@gobing-ai/spur 0.3.97 → 0.3.98

package/spur.js

@@ -62293,6 +62293,14 @@ var init_run_dao = __esm(() => {
                  metadata_json = json_set(COALESCE(NULLIF(metadata_json, ''), '{}'), '$.staleReason', ?2)
              WHERE id = ?3 AND status IN ('running', 'pending')`, nowIso, reason, runId);
     }
+    async cancelRun(runId) {
+      const nowIso = new Date().toISOString();
+      await this.adapter.run(`UPDATE runs
+             SET status = 'failed', completed_at = ?1, updated_at = ?1,
+                 terminal_reason = 'cancelled',
+                 metadata_json = json_set(COALESCE(NULLIF(metadata_json, ''), '{}'), '$.staleReason', ?2)
+             WHERE id = ?3 AND status IN ('running', 'pending', 'paused', 'interrupted')`, nowIso, "cancelled by operator (spur workflow cancel)", runId);
+    }
     async setPid(runId, pid) {
       await this.adapter.run("UPDATE runs SET pid = ? WHERE id = ?", pid, runId);
     }
@@ -79050,15 +79058,6 @@ function parseVerifyVerdict(raw, fallbackWbs) {
   const verdict = { ...result.data, wbs: result.data.wbs !== "" ? result.data.wbs : wbs };
   return { kind: "valid", wbs, verdict };
 }
-async function readVerifyVerdict(fs3, path9, fallbackWbs) {
-  let raw;
-  try {
-    raw = await fs3.readFile(path9);
-  } catch {
-    return { kind: "missing", wbs: fallbackWbs ?? "" };
-  }
-  return parseVerifyVerdict(raw, fallbackWbs);
-}
 function checkRowName(row) {
   for (const v of [row.name, row.check, row.id]) {
     if (typeof v === "string" && v.trim() !== "")
@@ -82355,6 +82354,7 @@ function formatNoopMessage(wbs, status) {
 }
 function evaluateDoneTransition(input) {
   const { wbs, taskFilePath, currentStatus, targetStatus, forced, reason, artifact, readError } = input;
+  const verdictPath = input.verdictPath ?? `.spur/run/${wbs}-verdict.json`;
   if (targetStatus === currentStatus) {
     return { kind: "noop", fromStatus: currentStatus, message: formatNoopMessage(wbs, currentStatus) };
   }
@@ -82362,7 +82362,6 @@ function evaluateDoneTransition(input) {
     return { kind: "allow", reason: "forced" };
   }
   if (artifact === undefined) {
-    const verdictPath2 = `.spur/run/${wbs}-verdict.json`;
     if (readError) {
       return {
         kind: "deny",
@@ -82370,7 +82369,7 @@ function evaluateDoneTransition(input) {
         message: [
           `Cannot transition task ${wbs} to done: verdict artifact is unusable.`,
           `  task:     ${taskFilePath}`,
-          `  verdict:  ${verdictPath2} (present but rejected)`,
+          `  verdict:  ${verdictPath} (present but rejected)`,
           `  reason:   ${readError}`,
           `  remediation: fix the artifact (re-run \`/sp:dev-verify ${wbs}\` until PASS), ` + `or override with \`spur task update ${wbs} done --force-done --reason "<why>"\`.`
         ].join(`
@@ -82383,7 +82382,7 @@ function evaluateDoneTransition(input) {
       message: [
         `Cannot transition task ${wbs} to done: missing verify verdict artifact.`,
         `  task:    ${taskFilePath}`,
-        `  verdict: ${verdictPath2} (not found)`,
+        `  verdict: ${verdictPath} (not found)`,
         `  remediation: re-run \`/sp:dev-verify ${wbs}\` until PASS (writes the artifact), ` + `or override with \`spur task update ${wbs} done --force-done --reason "<why>"\`.`
       ].join(`
 `)
@@ -82397,7 +82396,6 @@ function evaluateDoneTransition(input) {
   if (effective === "PASS") {
     return { kind: "allow", reason: "pass" };
   }
-  const verdictPath = `.spur/run/${wbs}-verdict.json`;
   const inconsistency = artifact.verdict !== computed ? { stored: artifact.verdict, computed } : undefined;
   return {
     kind: "deny",
@@ -84930,6 +84928,7 @@ function hasSolutionFileLineCitation(body) {
 var TESTING_VERDICT_STUB_RE, EXTERNAL_EVIDENCE_RE, GATE_LANGUAGE_SECTIONS, TaskCheckService;
 var init_task_check = __esm(() => {
   init_src2();
+  init_done_transition_guard();
   init_feature_check();
   init_planning_check_base();
   init_structural_repair();
@@ -85601,12 +85600,14 @@ var init_task_check = __esm(() => {
             exists2 = false;
           }
           if (!exists2) {
+            const scoped = /^(@[^/\s]+\/[^/\s]+)\/(.+)$/.exec(cite.path);
+            const detail = scoped ? `external package path \u2014 rewrite in the frozen external-evidence form: Evidence: ${scoped[1]} \`${scoped[2]}\` line ${cite.startLine}${cite.endLine ? `-${cite.endLine}` : ""} (origin and line number outside the backticks; task 0584 / ADR-062)` : `file not found at ${cite.path} (from project root). Point the citation at the code that implements this row, or move it to the external-evidence form if the file is not in this repo.`;
             findings.push({
               layer: "L4",
               code: FINDING_CODES.L4_ANCHOR_UNRESOLVED,
               severity: resolutionSeverity,
               section,
-              message: `Unresolved line anchor \`${cite.raw}\` \u2014 file not found at ${cite.path} (from project root). Point the citation at the code that implements this row, or move it to the external-evidence form if the file is not in this repo.`
+              message: `Unresolved line anchor \`${cite.raw}\` \u2014 ${detail}`
             });
             reported++;
             continue;
@@ -85773,8 +85774,21 @@ var init_task_check = __esm(() => {
     async checkVerdictArtifact(wbs, tasksDir, findings) {
       const projectRoot = resolveProjectRootFromTasksDir(tasksDir);
       const runDir = join25(projectRoot, ".spur", "run");
-      const verdictPath = `${runDir}/${wbs}-verdict.json`;
-      const outcome = await readVerifyVerdict(this.fs, verdictPath, wbs);
+      const loaded = await readVerdictArtifact(this.fs, runDir, wbs);
+      const verdictPath = loaded.path;
+      if (loaded.readError) {
+        findings.push({
+          layer: "L4",
+          code: FINDING_CODES.L4_MALFORMED_VERDICT_ARTIFACT,
+          severity: "error",
+          section: "Testing",
+          message: `Verdict artifact at ${verdictPath} is unusable: ${loaded.readError}`
+        });
+        return;
+      }
+      if (loaded.artifact === undefined)
+        return;
+      const outcome = parseVerifyVerdict(JSON.stringify(loaded.artifact), wbs);
       if (outcome.kind === "missing")
         return;
       if (outcome.kind === "malformed") {
@@ -91575,7 +91589,6 @@ async function deriveVerifiedOutcome(deps, window2 = {}) {
 }
 async function deriveTaskInput(deps, wbs, linkedRuns) {
   const runCompleted = (r) => r.status === "done" || r.status === "completed";
-  const supersedingFailedRun = linkedRuns.some((r) => r.status === "failed" || r.status === "cancelled");
   let done = false;
   let forcedDone = false;
   let sectionVerdictPresent = false;
@@ -91592,8 +91605,9 @@ async function deriveTaskInput(deps, wbs, linkedRuns) {
       raw = null;
     }
     if (raw !== null) {
-      forcedDone = /^done_forced:\s*true\b/m.test(raw);
-      done = /^status:\s*done\b/m.test(raw);
+      const frontmatter = MarkdownDocument.parse(raw, "task").frontmatterData ?? {};
+      forcedDone = frontmatter.done_forced === true;
+      let historyStatus;
       sectionVerdictPresent = parseVerdictLine(raw.split(`
 `)) !== null;
       for (const line of raw.split(`
