@gobing-ai/spur 0.3.78 → 0.3.81

package/plugins/sp/scripts/wrapup-steps.ts

@@ -0,0 +1,466 @@
+#!/usr/bin/env bun
+/**
+ * wrapup-steps — deterministic wrap-up capture, metrics and feature sync behind the
+ * wrapup-pipeline wrappers (task 0824, feature I21, governance §1.2 composition budgets).
+ *
+ * Reproduces the former wrapup-pipeline `task-resolve:onEnter:0`, `metrics-record:onEnter:0`
+ * and `feature-transition:onEnter:0` shell programs one-for-one so the workflow stays inside
+ * the shell-program caps while writing the same `.spur/run` artifacts:
+ *   - `<runId>-wrapup-tasks.json`       normalized, deduplicated WBS capture (resolve)
+ *   - `<runId>-wrapup-resolve.status`   `PASS`/`FAIL` (resolve)
+ *   - `<runId>-route-reason.txt`        route reason (written by the workflow route writer)
+ *   - `.spur/memory/wrapup-metrics.jsonl` one row per task (metrics)
+ *   - `<runId>-wrapup-metrics.status`   `PASS`/`FAIL` (metrics)
+ *   - `<runId>-wrapup-sync.status`      `PASS`/`FAIL` (feature-transition)
+ *
+ * Environment comes from the workflow vars: `__runId`, `tasks`, `feature`, `featureGateCmd`
+ * and `spurBin` (split on whitespace into a command plus prefix args, so
+ * `bun apps/cli/src/index.ts` works).
+ *
+ * Truthfulness contract (0770 + 0783): wrap-up never mutates task status; a lookup failure is
+ * recorded as FAIL, never silently omitted as success; metrics rows are serialized as JSON
+ * (never interpolated printf); and the required sync succeeds only for a valid matching
+ * unblocked proposal whose target status is freshly observed — a gate PASS can never convert
+ * a failed sync into success. The process always exits 0 after resolve/metrics/
+ * feature-transition; the verdict lives in the status file (an empty `feature` is a
+ * mis-invocation and exits 1).
+ *
+ * Node-builtin imports only; pure helpers are exported for unit testing (ADR-065).
+ */
+
+import { spawnSync } from 'node:child_process';
+import { appendFileSync, existsSync, mkdirSync, readFileSync, writeFileSync } from 'node:fs';
+import { join } from 'node:path';
+
+export interface WrapupStepsEnv {
+    __runId?: string;
+    tasks?: string;
+    feature?: string;
+    featureGateCmd?: string;
+    spurBin?: string;
+    [key: string]: string | undefined;
+}
+
+export interface WrapupStepsOptions {
+    /** Base directory for `.spur/run` / `.spur/memory`; defaults to the process cwd. */
+    cwd?: string;
+}
+
+/** jq `//` chain: first value that is neither null, undefined nor false; otherwise the fallback. */
+export function jqPick(...values: unknown[]): unknown {
+    for (const value of values) {
+        if (value !== null && value !== undefined && value !== false) return value;
+    }
+    return values[values.length - 1];
+}
+
+/** `jq -r` text rendering of a JSON value (strings raw, everything else compact JSON). */
+function jqText(value: unknown): string {
+    return typeof value === 'string' ? value : JSON.stringify(value);
+}
+
+/** Canonical four-digit WBS string: whitespace is rejected, not trimmed (0783 R1). */
+export const WBS_PATTERN = /^[0-9]{4}$/;
+
+/** `spurBin` splits on whitespace into a command plus prefix args (so `bun x.ts` works). */
+export function spurCommand(spurBin: string | undefined): { cmd: string; prefix: string[] } {
+    const parts = (spurBin ?? 'spur')
+        .trim()
+        .split(/\s+/)
+        .filter((p) => p.length > 0);
+    return { cmd: parts[0] ?? 'spur', prefix: parts.slice(1) };
+}
+
+function spur(
