@gobing-ai/spur 0.3.71 → 0.3.73

package/config/workflow-composition-baseline.json

@@ -1,22 +1,8 @@
 {
     "schemaVersion": 1,
-    "proofInputs": {
-        "repository": {
-            "excludeConfiguredCorpusFolders": true
-        },
-        "taskFields": ["wbs", "name", "feature_id", "depends_on"],
-        "taskSections": ["Background", "Requirements", "Acceptance Criteria", "Design", "Plan"],
-        "featureFields": ["id", "name"],
-        "featureSections": ["Goal", "Scope", "Acceptance Criteria"]
-    },
     "workflows": {
         "docs-pipeline": {
             "definition": "config/workflows/docs-pipeline.yaml",
-            "boundary": "docs-evolution",
-            "disposition": "keep",
-            "callers": ["sp:spur-dev", "/sp:dev-run"],
-            "artifacts": ["docs-precheck", "docs-verdict"],
-            "failurePolicy": "fail-closed",
             "terminalStates": ["done", "failed", "cancelled"],
             "modelQueries": ["draft", "verify"],
             "actions": {
@@ -57,7 +43,7 @@
                 },
                 "verify:onEnter:0": {
                     "kind": "shell",
-                    "invocation": "$spurBin task path $wbs --json 2>/dev/null | jq -r \".path // .filePath // empty\" > \".spur/run/$wbs-docs-taskpath.txt\" || true; exit 0"
+                    "invocation": "set -e; task_path=\"$($spurBin task path $wbs --json | jq -r '.path // .filePath // empty')\"; if [ -z \"$task_path\" ]; then echo \"docs-pipeline: task path did not resolve for wbs $wbs\" >&2; exit 1; fi; printf '%s' \"$task_path\" > \".spur/run/$wbs-docs-taskpath.txt\""
                 },
                 "verify:onEnter:1": {
                     "kind": "file.read.into-var"
@@ -85,23 +71,10 @@
                     "kind": "proof.fingerprint",
                     "invocation": "/sp:dev-verify ${vars.wbs} --auto --fix none --focus all"
                 }
-            },
-            "digest": "sha256:2794f4f926ecfcd69c0265214f9fcd69ab84cdd3ed53409a8af77a700fd635cc"
+            }
         },
         "idea-pipeline": {
             "definition": "config/workflows/idea-pipeline.yaml",
-            "boundary": "idea-decomposition",
-            "disposition": "keep",
-            "callers": ["sp:spur-dev", "/sp:dev-idea"],
-            "artifacts": [
-                "idea-eval-report",
-                "idea-needs-design",
-                "idea-design-review",
-                "idea-task-batch",
-                "idea-task-order",
-                "idea-handoff"
-            ],
-            "failurePolicy": "fail-closed",
             "terminalStates": ["handoff", "cancelled", "failed"],
             "modelQueries": ["discovery", "feature-create", "ac-generate", "system-design", "decompose"],
             "actions": {
@@ -204,16 +177,10 @@
                     "kind": "shell",
                     "invocation": "mkdir -p .spur/memory/sessions && echo \"checkpoint: idea-pipeline handoff feature=$featureId ts=$(date -u +%Y-%m-%dT%H:%M:%SZ)\" > .spur/memory/sessions/idea-checkpoint.md"
                 }
-            },
-            "digest": "sha256:acc878217ffc7e31d31600b59d5b240588a079638d2eb0caff8c7a78524220b9"
+            }
         },
         "task-pipeline": {
             "definition": "config/workflows/task-pipeline.yaml",
-            "boundary": "task-execution",
-            "disposition": "canonical",
-            "callers": ["sp:spur-dev", "sp:super-planner"],
-            "artifacts": ["verify-answer", "verify-verdict", "testing-section", "review-section"],
-            "failurePolicy": "fail-closed",
             "terminalStates": ["done", "failed", "cancelled"],
             "modelQueries": ["implement", "test-fix", "review", "verify"],
             "actions": {
@@ -236,6 +203,10 @@
                     "kind": "shell",