@@ -91601,6 +91615,7 @@ async function deriveTaskInput(deps, wbs, linkedRuns) {
         const entry = parseHistoryLine(line, "task", wbs);
         if (!entry)
           continue;
+        historyStatus = entry.to;
         if (entry.to === "wip" && firstWipAt === null)
           firstWipAt = entry.timestamp;
         if (entry.to === "done") {
@@ -91610,7 +91625,7 @@ async function deriveTaskInput(deps, wbs, linkedRuns) {
         if (reachedDone && entry.from === "done")
           reopened = true;
       }
-      done = done || reachedDone;
+      done = String(frontmatter.status ?? historyStatus ?? "").toLowerCase() === "done";
     }
   }
   let verdictPresent = false;
@@ -91623,7 +91638,8 @@ async function deriveTaskInput(deps, wbs, linkedRuns) {
   const verdict = verdictRead.artifact;
   if (verdict) {
     verdictPresent = typeof verdict.verdict === "string";
-    passVerdict = verdict.verdict === "PASS";
+    const parsed = parseVerifyVerdict(JSON.stringify(verdict), wbs);
+    passVerdict = parsed.kind === "valid" && parsed.verdict.verdict === "PASS" && parsed.verdict.requirements.length + parsed.verdict.acceptanceCriteria.length > 0 && verdictRead.artifact !== undefined && computeAggregate(verdictRead.artifact) === "PASS";
     const digest = typeof verdict.proof?.digest === "string" ? verdict.proof.digest : verdict.proofDigest;
     proofDigestPresent = typeof digest === "string" && digest.length > 0;
     if (typeof verdict.proof?.runId === "string" && verdict.proof.runId.length > 0) {
@@ -91633,7 +91649,9 @@ async function deriveTaskInput(deps, wbs, linkedRuns) {
       boundDefinitionDigest = verdict.proof.definitionDigest;
     }
   }
-  const certifyingRunCompleted = boundRunId !== null ? linkedRuns.some((r) => r.runId === boundRunId && runCompleted(r) && (boundDefinitionDigest === null || r.definitionDigest !== null && r.definitionDigest === boundDefinitionDigest)) : linkedRuns.some(runCompleted);
+  const certifyingRun = boundRunId !== null ? linkedRuns.find((r) => r.runId === boundRunId && runCompleted(r) && (boundDefinitionDigest === null || r.definitionDigest !== null && r.definitionDigest === boundDefinitionDigest)) : linkedRuns.find(runCompleted);
+  const certifyingRunCompleted = certifyingRun !== undefined;
+  const supersedingFailedRun = linkedRuns.some((r) => (r.status === "failed" || r.status === "cancelled") && (certifyingRun === undefined || Date.parse(r.startedAt ?? "") > Date.parse(certifyingRun.completedAt ?? "")));
   if (passVerdict) {
     let tokens = 0;
     let any2 = false;
@@ -91673,6 +91691,7 @@ var init_verified_outcome = __esm(() => {
   init_src2();
   init_done_transition_guard();
   init_task_record();
+  init_verify_verdict();
 });
 
 // ../../packages/app/src/services/history-service.ts
@@ -92595,9 +92614,9 @@ class WorkflowActionTraceWriter {
     }
     await this.inner.finalizeRun(runId, status, completedAt ?? new Date().toISOString(), undefined, reason === undefined ? undefined : classifyTerminalReason({ status, engineReason: reason, errorText: reason }));
     if (this.db === undefined)
-      return { ok: true };
+      return { ok: true, startedAt: existing.started_at };
     const rows = await new ActionRunDao(this.db).actionRowsByRunId(runId);
-    return { ok: true, actionRows: rows.length };
+    return { ok: true, actionRows: rows.length, startedAt: existing.started_at };
   }
   async guard(operation, context4, emit) {
     try {
@@ -95858,6 +95877,14 @@ class ProofFingerprintActionRunner {
     this.observabilityBus = observabilityBus;
   }
   async execute(options, context4) {
+    const accepted = ACCEPTED_OPTION_KEYS;
+    const unexpected = Object.keys(options).filter((key2) => !accepted.includes(key2)).sort();
+    if (unexpected.length > 0) {
+      return {
+        ok: false,
+        error: `${KIND11}: unexpected option(s): ${unexpected.join(", ")} \u2014 accepted keys: ` + `${[...accepted].sort().join(", ")}`
+      };
+    }
     const varName = options.var;
     if (typeof varName !== "string" || varName === "") {
       return { ok: false, error: `${KIND11}: var is required` };
@@ -95865,6 +95892,12 @@ class ProofFingerprintActionRunner {
     if (!VAR_NAME_RE.test(varName)) {
       return { ok: false, error: `${KIND11}: var name must match ${VAR_NAME_RE}, got "${varName}"` };
     }
+    if (options.expect !== undefined && typeof options.expect !== "string") {
+      return {
+        ok: false,
+        error: `${KIND11}: expect must be a string when supplied (got ${typeof options.expect})`
+      };
+    }
     const inputs = await readProofInputContents(this.fileSystem, context4.workdir ?? ".", options);
     if (!inputs.ok) {
       return { ok: false, error: `${KIND11}: ${inputs.error}` };
@@ -95925,11 +95958,12 @@ class ProofFingerprintActionRunner {
     };
   }
 }
-var KIND11 = "proof.fingerprint", VAR_NAME_RE;
+var KIND11 = "proof.fingerprint", VAR_NAME_RE, ACCEPTED_OPTION_KEYS;
 var init_proof_fingerprint = __esm(() => {
   init_proof_input_fingerprint();
   init_tripwire();
   VAR_NAME_RE = /^[A-Za-z_][A-Za-z0-9_]*$/;
+  ACCEPTED_OPTION_KEYS = ["expect", "featureFile", "taskFile", "var"];
 });
 
 // ../../packages/app/src/workflow/actions/response-validate.ts
@@ -98000,12 +98034,12 @@ class WorkflowAppService {
     if (!before) {
       return { runId, finalized: false, status: "not_found", killed: false };
     }
-    const isNonTerminal = before.status === "running" || before.status === "pending";
+    const isNonTerminal = before.status === "running" || before.status === "pending" || before.status === "paused" || before.status === "interrupted";
     const pid = isNonTerminal ? await dao2.getPid(runId) : null;
     const killed = pid != null ? signalSubprocess(pid) : false;
-    await dao2.finalizeStale(runId, "cancelled by operator (spur workflow cancel)");
+    await dao2.cancelRun(runId);
     const after = await dao2.traceRowById(runId);
-    const finalized = after?.status === "failed" && before.status !== "failed";
+    const finalized = after?.status === "failed" && isNonTerminal;
     return { runId, finalized, status: after?.status ?? "not_found", killed };
   }
   async continuePaused(runId, opts) {
@@ -99021,6 +99055,7 @@ async function persistWorktreeRuns(input) {
     evidenceCopies.push({ source: source2, target, bytes });
   }
   const citedNames = new Set;
+  const citedDirSkips = new Set;
   for (const taskFile of input.taskFiles ?? []) {
     let content;
     try {
@@ -99030,7 +99065,13 @@ async function persistWorktreeRuns(input) {
     }
     for (const match of content.matchAll(RUN_CITATION_RE)) {
       const name = asLiteralRunFileName(match[1] ?? "");
-      if (name === undefined || citedNames.has(name))
+      if (name === undefined)
+        continue;
+      if (match[2] !== undefined) {
+        citedDirSkips.add(name);
+        continue;
+      }
+      if (citedNames.has(name))
         continue;
       if (citedNames.size >= MAX_CITED_RUN_FILES) {
         throw new Error(`persist-out: merged task files cite more than ${MAX_CITED_RUN_FILES} distinct ` + ".spur/run/ files \u2014 over the fixed citation cap (0984 R3); split the batch or prune the citations");
@@ -99077,6 +99118,8 @@ async function persistWorktreeRuns(input) {
   }
   const citedCopies = [];
