@gobing-ai/spur 0.4.1 → 0.4.3

package/plugins/sp/scripts/feature-verification-steps.mjs

@@ -2,20 +2,7 @@
 // @bun
 
 // plugins/sp/scripts/feature-verification-steps.ts
-import { spawnSync } from "child_process";
-import {
-  closeSync,
-  existsSync,
-  mkdirSync,
-  openSync,
-  readdirSync,
-  readFileSync,
-  realpathSync,
-  renameSync,
-  statSync,
-  writeFileSync
-} from "fs";
-import { join } from "path";
+import { existsSync } from "fs";
 import { fileURLToPath } from "url";
 
 // plugins/sp/lib/env.ts
@@ -25,12 +12,11 @@ function getEnvVar(name, fallback) {
 }
 
 // plugins/sp/scripts/feature-verification-steps.ts
-var SAFE_ID_RE = /^[A-Za-z0-9][A-Za-z0-9._-]*$/;
 function bundleEntry() {
   return fileURLToPath(new URL("../lib/inline-run.generated.mjs", import.meta.url));
 }
 function sourceModeError(spurBin) {
-  return new Error(`source mode: refusing to load packages/app/src/index.ts (spurBin=${JSON.stringify(spurBin)}). ` + "That entry is not the feature-verification contract surface \u2014 it does not export " + "splitLaunchCommand / ArtifactDao. Fix: run in bundle mode so " + "plugins/sp/lib/inline-run.generated.mjs is loaded (omit --module-mode, or pass --module-mode bundle) " + "and regenerate that bundle if it is missing. Reinstalling the sp plugin does not add these seams to the app source entry.");
+  return new Error(`source mode: refusing to load packages/app/src/index.ts (spurBin=${JSON.stringify(spurBin)}). ` + "That entry is not the feature-verification contract surface \u2014 it does not export " + "runFeatureVerification. Fix: run in bundle mode so " + "plugins/sp/lib/inline-run.generated.mjs is loaded (omit --module-mode, or pass --module-mode bundle) " + "and regenerate that bundle if it is missing. Reinstalling the sp plugin does not add the operation to the app source entry.");
 }
 function resolveModuleMode(raw) {
   if (raw === "" || raw === "bundle")
@@ -50,123 +36,21 @@ async function loadModule(spurBin, mode) {
 }
 async function requireModule(entry, mode) {
   const mod = await import(entry);
-  const missing = [
-    "startFeatureVerificationReceipt",
-    "completeFeatureVerificationReceipt",
-    "captureFeatureReceiptDigest",
-    "resolveWorkflowDefinition",
-    "splitLaunchCommand",
-    "openInlineRunProjectDb",
-    "ArtifactDao"
-  ].filter((k) => typeof mod[k] !== "function");
+  const missing = ["runFeatureVerification"].filter((k) => typeof mod[k] !== "function");
   if (missing.length > 0) {
     throw new Error(`feature-verification-steps: mode=${mode} \u2014 application entry ${entry} is missing feature-verification seams (${missing.join(", ")}). ` + "Fix: the generated inline bundle is stale or incomplete \u2014 run `bun run build:bundle` in a source checkout, or reinstall the sp plugin.");
   }
   return mod;
 }
-function assertSafeId(kind, id) {
-  if (!SAFE_ID_RE.test(id) || id.includes("..")) {
-    throw new Error(`refusing unsafe ${kind}: ${id}`);
-  }
-}
-function findFeatureFile(featureDir, featureId) {
-  if (!existsSync(featureDir))
-    return;
-  const name = readdirSync(featureDir).find((n) => n.startsWith(`${featureId}_`) && n.endsWith(".md"));
-  return name === undefined ? undefined : join(featureDir, name);
-}
-var nodeFsShim = {
-  realPath: realpathSync,
-  readDir: readdirSync,
-  stat: (path) => {
-    try {
-      return statSync(path);
-    } catch (error) {
-      if (error.code === "ENOENT")
-        return null;
-      throw error;
-    }
-  },
-  ensureDir: (dir) => {