                     "invocation": "EVID_FILE=\".spur/run/$wbs-precheck-evidence.status\" && mkdir -p .spur/run && EVID_SCRIPT=\"plugins/sp/scripts/task-evidence-precheck.ts\"; [ -f \"$EVID_SCRIPT\" ] || EVID_SCRIPT=\"$(superskill script path sp task-evidence-precheck.ts 2>/dev/null)\"; if [ -n \"$EVID_SCRIPT\" ] && [ -f \"$EVID_SCRIPT\" ]; then bun \"$EVID_SCRIPT\" \"$wbs\" --spur-bin \"$spurBin\"; else\n  echo \"task-evidence-precheck failed closed — checker not found\" >&2 &&\n  echo \"in plugins/sp/scripts/ nor staged; run 'superskill install sp'.\" >&2 &&\n  echo \"FAIL\" > \"$EVID_FILE\";\nfi && exit 0"
                 },
+                "precheck:onEnter:5": {
+                    "kind": "shell",
+                    "invocation": "mkdir -p .spur/run .spur/memory && RUN_ID=\"$__runId\" && if [ -z \"$RUN_ID\" ]; then RUN_ID=\"pipeline-$wbs\"; fi && REASON_FILE=\".spur/run/$RUN_ID-route-reason.txt\" && if [ \"$mode\" = \"fast\" ]; then\n  echo \"fast:evidence complete+consistent\" > \"$REASON_FILE\";\nelif [ -z \"$mode\" ]; then\n  echo \"safety:standard verification\" > \"$REASON_FILE\";\nelif [ \"$mode\" = \"unknown\" ]; then\n  echo \"safety:unknown evidence quality\" > \"$REASON_FILE\";\nelif [ \"$mode\" = \"conflict\" ]; then\n  echo \"safety:conflicting evidence\" > \"$REASON_FILE\";\nelse\n  echo \"safety:unrecognized evidence (mode=$mode)\" > \"$REASON_FILE\";\nfi && printf '%s %s %s\\n' \"$RUN_ID\" \"$wbs\" \"$(cat \"$REASON_FILE\")\" >> .spur/memory/task-pipeline-routes.log && exit 0"
+                },
                 "implement:onEnter:0": {
                     "kind": "agent.run",
                     "invocation": "/sp:dev-run --mode implement ${vars.wbs} --auto"
@@ -250,7 +221,7 @@
                 },
                 "test:onEnter:0": {
                     "kind": "shell",
-                    "invocation": "$spurBin task path $wbs --json 2>/dev/null | jq -r \".path // .filePath // empty\" > \".spur/run/$wbs-taskpath.txt\" || true; sed -n \"s/^priority:[[:space:]]*//p\" \"$(cat \".spur/run/$wbs-taskpath.txt\" 2>/dev/null)\" 2>/dev/null | head -1 | tr -d \"[:space:]\" | tr \"[:lower:]\" \"[:upper:]\" > \".spur/run/$wbs-priority.txt\"; exit 0"
+                    "invocation": "mkdir -p .spur/run; $spurBin task path $wbs --json | jq -r \".path // .filePath // empty\" > \".spur/run/$wbs-taskpath.txt\"; task_path=\"$(cat \".spur/run/$wbs-taskpath.txt\")\"; if [ -z \"$task_path\" ]; then echo \"fail-closed proof chain (0751 R2): task path for $wbs did not resolve - the task spec cannot be folded into the proof digest\" >&2; exit 1; fi; sed -n \"s/^priority:[[:space:]]*//p\" \"$task_path\" | head -1 | tr -d \"[:space:]\" | tr \"[:lower:]\" \"[:upper:]\" > \".spur/run/$wbs-priority.txt\""
                 },
                 "test:onEnter:1": {
                     "kind": "file.read.into-var"
@@ -307,7 +278,7 @@
                 },
                 "verify:onEnter:4": {
                     "kind": "shell",
-                    "invocation": "V=\".spur/run/$wbs-verdict.json\"; if [ -f \"$V\" ] && [ -n \"$proofDigest\" ]; then\n  jq --arg d \"$proofDigest\" --arg g \"$(cat .spur/run/$wbs-test-gate.status 2>/dev/null || echo UNKNOWN)\"\n  '. + {proof: {digest: $d, capturePoint: \"quality-gate-entry\", stages: {\n    qualityGate: {status: $g, digest: $d},\n    review: {status: \"completed\", digest: $d},\n    verification: {status: .verdict, digest: $d}}}}\n    | .checks += [{name: \"proof-input-digest\", status: \"pass\", evidence: $d}]'\n  \"$V\" > \"$V.tmp\" && mv \"$V.tmp\" \"$V\";\nfi; exit 0"
+                    "invocation": "V=\".spur/run/$wbs-verdict.json\"; if [ -f \"$V\" ] && [ -n \"$proofDigest\" ]; then\n  jq --arg d \"$proofDigest\" --arg r \"$__runId\" --arg dd \"$__definitionDigest\" --arg g \"$(cat .spur/run/$wbs-test-gate.status 2>/dev/null || echo UNKNOWN)\"\n  '. + {proof: {digest: $d, runId: $r, definitionDigest: $dd, capturePoint: \"quality-gate-entry\", stages: {\n    qualityGate: {status: $g, digest: $d},\n    review: {status: \"completed\", digest: $d},\n    verification: {status: .verdict, digest: $d}}}}\n    | .checks += [{name: \"proof-input-digest\", status: \"pass\", evidence: $d}]'\n  \"$V\" > \"$V.tmp\" && mv \"$V.tmp\" \"$V\";\nfi; exit 0"