   const citedSkips = [];
+  for (const name of citedDirSkips)
+    citedSkips.push({ id: name, reason: `cited-directory:${name}` });
   for (const name of citedNames) {
     const scratchPath = join36(fromRunDir, name);
     const durablePath = join36(fromRecordsDir, name);
@@ -99467,6 +99510,47 @@ function writeInlineRunOutcome(runId, outcome) {
       closeSync4(headerFd);
   }
 }
+function projectInlineRunClose(runId, status, context4) {
+  try {
+    const runDir = runStoragePaths(process.cwd()).recordsDir;
+    if (!existsSync9(runDir))
+      mkdirSync9(runDir, { recursive: true });
+    const statePath = join36(runDir, `${runId}.state.json`);
+    let prior = {};
+    try {
+      const parsed = JSON.parse(readFileSync13(statePath, "utf8"));
+      if (parsed !== null && typeof parsed === "object" && !Array.isArray(parsed)) {
+        prior = parsed;
+      }
+    } catch {}
+    const at2 = new Date().toISOString();
+    const state = {
+      schemaVersion: 1,
+      ...prior,
+      runId,
+      status,
+      ok: true,
+      startedAt: typeof prior.startedAt === "string" ? prior.startedAt : context4?.startedAt ?? at2,
+      updatedAt: at2
+    };
+    delete state.error;
+    const temp = `${statePath}.tmp`;
+    try {
+      writeFileSync8(temp, `${JSON.stringify(state, null, 4)}
+`);
+      renameSync7(temp, statePath);
+    } catch (error51) {
+      try {
+        unlinkSync5(temp);
+      } catch {}
+      throw error51;
+    }
+    return;
+  } catch (error51) {
+    const detail = error51 instanceof Error ? error51.message : String(error51);
+    return `failed to project the committed ${status} status into the run-record state file for run ${runId}: ${detail} (the run row is committed; replay the same close to repair)`;
+  }
+}
 function isInlineRunCloseStatus(status) {
   return CLOSE_STATUSES.has(status);
 }
@@ -99493,6 +99577,20 @@ function appendInlineRunLogLine(runId, detail) {
 }
 async function runInlineRunTrace(input) {
   const operation = input.close ? "run.close" : "action.finish";
+  if (input.close) {
+    const invalidReason = (error51) => {
+      process.stdout.write(`${JSON.stringify({ ok: false, runId: input.runId, error: error51, code: "INVALID_CLOSE_REASON" })}
+`);
+      return 1;
+    };
+    if (input.reason !== undefined && !isTerminalReason(input.reason)) {
+      return invalidReason(`close reason "${input.reason}" is not a terminal-reason enum value; pass one of: ${TERMINAL_REASONS.join(", ")}`);
+    }
+    if (input.status === "failed" && input.reason === undefined) {
+      return invalidReason(`close status failed requires an explicit reason from the terminal-reason enum (0937 R2); pass one of: ${TERMINAL_REASONS.join(", ")}`);
+    }
+  }
+  const closeReason = input.close ? input.reason ?? (input.status === "paused" ? "paused-operator" : "done") : undefined;
   const fail = (error51) => {
     appendInlineRunLogLine(input.runId, `trace-emission-failed operation=${operation} run=${input.runId}${input.node === "" ? "" : ` node=${input.node}`}${input.kind === "" ? "" : ` kind=${input.kind}`}: ${error51}`);
     process.stdout.write(`${JSON.stringify({ ok: false, runId: input.runId, error: error51 })}
@@ -99506,7 +99604,7 @@ async function runInlineRunTrace(input) {
       const detail = failure;
       appendInlineRunLogLine(input.runId, `trace-emission-failed operation=${detail.operation ?? operation} run=${input.runId}: ${detail.error ?? "unknown error"}`);
     });
-    const result = input.close ? await writer.closeRun(input.runId, input.status, undefined, input.reason) : await writer.recordAction({
+    const result = input.close ? await writer.closeRun(input.runId, input.status, undefined, closeReason) : await writer.recordAction({
       runId: input.runId,
       node: input.node,
       kind: input.kind,
@@ -99518,14 +99616,24 @@ async function runInlineRunTrace(input) {
       const failure = result.failure;
       return fail(failure.error ?? "unknown trace emission failure");
     }
+    const stateError = input.close ? projectInlineRunClose(input.runId, input.status, {
+      startedAt: typeof result.startedAt === "string" ? result.startedAt : undefined
+    }) : undefined;
     if (input.close && input.status === "done" && result.actionRows === 0) {
-      const error51 = `run ${input.runId} closed done with zero action_runs rows; emit --action/--actions-file during the run (no backfill); see inline-pipeline-driver.md#structured-trace-emission-adr-117-task-0868`;
+      const error51 = `run ${input.runId} closed done with zero action_runs rows; emit --action/--actions-file during the run (no backfill); see inline-pipeline-driver.md#structured-trace-emission-adr-117-task-0868${stateError !== undefined ? `; run-record state projection also failed: ${stateError}` : ""}`;
       appendInlineRunLogLine(input.runId, `trace-close-failed run=${input.runId}: ${error51}`);
       process.stdout.write(`${JSON.stringify({ ok: false, runId: input.runId, error: error51, code: "NO_ACTION_ROWS", actionRows: 0 })}
 `);
       return 1;
     }
-    process.stdout.write(`${JSON.stringify({ ...result, runId: input.runId })}
+    if (input.close && stateError !== undefined) {
+      appendInlineRunLogLine(input.runId, `trace-close-failed run=${input.runId}: ${stateError}`);
+      process.stdout.write(`${JSON.stringify({ ok: false, runId: input.runId, error: stateError, code: "RUN_RECORD_STATE_FAILED" })}
+`);
+      return 1;
+    }
+    const { startedAt: _threaded, ...stdoutResult } = result;
+    process.stdout.write(`${JSON.stringify({ ...stdoutResult, runId: input.runId })}
 `);
     return 0;
   } catch (error51) {
@@ -99680,8 +99788,10 @@ async function runInlineRunPersistOut(input) {
       toWorkdir: process.cwd(),
       ...input.taskFiles.length > 0 ? { taskFiles: input.taskFiles } : {}
     });
-    if (result.skipped.some((skip) => skip.reason.startsWith("record-conflict:"))) {
-      process.stdout.write(`${JSON.stringify({ ...result, ok: false, error: "persist-out: unresolved retained record conflicts; retain the worktree and reconcile copies before teardown" })}
+    const keyConflicts = result.skipped.filter((skip) => skip.reason === "external-key-conflict");
+    if (keyConflicts.length > 0 || result.skipped.some((skip) => skip.reason.startsWith("record-conflict:"))) {
+      const error51 = keyConflicts.length > 0 ? `persist-out: external-key conflict for source runs ${keyConflicts.map((skip) => skip.id).join(", ")}; retain the source worktree and reconcile provenance before teardown` : "persist-out: unresolved retained record conflicts; retain the worktree and reconcile copies before teardown";
+      process.stdout.write(`${JSON.stringify({ ...result, ok: false, error: error51 })}
 `);
       return 1;
     }
@@ -99751,7 +99861,7 @@ var init_inline_run_setup = __esm(async () => {
   } = await import("fs"));
   ({ lstat: lstat2, mkdir: mkdir3, readdir: readdir2, readFile: readFile4 } = await import("fs/promises"));
   SAFE_RUN_ID_RE = /^[A-Za-z0-9][A-Za-z0-9._-]*$/;
-  RUN_CITATION_RE = /(?<![\w~:-]|[\w~:-]\/)\.spur\/run\/([A-Za-z0-9][A-Za-z0-9._*?<>{}|,\u2026-]*)/g;
+  RUN_CITATION_RE = /(?<![\w~:-]|[\w~:-]\/)\.spur\/run\/([A-Za-z0-9][A-Za-z0-9._*?<>{}|,\u2026-]*)(\/[^\s`]*)?/g;
