@gobing-ai/spur 0.3.93 → 0.3.94

package/.claude-plugin/marketplace.json

@@ -7,7 +7,7 @@
     "plugins": [
         {
             "name": "sp",
-            "version": "0.3.93",
+            "version": "0.3.94",
             "source": "./plugins/sp"
         }
     ]

package/config/rules/boundary/test-subpath-boundary.yaml

@@ -0,0 +1,48 @@
+$schema: "@gobing-ai/spur/schemas/rule-file.schema.json"
+# Test-only subpath boundary — @gobing-ai/spur-app/testing and the app's testing/
+# module are for tests and the mock itself, never production sources (task 0975 R3).
+#
+# WHY: `@gobing-ai/spur-app/testing` (packages/app/src/testing/history-board-mock.ts)
+# is a test-only mock subpath (E82). A production import couples shipped code to a
+# fake, and it crept toward the server transport before 0961 severed the seam. The
+# evaluator's glob matcher is segment-aware with `*`/`**` only (no brace groups), so
+# the ts/tsx globs would need separate entries — the repo carries .ts sources only,
+# matching the dao-boundary precedent.
+#
+# Scope covers src trees only: `<workspace>/tests/**` directories stay outside, and
+# `packages/app/src/testing/**` (the mock's own home) is exempted explicitly.
+rules:
+  - id: no-testing-subpath-import
+    description: >
+      Production sources must not import the @gobing-ai/spur-app/testing subpath
+      (history-board mock, E82/0961). Tests under <workspace>/tests/** and the
+      packages/app/src/testing/** module itself are exempt.
+    severity: error
+    evaluator:
+      type: forbidden-import
+      config:
+        forbidden:
+          - specifier: "@gobing-ai/spur-app/testing"
+        scope:
+          include:
+            - "apps/**/src/**/*.ts"
+            - "packages/**/src/**/*.ts"
+          exclude:
+            - "packages/app/src/testing/**"
+
+  - id: no-relative-testing-module-import
+    description: >
+      packages/app production sources must not reach the testing/ module through
+      relative imports (from './testing/…' or '../…/testing…'). The testing/**
+      module itself and workspace tests/ directories are exempt.
+    severity: error
+    evaluator:
+      type: forbidden-import
+      config:
+        forbidden:
+          - pattern: "(?:from\\s+|import\\(\\s*)['\"](\\.\\.?/)+(?:[^'\"]*/)?testing(?:/|['\"])"
+        scope:
+          include:
+            - "packages/app/src/**/*.ts"
+          exclude:
+            - "packages/app/src/testing/**"

package/config/rules/strict/runtime-boundaries.yaml

@@ -73,6 +73,7 @@ rules:
 
             # Synchronous template & workflow resolvers:
             - "apps/cli/src/commands/task.ts" # sync loadTemplateContent/Bodies callbacks
-            - "packages/app/src/services/workflow-service.ts" # composition advisory source (0775: facts extracted from the live definition inside the synchronous validate path; the baseline snapshot sync read was retired)
+            - "packages/app/src/services/workflow-service.ts" # run-log/checkpoint reclamation realpath confinement (:988, :1014)
+            - "packages/app/src/workflow/run-record.ts" # confined sync run-record reads: realpath + fstat byte-window (moved from workflow-service.ts, 0962)
             - "apps/cli/src/release-ops.ts" # sync manifest/workspace reads + Bun.write rewrites inside the git release flow (task 0617); mirrors task.ts sync-template exemption
             - "apps/cli/src/version-carriers.ts" # sync manifest reads + Bun.write rewrites for registered release carriers (task 0854); mirrors release-ops.ts sync exemption

package/config/rules/structure/protected-files.yaml

@@ -37,6 +37,10 @@ rules:
             # this rule's include scope — scanning generated copies only adds noise
             # (e.g. `id: task-implement-transition` trips the sk- token shape).
             - "apps/cli/config/"
+            # `apps/cli/plugins/` is the same kind of gitignored build:bundle output — a staged
+            # npm copy of `plugins/`, itself outside the include scope. Minified generated libs
+            # there trip the api-key shape (0976: HEAD's inline-run.generated.mjs fires too).
+            - "apps/cli/plugins/"
 