-    mkdirSync(dir, { recursive: true });
-  },
-  writeFile: (path, body) => {
-    writeFileSync(path, body);
-  },
-  rename: (src, dest) => {
-    renameSync(src, dest);
-  },
-  readFile: (path) => {
-    return readFileSync(path, "utf8");
-  }
-};
 async function verify(featureId, runId, cmdOverride, spurBin, mode) {
-  assertSafeId("feature id", featureId);
-  assertSafeId("run id", runId);
-  const cwd = process.cwd();
   const mod = await loadModule(spurBin, mode);
-  const runDir = join(cwd, ".spur", "run");
-  mkdirSync(runDir, { recursive: true });
-  const selected = await mod.resolveWorkflowDefinition(cwd, "feature-verification");
-  const vars = selected.workflow.vars;
-  const configuredCmd = typeof vars?.verificationCmd === "string" && vars.verificationCmd.length > 0 ? vars.verificationCmd : "bun run spur-check-feature";
-  const effectiveCmd = cmdOverride !== "" ? cmdOverride : configuredCmd;
-  const featureFile = findFeatureFile(join(cwd, "docs", "features"), featureId);
-  if (featureFile === undefined) {
-    throw new Error(`feature ${featureId} not found under ${join(cwd, "docs", "features")}`);
-  }
-  const featureContent = readFileSync(featureFile, "utf8");
-  const learningsPath = join(cwd, ".spur", "context", "learnings.md");
-  const learningsContent = existsSync(learningsPath) ? readFileSync(learningsPath, "utf8") : undefined;
-  const beforeDigest = await mod.captureFeatureReceiptDigest(cwd, featureContent, learningsContent);
-  const receipt = await mod.startFeatureVerificationReceipt(nodeFsShim, runDir, {
+  const result = await mod.runFeatureVerification({
+    workdir: process.cwd(),
     featureId,
     runId,
-    workdir: cwd,
-    verifier: {
-      name: "feature-verification",
-      sourcePath: selected.path,
-      layer: selected.layer,
-      definitionDigest: selected.digest
-    },
-    verificationCmd: effectiveCmd,
-    inputDigest: beforeDigest
+    cmdOverride
   });
-  const db = await mod.openInlineRunProjectDb(cwd);
-  try {
-    await new mod.ArtifactDao(db.adapter).record({
-      runId,
-      path: mod.featureReceiptPaths(runDir, featureId, runId).runScoped,
-      kind: "feature-verification"
-    });
-  } finally {
-    db.close();
-  }
-  const logPath = join(runDir, `${runId}-feature-verification.log`);
-  const launch = mod.splitLaunchCommand(effectiveCmd, "feature-verification verificationCmd");
-  if ("error" in launch) {
-    await mod.completeFeatureVerificationReceipt(nodeFsShim, runDir, receipt, {
-      status: "FAIL",
-      inputDigest: beforeDigest
-    });
-    console.log(`feature-verification-steps: ${featureId} verification FAIL (${launch.error})`);
-    return;
-  }
-  const logFd = openSync(logPath, "a");
-  try {
-    const result = spawnSync(launch.command, launch.leadingArgs, {
-      cwd,
-      stdio: ["ignore", logFd, logFd],
-      timeout: 14400000
-    });
-    const exit = result.status ?? 1;
-    const afterDigest = await mod.captureFeatureReceiptDigest(cwd, featureContent, learningsContent);
-    const status = exit === 0 && afterDigest === beforeDigest ? "PASS" : "FAIL";
-    await mod.completeFeatureVerificationReceipt(nodeFsShim, runDir, receipt, { status, inputDigest: afterDigest });
-    console.log(`feature-verification-steps: ${featureId} verification ${status} (run ${runId}, log ${logPath})`);
-  } finally {
-    closeSync(logFd);
-  }
+  console.log(`feature-verification-steps: ${featureId} ${result.message}`);
 }
 function main() {
   const args = process.argv.slice(2);