   CLOSE_STATUSES = new Set(["done", "failed", "paused"]);
   ACTION_STATUSES = new Set(["done", "failed"]);
 });
@@ -100017,11 +100127,13 @@ class PlanningWriteService {
   lifecycle;
   emitter;
   projectName;
+  onTransitionCommitted;
   constructor(opts) {
     this.fs = opts.fs;
     this.lifecycle = opts.lifecycle ?? new SchemaLifecyclePort;
     this.emitter = opts.emitter ?? new NoopEventEmitter;
     this.projectName = opts.projectName ?? "spur";
+    this.onTransitionCommitted = opts.onTransitionCommitted;
   }
   async create(ref, content) {
     return this.executePipeline(ref, { kind: "create", content });
@@ -100035,8 +100147,8 @@ class PlanningWriteService {
       lock.release();
     }
   }
-  async updateSection(ref, sectionName, body) {
-    return this.executePipeline(ref, { kind: "updateSection", sectionName, sectionBody: body });
+  async updateSection(ref, sectionName, body, append = false) {
+    return this.executePipeline(ref, { kind: "updateSection", sectionName, sectionBody: body, append });
   }
   async updateBody(ref, body) {
     return this.executePipeline(ref, { kind: "updateBody", body });
@@ -100119,6 +100231,15 @@ class PlanningWriteService {
       } : {}
     };
     await this.emitter.emit(event);
+    let bookkeepingError;
+    const committedHook = this.onTransitionCommitted;
+    if (statusChanged && committedHook !== undefined && fromStatus !== undefined && toStatus !== undefined) {
+      try {
+        await committedHook(ref, fromStatus, toStatus);
+      } catch (err) {
+        bookkeepingError = err instanceof Error ? err.message : String(err);
+      }
+    }
     const warnings = doc2.demotedHeadings.map((line) => `Demoted same-level heading one level deeper in section body (would become a phantom section): "${line}". ` + "Use bullet lists, tables, or **bold** labels for sub-structure instead.");
     for (const dup of doc2.duplicateSectionNames) {
       warnings.push(`Dropped duplicate "${dup}" section (appeared more than once in the file \u2014 ` + "likely a copy-paste or double-write error). The first occurrence was kept.");
@@ -100128,7 +100249,8 @@ class PlanningWriteService {
       eventName,
       ...fromStatus !== undefined ? { fromStatus } : {},
       ...toStatus !== undefined ? { toStatus } : {},
-      ...warnings.length > 0 ? { warnings } : {}
+      ...warnings.length > 0 ? { warnings } : {},
+      ...bookkeepingError !== undefined ? { bookkeepingError } : {}
     };
   }
 }
@@ -100151,9 +100273,21 @@ function applyMutation(doc2, mutation) {
       if (mutation.sectionName !== undefined && mutation.sectionBody !== undefined) {
         const body = mutation.sectionName.toLowerCase() === "acceptance criteria" ? normalizeAcFence(mutation.sectionBody) : mutation.sectionBody;
         if (mutation.sectionName.toLowerCase() === "q&a") {
+          if (body.trimStart().startsWith(QA_REPLACE_MARKER)) {
+            doc2.replaceSection("Q&A", body.trimStart().slice(QA_REPLACE_MARKER.length).trimStart());
+            break;
+          }
+          if (mutation.append) {
+            appendSectionBody(doc2, "Q&A", body);
+            break;
+          }
           appendQaEntry(doc2, body);
           break;
         }
+        if (mutation.append) {
+          appendSectionBody(doc2, mutation.sectionName, body);
+          break;
+        }
         doc2.replaceSection(mutation.sectionName, body);
       }
       break;
@@ -100185,9 +100319,8 @@ ${line}
   doc2.replaceSection("History", updated);
 }
 function appendQaEntry(doc2, body) {
-  const REPLACE_MARKER = "<!-- qa:replace -->";
-  if (body.trimStart().startsWith(REPLACE_MARKER)) {
-    doc2.replaceSection("Q&A", body.trimStart().slice(REPLACE_MARKER.length).trimStart());
+  if (body.trimStart().startsWith(QA_REPLACE_MARKER)) {
+    doc2.replaceSection("Q&A", body.trimStart().slice(QA_REPLACE_MARKER.length).trimStart());
     return;
   }
   const existing = doc2.getSection("Q&A") ?? "";
@@ -100200,6 +100333,15 @@ ${body.trim()}
 ${entry}` : entry;
   doc2.replaceSection("Q&A", updated);
 }
+function appendSectionBody(doc2, sectionName, body) {
+  const existing = doc2.getSection(sectionName) ?? "";
+  const updated = existing.trim().length > 0 ? `${existing.trimEnd()}
+
+${body.trim()}
+` : `${body.trim()}
+`;
+  doc2.replaceSection(sectionName, updated);
+}
 function resolveEventName(kind, domain2, statusChanged) {
   if (kind === "create") {
     return domain2 === "task" ? "task.created" : "feature.created";
@@ -100219,6 +100361,7 @@ function normalizeStatusForDomain(status, domain2) {
     return status;
   }
 }
+var QA_REPLACE_MARKER = "<!-- qa:replace -->";
 var init_planning_write_service = __esm(() => {
   init_src2();
   init_errors8();
@@ -103352,6 +103495,221 @@ var init_task_scaffold = __esm(() => {
   init_task_locator();
 });
 
+// ../../packages/app/src/workflow/lifecycle-adapter.ts
+async function reconcileExistingLifecycleRow(getDb, profile, entityId2, toStatus) {
+  if (toStatus !== "done" && toStatus !== "cancelled")
+    return false;
+  const persistence2 = new DbWorkflowPersistenceAdapter(await getDb());
+  const run = await persistence2.findRunByKey(profile.workflowName, `${profile.entityPrefix}:${entityId2}`);
+  if (run === undefined)
+    return false;
+  const engineStatus = toStatus === "cancelled" ? "failed" : "done";
+  if (run.status === engineStatus && run.terminal_reason === toStatus)
+    return false;
+  await persistence2.finalizeRun(run.id, engineStatus, new Date().toISOString(), undefined, toStatus);
+  return true;
+}
+
+class LifecycleAdapter {
+  opts;
+  workflowCache;
+  constructor(opts) {
+    this.opts = opts;
+  }
+  async requestTransition(ref, currentStatus, to) {
+    const { profile } = this.opts;
+    const db2 = await this.opts.getDb();
+    const host = createDefaultWorkflowEngineHost();
+    host.registerGuard(new EnvShellGuardRunner(new NodeProcessExecutor3), "builtin");
+    const persistence2 = withActionTrace(new DbWorkflowPersistenceAdapter(db2), createRunLogTraceFailureRecorder(this.opts.cwd));
+    const svc = new WorkflowService(host, persistence2);
+    const workflow = this.bindGuardVar(await this.loadWorkflow(), ref.id);
+    const externalKey = `${profile.entityPrefix}:${ref.id}`;
+    const now2 = new Date().toISOString();
+    if (to === "done" && profile.entityPrefix === "task") {
+      const links = await this.opts.taskRunLinkDao(db2).listByWbs(ref.id, 20);
+      const hasPipelineRun = links.some((l) => l.kind === "pipeline");
+      const hasPriorBypass = links.some((l) => l.kind === "provenance_bypass");
+      if (!hasPipelineRun && !hasPriorBypass) {
+        if (this.opts.provenanceBypass === true) {
+          await this.opts.taskRunLinkDao(db2).insert({
+            id: createId("trl"),
+            wbs: ref.id,
+            run_id: "manual",
+            kind: "provenance_bypass",
+            created_at: now2
+          });
+        } else {
+          return {
+            allowed: false,
+            from: currentStatus,
+            to,
+            report: `No pipeline run recorded for ${ref.id}. Run the pipeline first (` + `spur workflow run task-pipeline.yaml --vars '{"wbs":"${ref.id}"}'), ` + "or pass --provenance-bypass on `spur task update` to bypass (recorded)."