   - id: no-unsafe-git-commands
     description: "Unsafe git commands (force-push, hard reset) can overwrite history or cause data loss (AGENTS.md CRITICAL safety)."

package/config/workflows/task-pipeline.yaml

@@ -286,6 +286,13 @@ states:
                 # a silent no-op routes the run to `failed` here instead of drifting
                 # into test/review and being caught a full pass later.
                 requireDiff: true
+                # Verification-only re-run admission (task 0976): when requireDiff
+                # sees zero non-corpus changes because the implementation already
+                # landed through another path, `spur task check <wbs>` PASS admits
+                # the empty implement as a certification pass; a check failure
+                # keeps the 0424 R3 empty-implement violation. Static option —
+                # deliberately no run-var knob (ADR-115).
+                requireDiffAllowCleanCheck: true
                 # 0933 R26: escalation contract — the agent.run option names the QUESTION
                 # file (the pause signal, deleted pre-dispatch for freshness); a paused
                 # attempt (agent wrote its question there and exited 0) succeeds with
@@ -577,31 +584,24 @@ states:
           Deterministic failure-class router on a red gate (0943 R3). The engine has no onEnter
           conditionals, so the FAIL branch from `test`/`test-recheck` lands here as its own
           deterministic state (the sanctioned alternative), while the green branch goes to
-          `triage`. `decide failure-class` reads the bounded gate findings and routes: retryable
-          → test-recheck (the attempt is counted on entry, so qualityGateMaxFixAttempts still
-          bounds the loop), fix → test-fix (the repair hop, as before), stop → failed with
-          terminalReason failed-check. A missing/corrupt decision fails closed to failed-check.
+          `triage`. `decide failure-class` reads the bounded gate findings and routes: fix →
+          test-fix (the bounded repair hop; its default, recorded as `source: default` when no
+          backend decides — 0976 R2), stop → failed with terminalReason failed-check. A
+          missing/corrupt decision fails closed to failed-check. (0976 R2 collapsed the former
+          `retryable` lane: the declared default made it unreachable on the inline path.)
       onEnter:
           - kind: decide
             options:
                 id: failure-class
                 method: choice
                 question: >-
-                    The quality gate failed. Is the failure retryable (transient or environmental
-                    — just re-run the gate), fixable by the repair agent, or should the run stop
-                    here?
-                choices: [retryable, fix, stop]
+                    The quality gate failed. Is the failure fixable by the repair agent, or should
+                    the run stop here?
+                choices: [fix, stop]
                 default: fix
                 evidence:
                     - .spur/run/${vars.wbs}-test-gate.findings
                 resultFile: .spur/run/${vars.wbs}-failure-class.decision
-          # A retryable classification still counts an attempt so the existing
-          # qualityGateMaxFixAttempts cap bounds the recheck loop (0943 R3; the cap edge reads
-          # the same counter the fixall path uses).
-          - kind: shell
-            options:
-                command: >-
-                    A=".spur/run/$wbs-test-fix-attempt"; [ "$(jq -r '.value // ""' ".spur/run/$wbs-failure-class.decision" 2>/dev/null)" = retryable ] && { n="$(cat "$A" 2>/dev/null || echo 0)"; printf '%s\n' "$((n + 1))" > "$A"; }; exit 0
 