+    env: WrapupStepsEnv,
+    args: string[],
+    options: { cwd?: string; stderr?: 'inherit' } = {},
+): { status: number; stdout: string } {
+    const { cmd, prefix } = spurCommand(env.spurBin);
+    const result = spawnSync(cmd, [...prefix, ...args], {
+        cwd: options.cwd,
+        encoding: 'utf8',
+        ...(options.stderr === 'inherit' ? { stdio: ['ignore', 'pipe', 'inherit'] as const } : {}),
+    });
+    if (result.error !== undefined) return { status: result.status ?? 1, stdout: '' };
+    return { status: result.status ?? 1, stdout: result.stdout ?? '' };
+}
+
+/** jq status-chain semantics for `task show` output; null/missing status means the lookup failed. */
+export function taskStatusOf(taskJson: string): { resolved: unknown; present: boolean } {
+    let parsed: unknown;
+    try {
+        parsed = JSON.parse(taskJson);
+    } catch {
+        return { resolved: null, present: false };
+    }
+    if (parsed === null || typeof parsed !== 'object') return { resolved: null, present: false };
+    const frontmatter = (parsed as Record<string, unknown>).frontmatter;
+    const fmStatus =
+        frontmatter !== null && typeof frontmatter === 'object'
+            ? (frontmatter as Record<string, unknown>).status
+            : undefined;
+    const status = (parsed as Record<string, unknown>).status;
+    // jq: `.frontmatter.status // .status` is null only when frontmatter.status is null/absent
+    // AND .status is null; a trailing false is kept (false != null in jq).
+    if (fmStatus === null || fmStatus === undefined) {
+        return { resolved: status ?? null, present: status !== undefined && status !== null };
+    }
+    return { resolved: fmStatus, present: true };
+}
+
+/** One truthy status display: `unresolved` when the lookup left nothing to show. */
+function statusDisplay(taskJson: string): string {
+    const { resolved } = taskStatusOf(taskJson);
+    if (resolved === null || resolved === undefined || resolved === false) return 'unresolved';
+    return jqText(resolved);
+}
+
+export interface ResolveResult {
+    status: 'PASS' | 'FAIL';
+    statusFile: string;
+    tasksFile: string;
+    /** Exit code the workflow wrapper observes (only an empty __runId is a hard failure). */
+    exitCode: number;
+}
+
+/** `resolve` — parse and validate vars.tasks exactly once, then resolve every member. */
+export function resolveTasks(env: WrapupStepsEnv, options: WrapupStepsOptions = {}): ResolveResult {
+    const cwd = options.cwd;
+    const runId = env.__runId ?? '';
+    if (runId.length === 0) {
+        process.stderr.write('task-resolve: __runId is empty — refusing the legacy fixed-path fallback\n');
+        return { status: 'FAIL', statusFile: '', tasksFile: '', exitCode: 1 };
+    }
+    mkdirSync(cwd ? join(cwd, '.spur', 'run') : join('.spur', 'run'), { recursive: true });
+    const relTasksFile = join('.spur', 'run', `${runId}-wrapup-tasks.json`);
+    const relReasonFile = join('.spur', 'run', `${runId}-route-reason.txt`);
+    const relStatusFile = join('.spur', 'run', `${runId}-wrapup-resolve.status`);
+    const abs = (p: string): string => (cwd ? join(cwd, p) : p);
+
+    const writeFail = (reason: string): ResolveResult => {
+        writeFileSync(abs(relReasonFile), reason);
+        writeFileSync(abs(relStatusFile), 'FAIL\n');
+        return { status: 'FAIL', statusFile: relStatusFile, tasksFile: relTasksFile, exitCode: 0 };
+    };
+
+    let parsedTasks: unknown;
+    try {
+        parsedTasks = JSON.parse(env.tasks ?? '');