+          };
+        }
+      }
+      const reviewDenial = await this.checkReviewReadyForDone(ref);
+      if (reviewDenial !== null) {
+        return {
+          allowed: false,
+          from: currentStatus,
+          to,
+          report: reviewDenial
+        };
+      }
+    }
+    const existing = await svc.findRunByKey(profile.workflowName, externalKey);
+    const runId = existing?.id ?? createId("run");
+    await svc.createOrAttachRun({
+      id: runId,
+      workflow_name: profile.workflowName,
+      mode: "state-machine",
+      status: "running",
+      started_at: existing?.started_at ?? now2,
+      completed_at: null,
+      metadata_json: "{}",
+      external_key: externalKey
+    });
+    if (existing === undefined) {
+      await this.opts.taskRunLinkDao(db2).insert({
+        id: createId("trl"),
+        wbs: ref.id,
+        run_id: runId,
+        kind: profile.linkKind,
+        created_at: now2
+      });
+    }
+    await svc.reseedRun(workflow, runId, currentStatus);
+    const result = await svc.requestTransition(workflow, runId, to, {
+      workdir: this.opts.cwd,
+      vars: { [profile.varKey]: ref.id, spurBin: this.opts.spurBin }
+    });
+    if (result.allowed) {
+      const enterFailure = await this.runTargetEnterActions(workflow, to, runId);
+      if (enterFailure !== null) {
+        return { allowed: false, from: currentStatus, to, report: enterFailure };
+      }
+      const terminalStatus = to === "cancelled" ? "failed" : to === "done" ? "done" : null;
+      await persistence2.finalizeRun(runId, terminalStatus ?? "running", new Date().toISOString(), undefined, to === "cancelled" ? "cancelled" : to === "done" ? "done" : undefined);
+      return { allowed: true, from: result.fromState, to: result.toState };
+    }
+    return {
+      allowed: false,
+      from: currentStatus,
+      to,
+      report: this.formatDenialWithLegalPaths(result, workflow, currentStatus, ref.id)
+    };
+  }
+  async runTargetEnterActions(workflow, to, runId) {
+    if (this.opts.runEnterActions === false)
+      return null;
+    const actions = workflow.states.find((state) => state.id === to)?.onEnter ?? [];
+    if (actions.length === 0)
+      return null;
+    const runner = new StreamingShellActionRunner(new NodeProcessExecutor3);
+    const vars = workflow.vars ?? {};
+    for (const [index2, action] of actions.entries()) {
+      if (action.kind !== "shell") {
+        return `State "${to}" onEnter[${index2}] is kind "${action.kind}"; the lifecycle caller only runs shell onEnter actions.`;
+      }
+      const command = action.options?.command;
+      if (typeof command !== "string" || command.trim() === "") {
+        return `State "${to}" onEnter[${index2}] has no shell command.`;
+      }
+      const result = await runner.execute({ ...action.options }, {
+        runId,
+        workdir: this.opts.cwd,
+        stateOrNodeId: to,
+        vars,
+        env: {}
+      });
+      if (!result.ok) {
+        const stderr = typeof result.data?.stderr === "string" ? result.data.stderr.trim() : "";
+        const tail2 = stderr.length > 2000 ? stderr.slice(-2000) : stderr;
+        const exitCode = result.data?.exitCode ?? "unknown";
+        return [`State "${to}" onEnter shell failed (exit ${String(exitCode)}).`, result.error ?? "", tail2].filter((part) => part !== "").join(" ");
+      }
+    }
+    return null;
+  }
+  formatDenialWithLegalPaths(result, workflow, currentStatus, id) {
+    const base2 = this.formatDenial(result.detail, result.guardReport);
+    if (result.reason !== "no-such-transition")
+      return base2;
+    const legal = workflow.transitions.filter((t) => t.from === currentStatus).map((t) => t.to);
+    if (legal.length === 0)
+      return base2;
+    const command = this.opts.profile.entityPrefix === "feature" ? `spur feature sync ${id} (derives the legal hop path)` : `spur task update ${id} <legal-status> or \`spur task record ${id} --transition <legal-status>\``;
+    return `${base2}. Legal path(s) from ${currentStatus}: ${legal.join(" \u2192 ")}. Reach them via \`${command}\`.`;
+  }
+  async loadWorkflow() {
+    if (this.workflowCache === undefined) {
+      const def = await loadWorkflowDef(this.opts.workflowPath, { validateSchema: false });
+      if (def.kind !== "state-machine") {
+        throw new Error(`${this.opts.profile.workflowName} workflow must be a state-machine; got "${def.kind}"`);
+      }
+      this.workflowCache = def;
+    }
+    return this.workflowCache;
+  }
+  bindGuardVar(workflow, id) {
+    return {
+      ...workflow,
+      vars: { ...workflow.vars, [this.opts.profile.varKey]: id, spurBin: this.opts.spurBin }
+    };
+  }
+  async checkReviewReadyForDone(ref) {
+    const markdown = await this.loadTaskMarkdown(ref);
+    if (markdown === null) {
+      return null;
+    }
+    const reviewBody = extractReviewSectionBody(markdown);
+    if (reviewBody === null || !hasPopulatedPriorityTable(reviewBody)) {
+      return `Review L3 gate failed for task ${ref.id}: ### Review must contain a populated ` + `P1\u2013P4 priority findings table before testing\u2192done (strict-core). ` + `Author the table via /sp:dev-review, then re-run the done transition.`;
+    }
+    return null;
+  }
+  async loadTaskMarkdown(ref) {
+    if (this.opts.readTaskMarkdown) {
+      return this.opts.readTaskMarkdown(ref);
+    }
+    try {
+      const fs3 = createNodeFileSystem3(this.opts.cwd);
+      return await fs3.readFile(ref.filePath);
+    } catch {
+      return null;
+    }
+  }
+  formatDenial(detail, guardReport) {
+    if (guardReport === undefined || guardReport === null)
+      return detail;
+    const report = typeof guardReport === "string" ? guardReport : JSON.stringify(guardReport);
+    return `${detail} \u2014 ${report}`;
+  }
+}
+var TASK_LIFECYCLE_PROFILE, FEATURE_LIFECYCLE_PROFILE;
+var init_lifecycle_adapter = __esm(() => {
+  init_src2();
+  init_dist8();
+  init_dist5();
+  init_task_check();
+  init_action_trace();
+  init_shell();
+  init_shell2();
+  TASK_LIFECYCLE_PROFILE = {
+    linkKind: "lifecycle",
+    workflowName: "task-lifecycle",
+    entityPrefix: "task",
+    varKey: "wbs"
+  };
+  FEATURE_LIFECYCLE_PROFILE = {
+    linkKind: "feature-lifecycle",
+    workflowName: "feature-lifecycle",
+    entityPrefix: "feature",
+    varKey: "featureId"
+  };
+});
+
 // ../../packages/app/src/services/task-transition.ts
 async function runTransitionCheckGate(gate, wbs, filePath, target) {
   const result = await gate.service.check(filePath, wbs, {
@@ -103411,6 +103769,7 @@ async function transitionTaskGuarded(deps, input) {
       forced: input.forceDone === true,
       reason: input.reason,
       artifact: loaded.artifact,
+      verdictPath: loaded.path,
       readError: loaded.readError
     });
     if (guardOutcome.kind === "noop") {
@@ -103918,7 +104277,7 @@ ${templateBackground}`;
     });
     return { runId, action, status: "queued" };
   }
-  async updateSection(wbs, sectionName, sourceFile) {
+  async updateSection(wbs, sectionName, sourceFile, append = false) {
     const filePath = await this.resolveTaskFile(wbs);
     const raw = await this.ctx.fs.readFile(sourceFile);
     const body = stripLeadingSectionHeader2(raw, sectionName);
@@ -103926,7 +104285,7 @@ ${templateBackground}`;
       throw new SectionMutationError("invalid-solution", "Solution must contain at least one `file:line` citation");
     }
     const ref = { kind: "task", id: wbs, filePath, folder: this.ctx.tasksDir };
-    let result = await this.writeService.updateSection(ref, sectionName, body);
+    let result = await this.writeService.updateSection(ref, sectionName, body, append);
     if (sectionName === "Acceptance Criteria") {
       const warnings = await this.checkAcSubsetWarning(filePath, body);
       if (warnings.length > 0) {
@@ -104091,6 +104450,7 @@ ${templateBackground}`;
       }
       if (current === target) {
         result.transitionedTo = current;
+        result.bookkeepingError = await this.reconcileTerminalBookkeeping(wbs, target);
       } else if (target === "done") {
         if (verdict.verdict !== "PASS") {
           throw new GuardDeniedError(`Cannot transition task ${wbs} to done: verify verdict is ${verdict.verdict}, not PASS. ` + `Re-run the pipeline to a PASS verdict, or use ` + `\`spur task update ${wbs} done --force-done --reason "<why>"\` to override.`);