     - id: review
       description: Three-dimensional code review via /sp:dev-review (functional requirements traceability + SECUA framework (Security, Efficiency, Correctness, Usability, Architecture) + architecture depth), findings written to `## Review`.
@@ -1007,8 +1007,7 @@ transitions:
           options:
               command: 'test "$mode" != fast'
     # ── failure-class routing (0943 R3): stop first (never mislabeled by the cap), then the
-    # attempt cap (bounds BOTH lanes — retryable counted on entry, fix as before), then the
-    # decision lanes, then the fail-closed defense. Declaration order matters.
+    # attempt cap, then the fix lane, then the fail-closed defense. Declaration order matters.
     - from: test-fail-triage
       to: failed
       terminalReason: failed-check
@@ -1021,7 +1020,7 @@ transitions:
     - from: test-fail-triage
       to: failed
       terminalReason: retry-exhausted
-      description: Attempt cap reached — qualityGateMaxFixAttempts bounds the retryable recheck and fix lanes alike.
+      description: Attempt cap reached — qualityGateMaxFixAttempts bounds the fix lane.
       # (warn) 5 commands: named fix attempts (legibility, 0874).
       guard:
           kind: shell
@@ -1029,14 +1028,6 @@ transitions:
               command: >-
                   fix_attempts="$(cat .spur/run/$wbs-test-fix-attempt 2>/dev/null || echo 0)";
                   test "$fix_attempts" -ge "$qualityGateMaxFixAttempts"
-    - from: test-fail-triage
-      to: test-recheck
-      description: Failure class retryable and under the cap — re-run the gate without fixall; the attempt was counted on entry.
-      guard:
-          kind: shell
-          options:
-              command: >-
-                  jq -e '.value == "retryable"' ".spur/run/$wbs-failure-class.decision" >/dev/null 2>&1
     - from: test-fail-triage
       to: test-fix
       description: Failure class fix and under the cap — the bounded repair hop, as before.

package/package.json

@@ -1,6 +1,6 @@
 {
     "name": "@gobing-ai/spur",
-    "version": "0.3.93",
+    "version": "0.3.94",
     "description": "Spur CLI — local-first harness for mainstream coding agents: constraint checking, workflow orchestration, agent health, and history analytics. Bun-native; exposes the `spur` command.",
     "keywords": [
         "spur",
@@ -53,14 +53,14 @@
     },
     "devDependencies": {
         "@commander-js/extra-typings": "^14.0.0",
-        "@gobing-ai/ts-db": "^0.5.7",
-        "@gobing-ai/ts-ai-runner": "^0.5.7",
-        "@gobing-ai/ts-dual-workflow-engine": "^0.5.7",
-        "@gobing-ai/ts-infra": "^0.5.7",
-        "@gobing-ai/ts-llm-jsonl-importer": "^0.5.7",
-        "@gobing-ai/ts-rule-engine": "^0.5.7",
-        "@gobing-ai/ts-runtime": "^0.5.7",
-        "@gobing-ai/ts-utils": "^0.5.7",
+        "@gobing-ai/ts-db": "^0.5.9",
+        "@gobing-ai/ts-ai-runner": "^0.5.9",
+        "@gobing-ai/ts-dual-workflow-engine": "^0.5.9",
+        "@gobing-ai/ts-infra": "^0.5.9",
+        "@gobing-ai/ts-llm-jsonl-importer": "^0.5.9",
+        "@gobing-ai/ts-rule-engine": "^0.5.9",
+        "@gobing-ai/ts-runtime": "^0.5.9",
+        "@gobing-ai/ts-utils": "^0.5.9",
         "@types/bun": "1.3.14",
         "@types/figlet": "^1.7.0",
         "@types/node-notifier": "8.0.5",

package/plugins/sp/README.md

@@ -102,7 +102,7 @@ list this README is checked against.
 | ------------------- | ----------------------------------------------------------------------------------------------------------------------------------------------- |
 | `dev-next`          | Status-aware router — inspect a task (or next frontier under a feature), dispatch the best existing `/sp:dev-*` command, chain on clean success |
 | `dev-run`           | Run a task — full pipeline (precheck→implement→test→review→approve→verify→record→done) or single-step (implement)                               |
-| `dev-review`        | Multi-dimensional review for a task or path — functional requirements traceability, SECUA framework, and architectural depth                    |
+| `dev-review`        | Multi-dimensional review for a task or path (traceability, SECUA, architecture); `--triage` fixes small findings, files the rest as tasks       |
 | `dev-pr-review`     | GitHub Codex PR review — prepare/reuse a PR, request `@codex review`, collect findings, validate/fix/re-review (fix mode); workflow-backed spine |
 | `dev-verify`        | Verify a task against its requirements and Acceptance Criteria — traceability check producing a PASS/PARTIAL/FAIL verdict with evidence         |
 | `dev-unit`          | Generate or extend tests until the unit target is met                                                                                           |