package/plugins/sp/scripts/feature-verification-steps.ts

@@ -1,62 +1,34 @@
 #!/usr/bin/env bun
 /**
- * feature-verification-steps — the single writer of feature verification
- * receipts behind the `feature-verification` workflow (task 0915, remediated
- * to the frozen v1 contract; no public CLI verb exists by design).
+ * feature-verification-steps — argv adapter for the feature-verification pass (task 0915; reduced to
+ * an adapter in task 1176).
+ *
+ * The pass itself — resolve the selected `feature-verification` definition, capture the before
+ * proof-input digest, record and register the RUNNING receipt, run the effective command through the
+ * safe argv splitter (never `sh -c`), compare the after digest, complete PASS/FAIL plus the coarse
+ * status file — lives in the application operation
+ * `packages/app/src/workflow/feature-verification-run.ts`, reached through the generated inline
+ * bundle. This entry owns argv, usage and exit codes only: it opens no project DB, constructs no
+ * `ArtifactDao`, and scans no feature directory (that lookup is app-owned too).
  *
  * Usage (workflow onEnter, vars: featureId, verificationCmd, spurBin, __runId):
  *   bun plugins/sp/scripts/feature-verification-steps.ts verify \
- *     --feature-id D63 --run-id <runId> --cmd "bun run spur-check-feature"
+ *     --feature-id D63 --run-id <runId> [--cmd "bun run spur-check-feature"] [--module-mode bundle]
  *
- * One pass, in order:
- *   1. resolve the selected `feature-verification` definition (project override
- *      wins) for the verifier identity + configured command,
- *   2. capture the before proof-input digest, record the RUNNING receipt (both
- *      copies) and register the run-scoped receipt as a run artifact,
- *   3. run the effective command via the safe launch splitter (never `sh -c`
- *      interpolation), output to the run-scoped log,
- *   4. capture the after digest — a mismatch records FAIL,
- *   5. complete the receipt PASS/FAIL (both copies) and the coarse status file.
+ * Always exits 0 after a completed pass; the transition guard reads the status file and the
+ * completion boundary validates the receipt (fail-closed). Unsafe ids are refused by the operation.
  *
- * Always exits 0 after verify; the transition guard reads the status file and
- * the completion boundary validates the receipt (fail-closed). Unsafe ids are
- * refused outright. Node-builtin imports only (ADR-065); the application seams come
- * from the generated inline bundle (`plugins/sp/lib/inline-run.generated.mjs`) — never
- * from `packages/app/src/index.ts`, which is not a plugin-script contract surface (0948 R3).
+ * Node-builtin imports only (ADR-065); the application seams come from the generated inline bundle,
+ * never from `packages/app/src/index.ts`, which is not a plugin-script contract surface (0948 R3).
  */
 
-import { spawnSync } from 'node:child_process';
-import {
-    closeSync,
-    existsSync,
-    mkdirSync,
-    openSync,
-    readdirSync,
-    readFileSync,
-    realpathSync,
-    renameSync,
-    statSync,
-    writeFileSync,
-} from 'node:fs';
-import { join } from 'node:path';
+import { existsSync } from 'node:fs';
 import { fileURLToPath } from 'node:url';
 import { getEnvVar } from '../lib/env';
 
-/** Single safe filename component — same class as the inline-run-setup run-id guard. */
-const SAFE_ID_RE = /^[A-Za-z0-9][A-Za-z0-9._-]*$/;
-
 /** Shape of the generated inline bundle / repo app source this script consumes. */
 interface VerificationModule {
-    featureReceiptPaths: typeof import('../../../packages/app/src/workflow/feature-verification-receipt')['featureReceiptPaths'];
-    startFeatureVerificationReceipt: typeof import('../../../packages/app/src/workflow/feature-verification-receipt')['startFeatureVerificationReceipt'];
-    completeFeatureVerificationReceipt: typeof import('../../../packages/app/src/workflow/feature-verification-receipt')['completeFeatureVerificationReceipt'];
-    captureFeatureReceiptDigest: typeof import('../../../packages/app/src/workflow/feature-verification-receipt')['captureFeatureReceiptDigest'];
-    resolveWorkflowDefinition: typeof import('../../../packages/app/src/workflow/workflow-resolver')['resolveWorkflowDefinition'];
-    splitLaunchCommand: typeof import('../../../packages/app/src/workflow/split-launch-command')['splitLaunchCommand'];
-    openInlineRunProjectDb: typeof import('../../../packages/app/src/services/inline-run-setup')['openInlineRunProjectDb'];
-    ArtifactDao: new (
-        adapter: never,
-    ) => { record: (input: { runId: string; path: string; kind: string }) => Promise<unknown> };
+    runFeatureVerification: typeof import('../../../packages/app/src/workflow/feature-verification-run')['runFeatureVerification'];
 }
 
