinned wait for an occupant run to reach a lifecycle state (G4 wave 2) | `--run <runId>` `--until <state>...` `--timeout <ms>` `--json` |
 | `list` | List detected coding agents, or team agent specs with `--specs` | `--specs` `--json` |
 | `doctor [agent]` | Check agent readiness | `--json` |
 | `create <id>` | Write a team agent spec to `.spur/agents/<id>.yaml` | `--type` `--tags` `--model` `--autonomy` `--system-prompt` `--name` `--workspace` `--purpose` `--auto-start` `--no-identity-preamble` `--json` |
@@ -46,7 +47,7 @@ through a coding agent as an external process, producing a persisted run record
 ### Flags
 
 | Flag | Purpose |
-|------|---------|
+| ------ | --------- |
 | `--agent <name>` | Agent name or `auto`. Selects which installed coding agent executes the prompt. |
 | `--model <name>` | Agent model argument (e.g. `o3`, `sonnet`). Passed through to the agent's model flag. |
 | `--mode <mode>` | Agent output mode: `text` or `json`. |
@@ -96,6 +97,38 @@ under supervision.
 The loop runs until `SIGINT` / `SIGTERM`. Each iteration: check inbox -> if messages, drain each
 into `run` with `--drain` -> else sleep for `--poll` ms.
 
+## `wait` - identity-pinned occupant wait (G4 wave 2)
+
+```bash
+spur agent wait reviewer                          # default --until idle
+spur agent wait reviewer --run R3 --until invoke-exit
+spur agent wait reviewer --until working --until invoke-exit --timeout 30000 --json
+```
+
+`wait` pins an occupant's identity (`specId` + `runId` + `generation`) from the snapshot at wait
+start, then polls until the first satisfied `--until` (OR). `--run` pins an explicit run; default
+is the spec's latest run. Replacement, generation bump, or disappearance fails fast; a non-working
+occupant that makes no progress inside the stall budget fails `wait_stalled`.
+
+### Flags
+
+| Flag | Purpose |
+| ------ | --------- |
+| `--run <runId>` | Pin a specific run id (default: the spec's latest run). |
+| `--until <state>` | Lifecycle state to wait for (repeatable OR): `idle` \| `working` \| `invoke-exit` \| `blocked`. Default `idle`. |
+| `--timeout <ms>` | Caller deadline. Undefined = no deadline (stall budget still applies). |
+| `--json` | `{ satisfied, pin }` on success; `{ error: { code, message } }` on failure. |
+
+### Exit codes + error envelope
+
+| Code | Exit | Meaning |
+| ------ | ------ | --------- |
+| `occupant_gone` | 1 | No occupant for the specId, or it disappeared mid-wait. |
+| `run_replaced` | 1 | The pinned run was replaced or its generation bumped. |
+| `wait_stalled` | 1 | Non-working occupant, no progress within `min(timeout, 5000)ms`. |
+| `timeout` | 1 | Caller `--timeout` elapsed (or aborted via SIGINT). |
+| `usage` | 2 | Invalid flags, or `--until blocked` as the sole target (no first-class signal in wave 2). |
+
 ## `list` - detected agents and team specs
 
 ```bash
@@ -132,7 +165,7 @@ agent loop` can self-drain its inbox.
 ### Flags
 
 | Flag | Purpose |
-|------|---------|
+| ------ | --------- |
 | `--type <agent-type>` | Agent spec type (e.g. `claude`, `codex`, `omp`). |
 | `--tags <a,b>` | Comma-separated team identity tags (e.g. `team:alpha,role:worker`). |
 | `--model <name>` | Agent model argument. |

package/plugins/sp/skills/spur-cli/references/features.md

@@ -99,6 +99,9 @@ spur feature update H2 --section "Acceptance Criteria" --from-file /tmp/ac.md
 `--section` **requires** `--from-file` (exit `2` otherwise). Replaces the whole named section body.
 The `## Tasks` block is still rebuilt by `refresh` (files win for that region).
 
+Valid section names without a failed write: `spur task sections <wbs> list` (the same pointer
+`spur task update --help` carries).
+
 **Advance** (multi-hop forward walk):
 
 ```bash

package/plugins/sp/skills/spur-cli/references/message.md

@@ -19,7 +19,7 @@ use it well*.
 