package/plugins/sp/commands/dev-review-session.md

@@ -1,5 +1,5 @@
 ---
-description: "Review the active coding-agent session immediately: summarize outcomes, distinguish resolved and open issues with evidence, and propose bounded improvements. With --triage: apply pure-doc / one-to-two-line fixes inline, then file remaining findings as one new task. Triggers: review this session, session wrap-up, immediate retrospective, what happened, what was resolved, triage findings"
+description: "Review the active coding-agent session immediately: summarize outcomes, distinguish resolved and open issues with evidence, and propose bounded improvements. With --triage: apply pure-doc / one-to-two-line fixes inline, then file remaining findings as one or more implement-ready tasks. Triggers: review this session, session wrap-up, immediate retrospective, what happened, what was resolved, triage findings"
 role: reviewer
 argument-hint: "[<focus>] [--triage]"
 allowed-tools: ["Bash", "Read", "Grep", "Glob", "Skill"]
@@ -11,8 +11,8 @@ Wraps the **sp:session-review** skill for a lightweight review of the active hos
 default it is report-only: current conversation plus read-only repository evidence, run inline so
 the session context is preserved — no workflow launch, history import, task creation, or
 remediation. With `--triage`, it first triages the findings, then applies direct fixes (pure
-documentation work and one-to-two-line fixes) inline and files everything remaining as exactly one
-new task for further fixing. The result includes a non-overlapping time breakdown with durations in
+documentation work and one-to-two-line fixes) inline and files everything remaining as one or more
+implement-ready tasks for further fixing. The result includes a non-overlapping time breakdown with durations in
 `M:SS` or `H:MM:SS` form and `n/a` for unavailable measurements.
 
 ## Argument Flags
@@ -20,7 +20,7 @@ new task for further fixing. The result includes a non-overlapping time breakdow
 | Flag | Description | Default |
 | --- | --- | --- |
 | `[<focus>]` | Optional question or operation to emphasize without excluding material session outcomes. | full active session |
-| `--triage` | After the report: bucket findings → apply pure-doc / 1–2-line fixes inline → create one task for the remainder. | off (report-only) |
+| `--triage` | After the report: bucket findings → apply pure-doc / 1–2-line fixes inline → file the remainder as one or more implement-ready tasks. | off (report-only) |
 
 For shared semantics, see the [flag glossary](../skills/spur-dev/references/flag-glossary.md).
 

package/plugins/sp/commands/dev-review.md

@@ -1,7 +1,7 @@
 ---
-description: "Review code for a task or path — multi-dimensional review across functional traceability, SECUA quality, and architectural depth. Triggers: \"review this\", \"check the code\", \"SECUA review\", \"dev review\", \"audit this\"."
+description: "Review code for a task or path — multi-dimensional review across functional traceability, SECUA quality, and architectural depth. With --triage: fix small findings directly, then file the rest as implement-ready tasks. Triggers: \"review this\", \"check the code\", \"SECUA review\", \"dev review\", \"audit this\", \"triage review findings\"."
 role: reviewer
-argument-hint: "[<wbs|path>] [--agent <inline|auto|name>] [--focus <dims>] [--fix (deprecated)]"
+argument-hint: "[<wbs|path>] [--agent <inline|auto|name>] [--focus <dims>] [--triage] [--worktree [<name>]]"
 allowed-tools: ["Bash", "Read", "Skill"]
 ---
 