+    } catch {
+        parsedTasks = undefined;
+    }
+    const validArray =
+        Array.isArray(parsedTasks) && parsedTasks.every((w) => typeof w === 'string' && WBS_PATTERN.test(w));
+    if (!validArray) {
+        process.stderr.write(
+            'task-resolve: tasks must be a JSON array of canonical four-digit WBS strings (whitespace is rejected, not trimmed)\n',
+        );
+        return writeFail('failed:tasks is not a JSON array of canonical four-digit WBS strings');
+    }
+
+    // Dedupe in first-seen order (never sorted).
+    const deduped: string[] = [];
+    for (const wbs of parsedTasks as string[]) {
+        if (!deduped.includes(wbs)) deduped.push(wbs);
+    }
+    writeFileSync(abs(relTasksFile), `${JSON.stringify(deduped)}\n`);
+
+    let unresolved = false;
+    for (const wbs of deduped) {
+        const shown = spur(env, ['task', 'show', wbs, '--json'], { cwd });
+        const status = shown.status === 0 ? statusDisplay(shown.stdout) : 'unresolved';
+        if (status !== 'done' && status !== 'cancelled') {
+            process.stderr.write(
+                `task-resolve: task ${wbs} did not resolve to a completed status (status=${status})\n`,
+            );
+            unresolved = true;
+        }
+    }
+    if (unresolved) {
+        return writeFail(`failed:unresolved or non-completed task (see ${relTasksFile})`);
+    }
+    writeFileSync(abs(relStatusFile), 'PASS\n');
+    return { status: 'PASS', statusFile: relStatusFile, tasksFile: relTasksFile, exitCode: 0 };
+}
+
+export interface MetricsResult {
+    status: 'PASS' | 'FAIL';
+    statusFile: string;
+}
+
+/** `metrics` — append one JSONL row per captured task; a missing row is never silently absorbed. */
+export function runMetrics(env: WrapupStepsEnv, options: WrapupStepsOptions = {}): MetricsResult {
+    const cwd = options.cwd;
+    const runId = env.__runId ?? '';
+    mkdirSync(cwd ? join(cwd, '.spur', 'run') : join('.spur', 'run'), { recursive: true });
+    mkdirSync(cwd ? join(cwd, '.spur', 'memory') : join('.spur', 'memory'), { recursive: true });
+    const relStatusFile = join('.spur', 'run', `${runId}-wrapup-metrics.status`);
+    const relTasksFile = join('.spur', 'run', `${runId}-wrapup-tasks.json`);
+    const relMetricsFile = join('.spur', 'memory', 'wrapup-metrics.jsonl');
+    const abs = (p: string): string => (cwd ? join(cwd, p) : p);
+
+    const fail = (): MetricsResult => {
+        writeFileSync(abs(relStatusFile), 'FAIL\n');
+        return { status: 'FAIL', statusFile: relStatusFile };
+    };
+
+    let captured: unknown;
+    try {
+        captured = JSON.parse(readFileSync(abs(relTasksFile), 'utf8'));
+    } catch {
+        captured = undefined;
+    }
+    const validCapture = Array.isArray(captured) && captured.every((w) => typeof w === 'string' && WBS_PATTERN.test(w));
+    if (!validCapture) {
+        process.stderr.write(
+            'metrics-record: run-scoped task capture missing, corrupted or non-canonical — refusing to record metrics\n',
+        );
+        return fail();
+    }
+
+    let metricsRc = 0;
+    for (const wbs of captured as string[]) {
+        const shown = spur(env, ['task', 'show', wbs, '--json'], { cwd });
+        const lookup = shown.status === 0 ? taskStatusOf(shown.stdout) : { resolved: null, present: false };
+        if (!lookup.present) {
+            process.stderr.write(
+                `metrics-record: task ${wbs} lookup failed or was malformed — recording FAIL instead of silently omitting its metrics row\n`,