                 },
                 "record:onEnter:0": {
                     "kind": "proof.fingerprint"
@@ -334,16 +305,10 @@
                     "kind": "shell",
                     "invocation": "mkdir -p .spur/memory/sessions; CP_TS=\"$(date -u +%Y-%m-%dT%H:%M:%SZ)\"; CP_COMMIT=\"$(git rev-parse HEAD 2>/dev/null || echo unknown)\"; CP_DIGEST=\"$(cut -d= -f2 .spur/run/$wbs-proofdigest.txt 2>/dev/null || echo '')\"; CP_RUN=\"$SPUR_RUN_ID\"; [ -z \"$CP_RUN\" ] && CP_RUN=\"$RUN_ID\"; printf '%s\\n' '---' 'schema_version: 1' \"session_id: $(date -u +%Y-%m-%d)-$wbs\" 'workflow: task-pipeline' \"run_id: $CP_RUN\" \"task_wbs: $wbs\" 'feature_id: \"\"' 'phase: done' 'status: done' 'last_gate: record' \"source_commit: $CP_COMMIT\" \"digest: $CP_DIGEST\" \"generated_at: $CP_TS\" \"updated_at: $CP_TS\" \"next_action: none - task $wbs complete (terminal; advisory only)\" 'artifacts:' '  - .spur/run/$wbs-verdict.json' '  - .spur/run/$wbs-test-gate.log' '---' '' '## Session Notes' '' \"Terminal checkpoint for task $wbs (task-pipeline done).\" 'Advisory only; the task file is authoritative.' > .spur/memory/sessions/$wbs-checkpoint.md; exit 0"
                 }
-            },
-            "digest": "sha256:455fcf48f685809780187b7345562f3d377c5aa66d2fa3130c078b168bebf436"
+            }
         },
         "wrapup-pipeline": {
             "definition": "config/workflows/wrapup-pipeline.yaml",
-            "boundary": "task-wrapup",
-            "disposition": "keep",
-            "callers": ["sp:spur-dev", "/sp:dev-wrap", "/sp:dev-wrapall"],
-            "artifacts": ["wrapup-learnings", "wrapup-metrics"],
-            "failurePolicy": "fail-closed",
             "terminalStates": ["done", "skipped"],
             "modelQueries": ["doc-sync"],
             "actions": {
@@ -353,6 +318,10 @@
                 "task-resolve:onEnter:0": {
                     "kind": "note"
                 },
+                "task-resolve:onEnter:1": {
+                    "kind": "shell",
+                    "invocation": "mkdir -p .spur/run .spur/memory && RUN_ID=\"$__runId\" && if [ -z \"$RUN_ID\" ]; then RUN_ID=\"wrapup\"; fi && REASON_FILE=\".spur/run/$RUN_ID-route-reason.txt\" && if [ \"$(echo \"$tasks\" | jq length 2>/dev/null || echo 0)\" -eq 0 ]; then\n  echo \"skipped:empty task list\" > \"$REASON_FILE\";\nelif [ \"$mode\" = \"fast\" ]; then\n  echo \"fast:evidence complete+consistent\" > \"$REASON_FILE\";\nelif [ -z \"$mode\" ]; then\n  echo \"safety:missing evidence (mode empty)\" > \"$REASON_FILE\";\nelif [ \"$mode\" = \"unknown\" ]; then\n  echo \"safety:unknown evidence quality\" > \"$REASON_FILE\";\nelif [ \"$mode\" = \"conflict\" ]; then\n  echo \"safety:conflicting evidence\" > \"$REASON_FILE\";\nelse\n  echo \"safety:unrecognized evidence (mode=$mode)\" > \"$REASON_FILE\";\nfi && printf '%s %s\\n' \"$RUN_ID\" \"$(cat \"$REASON_FILE\")\" >> .spur/memory/wrapup-routes.log && exit 0"
+                },
                 "doc-sync:onEnter:0": {
                     "kind": "agent.run",
                     "invocation": "First run Skill(skill=\"sp:doc-evolve\", args=\"wrapup tasks=${vars.tasks}\") to repair drift in docs/00_ADR.md, docs/03_ARCHITECTURE.md, docs/04_DESIGN.md, docs/design/* per constitution edit rules; do not write task/feature corpus. THEN extract working learnings from tasks ${vars.tasks} — conventions, errors fixed, patterns, gotchas, grouped by date and task WBS — as raw markdown (no fences) and END your final message with that markdown (it is captured to .spur/run/wrapup-learnings.md)."