@@ -104108,6 +104468,9 @@ ${templateBackground}`;
               const hopResult = await this.writeService.transition(ref, hop);
               reached = hopResult.toStatus ?? hop;
               result.transitionedTo = reached;
+              if (hopResult.bookkeepingError !== undefined) {
+                result.bookkeepingError = hopResult.bookkeepingError;
+              }
               if (hop === "done") {
                 result.closeAuditError = await reconcileDoneCloseAudit(this, wbs, {
                   forced: false,
@@ -104123,6 +104486,9 @@ ${templateBackground}`;
           await this.ensurePipelineRunLink(wbs);
           const transitionResult = await this.writeService.transition(ref, target);
           result.transitionedTo = transitionResult.toStatus;
+          if (transitionResult.bookkeepingError !== undefined) {
+            result.bookkeepingError = transitionResult.bookkeepingError;
+          }
           if (target === "done") {
             result.closeAuditError = await reconcileDoneCloseAudit(this, wbs, {
               forced: false,
@@ -104133,6 +104499,9 @@ ${templateBackground}`;
       } else {
         const transitionResult = await this.writeService.transition(ref, target);
         result.transitionedTo = transitionResult.toStatus;
+        if (transitionResult.bookkeepingError !== undefined) {
+          result.bookkeepingError = transitionResult.bookkeepingError;
+        }
       }
     }
     return result;
@@ -104144,6 +104513,19 @@ ${templateBackground}`;
     const db2 = await getDb();
     await ensurePipelineRunLink(db2, wbs);
   }
+  async reconcileTerminalBookkeeping(wbs, target) {
+    if (target !== "done" && target !== "cancelled")
+      return;
+    const getDb = this.ctx.getDb;
+    if (getDb === undefined)
+      return;
+    try {
+      await reconcileExistingLifecycleRow(getDb, TASK_LIFECYCLE_PROFILE, wbs, target);
+      return;
+    } catch (err) {
+      return err instanceof Error ? err.message : String(err);
+    }
+  }
   async batchCreate(jsonPath) {
     const raw = await this.ctx.fs.readFile(jsonPath);
     let parsed;
@@ -104459,6 +104841,7 @@ var init_task_service = __esm(() => {
   init_dist();
   init_errors8();
   init_run_path();
+  init_lifecycle_adapter();
   init_feature_check();
   init_pipeline_run_link();
   init_planning_check_base();
@@ -105465,207 +105848,6 @@ var init_idea_handoff_cli = __esm(async () => {
   if (false) {}
 });
 
-// ../../packages/app/src/workflow/lifecycle-adapter.ts
-class LifecycleAdapter {
-  opts;
-  workflowCache;
-  constructor(opts) {
-    this.opts = opts;
-  }
-  async requestTransition(ref, currentStatus, to) {
-    const { profile } = this.opts;
-    const db2 = await this.opts.getDb();
-    const host = createDefaultWorkflowEngineHost();
-    host.registerGuard(new EnvShellGuardRunner(new NodeProcessExecutor3), "builtin");
-    const persistence2 = withActionTrace(new DbWorkflowPersistenceAdapter(db2), createRunLogTraceFailureRecorder(this.opts.cwd));
-    const svc = new WorkflowService(host, persistence2);
-    const workflow = this.bindGuardVar(await this.loadWorkflow(), ref.id);
-    const externalKey = `${profile.entityPrefix}:${ref.id}`;
-    const now2 = new Date().toISOString();
-    if (to === "done" && profile.entityPrefix === "task") {
-      const links = await this.opts.taskRunLinkDao(db2).listByWbs(ref.id, 20);
-      const hasPipelineRun = links.some((l) => l.kind === "pipeline");
-      const hasPriorBypass = links.some((l) => l.kind === "provenance_bypass");
-      if (!hasPipelineRun && !hasPriorBypass) {
-        if (this.opts.provenanceBypass === true) {
-          await this.opts.taskRunLinkDao(db2).insert({
-            id: createId("trl"),
-            wbs: ref.id,
-            run_id: "manual",
-            kind: "provenance_bypass",
-            created_at: now2
-          });
-        } else {
-          return {
-            allowed: false,
-            from: currentStatus,
-            to,
-            report: `No pipeline run recorded for ${ref.id}. Run the pipeline first (` + `spur workflow run task-pipeline.yaml --vars '{"wbs":"${ref.id}"}'), ` + "or pass --provenance-bypass on `spur task update` to bypass (recorded)."
-          };
-        }
-      }
-      const reviewDenial = await this.checkReviewReadyForDone(ref);
-      if (reviewDenial !== null) {
-        return {
-          allowed: false,
-          from: currentStatus,
-          to,
-          report: reviewDenial
-        };
-      }
-    }
-    const existing = await svc.findRunByKey(profile.workflowName, externalKey);
-    const runId = existing?.id ?? createId("run");
-    await svc.createOrAttachRun({
-      id: runId,
-      workflow_name: profile.workflowName,
-      mode: "state-machine",
-      status: "running",
-      started_at: existing?.started_at ?? now2,
-      completed_at: null,
-      metadata_json: "{}",
-      external_key: externalKey
-    });
-    if (existing === undefined) {
-      await this.opts.taskRunLinkDao(db2).insert({
-        id: createId("trl"),
-        wbs: ref.id,
-        run_id: runId,
-        kind: profile.linkKind,
-        created_at: now2
-      });
-    }
-    await svc.reseedRun(workflow, runId, currentStatus);
-    const result = await svc.requestTransition(workflow, runId, to, {
-      workdir: this.opts.cwd,
-      vars: { [profile.varKey]: ref.id, spurBin: this.opts.spurBin }
-    });
-    if (result.allowed) {
-      const enterFailure = await this.runTargetEnterActions(workflow, to, runId);
-      if (enterFailure !== null) {
-        return { allowed: false, from: currentStatus, to, report: enterFailure };
-      }
-      const terminalStatus = to === "cancelled" ? "failed" : to === "done" ? "done" : null;
-      await persistence2.finalizeRun(runId, terminalStatus ?? "running", new Date().toISOString(), undefined, to === "cancelled" ? "cancelled" : to === "done" ? "done" : undefined);
-      return { allowed: true, from: result.fromState, to: result.toState };
-    }
-    return {
-      allowed: false,
-      from: currentStatus,
-      to,
-      report: this.formatDenialWithLegalPaths(result, workflow, currentStatus, ref.id)
-    };
-  }
-  async runTargetEnterActions(workflow, to, runId) {
-    if (this.opts.runEnterActions === false)
-      return null;
-    const actions = workflow.states.find((state) => state.id === to)?.onEnter ?? [];
-    if (actions.length === 0)
-      return null;
-    const runner = new StreamingShellActionRunner(new NodeProcessExecutor3);
-    const vars = workflow.vars ?? {};
-    for (const [index2, action] of actions.entries()) {
-      if (action.kind !== "shell") {
-        return `State "${to}" onEnter[${index2}] is kind "${action.kind}"; the lifecycle caller only runs shell onEnter actions.`;
-      }
-      const command = action.options?.command;
-      if (typeof command !== "string" || command.trim() === "") {
-        return `State "${to}" onEnter[${index2}] has no shell command.`;
-      }
-      const result = await runner.execute({ ...action.options }, {
-        runId,
-        workdir: this.opts.cwd,
-        stateOrNodeId: to,
-        vars,
-        env: {}
-      });
-      if (!result.ok) {
-        const stderr = typeof result.data?.stderr === "string" ? result.data.stderr.trim() : "";
-        const tail2 = stderr.length > 2000 ? stderr.slice(-2000) : stderr;
-        const exitCode = result.data?.exitCode ?? "unknown";
-        return [`State "${to}" onEnter shell failed (exit ${String(exitCode)}).`, result.error ?? "", tail2].filter((part) => part !== "").join(" ");
-      }
-    }
-    return null;
-  }
-  formatDenialWithLegalPaths(result, workflow, currentStatus, id) {
-    const base2 = this.formatDenial(result.detail, result.guardReport);
-    if (result.reason !== "no-such-transition")
-      return base2;
-    const legal = workflow.transitions.filter((t) => t.from === currentStatus).map((t) => t.to);
-    if (legal.length === 0)
-      return base2;
-    const command = this.opts.profile.entityPrefix === "feature" ? `spur feature sync ${id} (derives the legal hop path)` : `spur task update ${id} <legal-status> or \`spur task record ${id} --transition <legal-status>\``;
-    return `${base2}. Legal path(s) from ${currentStatus}: ${legal.join(" \u2192 ")}. Reach them via \`${command}\`.`;
-  }
-  async loadWorkflow() {
-    if (this.workflowCache === undefined) {