@@ -16,17 +16,28 @@ Wraps the **sp:functional-review**, **sp:code-verification**, and **sp:code-impr
 | `[<wbs\|path>]` | Task WBS or source path to review. | cwd |
 | `--agent` `<inline\|auto\|name>` | Who runs the model-bearing review. | omit |
 | `--focus` `<dims>` | Review dimensions (functional / SECUA / architecture). | all |
-| `--fix` | Deprecated no-op + warning; route remediation to /sp:dev-verify --fix. | off |
+| `--triage` | After the review: fix small findings directly, file the rest as one or more implement-ready tasks. | off (report-only) |
+| `--worktree` `[<name>]` | Run the triage in an isolated git worktree; FF-merge on success, retain on failure. Bare `--worktree` creates a fresh tree; `--worktree <name>` adopts an existing worktree by name/path/branch. Requires `--triage`. | off |
 
 For shared semantics, see the [flag glossary](../skills/spur-dev/references/flag-glossary.md).
 
 ## Usage
 
-/sp:dev-review [<wbs|path>] [--agent <inline|auto|name>] [--focus <dims>] [--fix (deprecated)]
+```
+/sp:dev-review [<wbs|path>] [--agent <inline|auto|name>] [--focus <dims>] [--triage] [--worktree [<name>]]
+/sp:dev-review scripts --triage
+/sp:dev-review 0962 --triage --worktree
+```
+
+Put the target first: a bare token after `--worktree` is read as the worktree name.
 
 ## Implementation
 
 - Apply the [inline-default execution-surface contract](../skills/spur-dev/references/cross-cutting.md#inline-default-execution-surface).
 - WBS mode (`<wbs>`): `Skill(skill="sp:functional-review", args="<wbs> $ARGUMENTS")` + `Skill(skill="sp:code-verification", args="review $ARGUMENTS")` + `Skill(skill="sp:code-improvement", args="<wbs> $ARGUMENTS")` (functional traceability + SECUA framework + architectural depth; the three skills return review fragments and the coordinator (`sp:super-reviewer`) writes the combined `## Review` — F92 0593 R1)
 - Path mode (`<path>`): `Skill(skill="sp:code-verification", args="review $ARGUMENTS")` + `Skill(skill="sp:code-improvement", args="<path> $ARGUMENTS")` (advisory SECUA quality + architectural depth; performs no task mutation)
-- `--fix`: Deprecated (no-op + warning message; route remediation to `/sp:dev-verify --fix`). **`--next` removed** (feature H8, 2026-07-31) — it was a deprecated no-op; route progression to `/sp:dev-next`. **was: `--next` deprecated no-op.**
+- `--triage`: after the review returns, run the triage protocol in [dev-operations.md § 2. review](../skills/spur-dev/references/dev-operations.md#2-review) **inline in this session** — the review skills and `sp:super-reviewer` stay report-only.
+- Without `--worktree`, every write lands in the current working tree on the current branch: no branch creation, no checkout, no commit.
+- `--worktree [<name>]`: the [execution-batch.md § Worktree isolation](../skills/spur-dev/references/execution-batch.md#worktree-isolation---worktree-name) lifecycle as a run of one (marker `command` = `dev-review`, `selector` = the target). Rejected without `--triage`.
+  While it runs, fixes and filed tasks land in the worktree copy; the main tree shows them only after the FF-merge.
+- `--fix`: Deprecated (still accepted: no-op + warning; route remediation to `--triage` or `/sp:dev-verify --fix`). **`--next` removed** (feature H8, 2026-07-31) — it was a deprecated no-op; route progression to `/sp:dev-next`. **was: `--next` deprecated no-op.**

package/plugins/sp/hooks/pi/guard-extension.ts

@@ -25,6 +25,7 @@ import { isAbsolute, join, resolve } from 'node:path';
 import type { ExtensionAPI } from '@earendil-works/pi-coding-agent';
 import { getEnvVar, getEnvVars } from '../../lib/env';
 import { resolveAgentHint as resolveAgentHintShared, resolveModelHint as resolveModelHintShared } from '../agent-hint';
+import { cappedByteLength, truncateSummary } from '../context-post-tool';
 import { classifyCommand } from '../destructive-policy';
 import { couldBeTaskFile } from '../task-file-policy';
 