+            );
+            metricsRc = 1;
+            continue;
+        }
+        const parsed = JSON.parse(shown.stdout) as Record<string, unknown>;
+        const frontmatter =
+            parsed.frontmatter !== null && typeof parsed.frontmatter === 'object'
+                ? (parsed.frontmatter as Record<string, unknown>)
+                : {};
+        const featureId = String(jqPick(frontmatter.feature_id, parsed.feature_id, ''));
+        const status = String(jqPick(frontmatter.status, parsed.status, 'unknown'));
+
+        // jq `//` semantics: null and false count as missing; an empty string result stays UNKNOWN.
+        let verdict = 'UNKNOWN';
+        const verdictPath = join('.spur', 'run', `${wbs}-verdict.json`);
+        if (existsSync(abs(verdictPath))) {
+            try {
+                const raw = jqPick(JSON.parse(readFileSync(abs(verdictPath), 'utf8')).verdict, 'UNKNOWN');
+                const text = raw === 'UNKNOWN' ? 'UNKNOWN' : jqText(raw);
+                if (text.length > 0) verdict = text;
+            } catch {
+                // unreadable verdict file keeps UNKNOWN telemetry
+            }
+        }
+
+        const timestamp = new Date().toISOString().replace(/\.\d{3}Z$/, 'Z');
+        const row = { wbs, feature_id: featureId, status, verdict, timestamp };
+        try {
+            appendFileSync(abs(relMetricsFile), `${JSON.stringify(row)}\n`);
+        } catch {
+            process.stderr.write(
+                `metrics-record: metrics append failed for task ${wbs} — recording FAIL instead of claiming the row landed\n`,
+            );
+            metricsRc = 1;
+        }
+    }
+    const status: 'PASS' | 'FAIL' = metricsRc === 0 ? 'PASS' : 'FAIL';
+    writeFileSync(abs(relStatusFile), `${status}\n`);
+    return { status, statusFile: relStatusFile };
+}
+
+export interface FeatureTransitionResult {
+    status: 'PASS' | 'FAIL';
+    statusFile: string;
+    /** Only an empty vars.feature is a hard failure (mis-invocation, not a blocked sync). */
+    exitCode: number;
+}
+
+/** Classify one sync result per 0783 R4; returns the blocking reason or '' for a verified sync. */
+export function classifySync(
+    syncOutput: string,
+    syncRc: number,
+    feature: string,
+    observed: string,
+): { reason: string; applied: string; syncOk: boolean } {
+    if (syncRc !== 0) {
+        return { reason: `sync exited nonzero (rc=${syncRc})`, applied: 'unreadable', syncOk: false };
+    }
+    let parsed: unknown;
+    try {
+        parsed = JSON.parse(syncOutput);
+    } catch {
+        parsed = undefined;
+    }
+    const obj = parsed !== null && typeof parsed === 'object' ? (parsed as Record<string, unknown>) : undefined;
+    const proposal =
+        obj?.proposal !== null && typeof obj?.proposal === 'object'
+            ? (obj.proposal as Record<string, unknown>)
+            : undefined;
+    const shapeOk =
+        obj !== undefined &&
+        proposal !== undefined &&
+        typeof proposal.featureId === 'string' &&
+        typeof proposal.from === 'string' &&
+        typeof proposal.to === 'string' &&
+        typeof obj.applied === 'boolean';
+    if (!shapeOk) {
+        return { reason: 'malformed or unreadable sync result', applied: 'unreadable', syncOk: false };
+    }
+    const applied = obj.applied === true ? 'true' : 'false';
+    const pFrom = String(jqPick(proposal.from, ''));
+    const pTo = String(jqPick(proposal.to, ''));