 /** Explicit module surface. Source is not the contract; the generated bundle is (0948 R3). */
@@ -67,16 +39,16 @@ function bundleEntry(): string {
 }
 
 /**
- * Source mode names the mode and the fix. The app source entry does not export
- * the verification seams, and "rebuild/install the sp plugin" cannot add them.
+ * Source mode names the mode and the fix. The app source entry does not export the verification
+ * operation, and "rebuild/install the sp plugin" cannot add it.
  */
 function sourceModeError(spurBin: string): Error {
     return new Error(
         `source mode: refusing to load packages/app/src/index.ts (spurBin=${JSON.stringify(spurBin)}). ` +
             'That entry is not the feature-verification contract surface — it does not export ' +
-            'splitLaunchCommand / ArtifactDao. Fix: run in bundle mode so ' +
+            'runFeatureVerification. Fix: run in bundle mode so ' +
             'plugins/sp/lib/inline-run.generated.mjs is loaded (omit --module-mode, or pass --module-mode bundle) ' +
-            'and regenerate that bundle if it is missing. Reinstalling the sp plugin does not add these seams to the app source entry.',
+            'and regenerate that bundle if it is missing. Reinstalling the sp plugin does not add the operation to the app source entry.',
     );
 }
 
@@ -89,8 +61,8 @@ function resolveModuleMode(raw: string): ModuleMode {
 /**
  * Bundle mode loads the generated inline bundle. Source mode fails closed with a named fix.
  *
- * `spurBin` no longer selects the module (it named the *caller's* CLI entry, not this
- * script's runtime surface); it is kept only to make the failure message actionable.
+ * `spurBin` no longer selects the module (it named the *caller's* CLI entry, not this script's runtime
+ * surface); it is kept only to make the failure message actionable.
  */
 async function loadModule(spurBin: string, mode: ModuleMode): Promise<VerificationModule> {
     if (mode === 'source') throw sourceModeError(spurBin);
@@ -105,20 +77,10 @@ async function loadModule(spurBin: string, mode: ModuleMode): Promise<Verificati
     return requireModule(bundle, mode);
 }
 
-/** Dynamic-import the entry and refuse modules missing the verification seams. */
+/** Dynamic-import the entry and refuse a module missing the verification operation. */
 async function requireModule(entry: string, mode: ModuleMode): Promise<VerificationModule> {
     const mod = (await import(entry)) as Partial<VerificationModule> & Record<string, unknown>;
-    const missing = (
-        [
-            'startFeatureVerificationReceipt',
-            'completeFeatureVerificationReceipt',
-            'captureFeatureReceiptDigest',
-            'resolveWorkflowDefinition',
-            'splitLaunchCommand',
-            'openInlineRunProjectDb',
-            'ArtifactDao',
-        ] as const
-    ).filter((k) => typeof mod[k] !== 'function');
+    const missing = (['runFeatureVerification'] as const).filter((k) => typeof mod[k] !== 'function');
     if (missing.length > 0) {
         throw new Error(
             `feature-verification-steps: mode=${mode} — application entry ${entry} is missing feature-verification seams (${missing.join(', ')}). ` +
@@ -128,48 +90,6 @@ async function requireModule(entry: string, mode: ModuleMode): Promise<Verificat
     return mod as VerificationModule;
 }
 