@@ -36,8 +37,6 @@ import { couldBeTaskFile } from '../task-file-policy';
 const spurContextDir = (): string => join(process.cwd(), '.spur', 'context');
 const sessionFilePath = (): string => join(spurContextDir(), '.session.json');
 const ledgerFilePath = (): string => join(spurContextDir(), 'token-ledger.jsonl');
-const REDACTION_CAP = 4096;
-const SUMMARY_MAX_CHARS = 200;
 
 // ─── Helpers ─────────────────────────────────────────────────────────────
 
@@ -122,39 +121,17 @@ interface ToolEvent {
     tool_input?: Record<string, unknown>;
 }
 
-function estimateTokenCount(text: string): number {
-    if (!text) return 0;
-    // Rough estimate: ~4 chars per token for English text
-    return Math.ceil(text.length / 4);
-}
-
+// Summaries persist to disk, so they go through the same scrubber as the Claude hook —
+// the local copy this replaced stored the raw command (secrets included) as `summary`.
 function summarizeToolEvent(event: ToolEvent): string {
     const input = event.tool_input ?? {};
     const candidates = [input.file_path, input.command, input.pattern, input.glob_pattern, input.glob, input.path];
     for (const c of candidates) {
-        if (typeof c === 'string' && c.trim()) {
-            const s = c.trim();
-            return s.length > SUMMARY_MAX_CHARS ? `${s.slice(0, SUMMARY_MAX_CHARS - 3)}...` : s;
-        }
+        if (typeof c === 'string' && c.trim()) return truncateSummary(c);
     }
     return `(${event.tool_name ?? 'unknown'})`;
 }
 
-function redactText(text: string): string {
-    // Strip obvious secret patterns
-    let result = text.slice(0, REDACTION_CAP);
-    result = result.replace(
-        /-----BEGIN\s+(?:RSA\s+)?PRIVATE\s+KEY-----[\s\S]*?-----END\s+(?:RSA\s+)?PRIVATE\s+KEY-----/g,
-        '[REDACTED: PRIVATE KEY]',
-    );
-    result = result.replace(/ghp_[A-Za-z0-9]{36}/g, '[REDACTED: GITHUB_TOKEN]');
-    result = result.replace(/gho_[A-Za-z0-9]{36}/g, '[REDACTED: GITHUB_TOKEN]');
-    result = result.replace(/sk-[A-Za-z0-9]{20,}/g, '[REDACTED: API_KEY]');
-    result = result.replace(/api[_-]key['"]?\s*[:=]\s*['"][A-Za-z0-9_-]{16,}['"]/gi, '[REDACTED: API_KEY]');
-    result = result.replace(/AKIA[0-9A-Z]{16}/g, '[REDACTED: AWS_KEY]');
-    return result;
-}
-
 function appendToLedger(event: ToolEvent, command: string | undefined): void {
     try {
         if (!existsSync(spurContextDir())) return;
@@ -162,16 +139,19 @@ function appendToLedger(event: ToolEvent, command: string | undefined): void {
         if (!sessionId) return;
 
         const summary = summarizeToolEvent(event);
-        const tokens = command ? estimateTokenCount(redactText(command)) : 0;
+        const tokens = command ? Math.ceil(cappedByteLength(command) / 4) : 0;
+        const input = event.tool_input ?? {};
+        // Pi tool names are lowercase (`read`) and its write/edit tools take `path`, not `file_path`.
+        const path = typeof input.file_path === 'string' ? input.file_path : input.path;
 
         const ledgerEntry = JSON.stringify({
             session: sessionId,
-            type: event.tool_name === 'Read' ? 'read' : 'write',
+            type: event.tool_name?.toLowerCase() === 'read' ? 'read' : 'write',
             tool: event.tool_name,
-            path: event.tool_input?.file_path ?? null,
+            file: typeof path === 'string' ? path : undefined,
             summary,
             tokens,
-            timestamp: new Date().toISOString(),
+            ts: new Date().toISOString(),
         });
 
         appendFileSync(ledgerFilePath(), `${ledgerEntry}\n`);
@@ -216,7 +196,7 @@ function initSession(): void {
             type: 'session_start',
             agent: session.agent,
             model: session.model,
-            timestamp: session.started_at,
+            ts: session.started_at,
         });
         appendFileSync(ledgerFilePath(), `${startEntry}\n`);
     } catch {
@@ -256,7 +236,7 @@ function cleanupSession(): void {
             reads,
             writes,
             tokens,
-            timestamp: new Date().toISOString(),
+            ts: new Date().toISOString(),
         });
         appendFileSync(ledgerFilePath(), `${endEntry}\n`);
 