 | Verb | Purpose | Key flags |
 | ---- | ------- | --------- |
-| `send <body>` | Enqueue a message for an agent | `--to <id>` `--from <id>` `--json` |
+| `send <body>` | Enqueue a message for an agent | `--to <id>` `--from <id>` `--wait` `--until <state>` `--timeout <ms>` `--json` |
 | `inbox` | List messages addressed to an agent | `--agent <id>` `--json` |
 | `reply <msg-id> <body>` | Thread a reply to a message | `--json` |
 | `watch` | Follow an agent inbox - surface new messages as they arrive | `--agent <id>` `--interval <ms>` `--json` |
@@ -33,18 +33,29 @@ invalid usage.
 spur message send "Please review PR 42" --to reviewer
 spur message send "Task 0040 is blocked" --to worker-1 --from operator
 spur message send "Done" --to planner --json
+spur message send "Review 0042" --to reviewer --wait --until invoke-exit --timeout 30000
 ```
 
 Enqueues a durable message addressed to `--to <id>`. The recipient drains it on its next `agent run
 --drain` or `agent loop` iteration. `--from` defaults to `operator`.
 
+`--wait` snapshots the recipient occupant **before** enqueue, then waits on that pin in the same CLI
+process (G4 wave 2 / ADR-057). Default `--until invoke-exit`. A later occupant cannot satisfy the
+wait; enqueue is **not** rolled back if the wait later fails.
+
 ### Flags
 
 | Flag | Purpose |
-|------|---------|
+| ------ | --------- |
 | `--to <id>` | **Required.** Recipient agent id. |
 | `--from <id>` | Sender id (default: `operator`). |
-| `--json` | Output machine-readable JSON. |
+| `--wait` | Block until the recipient reaches `--until` (snapshots occupant before send). |
+| `--until <state>` | Wait target: `injected` \| `invoke-exit` (repeatable OR). Default `invoke-exit`. |
+| `--timeout <ms>` | Caller deadline in milliseconds. |
+| `--json` | Output machine-readable JSON (`{ msgId, toId, status, wait: { satisfied } }`). |
+
+`--wait` failures use the same error codes as `agent wait`: `occupant_gone`, `run_replaced`,
+`wait_stalled`, `timeout` (exit 1).
 
 ## `inbox` - list addressed messages
 
@@ -79,7 +90,7 @@ lines.
 ### Flags
 
 | Flag | Purpose |
-|------|---------|
+| ------ | --------- |
 | `--agent <id>` | **Required.** Agent id to watch. |
 | `--interval <ms>` | Poll interval in milliseconds (default: `2000`). Must be a positive integer; exit `2` otherwise. |
 | `--json` | Output one JSON object per new message. |

package/plugins/sp/skills/spur-cli/references/tasks.md

@@ -24,6 +24,7 @@ Start from the WBS, not the corpus layout:
 