+    if (String(jqPick(proposal.featureId, '')) !== feature) {
+        return { reason: `sync proposal does not match feature ${feature}`, applied, syncOk: false };
+    }
+    if (proposal.gateBlocked === true) {
+        return {
+            reason: 'sync proposal is gate-blocked — a blocked sync is not a no-change success',
+            applied,
+            syncOk: false,
+        };
+    }
+    if (proposal.requiresConfirm === true) {
+        return { reason: 'sync proposal requires operator confirmation', applied, syncOk: false };
+    }
+    if (applied === 'true' && observed !== pTo) {
+        return {
+            reason: `applied sync did not land on the proposal target (observed=${observed}, to=${pTo})`,
+            applied,
+            syncOk: false,
+        };
+    }
+    if (applied === 'false' && (pFrom !== pTo || observed !== pTo)) {
+        return {
+            reason: `sync applied nothing without a from==to observed no-op (from=${pFrom}, to=${pTo}, observed=${observed})`,
+            applied,
+            syncOk: false,
+        };
+    }
+    return { reason: '', applied, syncOk: true };
+}
+
+/** `feature-transition` — required bounded sync, observation and the affected-feature gate. */
+export function runFeatureTransition(env: WrapupStepsEnv, options: WrapupStepsOptions = {}): FeatureTransitionResult {
+    const cwd = options.cwd;
+    const runId = env.__runId ?? '';
+    const feature = env.feature ?? '';
+    mkdirSync(cwd ? join(cwd, '.spur', 'run') : join('.spur', 'run'), { recursive: true });
+    const relStatusFile = join('.spur', 'run', `${runId}-wrapup-sync.status`);
+    const abs = (p: string): string => (cwd ? join(cwd, p) : p);
+    if (feature.length === 0) {
+        process.stderr.write(
+            'feature-transition: vars.feature is empty — refusing no-op feature sync (mis-invocation, not a blocked sync)\n',
+        );
+        return { status: 'FAIL', statusFile: relStatusFile, exitCode: 1 };
+    }
+
+    // Three branches, first that exists relative to the cwd; current arguments including --spur-bin.
+    let syncOutput = '';
+    let syncRc = 1;
+    const boundedTs = join('plugins', 'sp', 'scripts', 'feature-sync-bounded.ts');
+    const boundedArgs = [feature, '--spur-bin', env.spurBin ?? 'spur', '--json'];
+    if (existsSync(cwd ? join(cwd, boundedTs) : boundedTs)) {
+        const result = spawnSync('bun', [boundedTs, ...boundedArgs], { cwd, encoding: 'utf8' });
+        syncOutput = result.stdout ?? '';
+        syncRc = result.status ?? 1;
+        if (result.stderr !== null && result.stderr.length > 0) process.stderr.write(result.stderr);
+    } else {
+        const probe = spawnSync('superskill', ['script', 'path', 'sp', 'feature-sync-bounded.mjs'], {
+            cwd,
+            encoding: 'utf8',
+        });
+        const twin = probe.status === 0 ? (probe.stdout ?? '').trim() : '';
+        if (twin.length > 0 && existsSync(twin)) {
+            const result = spawnSync('node', [twin, ...boundedArgs], { cwd, encoding: 'utf8' });
+            syncOutput = result.stdout ?? '';
+            syncRc = result.status ?? 1;
+            if (result.stderr !== null && result.stderr.length > 0) process.stderr.write(result.stderr);
+        } else {
+            // Last branch: stderr streams through (visible), stdout is the JSON payload.
+            const result = spur(env, ['feature', 'sync', feature, '--json'], { cwd, stderr: 'inherit' });
+            syncOutput = result.stdout;
+            syncRc = result.status;