@@ -379,25 +348,10 @@
                     "kind": "shell",
                     "invocation": "mkdir -p .spur/memory/sessions && echo \"checkpoint: wrapup-pipeline done tasks=$tasks ts=$(date -u +%Y-%m-%dT%H:%M:%SZ)\" > .spur/memory/sessions/wrapup-checkpoint.md"
                 }
-            },
-            "digest": "sha256:390621dd339709682065e8954f2d1b49a195111c8372ec83e094fe7e2e35927f"
+            }
         },
         "pr-review": {
             "definition": "config/workflows/pr-review.yaml",
-            "boundary": "pr-review",
-            "disposition": "keep",
-            "callers": ["sp:spur-dev", "/sp:dev-pr-review"],
-            "artifacts": [
-                "pr-context",
-                "pr-hygiene",
-                "pr-push",
-                "pr",
-                "pr-request",
-                "pr-wait",
-                "pr-findings",
-                "pr-status"
-            ],
-            "failurePolicy": "fail-closed",
             "terminalStates": ["done", "pending", "failed"],
             "modelQueries": [],
             "actions": {
@@ -433,16 +387,10 @@
                     "kind": "shell",
                     "invocation": "mkdir -p .spur/run && STATUS_FILE=\".spur/run/$__runId-pr-collect.status\" && set +e && SINCE=\"$(bun -e 'const fs=require(\"node:fs\");const value=JSON.parse(fs.readFileSync(process.argv[1],\"utf8\")).requestedAt;process.stdout.write(value ?? \"\")' \".spur/run/$__runId-pr-request.json\")\" && REQUEST_HEAD=\"$(bun -e 'const fs=require(\"node:fs\");const value=JSON.parse(fs.readFileSync(process.argv[1],\"utf8\")).head;process.stdout.write(value ?? \"\")' \".spur/run/$__runId-pr-request.json\")\" && bun \"$(superskill script path sp pr-reviewing.ts)\" collect --since \"$SINCE\" --head \"$REQUEST_HEAD\" --json --status-file \"$STATUS_FILE\" > \".spur/run/$__runId-pr-findings.json\"; collect_rc=$?; bun \"$(superskill script path sp pr-reviewing.ts)\" status --since \"$SINCE\" --head \"$REQUEST_HEAD\" --json > \".spur/run/$__runId-pr-status.json\"; status_rc=$?; set -e && if [ \"$collect_rc\" -ne 0 ] || [ \"$status_rc\" -ne 0 ]; then printf 'FAIL\\n' > \"$STATUS_FILE\"; fi && if [ ! -f \"$STATUS_FILE\" ]; then printf 'FAIL\\n' > \"$STATUS_FILE\"; fi && { cat \".spur/run/$__runId-pr-findings.json\" 2>/dev/null || true; } && exit 0"
                 }
-            },
-            "digest": "sha256:eb3f51877647f25907ed6b660b79e4d22b3c7462ceccacc4fc251eb31bac06f0"
+            }
         },
         "basic": {
             "definition": "config/workflows/basic.yaml",
-            "boundary": "generic-execution",
-            "disposition": "keep",
-            "callers": ["spur workflow run"],
-            "artifacts": ["fix-attempt-counter", "gate-status"],
-            "failurePolicy": "fail-closed",
             "terminalStates": ["done", "failed"],
             "modelQueries": ["fix"],
             "actions": {
@@ -465,16 +413,10 @@
                     "kind": "agent.run",
                     "invocation": "/sp:dev-fixall \"${vars.qualityGateCmd}\""
                 }
-            },
-            "digest": "sha256:fb8ab828b9527f225368d20b08e3fc7ca4b92e6e22642a57868da193d5ebef2c"
+            }
         },
         "feature-dev": {
             "definition": "config/workflows/feature-dev.yaml",
-            "boundary": "feature-umbrella",
-            "disposition": "keep",
-            "callers": ["/sp:dev-runall --feature"],
-            "artifacts": ["feature-checkpoint"],
-            "failurePolicy": "fail-closed",
             "terminalStates": ["done", "failed"],
             "modelQueries": ["brainstorm", "plan", "execute-tasks-auto", "execute-tasks"],
             "actions": {
@@ -502,7 +444,8 @@
                     "invocation": "/sp:dev-runall --feature ${vars.featureId}"
                 },
                 "integration-review:onEnter:0": {
-                    "kind": "command.gate"
+                    "kind": "shell",
+                    "invocation": "mkdir -p .spur/run && STATUS_FILE=\".spur/run/$__runId-integration-review.status\" && REQUEST_JSON=\".spur/run/$__runId-integration-review.json\" && PR_REQUEST_STATUS=\".spur/run/$__runId-integration-review-pr-request.status\" && set +e && bun \"$(superskill script path sp pr-reviewing.ts)\" request --base \"$baseBranch\" --json --status-file \"$PR_REQUEST_STATUS\" > \"$REQUEST_JSON\" 2>&1; rc=$?; set -e && if [ \"$rc\" -eq 0 ]; then\n  printf 'PASS\\n' > \"$STATUS_FILE\";\nelse\n  printf 'FAIL\\n' > \"$STATUS_FILE\";\nfi && exit 0"