-/** Refuse ids that could escape the run directory through receipt filenames. */
-function assertSafeId(kind: string, id: string): void {
-    if (!SAFE_ID_RE.test(id) || id.includes('..')) {
-        throw new Error(`refusing unsafe ${kind}: ${id}`);
-    }
-}
-
-/** Locate `<id>_<slug>.md` under the features directory. */
-function findFeatureFile(featureDir: string, featureId: string): string | undefined {
-    if (!existsSync(featureDir)) return undefined;
-    const name = readdirSync(featureDir).find((n) => n.startsWith(`${featureId}_`) && n.endsWith('.md'));
-    return name === undefined ? undefined : join(featureDir, name);
-}
-
-// ponytail: the receipt service is filesystem-pure over the ts-runtime
-// FileSystem port; only ensureDir/writeFile/rename are exercised on the
-// start/complete paths. Swap to createNodeFileSystem if more surface is needed.
-const nodeFsShim = {
-    realPath: realpathSync,
-    readDir: readdirSync,
-    stat: (path: string) => {
-        try {
-            return statSync(path);
-        } catch (error) {
-            if ((error as { code?: string }).code === 'ENOENT') return null;
-            throw error;
-        }
-    },
-    ensureDir: (dir: string) => {
-        mkdirSync(dir, { recursive: true });
-    },
-    writeFile: (path: string, body: string) => {
-        writeFileSync(path, body);
-    },
-    rename: (src: string, dest: string) => {
-        renameSync(src, dest);
-    },
-    readFile: (path: string) => {
-        return readFileSync(path, 'utf8');
-    },
-} as never;
-
 /** One full verification pass for one feature. Always exits 0. */
 async function verify(
     featureId: string,
@@ -178,86 +98,14 @@ async function verify(
     spurBin: string,
     mode: ModuleMode,
 ): Promise<void> {
-    assertSafeId('feature id', featureId);
-    assertSafeId('run id', runId);
-    const cwd = process.cwd();
     const mod = await loadModule(spurBin, mode);
-    const runDir = join(cwd, '.spur', 'run');
-    mkdirSync(runDir, { recursive: true });
-
-    // 1. Selected verifier definition (project override wins); its configured
-    // command is the completion contract — an override records but can't complete.
-    const selected = await mod.resolveWorkflowDefinition(cwd, 'feature-verification');
-    const vars = selected.workflow.vars as { verificationCmd?: unknown } | undefined;
-    const configuredCmd =
-        typeof vars?.verificationCmd === 'string' && vars.verificationCmd.length > 0
-            ? vars.verificationCmd
-            : 'bun run spur-check-feature';
-    const effectiveCmd = cmdOverride !== '' ? cmdOverride : configuredCmd;
-
-    const featureFile = findFeatureFile(join(cwd, 'docs', 'features'), featureId);
-    if (featureFile === undefined) {
-        throw new Error(`feature ${featureId} not found under ${join(cwd, 'docs', 'features')}`);
-    }
-    const featureContent = readFileSync(featureFile, 'utf8');
-    const learningsPath = join(cwd, '.spur', 'context', 'learnings.md');
-    const learningsContent = existsSync(learningsPath) ? readFileSync(learningsPath, 'utf8') : undefined;
-
-    // 2. Before digest + RUNNING receipt (both copies) + artifact registration.
-    const beforeDigest = await mod.captureFeatureReceiptDigest(cwd, featureContent, learningsContent);
-    const receipt = await mod.startFeatureVerificationReceipt(nodeFsShim, runDir, {
+    const result = await mod.runFeatureVerification({
+        workdir: process.cwd(),
         featureId,
         runId,
-        workdir: cwd,
-        verifier: {
-            name: 'feature-verification',
-            sourcePath: selected.path,
-            layer: selected.layer,
-            definitionDigest: selected.digest,
-        },
-        verificationCmd: effectiveCmd,
-        inputDigest: beforeDigest,
+        cmdOverride,
     });
-    const db = await mod.openInlineRunProjectDb(cwd);
-    try {
-        await new mod.ArtifactDao(db.adapter as never).record({
-            runId,
-            path: mod.featureReceiptPaths(runDir, featureId, runId).runScoped,
-            kind: 'feature-verification',
-        });
-    } finally {
-        db.close();
-    }
-
-    // 3. Run the effective command via the safe splitter (no `sh -c`).
-    const logPath = join(runDir, `${runId}-feature-verification.log`);
-    const launch = mod.splitLaunchCommand(effectiveCmd, 'feature-verification verificationCmd');
-    if ('error' in launch) {
-        await mod.completeFeatureVerificationReceipt(nodeFsShim, runDir, receipt, {
-            status: 'FAIL',
-            inputDigest: beforeDigest,
-        });
-        console.log(`feature-verification-steps: ${featureId} verification FAIL (${launch.error})`);
-        return;
-    }
-    const logFd = openSync(logPath, 'a');
-    try {
-        const result = spawnSync(launch.command, launch.leadingArgs, {
-            cwd,
-            stdio: ['ignore', logFd, logFd],
-            timeout: 4 * 60 * 60 * 1000,
-        });
-        const exit = result.status ?? 1;
-
-        // 4/5. After digest — a mismatch records FAIL (the pass did not verify
-        // the tree it left behind); otherwise the exit code decides.
-        const afterDigest = await mod.captureFeatureReceiptDigest(cwd, featureContent, learningsContent);
-        const status: 'PASS' | 'FAIL' = exit === 0 && afterDigest === beforeDigest ? 'PASS' : 'FAIL';
-        await mod.completeFeatureVerificationReceipt(nodeFsShim, runDir, receipt, { status, inputDigest: afterDigest });
-        console.log(`feature-verification-steps: ${featureId} verification ${status} (run ${runId}, log ${logPath})`);
-    } finally {
-        closeSync(logFd);
-    }
+    console.log(`feature-verification-steps: ${featureId} ${result.message}`);
 }
 