 ```bash
 spur task show <wbs> --json  # metadata + full content + filePath
+spur task get  <wbs> --json  # alias of `show` — same output, no separate code path
 spur task path <wbs> --json  # absolute path only
 ```
 
@@ -148,6 +149,8 @@ spur task update 0040 --section Review --from-file /tmp/review.md
   read from a file (this is what makes edits crash-safe and reviewable). Exit `2` otherwise.
 - Section names match the DD-08 task headings: `Background`, `Acceptance Criteria`, `Plan`,
   `Solution`, `Testing`, `Review`, `References`, `History`.
+- Valid section names without a failed write: `spur task sections <wbs> list` (the same
+  pointer `task update --help` carries).
 - The write replaces the **whole** named section body; assemble the full section in the temp file
   first, then point `--from-file` at it.
 

package/plugins/sp/skills/spur-cli/references/workflows/validation-and-extension.md

@@ -76,7 +76,22 @@ Once registered, any definition can use `kind: send-email` (in `onEnter`/`onExit
 
 ## Extension loading (trust-gated)
 
-For modules that bundle multiple actions/guards, use `loadWorkflowExtensionsIntoHost`. The trust gate
+A workflow YAML can declare extension modules next to the workflow file itself:
+
+```yaml
+name: ext-flow
+kind: state-machine
+extensions:
+  actions: ["./exts/audit.ts"]   # default-exports { name, actions: [...] }
+  guards:  ["./exts/flag.ts"]    # default-exports { name, guards: [...] }
+```
+
+`spur workflow validate`, `run` (incl. `--dry-run`), and `continue` load YAML-declared extensions
+onto the engine host before any step — the declaration itself is the `allowExtensions` gate (0533/D4).
+Paths are relative to the workflow file; absolute paths and `..` traversal are rejected with no
+import, and a missing or mis-shaped module fails the command before any step.
+
+For library callers, use `loadWorkflowExtensionsIntoHost`. The trust gate
 is **fail-closed**: `allowExtensions` defaults to `false`, and a declared-but-not-allowed extension
 **throws before any import** — never silently dropped.
 
@@ -117,8 +132,8 @@ reach for the library (`@gobing-ai/ts-dual-workflow-engine`) directly when you n
 | ---------- | --- | ------- |
 | Validate / run / list definitions | ✅ | ✅ |
 | Trace run history / continue HITL / cancel / clean orphans | ✅ | ✅ |
-| Custom action/guard runners | ✅ (built-ins only) | ✅ (`registerAction`/`registerGuard`) |
-| Extension modules | — | ✅ (`loadWorkflowExtensionsIntoHost`) |
+| Custom action/guard runners | ✅ (built-ins + YAML extensions, 0533/D4) | ✅ (`registerAction`/`registerGuard`) |
+| Extension modules | ✅ (YAML `extensions.actions`/`extensions.guards`, 0533/D4) | ✅ (`loadWorkflowExtensionsIntoHost`) |
 | DB persistence + programmatic `listRuns()` | (via configured adapter + `trace`) | ✅ (`DbWorkflowPersistenceAdapter`) |
 | Event-bus observability (progress bars, dashboards) | partial (CLI step reporter on sync human runs) | ✅ (`WorkflowEngineEvents` via `WorkflowRunOptions.events`) |
 | OTel traces / structured logs | (emitted) | ✅ (`RunLifecycle`) |

package/plugins/sp/skills/spur-cli/references/workflows.md

@@ -281,6 +281,7 @@ redirecting `agent.run` stages (ADR-047).
   both scopes (lists what would be removed, writes nothing). `--json` returns
   `{ olderThanMinutes, dryRun, cleaned, logs: { retentionDays, dryRun, reclaimed, failures } }` (with
   `--logs`, the reclamation object alone).
+
 ## Behavior
 
 This skill behaves as an **author** (choose mode → write a correct definition → prove it runs) feeding
@@ -302,8 +303,11 @@ the workflow's actions (`shell`, custom runners) do that; this skill builds and
    `.spur/workflows/basic.yaml` and `task-pipeline.yaml` quality-gate hop).
 4. **`env.allow` is an allowlist.** `${env.X}` resolves only if `X` is listed under `env.allow`;
    otherwise it resolves empty. A workflow that "loses" an environment value usually forgot to allow it.
-5. **Extensions are fail-closed.** Custom action/guard *modules* require `allowExtensions: true`; a
-   declared-but-not-allowed extension throws **before any import** — never silently dropped. Inline
+5. **Extensions are fail-closed.** The CLI loads YAML-declared extension modules itself
+   (`extensions.actions` / `extensions.guards`, resolved relative to the workflow file) — the
+   declaration is the gate (0533/D4). A declared-but-missing or mis-shaped module, an absolute
+   path, or `..` traversal throws **before any import** — never silently dropped. Library callers
+   using `loadWorkflowExtensionsIntoHost` must pass `allowExtensions: true` explicitly. Inline
    `host.registerAction`/`registerGuard` need no flag; only the module loader is gated.
 6. **A failed run does not throw.** Action/guard failures come back as `WorkflowRunResult` with
    `status: 'failed'`, preserving the run record. Read the trace; don't expect an exception. (Definition
@@ -341,11 +345,13 @@ the workflow's actions (`shell`, custom runners) do that; this skill builds and
 ## Platform Notes
 
 ### Claude Code
+
 Run `spur workflow` via the Bash tool. During development the CLI entry is a `.ts` file that runs only
 under Bun: `bun run apps/cli/src/index.ts workflow validate <file> --json`. The installed `spur` binary
 works once built.
 
 ### Codex / OpenClaw / OpenCode / Antigravity
+
 Run `spur workflow ...` via the Bash tool; parse `--json` output programmatically. Arguments are passed
 directly on the command line.
 

package/schemas/state-machine-workflow.schema.json

@@ -6,29 +6,83 @@
     "additionalProperties": false,
     "required": ["name", "initialState", "states", "transitions"],
     "properties": {
-        "$schema": { "type": "string" },
-        "kind": { "const": "state-machine" },
-        "name": { "type": "string", "minLength": 1 },
-        "version": { "type": "string" },
-        "description": { "type": "string" },
-        "initialState": { "type": "string", "minLength": 1 },
-        "terminalStates": { "type": "array", "items": { "type": "string", "minLength": 1 } },
+        "$schema": {
+            "type": "string"
+        },
+        "kind": {
+            "const": "state-machine"
+        },
+        "name": {
+            "type": "string",
+            "minLength": 1
+        },
+        "version": {
+            "type": "string"
+        },
+        "description": {
+            "type": "string"
+        },
+        "initialState": {
+            "type": "string",
+            "minLength": 1
+        },
+        "terminalStates": {