+        }
+    }
+    process.stdout.write(`${syncOutput}\n`);
+
+    const shown = spur(env, ['feature', 'show', feature, '--json'], { cwd });
+    let observed = '';
+    if (shown.status === 0) {
+        try {
+            const parsed = JSON.parse(shown.stdout) as Record<string, unknown>;
+            const frontmatter =
+                parsed.frontmatter !== null && typeof parsed.frontmatter === 'object'
+                    ? (parsed.frontmatter as Record<string, unknown>)
+                    : {};
+            const picked = jqPick(parsed.status, frontmatter.status, '');
+            observed = picked === '' ? '' : jqText(picked);
+        } catch {
+            observed = '';
+        }
+    }
+    if (observed.length === 0) observed = 'unreadable';
+
+    const classified = classifySync(syncOutput, syncRc, feature, observed);
+    const { reason, applied } = classified;
+    const syncOk = classified.syncOk;
+
+    let gate = 'skipped';
+    if (applied === 'true' || syncRc !== 0) {
+        process.stdout.write(
+            `feature-transition: sync applied or failed after a possible partial transition for ${feature} — running feature gate: ${env.featureGateCmd ?? ''}\n`,
+        );
+        const gateResult = spawnSync('sh', ['-c', env.featureGateCmd ?? ''], { cwd, stdio: 'inherit' });
+        if ((gateResult.status ?? 1) === 0) {
+            gate = 'PASS';
+            process.stdout.write(`feature-transition: feature gate PASS for feature ${feature}\n`);
+        } else {
+            gate = 'FAIL';
+            process.stderr.write(
+                `feature-transition: feature gate FAIL for feature ${feature} — inspect findings before reporting the transition complete\n`,
+            );
+        }
+    } else {
+        process.stdout.write(
+            `feature-transition: sync did not apply a transition (rc=${syncRc}, applied=${applied}) — feature gate skipped\n`,
+        );
+    }
+
+    let syncStatus: 'PASS' | 'FAIL';
+    if (!syncOk || gate === 'FAIL') {
+        syncStatus = 'FAIL';
+        process.stderr.write(
+            `feature-transition: required synchronization failed for ${feature} — ${reason}; gate=${gate}\n`,
+        );
+    } else if (applied === 'false') {
+        syncStatus = 'PASS';
+        process.stdout.write(
+            `feature-transition: feature sync verified for ${feature} (from==to observed at ${observed}, gate=${gate}) — explicit no-change\n`,
+        );
+    } else {
+        syncStatus = 'PASS';
+        process.stdout.write(
+            `feature-transition: feature sync verified for ${feature} (applied, observed=${observed}, gate=${gate})\n`,
+        );
+    }
+    writeFileSync(abs(relStatusFile), `${syncStatus}\n`);
+    return { status: syncStatus, statusFile: relStatusFile, exitCode: 0 };
+}
+
+export const WRAPUP_STEPS_USAGE =
+    'usage: wrapup-steps.ts <resolve|metrics|feature-transition>  (env: __runId, tasks, feature, featureGateCmd, spurBin)';
+
+export function main(argv: string[], env: WrapupStepsEnv = process.env, options: WrapupStepsOptions = {}): number {
+    const sub = argv[0];
+    if (sub === 'resolve') return resolveTasks(env, options).exitCode;
+    if (sub === 'metrics') {
+        runMetrics(env, options);
+        return 0;
+    }
+    if (sub === 'feature-transition') return runFeatureTransition(env, options).exitCode;
+    process.stderr.write(`${WRAPUP_STEPS_USAGE}\n`);
+    return 2;
+}
+
+if (import.meta.main) {
+    process.exit(main(process.argv.slice(2)));
+}