                 },
                 "integration-review:onEnter:1": {
                     "kind": "note"
@@ -511,16 +454,10 @@
                     "kind": "shell",
                     "invocation": "mkdir -p .spur/memory/sessions && echo \"checkpoint: feature-dev done featureId=$featureId ts=$(date -u +%Y-%m-%dT%H:%M:%SZ)\" > .spur/memory/sessions/$featureId-checkpoint.md"
                 }
-            },
-            "digest": "sha256:e1fa6b86cb7bcad0f927cf73336996ee8ce0088b6685cebba8c8849e26029529"
+            }
         },
         "wayfinder-resolution": {
             "definition": "config/workflows/wayfinder-resolution.yaml",
-            "boundary": "wayfinder-resolution",
-            "disposition": "keep",
-            "callers": ["spur workflow run"],
-            "artifacts": ["wayfinder-report", "resolution-status"],
-            "failurePolicy": "fail-closed",
             "terminalStates": ["done", "failed", "cancelled"],
             "modelQueries": ["investigate", "verify"],
             "actions": {
@@ -569,8 +506,110 @@
                 "done:onEnter:0": {
                     "kind": "note"
                 }
-            },
-            "digest": "sha256:ef75f70a09b67ea5905ac68aba7c3eec2b805530312ca3173fa4b8ee7275059e"
+            }
+        },
+        "feature-lifecycle": {
+            "definition": "config/workflows/feature-lifecycle.yaml",
+            "terminalStates": ["cancelled"],
+            "modelQueries": [],
+            "actions": {}
+        },
+        "history-anatomy": {
+            "definition": "config/workflows/history-anatomy.yaml",
+            "terminalStates": ["published", "failed"],
+            "modelQueries": ["resolve-scope", "enrich", "validate", "correct"],
+            "actions": {
+                "start:onEnter:0": {
+                    "kind": "shell",
+                    "invocation": "mkdir -p .spur/run; if [ -z \"$__runId\" ]; then __runId=$(uuidgen | tr 'A-Z' 'a-z' | cut -c1-8); fi; echo \"$__runId\" > .spur/run/history-anatomy-run.id"
+                },
+                "resolve-scope:onEnter:0": {
+                    "kind": "agent.run",
+                    "invocation": "Validate the mode arguments per sp:history-anatomy references/modes.md and write the normalized selector to .spur/run/${vars.__runId}-selector.json. mode=${vars.mode} date=${vars.date} since=${vars.since} until=${vars.until} focus=${vars.focus}. Reject conflicting arguments, naming the offending one; a rejection marks the run failed."
+                },
+                "resolve-paths:onEnter:0": {
+                    "kind": "shell",
+                    "invocation": "h=$(superskill script path sp history-anatomy-cache.mjs); node \"$h\" paths --helper \"$h\" --report-dir \"$reportDir\" --date \"$date\" --output \"$output\" --mode \"$mode\" --since \"$since\" --until \"$until\" --out .spur/run/$__runId-paths.txt"
+                },
+                "analyze:onEnter:0": {
+                    "kind": "shell",
+                    "invocation": "mkdir -p .spur/run; . .spur/run/$__runId-paths.txt; $spurBin history analyze --out .spur/run/$__runId-history-anatomy-current.json --since \"$HA_SINCE\" --until \"$HA_UNTIL\" --json"
+                },
+                "analyze:onEnter:1": {
+                    "kind": "shell",
+                    "invocation": ". .spur/run/$__runId-paths.txt; $spurBin history analyze --out .spur/run/$__runId-history-anatomy-baseline.json --since \"$HA_BASELINE_SINCE\" --until \"$HA_BASELINE_UNTIL\" --json 2>/dev/null || true"
+                },
+                "cache-probe:onEnter:0": {
+                    "kind": "shell",
+                    "invocation": ". .spur/run/$__runId-paths.txt; node \"$HA_HELPER\" probe --artifact .spur/run/$__runId-history-anatomy-current.json --baseline .spur/run/$__runId-history-anatomy-baseline.json --target \"$HA_TARGET\" --mode \"$mode\" --date \"$HA_DATE\" --recompute \"$recompute\" --executor \"$agent\" --skill-dir \"$HA_SKILL\" --contract \"$HA_SKILL/references/report-contract.md\" --workflow \"$workflowFile\" --contract-version \"$contractVersion\" --run-id \"$__runId\" --out .spur/run/$__runId-provenance.json > .spur/run/$__runId-cache-disposition.txt"