+            "type": "array",
+            "items": {
+                "type": "string",
+                "minLength": 1
+            }
+        },
         "failureStates": {
             "type": "array",
-            "items": { "type": "string", "minLength": 1 },
-            "description": "Subset of terminalStates whose reach finalizes the run as failed. Absent ⇒ every terminal is a success."
+            "items": {
+                "type": "string",
+                "minLength": 1
+            },
+            "description": "Subset of terminalStates whose reach finalizes the run as failed. Absent \u21d2 every terminal is a success."
+        },
+        "iterationBound": {
+            "type": "integer",
+            "exclusiveMinimum": 0
         },
-        "iterationBound": { "type": "integer", "exclusiveMinimum": 0 },
         "vars": {
             "type": "object",
-            "propertyNames": { "pattern": "^[A-Za-z_][A-Za-z0-9_]*$" },
-            "additionalProperties": { "type": "string" }
+            "propertyNames": {
+                "pattern": "^[A-Za-z_][A-Za-z0-9_]*$"
+            },
+            "additionalProperties": {
+                "type": "string"
+            }
         },
         "env": {
             "type": "object",
             "additionalProperties": false,
             "properties": {
-                "allow": { "type": "array", "items": { "type": "string", "pattern": "^[A-Za-z_][A-Za-z0-9_]*$" } }
+                "allow": {
+                    "type": "array",
+                    "items": {
+                        "type": "string",
+                        "pattern": "^[A-Za-z_][A-Za-z0-9_]*$"
+                    }
+                }
+            }
+        },
+        "extensions": {
+            "type": "object",
+            "additionalProperties": false,
+            "properties": {
+                "actions": {
+                    "type": "array",
+                    "items": {
+                        "$ref": "#/$defs/relativeExtensionPath"
+                    }
+                },
+                "guards": {
+                    "type": "array",
+                    "items": {
+                        "$ref": "#/$defs/relativeExtensionPath"
+                    }
+                }
             }
         },
         "states": {
@@ -38,14 +92,29 @@
                 "additionalProperties": false,
                 "required": ["id"],
                 "properties": {
-                    "id": { "type": "string", "minLength": 1 },
-                    "description": { "type": "string" },
+                    "id": {
+                        "type": "string",
+                        "minLength": 1
+                    },
+                    "description": {
+                        "type": "string"
+                    },
                     "pause": {
                         "type": "boolean",
                         "description": "When true, the engine pauses the run at this state for HITL (E3); resume with `spur workflow continue`."
                     },
-                    "onEnter": { "type": "array", "items": { "$ref": "#/$defs/action" } },
-                    "onExit": { "type": "array", "items": { "$ref": "#/$defs/action" } }
+                    "onEnter": {
+                        "type": "array",
+                        "items": {
+                            "$ref": "#/$defs/action"
+                        }
+                    },
+                    "onExit": {
+                        "type": "array",
+                        "items": {
+                            "$ref": "#/$defs/action"
+                        }
+                    }
                 }
             }
         },
@@ -56,11 +125,23 @@
                 "additionalProperties": false,
                 "required": ["from", "to"],
                 "properties": {
-                    "from": { "type": "string", "minLength": 1 },
-                    "to": { "type": "string", "minLength": 1 },
-                    "description": { "type": "string" },
-                    "trigger": { "type": "string" },
-                    "guard": { "$ref": "#/$defs/guard" }
+                    "from": {
+                        "type": "string",
+                        "minLength": 1
+                    },
+                    "to": {
+                        "type": "string",
+                        "minLength": 1
+                    },
+                    "description": {
+                        "type": "string"
+                    },
+                    "trigger": {
+                        "type": "string"
+                    },
+                    "guard": {
+                        "$ref": "#/$defs/guard"
+                    }
                 }
             }
         }
@@ -71,8 +152,14 @@
             "additionalProperties": false,
             "required": ["kind"],
             "properties": {
-                "kind": { "type": "string", "minLength": 1 },
-                "options": { "type": "object", "additionalProperties": true }
+                "kind": {
+                    "type": "string",
+                    "minLength": 1
+                },
+                "options": {
+                    "type": "object",
+                    "additionalProperties": true
+                }
             }
         },
         "guard": {
@@ -80,8 +167,32 @@
             "additionalProperties": false,
             "required": ["kind"],
             "properties": {
-                "kind": { "type": "string", "minLength": 1 },
-                "options": { "type": "object", "additionalProperties": true }
+                "kind": {
+                    "type": "string",
+                    "minLength": 1
+                },
+                "options": {
+                    "type": "object",
+                    "additionalProperties": true
+                }
+            }
+        },
+        "relativeExtensionPath": {
+            "type": "string",
+            "minLength": 1,
+            "description": "Relative module path; absolute paths and '..' traversal are forbidden.",
+            "not": {
+                "anyOf": [
+                    {
+                        "pattern": "^[/\\\\]"
+                    },
+                    {
+                        "pattern": "^[A-Za-z]:[/\\\\]"
+                    },
+                    {
+                        "pattern": "(^|[/\\\\])\\.\\.([/\\\\]|$)"
+                    }
+                ]
             }
         }
     }