-      const def = await loadWorkflowDef(this.opts.workflowPath, { validateSchema: false });
-      if (def.kind !== "state-machine") {
-        throw new Error(`${this.opts.profile.workflowName} workflow must be a state-machine; got "${def.kind}"`);
-      }
-      this.workflowCache = def;
-    }
-    return this.workflowCache;
-  }
-  bindGuardVar(workflow, id) {
-    return {
-      ...workflow,
-      vars: { ...workflow.vars, [this.opts.profile.varKey]: id, spurBin: this.opts.spurBin }
-    };
-  }
-  async checkReviewReadyForDone(ref) {
-    const markdown = await this.loadTaskMarkdown(ref);
-    if (markdown === null) {
-      return null;
-    }
-    const reviewBody = extractReviewSectionBody(markdown);
-    if (reviewBody === null || !hasPopulatedPriorityTable(reviewBody)) {
-      return `Review L3 gate failed for task ${ref.id}: ### Review must contain a populated ` + `P1\u2013P4 priority findings table before testing\u2192done (strict-core). ` + `Author the table via /sp:dev-review, then re-run the done transition.`;
-    }
-    return null;
-  }
-  async loadTaskMarkdown(ref) {
-    if (this.opts.readTaskMarkdown) {
-      return this.opts.readTaskMarkdown(ref);
-    }
-    try {
-      const fs3 = createNodeFileSystem3(this.opts.cwd);
-      return await fs3.readFile(ref.filePath);
-    } catch {
-      return null;
-    }
-  }
-  formatDenial(detail, guardReport) {
-    if (guardReport === undefined || guardReport === null)
-      return detail;
-    const report = typeof guardReport === "string" ? guardReport : JSON.stringify(guardReport);
-    return `${detail} \u2014 ${report}`;
-  }
-}
-var TASK_LIFECYCLE_PROFILE, FEATURE_LIFECYCLE_PROFILE;
-var init_lifecycle_adapter = __esm(() => {
-  init_src2();
-  init_dist8();
-  init_dist5();
-  init_task_check();
-  init_action_trace();
-  init_shell();
-  init_shell2();
-  TASK_LIFECYCLE_PROFILE = {
-    linkKind: "lifecycle",
-    workflowName: "task-lifecycle",
-    entityPrefix: "task",
-    varKey: "wbs"
-  };
-  FEATURE_LIFECYCLE_PROFILE = {
-    linkKind: "feature-lifecycle",
-    workflowName: "feature-lifecycle",
-    entityPrefix: "feature",
-    varKey: "featureId"
-  };
-});
-
 // ../../packages/app/src/workflow/mermaid-render.ts
 function escId(id) {
   return id.replace(/[^a-zA-Z0-9_-]/g, "_");
@@ -106117,6 +106299,7 @@ __export(exports_src2, {
   refreshHistoryRollups: () => refreshHistoryRollups,
   redactAndBound: () => redactAndBound,
   recordAgentQuotaEvent: () => recordAgentQuotaEvent,
+  reconcileExistingLifecycleRow: () => reconcileExistingLifecycleRow,
   readyRefineCommand: () => readyRefineCommand,
   readyRefineAllCommand: () => readyRefineAllCommand,
   readWorkflowRunRecord: () => readWorkflowRunRecord,
@@ -115595,11 +115778,19 @@ ${result.content}`);
     "scenario title>` bullets or `Scenario: AC1 \u2014 <title>` blocks (AC<n> is task-local, never R<n>);",
     "`(req: R<n>)` binds a requirement; `ac_altitude: task-local` exempts task-only AC.",
     'Sections replace, with one exception: `--section "Q&A"` APPENDS a timestamped',
-    "`#### Q&A entry \u2014 <ISO>` block. Start the body with `<!-- qa:replace -->` to replace it wholesale."
+    "`#### Q&A entry \u2014 <ISO>` block. Start the body with `<!-- qa:replace -->` to replace it wholesale.",
+    "Extend instead of replace: `--append` with `--section` writes the new body after the existing",
+    "section content (existing bytes preserved; an empty/missing section is created) \u2014 the bounded",
+    "way to extend a populated Review/Testing section without destroying it (task 1057)."
   ].join(`
-`)).option(...SHARED_OPTIONS.section).option(...SHARED_OPTIONS.fromFile).option(...SHARED_OPTIONS.featureFrontmatter).option(...SHARED_OPTIONS.prioritySet).option("--ac-numbering <mode>", "Set the ac_numbering frontmatter field (task-local) \u2014 opts the task into the Requirements\u2194AC coverage check").option("--ac-altitude <mode>", "Set the ac_altitude frontmatter field. Valid: `graduating` (default; feature-AC subset rule enforced) or `task-local` (skip the DD-09 subset rule \u2014 task scenarios are intentionally not feature ship criteria). Mirrors the L1 schema enum (packages/domain/src/planning/schema.ts:304).").option("--estimate-hours <n>", "Set the estimate_hours frontmatter field (positive number) \u2014 decomposition size estimate; the inline pipeline driver dispatches no subagent at/below its floor").option("--no-lifecycle", "Suppress lifecycle workflow run creation (use during pipeline runs to avoid orphaned lifecycle runs)").option("--assignee <spec-id>", "Set the assignee frontmatter field to an agent spec id").option("--force-done", "Allow transitioning to `done` even when the verify verdict is not PASS; records an override (task 0292). Waives the verdict only \u2014 the FSM path still applies, so from an earlier status walk the hops first: `todo` \u2192 `wip` \u2192 `testing` \u2192 `done` (each hop runs the structural `spur task check`)").option("--reason <text>", "Rationale for a forced-done override (paired with --force-done; persisted as done_reason)").option("--provenance-bypass", "Record an audited provenance-bypass link when no pipeline run exists (replaces the SPUR_PROVENANCE_OVERRIDE env var; pair with --force-done)", false).option("--verdict-dir <path>", "Directory holding <wbs>-verdict.json artifacts (default: .spur/run)").option(...SHARED_OPTIONS.folderTasks).option(...SHARED_OPTIONS.json).option(...SHARED_OPTIONS.jsonEnvelope).action(async (wbs, status, options) => {
+`)).option(...SHARED_OPTIONS.section).option(...SHARED_OPTIONS.fromFile).option("--append", "With --section: write the new body after the existing section content (existing content + one blank line + new body; surrounding whitespace trimmed) instead of replacing it wholesale. Requires --section; an empty/missing section is created. Section names are case-sensitive (see `spur task sections <wbs> list`).", false).option(...SHARED_OPTIONS.featureFrontmatter).option(...SHARED_OPTIONS.prioritySet).option("--ac-numbering <mode>", "Set the ac_numbering frontmatter field (task-local) \u2014 opts the task into the Requirements\u2194AC coverage check").option("--ac-altitude <mode>", "Set the ac_altitude frontmatter field. Valid: `graduating` (default; feature-AC subset rule enforced) or `task-local` (skip the DD-09 subset rule \u2014 task scenarios are intentionally not feature ship criteria). Mirrors the L1 schema enum (packages/domain/src/planning/schema.ts:304).").option("--estimate-hours <n>", "Set the estimate_hours frontmatter field (positive number) \u2014 decomposition size estimate; the inline pipeline driver dispatches no subagent at/below its floor").option("--no-lifecycle", "Suppress lifecycle workflow run creation (use during pipeline runs to avoid orphaned lifecycle runs)").option("--assignee <spec-id>", "Set the assignee frontmatter field to an agent spec id").option("--force-done", "Allow transitioning to `done` even when the verify verdict is not PASS; records an override (task 0292). Waives the verdict only \u2014 the FSM path still applies, so from an earlier status walk the hops first: `todo` \u2192 `wip` \u2192 `testing` \u2192 `done` (each hop runs the structural `spur task check`)").option("--reason <text>", "Rationale for a forced-done override (paired with --force-done; persisted as done_reason)").option("--provenance-bypass", "Record an audited provenance-bypass link when no pipeline run exists (replaces the SPUR_PROVENANCE_OVERRIDE env var; pair with --force-done)", false).option("--verdict-dir <path>", "Directory holding <wbs>-verdict.json artifacts (default: .spur/run)").option(...SHARED_OPTIONS.folderTasks).option(...SHARED_OPTIONS.json).option(...SHARED_OPTIONS.jsonEnvelope).action(async (wbs, status, options) => {
     const svc = await makeService(context4, options.folder, options.lifecycle === false, options.provenanceBypass === true);
     try {
+      if (options.append === true && options.section === undefined) {
+        writeJsonError(context4.output, options, "--append requires --section", "VALIDATION_FAILED");
+        context4.setExitCode(2);
+        return;
+      }
       if (options.assignee !== undefined) {
         if (options.section !== undefined) {
           writeJsonError(context4.output, options, "--assignee cannot be combined with --section", "VALIDATION_FAILED");
@@ -115626,7 +115817,7 @@ ${result.content}`);