 function main(): void {

package/plugins/sp/scripts/inline-run-dispatch.mjs

@@ -3,9 +3,7 @@
 
 // plugins/sp/scripts/inline-run-dispatch.ts
 import { spawnSync } from "child_process";
-import { existsSync } from "fs";
-import { dirname, join, resolve } from "path";
-import { fileURLToPath } from "url";
+import { fileURLToPath as fileURLToPath2 } from "url";
 
 // plugins/sp/lib/env.ts
 function getEnvVar(name, fallback) {
@@ -14,8 +12,30 @@ function getEnvVar(name, fallback) {
 }
 
 // plugins/sp/lib/inline-run-app.ts
-async function loadInlineApp(spurBin, resolveAppEntry, required) {
-  const { entry, portable } = resolveAppEntry(spurBin);
+import { existsSync } from "node:fs";
+import { dirname, join, resolve } from "node:path";
+import { fileURLToPath } from "node:url";
+function resolveAppEntry(spurBin) {
+  const fallback = fileURLToPath(new URL("../../../apps/cli/src/index.ts", import.meta.url));
+  const candidates = spurBin !== "" ? [spurBin] : [fallback];
+  for (const candidate of candidates) {
+    const tokens = candidate.split(/\s+/).filter(Boolean);
+    const mainModule = [...tokens].reverse().find((t) => t.endsWith(".ts"));
+    if (mainModule === undefined || !existsSync(mainModule))
+      continue;
+    const repoRoot = resolve(dirname(mainModule), "..", "..", "..");
+    const appEntry = join(repoRoot, "packages", "app", "src", "index.ts");
+    if (existsSync(appEntry))
+      return { entry: appEntry, portable: false };
+  }
+  const entry = fileURLToPath(new URL("../lib/inline-run.generated.mjs", import.meta.url));
+  if (!existsSync(entry)) {
+    throw new Error("inline application bundle is missing — rebuild/install the sp plugin before running inline");
+  }
+  return { entry, portable: true };
+}
+async function loadInlineApp(spurBin, resolveAppEntry2, required) {
+  const { entry, portable } = resolveAppEntry2(spurBin);
   const app = await import(entry);
   const missing = portable ? required.filter((name) => typeof app[name] !== "function") : [];
   if (missing.length > 0) {
@@ -36,28 +56,9 @@ function usage() {
   process.exit(2);
 }
 var SAFE_RUN_ID_RE = /^[A-Za-z0-9][A-Za-z0-9._-]*$/;
-function resolveAppEntry(spurBin) {
-  const fallback = fileURLToPath(new URL("../../../apps/cli/src/index.ts", import.meta.url));
-  const candidates = spurBin !== "" ? [spurBin] : [fallback];
-  for (const candidate of candidates) {
-    const tokens = candidate.split(/\s+/).filter(Boolean);
-    const mainModule = [...tokens].reverse().find((t) => t.endsWith(".ts"));
-    if (mainModule === undefined || !existsSync(mainModule))
-      continue;
-    const repoRoot = resolve(dirname(mainModule), "..", "..", "..");
-    const appEntry = join(repoRoot, "packages", "app", "src", "index.ts");
-    if (existsSync(appEntry))
-      return { entry: appEntry, portable: false };
-  }
-  const entry = fileURLToPath(new URL("../lib/inline-run.generated.mjs", import.meta.url));
-  if (!existsSync(entry)) {
-    throw new Error("inline application bundle is missing \u2014 rebuild/install the sp plugin before running inline");
-  }
-  return { entry, portable: true };
-}
 async function main() {
   if (!process.versions.bun) {
-    const child = spawnSync("bun", [fileURLToPath(import.meta.url), ...process.argv.slice(2)], {
+    const child = spawnSync("bun", [fileURLToPath2(import.meta.url), ...process.argv.slice(2)], {
       stdio: "inherit"
     });
     if (child.error)
@@ -113,7 +114,7 @@ async function main() {
   }
   if (decision.trim() === "" || text === "" === (textFile === ""))
     usage();
-  const { app: lib } = await loadInlineApp(spurBin, () => ({ entry: fileURLToPath(new URL("../lib/inline-run.generated.mjs", import.meta.url)), portable }), ["loadSpurConfig"]);
+  const { app: lib } = await loadInlineApp(spurBin, () => ({ entry: fileURLToPath2(new URL("../lib/inline-run.generated.mjs", import.meta.url)), portable }), ["loadSpurConfig"]);
   const spurConfig = await lib.loadSpurConfig(process.cwd(), portable ? { embeddedSchemas: lib.EMBEDDED_SPUR_SCHEMAS } : undefined);
   process.exit(await app.runInlineRunDispatchFailure({
     runId,