package/plugins/sp/skills/conflict-finding/SKILL.md

@@ -94,6 +94,12 @@ Resolve `<scope>` and `--pillar`; confirm the repository root; establish **audit
 numbered-document mutation of any kind. With `--resolve`, no write happens until a repair set is
 presented, explicitly confirmed, and freshness-revalidated.
 
+Validate every enum flag against the domain declared by the command surface
+(`plugins/sp/commands/dev-find-conflict.md`): `--pillar` ∈ `source|tasks|features|authority|all`,
+`--mode` ∈ `adaptive|full`, `--agent` ∈ `inline|auto|name`. An out-of-domain value **refuses** the
+audit before any discovery work — report the received value, the flag's valid domain, and stop;
+never silently coerce or ignore it. Only `<scope>` is free-form and exempt from this check.
+
 ### Step 2 — Discover local authority
 
 Read entry/process rules (`AGENTS.md`, `docs/99_PROJECT_CONSTITUTION.md`) before interpreting any

package/plugins/sp/skills/daily-summary/SKILL.md

@@ -166,6 +166,6 @@ Read the skill file and follow the workflow manually.
 ## Additional Resources
 
 - **Script source:** [scripts/daily-summary/daily-summary.ts](../../scripts/daily-summary/daily-summary.ts) — CLI implementation
-- **Tests:** [tests/daily-summary.test.ts](tests/daily-summary.test.ts) — unit coverage for parsing, date ranges, markdown output
+- **Tests:** [tests/daily-summary/daily-summary.test.ts](../../tests/daily-summary/daily-summary.test.ts) — unit coverage for parsing, date ranges, markdown output
 - **Related skills:** `sp:dev-handover` (blocker handoff), `sp:dev-changelog` (commit-based changelog), `sp:spur-cli` (task management)
 - **Upstream CLI:** [ccusage](https://github.com/ryoppippi/ccusage) — AI agent token usage reporter

package/plugins/sp/skills/doc-evolve/SKILL.md

@@ -4,7 +4,7 @@ description: "Evolve docs/00-05 + AGENTS.md per docs/99_PROJECT_CONSTITUTION.md:
 license: Apache-2.0
 metadata:
   author: spur
-  version: "1.0"
+  version: "1.1"
   platforms: "claude-code,codex,openclaw,opencode,antigravity"
   interactions:
     - reviewer
@@ -30,17 +30,17 @@ this skill applies it.
 
 **Read `docs/99_PROJECT_CONSTITUTION.md` first.** It is the single source of truth for *how* these
 files are maintained (authority §2, doc map §4.1, frontmatter contracts §4.3, sync triggers §5,
-per-file edit rules §6, the audit §7, lessons §8). This skill is a runbook for executing §5/§7/§8;
+per-file edit rules §6, the audit §7, lesson routing §8). This skill is a runbook for executing §5/§7/§8;
 when the two disagree, the constitution wins and this skill is the bug.
 
 ## Operations
 
 | Operation | What it does | Constitution authority | Deterministic helper |
 | --------- | ------------ | ---------------------- | -------------------- |
-| **drift-audit** | Reality (code/shipped) vs. what a key file says, and cross-doc contradictions | §7 (the 8-item checklist) | `rg` the real CLI/config surface; diff vs `04`/`AGENTS.md`/`00` |
-| **sync-check** | Did a change touch the docs its trigger obligates in the same commit? | §5 (triggers T1–T8) | git diff of code/config vs. the matching doc edit |
+| **drift-audit** | Reality (code/shipped) vs. what a key file says, and cross-doc contradictions | §7 | `rg` the real CLI/config surface; diff vs `04`/`AGENTS.md`/`00` |
+| **sync-check** | Did a change touch the docs its trigger obligates in the same commit? | §5 (applicable triggers) | git diff of code/config vs. the matching doc edit |
 | **contract-verify** | Each doc's frontmatter matches its §4.1 row; `updated_at` is plausible | §4.3 | parse frontmatter; compare `owns`/`authority` vs §4.1; `git log` recency |
-| **lesson-append** | Append a dated lesson; dedup; promote recurring ones to a rule | §8 | format-check the line; `rg` for an equivalent before adding |
+| **lesson-append** | Record a useful lesson in existing project context; deduplicate; propose governance changes separately | §8 | format-check the line; `rg` for an equivalent before adding |
 
 No thin `dev-docs` command wrapper exists (`dev-operations.md §7`). Invoke this skill directly for
 an audit or a lesson, or reach it via `/sp:dev-plan`'s docs step and `/sp:spur-init`'s `customize`.
@@ -84,48 +84,40 @@ stubs filled or deliberately documented; `bun run lint` passes where applicable.
 Walk the §7 checklist. Each item pairs a detection command with the doc it validates:
 
 ```bash
-# Real CLI surface vs. what 04 / AGENTS.md / 00 claim
+# Real CLI surface vs. owning non-UI contracts
 rg -n "\.command\('" apps/cli/src/commands/        # the true verb list
-rg -n '^#### `spur ' docs/04_DESIGN.md             # documented commands
+rg -n '^#### `spur ' docs/design/             # documented commands
 # → diff the two sets; a verb in code but not in 04 is T3 drift.
 
 # 05 status rows vs. reality
-rg -n '✅|🔶|⏳|💤' docs/05_FEATURES.md             # claimed states
+cat docs/features/INDEX.md                         # generated feature states
 # → spot-check each ✅/🔶 against code; confirm no ⏳ quietly shipped.
 
 # 02 phase bullets name real things (no dead names)
 # 03 module descriptions vs. the real tree
-fd -t d -d 2 . apps packages                       # real modules
+rg --files apps packages                       # real modules
 # Frontmatter contracts (see contract-verify) + updated_at recency
 git log -1 --format='%ci' -- docs/04_DESIGN.md     # last touch vs. recent surface changes
 ```
 