+                },
+                "render:onEnter:0": {
+                    "kind": "shell",
+                    "invocation": "mkdir -p .spur/run; $spurBin history report .spur/run/$__runId-history-anatomy-current.json --mode forensics > .spur/run/$__runId-history-anatomy-current.md; $spurBin history report .spur/run/$__runId-history-anatomy-baseline.json --mode forensics > .spur/run/$__runId-history-anatomy-baseline.md || true"
+                },
+                "enrich:onEnter:0": {
+                    "kind": "shell",
+                    "invocation": "git status --porcelain > .spur/run/$__runId-baseline-enrich.txt || true"
+                },
+                "enrich:onEnter:1": {
+                    "kind": "agent.run",
+                    "invocation": "Run sp:history-anatomy enrich: given .spur/run/${vars.__runId}-history-anatomy-current.json and -baseline.json, author the model half of the report (Baseline comparison, Findings, Recurrence ledger, Remediation options, Performance analysis, Workflow/process improvements, Positive patterns) to .spur/run/${vars.__runId}-candidate.md per references/report-contract.md. This operation never launches a workflow."
+                },
+                "enrich:onEnter:2": {
+                    "kind": "shell",
+                    "invocation": "node \"$(superskill script path sp history-anatomy-cache.mjs)\" assert-clean --baseline .spur/run/$__runId-baseline-enrich.txt --expect .spur/run/$__runId-candidate.md"
+                },
+                "structure-gate:onEnter:0": {
+                    "kind": "shell",
+                    "invocation": "node \"$(superskill script path sp history-anatomy-cache.mjs)\" check \\\n  .spur/run/$__runId-candidate.md > .spur/run/$__runId-structure-gate.txt 2>&1 || true"
+                },
+                "validate:onEnter:0": {
+                    "kind": "shell",
+                    "invocation": "git status --porcelain > .spur/run/$__runId-baseline-validate.txt || true"
+                },
+                "validate:onEnter:1": {
+                    "kind": "agent.run",
+                    "invocation": "Run sp:history-anatomy validate: independently check .spur/run/${vars.__runId}-candidate.md against the two artifacts per references/operations.md; write Verdict: PASS or FAIL to .spur/run/${vars.__runId}-validation.txt. This operation never launches a workflow."
+                },
+                "validate:onEnter:2": {
+                    "kind": "shell",
+                    "invocation": "node \"$(superskill script path sp history-anatomy-cache.mjs)\" assert-clean --baseline .spur/run/$__runId-baseline-validate.txt --expect .spur/run/$__runId-validation.txt"
+                },
+                "correct:onEnter:0": {
+                    "kind": "shell",
+                    "invocation": "n=$(cat .spur/run/$__runId-correction-count 2>/dev/null || echo 0) && printf '%s\\n' \"$((n + 1))\" > .spur/run/$__runId-correction-count"
+                },
+                "correct:onEnter:1": {
+                    "kind": "shell",
+                    "invocation": "git status --porcelain > .spur/run/$__runId-baseline-correct.txt || true"
+                },
+                "correct:onEnter:2": {
+                    "kind": "agent.run",
+                    "invocation": "Repair .spur/run/${vars.__runId}-candidate.md in place. Read its structure-gate findings, optional validation notes, references/report-contract.md, and the references/operations.md validate rubric; fix every violation. Use a backticked `.md`/`.ts`/`.json` path or a `path:line` anchor, never `current #/...`; remove placeholders and empty rows; restore the twelve-section order; ensure every problem and positive finding carries the full field set; verify every quantitative claim (counts, durations, percentages, distributions) and every current/baseline full-digest match against .spur/run/${vars.__runId}-history-anatomy-current.json and -baseline.json. Overwrite only the candidate; never launch a workflow."