package/plugins/sp/scripts/inline-run-dispatch.ts

@@ -5,13 +5,11 @@
  *  `loadInlineApp` seam the setup facade uses. It is a SEPARATE script from `inline-run-setup.ts`
  *  because it is a separate operation and the ADR-130 glue budget is per script. */
 import { spawnSync } from 'node:child_process';
-import { existsSync } from 'node:fs';
-import { dirname, join, resolve } from 'node:path';
 import { fileURLToPath } from 'node:url';
 // Type-only namespace import (erased before bundling; the smoke scanner exempts `import type`).
 import type * as spurApp from '@gobing-ai/spur-app';
 import { getEnvVar } from '../lib/env';
-import { loadInlineApp } from '../lib/inline-run-app';
+import { loadInlineApp, resolveAppEntry } from '../lib/inline-run-app';
 
 // EMBEDDED_SPUR_SCHEMAS is declared by the bundle twin, never exported by the barrel.
 type InlineApp = typeof spurApp & { EMBEDDED_SPUR_SCHEMAS?: ReadonlyMap<string, string> };
@@ -32,24 +30,6 @@ function usage(): never {
 const SAFE_RUN_ID_RE = /^[A-Za-z0-9][A-Za-z0-9._-]*$/;
 
 /** Resolve the app entry: --spur-bin/SPUR_BIN main module if it proves a repo checkout, else the bundle. */
-function resolveAppEntry(spurBin: string): { entry: string; portable: boolean } {
-    const fallback = fileURLToPath(new URL('../../../apps/cli/src/index.ts', import.meta.url));
-    const candidates = spurBin !== '' ? [spurBin] : [fallback];
-    for (const candidate of candidates) {
-        const tokens = candidate.split(/\s+/).filter(Boolean);
-        // Main module = last path-like token; only a .ts source entry proves a repo checkout.
-        const mainModule = [...tokens].reverse().find((t) => t.endsWith('.ts'));
-        if (mainModule === undefined || !existsSync(mainModule)) continue;
-        const repoRoot = resolve(dirname(mainModule), '..', '..', '..');
-        const appEntry = join(repoRoot, 'packages', 'app', 'src', 'index.ts');
-        if (existsSync(appEntry)) return { entry: appEntry, portable: false };
-    }
-    const entry = fileURLToPath(new URL('../lib/inline-run.generated.mjs', import.meta.url));
-    if (!existsSync(entry)) {
-        throw new Error('inline application bundle is missing — rebuild/install the sp plugin before running inline');
-    }
-    return { entry, portable: true };
-}
 
 async function main(): Promise<void> {
     // The portable Node twin has no workspace imports; the app bundle still uses Spur's Bun runtime.