@@ -272,8 +252,9 @@ function cleanupSession(): void {
 export default function (pi: ExtensionAPI): void {
     // ── task-write-guard + careful-guard ──────────────────────────────
     pi.on('tool_call', async (event, ctx) => {
-        // task-write-guard: block Write/Edit to Spur task files
-        if (event.toolName === 'write' || event.toolName === 'edit') {
+        // task-write-guard: block Write/Edit to Spur task files.
+        // Both guards honor the same `off` escape hatches as the Claude hooks.
+        if ((event.toolName === 'write' || event.toolName === 'edit') && getEnvVar('SPUR_WRITE_GUARD') !== 'off') {
             const input = event.input as Record<string, unknown> | undefined;
             // Pi's write/edit tools use `path` (not Claude Code's `file_path`)
             const filePath = resolveInputPath(input);
@@ -287,7 +268,7 @@ export default function (pi: ExtensionAPI): void {
         }
 
         // careful-guard: warn on destructive Bash commands
-        if (event.toolName === 'bash') {
+        if (event.toolName === 'bash' && getEnvVar('SPUR_CAREFUL') !== 'off') {
             const input = event.input as Record<string, unknown> | undefined;
             const command = typeof input?.command === 'string' ? input.command : '';
             const hit = command ? classifyCommand(command) : null;

package/plugins/sp/lib/idea-handoff.generated.mjs

@@ -322,7 +322,7 @@ END`;var MEASURE_COLS="messages, tool_calls, skill_calls, fresh_input_tokens, ca
         ''
     )
     ELSE ''
-END`;var POST_WATERMARK_TABLES=[...KEYED_ROLLUP_TABLES,...GLOBAL_RANKED_ROLLUP_TABLES,"history_daily_stats","history_board_source_daily"];var HISTORY_IMPORT_SCHEMA_VERSION="0.5.7",HISTORY_IMPORT_SCHEMA_SQL=`
+END`;var POST_WATERMARK_TABLES=[...KEYED_ROLLUP_TABLES,...GLOBAL_RANKED_ROLLUP_TABLES,"history_daily_stats","history_board_source_daily"];var HISTORY_IMPORT_SCHEMA_VERSION="0.5.9",HISTORY_IMPORT_SCHEMA_SQL=`
 CREATE TABLE IF NOT EXISTS history_import_checkpoint (
     source TEXT NOT NULL,
     source_file TEXT NOT NULL,

package/plugins/sp/lib/inline-run.generated.d.mts

@@ -1,6 +1,8 @@
 /** GENERATED by scripts/commands/bundle-plugin-lib.ts — do not edit. Requires Bun for SQLite. */
 export declare const createOrAttachInlineRun: typeof import('@gobing-ai/spur-app').createOrAttachInlineRun;
 export declare const openInlineRunProjectDb: typeof import('@gobing-ai/spur-app').openInlineRunProjectDb;
+export declare const persistWorktreeRuns: typeof import('@gobing-ai/spur-app').persistWorktreeRuns;
+export declare const runDecideForInlineRun: typeof import('@gobing-ai/spur-app').runDecideForInlineRun;
 export declare const computeProofInputFingerprint: typeof import('@gobing-ai/spur-app').computeProofInputFingerprint;
 export declare const readProofInputContents: typeof import('@gobing-ai/spur-app').readProofInputContents;
 export declare const createWorkflowActionTraceWriter: typeof import('@gobing-ai/spur-app').createWorkflowActionTraceWriter;