+                },
+                "correct:onEnter:3": {
+                    "kind": "shell",
+                    "invocation": "node \"$(superskill script path sp history-anatomy-cache.mjs)\" assert-clean --baseline .spur/run/$__runId-baseline-correct.txt --expect .spur/run/$__runId-candidate.md"
+                },
+                "refresh-provenance:onEnter:0": {
+                    "kind": "shell",
+                    "invocation": ". .spur/run/$__runId-paths.txt; node \"$HA_HELPER\" refresh --report \"$HA_TARGET\" --out .spur/run/$__runId-publishable.md --disposition hit"
+                },
+                "stamp:onEnter:0": {
+                    "kind": "shell",
+                    "invocation": ". .spur/run/$__runId-paths.txt; node \"$HA_HELPER\" stamp --candidate .spur/run/$__runId-candidate.md --provenance .spur/run/$__runId-provenance.json --out .spur/run/$__runId-publishable.md"
+                },
+                "publish:onEnter:0": {
+                    "kind": "shell",
+                    "invocation": ". .spur/run/$__runId-paths.txt; mkdir -p \"$(dirname \"$HA_TARGET\")\"; node \"$HA_HELPER\" publish .spur/run/$__runId-publishable.md \"$HA_TARGET\""
+                }
+            }
+        },
+        "task-lifecycle": {
+            "definition": "config/workflows/task-lifecycle.yaml",
+            "terminalStates": ["cancelled"],
+            "modelQueries": [],
+            "actions": {}
         }
     }
 }

package/config/workflows/docs-pipeline.yaml

@@ -142,7 +142,17 @@ states:
       # excluded from the digest's git-tree half, so the spec is folded in via `taskFile`.
       - kind: shell
         options:
-          command: '$spurBin task path $wbs --json 2>/dev/null | jq -r ".path // .filePath // empty" > ".spur/run/$wbs-docs-taskpath.txt" || true; exit 0'
+          # 0760 R1 (sibling of 0751 R2): task-path lookup fails closed. Drop
+          # `2>/dev/null`, `|| true`, and the forced `exit 0` so an unresolved
+          # wbs exits non-zero with a named message. The resolved path folds
+          # into the proof digest via `taskFile:` below; a silent miss would
+          # degrade the docs-pipeline proof to tree-only (same hazard 0751 R2
+          # removed from task-pipeline).
+          command: >-
+            set -e;
+            task_path="$($spurBin task path $wbs --json | jq -r '.path // .filePath // empty')";
+            if [ -z "$task_path" ]; then echo "docs-pipeline: task path did not resolve for wbs $wbs" >&2; exit 1; fi;
+            printf '%s' "$task_path" > ".spur/run/$wbs-docs-taskpath.txt"
       - kind: file.read.into-var
         options:
           path: .spur/run/${vars.wbs}-docs-taskpath.txt

package/config/workflows/feature-dev.yaml

@@ -143,29 +143,36 @@ states:
 
   - id: integration-review
     description: >
-      Advisory integration review (D5-P, feature R11). Runs `config/workflows/pr-review.yaml`
-      ONCE for this feature/branch HEAD, after the local gates and before wrap merge/cleanup.
-      Current-HEAD dedup stays inside pr-review (`mode: full`), so a re-entry on the same HEAD
-      is a no-op there rather than a second quota spend here.
+      Advisory integration review (D5-P, feature R11). Spends one Codex review
+      on the current HEAD after the local gates and before wrap merge/cleanup.
 
-      The gate is `softFail: true`, so `pending`, a wait timeout, a missing pr-review
-      definition, or an unavailable review quota records FAIL and still reaches `done`.
-      Only `requireCleanReview=true` turns that FAIL into a blocking edge. Findings are
-      collected by pr-review itself and re-enter the affected local gates on the next run.
+      D8 decision D1 (0753 R3): the nested `spur workflow run pr-review.yaml`
+      was refused by the SPUR_WORKFLOW_RUN_ACTIVE child guard and the refusal
+      was masked by `softFail: true`. The non-spawning replacement invokes
+      `pr-reviewing.ts request` directly — the same per-HEAD dedupe-or-request
+      logic `config/workflows/pr-review.yaml` uses internally — and writes its
+      own PASS/FAIL status. `ALREADY_REVIEWED` / `ALREADY_REQUESTED` / `REQUESTED`
+      all count as PASS (review is initiated for this HEAD); only a request
+      error counts as FAIL. `softFail` is gone: a real failure now records FAIL
+      loudly. `requireCleanReview=true` still turns that FAIL into a blocking edge.