-**Repair protocol (§7, always this order):** fix the **authoritative** doc first (append-only files
-by dated amendment, never rewrite), then the derived docs that restate/sequence it, then
-`AGENTS.md`, then **flag what drifted and why** in the commit/task (a silent fix hides the systemic
-cause). Anything systemic becomes a §8 lesson — or, if it recurs, a new §6 rule.
+**Repair protocol (§7):** fix the authoritative statement first, then affected detail/index/entry
+files. Preserve ADR numbers, original titles/dates and decision history; editorial condensation
+follows §6.1, while actual reversals need a superseding decision. Record findings in a task/report.
+Routine lessons go to existing learning/context storage (§8); no automatic constitution edits.
 
 Output a **drift report**: per finding, `{ doc, what code says, what the doc says, authority, repair
 }`. A clean report lists the checks run and that each returned no delta.
 
 ## sync-check (§5)
 
-Given a change (a diff, or a just-finished task), check the same-commit obligations:
+Read the live constitution §5; it owns the trigger table. Classify each changed fact, identify
+its owner, and inspect the diff to confirm required synchronization. Update an index or AGENTS.md
+only when its own facts changed. A satellite edit with an unchanged index pointer is synchronized.
 
-| If the change… | Trigger | …the same commit must touch |
-| -------------- | ------- | --------------------------- |
-| adds/changes a command, flag, config key, env var, schema, DTO | **T3** | `04_DESIGN` + the `AGENTS.md` surface block |
-| ships a feature or changes its state | **T4** | its `05` row (+ a `01` scope row if new surface) |
-| makes a new cross-cutting decision (or reverses one) | **T1** | `00` first (dated), then `03`, `01` if scope shifts |
-| would contradict an existing ADR | **T2** | **stop** — add the superseding ADR entry first |
-| completes/reorders a phase | **T5** | `02` (the real shipped name) |
-| adds/cuts/defers scope | **T6** | `01` + placement in `02` |
-| changes the doc map or process | **T7** | this file → re-sync `AGENTS.md` (§4.4) → siblings |
-| plans a multi-wave batch | **T8** | schedule "doc sync" as an explicit work item |
-
-Detection is a diff read: list the changed code/config paths, map each to its trigger, then confirm
-the obligated doc was edited in the same change. A surface change with no `04` edit is the canonical
-miss (the one this whole §5 table exists to prevent).
+T1 applies only to real architectural choices passing §6.1. Feature approvals, task completion,
+bugfixes restoring an existing contract and verification receipts do not justify ADR entries.
+T7 applies only to operator-authorized governance corrections under §6.8; a routine doc edit or
+lesson does not justify touching the constitution. Portable changes include in-scope init templates.
 
 ## contract-verify (§4.3)
 
@@ -140,19 +132,13 @@ stale given recent commits?"
 
 ## lesson-append (§8)
 
-Append a lesson to the right per-file section of §8:
-
-```
-- [YYYY-MM-DD] <project>: <lesson — what went wrong / what to do instead>
-```
+Read constitution §8 for the existing project's destination. Record a useful, deduplicated
+lesson in existing learning/context storage or a dated report, with evidence. Do not append
+lessons to the constitution. Do not create a second learning ledger when one already exists.
 
-- **Low threshold** — when in doubt, append. **Check for an equivalent first** (`rg` the section);
-  bump its date instead of duplicating.
-- **Promotion is the only sanctioned deletion:** a lesson that recurs or hardens into practice is
-  promoted into a §6 rule (or §5 trigger) and removed from §8. Lessons are the inbox; §5/§6 are the
-  law.
-- Lessons carry project provenance (this file is byte-identical across projects except §8 + the §3
-  tool column) — a lesson from one project is a warning, not yet a law, for the others.
+A recurring lesson may justify proposing a document-governance correction; apply it only within
+operator-authorized §6.8 scope. Task receipts remain in task records. Fresh project templates
+contain neither inherited lessons nor fabricated decisions/status claims.
 
 ## What this skill is NOT