           context4.setExitCode(2);
           return;
         }
-        const result = await svc.updateSection(wbs, options.section, options.fromFile);
+        const result = await svc.updateSection(wbs, options.section, options.fromFile, options.append === true);
         if (options.json) {
           context4.output.write(toEnvelopeJson(result, { enveloped: options.jsonEnvelope }));
         } else {
@@ -115710,6 +115901,9 @@ ${result.content}`);
         } else if (outcome.closeAuditError !== undefined) {
           context4.output.error(`warning: failed to record done close audit fields: ${outcome.closeAuditError}`);
         }
+        if (result.bookkeepingError !== undefined) {
+          context4.output.error(`warning: failed to reconcile task-lifecycle bookkeeping row: ${result.bookkeepingError} ` + "(task file is committed; replay the same terminal transition to repair)");
+        }
         if (options.json) {
           context4.output.write(toEnvelopeJson(result, { enveloped: options.jsonEnvelope }));
         } else {
@@ -116088,6 +116282,9 @@ Recover with: ${err.recoveryCommand}` : err.message;
         if (result.closeAuditError !== undefined) {
           context4.output.error(`warning: failed to record done close audit fields: ${result.closeAuditError}`);
         }
+        if (result.bookkeepingError !== undefined) {
+          context4.output.error(`warning: failed to reconcile task-lifecycle bookkeeping row: ${result.bookkeepingError} ` + "(task file is committed; replay the same terminal transition to repair)");
+        }
         if (result.verdictMessage !== undefined) {
           context4.output.error(`\u24D8 verdict artifact ${result.verdictState}: ${result.verdictMessage}`);
         }
@@ -116456,7 +116653,10 @@ async function makeService(context4, folderOverride, noLifecycle = false, proven
   const writeService = new PlanningWriteService({
     fs: context4.fs,
     ...lifecycle ? { lifecycle } : {},
-    emitter: makePlanningEmitter(context4)
+    emitter: makePlanningEmitter(context4),
+    onTransitionCommitted: async (ref, _from, to) => {
+      await reconcileExistingLifecycleRow(() => context4.getDb(), TASK_LIFECYCLE_PROFILE, ref.id, to);
+    }
   });
   return new TaskService({
     fs: context4.fs,
@@ -118331,7 +118531,7 @@ import { createRequire } from "module";
 var CLI_CONFIG = {
   binaryName: "spur",
   binaryLabel: "spur",
-  binaryVersion: "0.3.97",
+  binaryVersion: "0.3.98",
   configDir: ".spur",
   configFile: ".spur/config.yaml",
   databaseFile: ".spur/spur.db"
@@ -127157,6 +127357,10 @@ init_dist5();
 await init_src3();
 import { homedir as homedir12 } from "os";
 import { basename as basename20, join as join51, relative as relative11, resolve as resolve23 } from "path";
+// ../server/package.json
+var version3 = "0.3.98";
+
+// ../server/src/modules/health/index.ts
 var startedAt = Date.now();
 var OPERATOR_AGENT_ID = "board-operator";
 var healthModule = {
@@ -127167,6 +127371,9 @@ var healthModule = {
       const memory = process.memoryUsage();
       return c3.json({
         status: "ok",
+        timestamp: new Date().toISOString(),
+        service: "spur",
+        version: version3,
         uptime_seconds: Math.round(uptime),
         memory_rss_mb: Math.round(memory.rss / 1048576 * 100) / 100,
         memory_heap_mb: Math.round(memory.heapUsed / 1048576 * 100) / 100
@@ -127263,7 +127470,7 @@ var healthModule = {
             const doc2 = doctorMap.get(ex.name);
             const installed = doc2?.installed ?? !avail.disabled;
             const usable = doc2?.usable ?? !avail.disabled;
-            const version3 = doc2?.version ?? null;
+            const version4 = doc2?.version ?? null;
             const error51 = doc2?.error ?? null;
             const isProject = projectExecutors.has(ex.name);
             const isGlobal = globalExecutors.has(ex.name);
@@ -127280,7 +127487,7 @@ var healthModule = {
               disabledSince: avail.since,
               installed,
               usable,
-              version: version3,
+              version: version4,
               error: error51,
               elected: [],
               executionCapabilities: ex.executionCapabilities,
@@ -127516,6 +127723,9 @@ var healthModule = {
       try {
         body = await c3.req.json();
       } catch {}
+      if (body === null || typeof body !== "object" || Array.isArray(body)) {
+        return c3.json({ error: "request body must be a JSON object" }, 400);
+      }
       const target = body.name ?? body.path;
       if (!target) {
         return c3.json({ error: "Missing name or path in request body" }, 400);
@@ -127547,6 +127757,9 @@ var healthModule = {
       } catch {
         return c3.json({ error: "Invalid JSON request body" }, 400);
       }
+      if (body === null || typeof body !== "object" || Array.isArray(body)) {
+        return c3.json({ error: "request body must be a JSON object" }, 400);
+      }
       const executorName = body.name ?? body.executor;
       if (!executorName || typeof executorName !== "string" || executorName.trim().length === 0) {
         return c3.json({ error: "Missing or invalid executor name" }, 400);
@@ -128589,6 +128802,9 @@ var processesModule = {
       } catch {
         return c3.json({ error: "request body must be valid JSON" }, 400);
       }
+      if (json4 === null || typeof json4 !== "object" || Array.isArray(json4)) {
+        return c3.json({ error: "request body must be a JSON object" }, 400);
+      }
       const body = json4;
       if (typeof body.line !== "string" || body.line.length === 0) {
         return c3.json({ error: 'field "line" is required' }, 400);
@@ -128806,7 +129022,13 @@ function createTaskHandlers(ctx) {
       return { ok: true, data: createResponseShape2(r2) };
     }),
     transition: os4.task.transition.handler(async ({ input }) => {
-      await ctx.transitionTask(input);
+      const guarded = await ctx.transitionTask(input);
+      if (guarded.kind === "transitioned" && guarded.result.bookkeepingError !== undefined) {
+        ctx.logger.error(`task ${input.wbs}: failed to reconcile task-lifecycle bookkeeping row after transition to ${guarded.result.toStatus}: ${guarded.result.bookkeepingError} ` + `(task file is committed; replay the same terminal transition, e.g. \`spur task record ${input.wbs} --transition ${input.toStatus}\`, to repair)`, { wbs: input.wbs, toStatus: guarded.result.toStatus });
+      }
+      if (guarded.kind === "transitioned" && guarded.result.closeAuditError !== undefined) {
+        ctx.logger.error(`task ${input.wbs}: failed to record done close audit fields after transition to ${input.toStatus}: ${guarded.result.closeAuditError} ` + `(task file is committed; replay the same terminal transition, e.g. \`spur task record ${input.wbs} --transition ${input.toStatus}\`, to repair)`, { wbs: input.wbs, toStatus: input.toStatus });
+      }
       return { ok: true, data: { wbs: input.wbs, status: input.toStatus } };
     }),
     body: os4.task.body.handler(async ({ input }) => {
@@ -130775,7 +130997,6 @@ async function generateOpenApiSpec(pluginPaths = {}) {
 }
 
 // ../server/src/router.ts
-var version3 = "0.0.0";
 var os5 = implement(contract);
 var EMPTY_BOARD_CATALOG = { catalogVersion: 1, host: null, modules: [] };
 var stubCtx = new Proxy({}, {
@@ -130989,6 +131210,7 @@ function createServerContext(appRt, options) {
     runDir: join53(cwd, ".spur", "run"),
     webDistPath: options.webDistPath,
     boardModules: options.boardModules,
+    logger: appRt.logger,
     async getDb() {
       if (!dbPromise) {
         const created = (async () => {
@@ -131014,7 +131236,14 @@ function createServerContext(appRt, options) {
         const lazyEmitter = new LazyPlanningEventEmitter(this.getDb.bind(this), eventsBus);
         taskSvc = new TaskService({
           fs: fs3,
-          writeService: new PlanningWriteService({ fs: fs3, projectName: "spur", emitter: lazyEmitter }),
+          writeService: new PlanningWriteService({
+            fs: fs3,
+            projectName: "spur",
+            emitter: lazyEmitter,
+            onTransitionCommitted: async (ref, _from, to) => {
+              await reconcileExistingLifecycleRow(this.getDb.bind(this), TASK_LIFECYCLE_PROFILE, ref.id, to);
+            }
+          }),
           tasksDir: folders.tasksDir,
           foldersConfig: folders.foldersConfig,
           projectName: "spur",