     onEnter:
-      - kind: command.gate
+      - kind: shell
         options:
-          id: feature-integration-review
-          executable: "${vars.spurBin}"
-          args:
-            - workflow
-            - run
-            - .spur/workflows/pr-review.yaml
-            - --vars
-            - '{"mode":"full","baseBranch":"${vars.baseBranch}"}'
-          resultFile: .spur/run/${vars.__runId}-integration-review.status
-          softFail: true
-          timeoutMs: 1800000
+          command: >-
+            mkdir -p .spur/run &&
+            STATUS_FILE=".spur/run/$__runId-integration-review.status" &&
+            REQUEST_JSON=".spur/run/$__runId-integration-review.json" &&
+            PR_REQUEST_STATUS=".spur/run/$__runId-integration-review-pr-request.status" &&
+            set +e &&
+            bun "$(superskill script path sp pr-reviewing.ts)" request --base "$baseBranch" --json
+            --status-file "$PR_REQUEST_STATUS" > "$REQUEST_JSON" 2>&1;
+            rc=$?; set -e &&
+            if [ "$rc" -eq 0 ]; then
+              printf 'PASS\n' > "$STATUS_FILE";
+            else
+              printf 'FAIL\n' > "$STATUS_FILE";
+            fi &&
+            exit 0
       - kind: note
         options:
           message: "Integration review for feature ${vars.featureId} recorded at .spur/run/${vars.__runId}-integration-review.status (advisory unless requireCleanReview=true)."

package/config/workflows/task-lifecycle.yaml

@@ -1,9 +1,20 @@
 # Externally driven FSM (requestTransition) — not an auto-running pipeline.
 #
+# [CRITICAL] One transition per (from, to) pair. `requestTransition` selects with
+# `transitions.find(t => t.from === … && t.to === …)` and denies on that single
+# transition's guard — it never falls through to a sibling with the same pair
+# (dual-workflow-engine/src/service.ts requestTransition). Guard-paired siblings
+# (e.g. a `mode = fast` fast path beside a `mode != fast` safety path) are only
+# valid in auto-run pipelines, where `firstPassingTransition` evaluates every
+# outbound edge. Adding a sibling here blocks the forward path outright: task 0758
+# did exactly that and denied every wip→testing and testing→done write until it
+# was reverted.
+#
 # Reliability (aligned with task-pipeline / ADR-043 — lifecycle-only contract):
-#   - Hard shell guards only at wip→testing and testing→done (no soft probe needed:
-#     requestTransition fails closed when the guard shell is non-zero)
-#   - CLI done verdict guard is a second layer (0292) covering --no-lifecycle paths
+#   - Hard shell guards only at wip→testing and testing→done
+#     (no soft probe needed: requestTransition fails closed when guard shell is non-zero)
+#   - CLI done verdict guard is a second layer (0292) covering --no-lifecycle
+#     paths
 #   - No agent.run nodes (by design — pure status graph)
 #   - cancelled is the sole terminal; done is re-enterable (reopen → wip)
 "$schema": "@gobing-ai/spur/schemas/state-machine-workflow.schema.json"
@@ -21,20 +32,20 @@ description: >
   auto-advance).
 
   Two-layer done gate (task 0292): this workflow's testing→done guard
-  (`spur task check --as done`, F92 R3 — target-aware) is the FIRST gate. The CLI verdict guard
-  (`packages/app/src/services/done-transition-guard.ts`) is the SECOND gate,
-  invoked by `apps/cli/src/commands/task.ts` for every `spur task update <wbs>
-  done` call — it reads `.spur/run/<wbs>-verdict.json` and blocks non-PASS
-  verdicts unless `--force-done --reason "<why>"` is supplied. The CLI gate
-  covers the `--no-lifecycle` and adapter-unavailable paths that bypass this
-  workflow. Overrides are recorded via the `done_forced` / `done_reason`
-  frontmatter fields.
+  (`spur task check --as done`, F92 R3 — target-aware) is the FIRST gate.
+  The CLI verdict guard (`packages/app/src/services/done-transition-guard.ts`)
+  is the SECOND gate, invoked by `apps/cli/src/commands/task.ts` for every
+  `spur task update <wbs> done` call — it reads `.spur/run/<wbs>-verdict.json`
+  and blocks non-PASS verdicts unless `--force-done --reason "<why>"` is
+  supplied. The CLI gate covers the `--no-lifecycle` and adapter-unavailable
+  paths that bypass this workflow. Overrides are recorded via the `done_forced`
+  / `done_reason` frontmatter fields.
 initialState: backlog
 terminalStates:
   - cancelled
 vars:
-  spurBin: 'spur'
-  wbs: '0000'
+  spurBin: "spur"
+  wbs: "0000"
 
 states:
   - id: backlog
@@ -48,7 +59,8 @@ states:
   - id: blocked
     description: Impediment; work suspended.
   - id: done
-    description: Completed. Re-enterable (reopen with warning + mandatory History entry).
+    description: >
+      Completed. Re-enterable (reopen with warning + mandatory History entry).
   - id: cancelled
     description: Terminal — abandoned.
 
@@ -73,7 +85,7 @@ transitions:
         command: '$spurBin task check $wbs --as testing'
   - from: testing
     to: done
-    description: Testing passed — task complete
+    description: Testing passed; mark done
     guard:
       kind: shell
       options: