@gobing-ai/spur 0.4.2 → 0.4.4

package/plugins/sp/scripts/feature-verification-steps.mjs

@@ -3,19 +3,7 @@
 
 // plugins/sp/scripts/feature-verification-steps.ts
 import { spawnSync } from "child_process";
-import {
-  closeSync,
-  existsSync,
-  mkdirSync,
-  openSync,
-  readdirSync,
-  readFileSync,
-  realpathSync,
-  renameSync,
-  statSync,
-  writeFileSync
-} from "fs";
-import { join } from "path";
+import { existsSync } from "fs";
 import { fileURLToPath } from "url";
 
 // plugins/sp/lib/env.ts
@@ -25,12 +13,11 @@ function getEnvVar(name, fallback) {
 }
 
 // plugins/sp/scripts/feature-verification-steps.ts
-var SAFE_ID_RE = /^[A-Za-z0-9][A-Za-z0-9._-]*$/;
 function bundleEntry() {
   return fileURLToPath(new URL("../lib/inline-run.generated.mjs", import.meta.url));
 }
 function sourceModeError(spurBin) {
-  return new Error(`source mode: refusing to load packages/app/src/index.ts (spurBin=${JSON.stringify(spurBin)}). ` + "That entry is not the feature-verification contract surface \u2014 it does not export " + "splitLaunchCommand / ArtifactDao. Fix: run in bundle mode so " + "plugins/sp/lib/inline-run.generated.mjs is loaded (omit --module-mode, or pass --module-mode bundle) " + "and regenerate that bundle if it is missing. Reinstalling the sp plugin does not add these seams to the app source entry.");
+  return new Error(`source mode: refusing to load packages/app/src/index.ts (spurBin=${JSON.stringify(spurBin)}). ` + "That entry is not the feature-verification contract surface \u2014 it does not export " + "runFeatureVerification. Fix: run in bundle mode so " + "plugins/sp/lib/inline-run.generated.mjs is loaded (omit --module-mode, or pass --module-mode bundle) " + "and regenerate that bundle if it is missing. Reinstalling the sp plugin does not add the operation to the app source entry.");
 }
 function resolveModuleMode(raw) {
   if (raw === "" || raw === "bundle")
@@ -50,125 +37,33 @@ async function loadModule(spurBin, mode) {
 }
 async function requireModule(entry, mode) {
   const mod = await import(entry);
-  const missing = [
-    "startFeatureVerificationReceipt",
-    "completeFeatureVerificationReceipt",
-    "captureFeatureReceiptDigest",
-    "resolveWorkflowDefinition",
-    "splitLaunchCommand",
-    "openInlineRunProjectDb",
-    "ArtifactDao"
-  ].filter((k) => typeof mod[k] !== "function");
+  const missing = ["runFeatureVerification"].filter((k) => typeof mod[k] !== "function");
   if (missing.length > 0) {
     throw new Error(`feature-verification-steps: mode=${mode} \u2014 application entry ${entry} is missing feature-verification seams (${missing.join(", ")}). ` + "Fix: the generated inline bundle is stale or incomplete \u2014 run `bun run build:bundle` in a source checkout, or reinstall the sp plugin.");
   }
   return mod;
 }
-function assertSafeId(kind, id) {
-  if (!SAFE_ID_RE.test(id) || id.includes("..")) {
-    throw new Error(`refusing unsafe ${kind}: ${id}`);
-  }
-}
-function findFeatureFile(featureDir, featureId) {
-  if (!existsSync(featureDir))
-    return;
-  const name = readdirSync(featureDir).find((n) => n.startsWith(`${featureId}_`) && n.endsWith(".md"));
-  return name === undefined ? undefined : join(featureDir, name);
-}
-var nodeFsShim = {
-  realPath: realpathSync,
-  readDir: readdirSync,
-  stat: (path) => {
-    try {
-      return statSync(path);
-    } catch (error) {
-      if (error.code === "ENOENT")
-        return null;
-      throw error;
-    }
-  },
-  ensureDir: (dir) => {
-    mkdirSync(dir, { recursive: true });
-  },
-  writeFile: (path, body) => {
-    writeFileSync(path, body);
-  },
-  rename: (src, dest) => {
-    renameSync(src, dest);
-  },
-  readFile: (path) => {
-    return readFileSync(path, "utf8");
-  }
-};
-async function verify(featureId, runId, cmdOverride, spurBin, mode) {
-  assertSafeId("feature id", featureId);
-  assertSafeId("run id", runId);
-  const cwd = process.cwd();
+async function verify(featureId, runId, cmdOverride, spurBin, mode, confidenceOverride, ackLowConfidence) {
   const mod = await loadModule(spurBin, mode);
-  const runDir = join(cwd, ".spur", "run");
-  mkdirSync(runDir, { recursive: true });
-  const selected = await mod.resolveWorkflowDefinition(cwd, "feature-verification");
-  const vars = selected.workflow.vars;
-  const configuredCmd = typeof vars?.verificationCmd === "string" && vars.verificationCmd.length > 0 ? vars.verificationCmd : "bun run spur-check-feature";
-  const effectiveCmd = cmdOverride !== "" ? cmdOverride : configuredCmd;
-  const featureFile = findFeatureFile(join(cwd, "docs", "features"), featureId);
-  if (featureFile === undefined) {
-    throw new Error(`feature ${featureId} not found under ${join(cwd, "docs", "features")}`);
-  }
-  const featureContent = readFileSync(featureFile, "utf8");
-  const learningsPath = join(cwd, ".spur", "context", "learnings.md");
-  const learningsContent = existsSync(learningsPath) ? readFileSync(learningsPath, "utf8") : undefined;
-  const beforeDigest = await mod.captureFeatureReceiptDigest(cwd, featureContent, learningsContent);
-  const receipt = await mod.startFeatureVerificationReceipt(nodeFsShim, runDir, {
+  const result = await mod.runFeatureVerification({
+    workdir: process.cwd(),
     featureId,
     runId,
-    workdir: cwd,
-    verifier: {
-      name: "feature-verification",
-      sourcePath: selected.path,
-      layer: selected.layer,
-      definitionDigest: selected.digest
-    },
-    verificationCmd: effectiveCmd,
-    inputDigest: beforeDigest
+    cmdOverride,
+    confidenceOverride,
+    ackLowConfidence
   });
-  const db = await mod.openInlineRunProjectDb(cwd);
-  try {
-    await new mod.ArtifactDao(db.adapter).record({
-      runId,
-      path: mod.featureReceiptPaths(runDir, featureId, runId).runScoped,
-      kind: "feature-verification"
-    });
-  } finally {
-    db.close();
-  }
-  const logPath = join(runDir, `${runId}-feature-verification.log`);
-  const launch = mod.splitLaunchCommand(effectiveCmd, "feature-verification verificationCmd");
-  if ("error" in launch) {
-    await mod.completeFeatureVerificationReceipt(nodeFsShim, runDir, receipt, {
-      status: "FAIL",
-      inputDigest: beforeDigest
-    });
-    console.log(`feature-verification-steps: ${featureId} verification FAIL (${launch.error})`);
-    return;
-  }
-  const logFd = openSync(logPath, "a");
-  try {
-    const result = spawnSync(launch.command, launch.leadingArgs, {
-      cwd,
-      stdio: ["ignore", logFd, logFd],
-      timeout: 14400000
-    });
-    const exit = result.status ?? 1;
-    const afterDigest = await mod.captureFeatureReceiptDigest(cwd, featureContent, learningsContent);
-    const status = exit === 0 && afterDigest === beforeDigest ? "PASS" : "FAIL";
-    await mod.completeFeatureVerificationReceipt(nodeFsShim, runDir, receipt, { status, inputDigest: afterDigest });
-    console.log(`feature-verification-steps: ${featureId} verification ${status} (run ${runId}, log ${logPath})`);
-  } finally {
-    closeSync(logFd);
-  }
+  console.log(`feature-verification-steps: ${featureId} ${result.message}`);
 }
 function main() {
+  if (!process.versions.bun) {
+    const child = spawnSync("bun", [fileURLToPath(import.meta.url), ...process.argv.slice(2)], {
+      stdio: "inherit"
+    });
+    if (child.error)
+      console.error(`feature-verification-steps requires Bun on PATH: ${child.error.message}`);
+    process.exit(child.status ?? 1);
+  }
   const args = process.argv.slice(2);
   const command = args[0];
   const flag = (name) => {
@@ -176,10 +71,10 @@ function main() {
     return i >= 0 && i + 1 < args.length ? args[i + 1] ?? "" : "";
   };
   if (command !== "verify") {
-    console.error("Usage: feature-verification-steps.ts verify --feature-id <id> --run-id <id> [--cmd <command>]");
+    console.error("Usage: feature-verification-steps.ts verify --feature-id <id> --run-id <id> [--cmd <command>] [--confidence HIGH|MEDIUM|LOW] [--ack-low-confidence]");
     process.exit(2);
   }
-  verify(flag("--feature-id") || getEnvVar("featureId") || "", flag("--run-id") || getEnvVar("__runId") || "", flag("--cmd") || getEnvVar("verificationCmd") || "", flag("--spur-bin") || getEnvVar("spurBin") || "", resolveModuleMode(flag("--module-mode"))).then(() => process.exit(0)).catch((err) => {
+  verify(flag("--feature-id") || getEnvVar("featureId") || "", flag("--run-id") || getEnvVar("__runId") || "", flag("--cmd") || getEnvVar("verificationCmd") || "", flag("--spur-bin") || getEnvVar("spurBin") || "", resolveModuleMode(flag("--module-mode")), flag("--confidence") || getEnvVar("confidence") || "", args.includes("--ack-low-confidence") || getEnvVar("ackLowConfidence") === "true").then(() => process.exit(0)).catch((err) => {
     console.error(`feature-verification-steps: ${String(err)}`);
     process.exit(1);
   });

package/plugins/sp/scripts/feature-verification-steps.ts

@@ -1,62 +1,40 @@
 #!/usr/bin/env bun
 /**
- * feature-verification-steps — the single writer of feature verification
- * receipts behind the `feature-verification` workflow (task 0915, remediated
- * to the frozen v1 contract; no public CLI verb exists by design).
+ * feature-verification-steps — argv adapter for the feature-verification pass (task 0915; reduced to
+ * an adapter in task 1176).
+ *
+ * The pass itself — resolve the selected `feature-verification` definition, capture the before
+ * proof-input digest, record and register the RUNNING receipt, run the effective command through the
+ * safe argv splitter (never `sh -c`), compare the after digest, complete PASS/FAIL plus the coarse
+ * status file — lives in the application operation
+ * `packages/app/src/workflow/feature-verification-run.ts`, reached through the generated inline
+ * bundle. This entry owns argv, usage and exit codes only: it opens no project DB, constructs no
+ * `ArtifactDao`, and scans no feature directory (that lookup is app-owned too).
  *
  * Usage (workflow onEnter, vars: featureId, verificationCmd, spurBin, __runId):
  *   bun plugins/sp/scripts/feature-verification-steps.ts verify \
- *     --feature-id D63 --run-id <runId> --cmd "bun run spur-check-feature"
+ *     --feature-id D63 --run-id <runId> [--cmd "bun run spur-check-feature"] [--module-mode bundle]
+ *
+ * Always exits 0 after a completed pass; the transition guard reads the status file and the
+ * completion boundary validates the receipt (fail-closed). Unsafe ids are refused by the operation.
  *
- * One pass, in order:
- *   1. resolve the selected `feature-verification` definition (project override
- *      wins) for the verifier identity + configured command,
- *   2. capture the before proof-input digest, record the RUNNING receipt (both
- *      copies) and register the run-scoped receipt as a run artifact,
- *   3. run the effective command via the safe launch splitter (never `sh -c`
- *      interpolation), output to the run-scoped log,
- *   4. capture the after digest — a mismatch records FAIL,
- *   5. complete the receipt PASS/FAIL (both copies) and the coarse status file.
+ * The installed `.mjs` twin may be launched with plain `node` (the `feature-verification` workflow
+ * selects `installed -> node`), but the generated inline bundle keeps `bun:sqlite` external by design, so the
+ * twin re-enters Bun at the top of `main()` (task 1197). Unlike daily-summary it fails closed when Bun
+ * is missing — a verifier that cannot load its bundle cannot run the checks.
  *
- * Always exits 0 after verify; the transition guard reads the status file and
- * the completion boundary validates the receipt (fail-closed). Unsafe ids are
- * refused outright. Node-builtin imports only (ADR-065); the application seams come
- * from the generated inline bundle (`plugins/sp/lib/inline-run.generated.mjs`) — never
- * from `packages/app/src/index.ts`, which is not a plugin-script contract surface (0948 R3).
+ * Node-builtin imports only (ADR-065); the application seams come from the generated inline bundle,
+ * never from `packages/app/src/index.ts`, which is not a plugin-script contract surface (0948 R3).
  */
 
 import { spawnSync } from 'node:child_process';
-import {
-    closeSync,
-    existsSync,
-    mkdirSync,
-    openSync,
-    readdirSync,
-    readFileSync,
-    realpathSync,
-    renameSync,
-    statSync,
-    writeFileSync,
-} from 'node:fs';
-import { join } from 'node:path';
+import { existsSync } from 'node:fs';
 import { fileURLToPath } from 'node:url';
 import { getEnvVar } from '../lib/env';
 
-/** Single safe filename component — same class as the inline-run-setup run-id guard. */
-const SAFE_ID_RE = /^[A-Za-z0-9][A-Za-z0-9._-]*$/;
-
 /** Shape of the generated inline bundle / repo app source this script consumes. */
 interface VerificationModule {
-    featureReceiptPaths: typeof import('../../../packages/app/src/workflow/feature-verification-receipt')['featureReceiptPaths'];
-    startFeatureVerificationReceipt: typeof import('../../../packages/app/src/workflow/feature-verification-receipt')['startFeatureVerificationReceipt'];
-    completeFeatureVerificationReceipt: typeof import('../../../packages/app/src/workflow/feature-verification-receipt')['completeFeatureVerificationReceipt'];
-    captureFeatureReceiptDigest: typeof import('../../../packages/app/src/workflow/feature-verification-receipt')['captureFeatureReceiptDigest'];
-    resolveWorkflowDefinition: typeof import('../../../packages/app/src/workflow/workflow-resolver')['resolveWorkflowDefinition'];
-    splitLaunchCommand: typeof import('../../../packages/app/src/workflow/split-launch-command')['splitLaunchCommand'];
-    openInlineRunProjectDb: typeof import('../../../packages/app/src/services/inline-run-setup')['openInlineRunProjectDb'];
-    ArtifactDao: new (
-        adapter: never,
-    ) => { record: (input: { runId: string; path: string; kind: string }) => Promise<unknown> };
+    runFeatureVerification: typeof import('../../../packages/app/src/workflow/feature-verification-run')['runFeatureVerification'];
 }
 
 /** Explicit module surface. Source is not the contract; the generated bundle is (0948 R3). */
@@ -67,16 +45,16 @@ function bundleEntry(): string {
 }
 
 /**
- * Source mode names the mode and the fix. The app source entry does not export
- * the verification seams, and "rebuild/install the sp plugin" cannot add them.
+ * Source mode names the mode and the fix. The app source entry does not export the verification
+ * operation, and "rebuild/install the sp plugin" cannot add it.
  */
 function sourceModeError(spurBin: string): Error {
     return new Error(
         `source mode: refusing to load packages/app/src/index.ts (spurBin=${JSON.stringify(spurBin)}). ` +
             'That entry is not the feature-verification contract surface — it does not export ' +
-            'splitLaunchCommand / ArtifactDao. Fix: run in bundle mode so ' +
+            'runFeatureVerification. Fix: run in bundle mode so ' +
             'plugins/sp/lib/inline-run.generated.mjs is loaded (omit --module-mode, or pass --module-mode bundle) ' +
-            'and regenerate that bundle if it is missing. Reinstalling the sp plugin does not add these seams to the app source entry.',
+            'and regenerate that bundle if it is missing. Reinstalling the sp plugin does not add the operation to the app source entry.',
     );
 }
 
@@ -89,8 +67,8 @@ function resolveModuleMode(raw: string): ModuleMode {
 /**
  * Bundle mode loads the generated inline bundle. Source mode fails closed with a named fix.
  *
- * `spurBin` no longer selects the module (it named the *caller's* CLI entry, not this
- * script's runtime surface); it is kept only to make the failure message actionable.
+ * `spurBin` no longer selects the module (it named the *caller's* CLI entry, not this script's runtime
+ * surface); it is kept only to make the failure message actionable.
  */
 async function loadModule(spurBin: string, mode: ModuleMode): Promise<VerificationModule> {
     if (mode === 'source') throw sourceModeError(spurBin);
@@ -105,20 +83,10 @@ async function loadModule(spurBin: string, mode: ModuleMode): Promise<Verificati
     return requireModule(bundle, mode);
 }
 
-/** Dynamic-import the entry and refuse modules missing the verification seams. */
+/** Dynamic-import the entry and refuse a module missing the verification operation. */
 async function requireModule(entry: string, mode: ModuleMode): Promise<VerificationModule> {
     const mod = (await import(entry)) as Partial<VerificationModule> & Record<string, unknown>;
-    const missing = (
-        [
-            'startFeatureVerificationReceipt',
-            'completeFeatureVerificationReceipt',
-            'captureFeatureReceiptDigest',
-            'resolveWorkflowDefinition',
-            'splitLaunchCommand',
-            'openInlineRunProjectDb',
-            'ArtifactDao',
-        ] as const
-    ).filter((k) => typeof mod[k] !== 'function');
+    const missing = (['runFeatureVerification'] as const).filter((k) => typeof mod[k] !== 'function');
     if (missing.length > 0) {
         throw new Error(
             `feature-verification-steps: mode=${mode} — application entry ${entry} is missing feature-verification seams (${missing.join(', ')}). ` +
@@ -128,48 +96,6 @@ async function requireModule(entry: string, mode: ModuleMode): Promise<Verificat
     return mod as VerificationModule;
 }
 
-/** Refuse ids that could escape the run directory through receipt filenames. */
-function assertSafeId(kind: string, id: string): void {
-    if (!SAFE_ID_RE.test(id) || id.includes('..')) {
-        throw new Error(`refusing unsafe ${kind}: ${id}`);
-    }
-}
-
-/** Locate `<id>_<slug>.md` under the features directory. */
-function findFeatureFile(featureDir: string, featureId: string): string | undefined {
-    if (!existsSync(featureDir)) return undefined;
-    const name = readdirSync(featureDir).find((n) => n.startsWith(`${featureId}_`) && n.endsWith('.md'));
-    return name === undefined ? undefined : join(featureDir, name);
-}
-
-// ponytail: the receipt service is filesystem-pure over the ts-runtime
-// FileSystem port; only ensureDir/writeFile/rename are exercised on the
-// start/complete paths. Swap to createNodeFileSystem if more surface is needed.
-const nodeFsShim = {
-    realPath: realpathSync,
-    readDir: readdirSync,
-    stat: (path: string) => {
-        try {
-            return statSync(path);
-        } catch (error) {
-            if ((error as { code?: string }).code === 'ENOENT') return null;
-            throw error;
-        }
-    },
-    ensureDir: (dir: string) => {
-        mkdirSync(dir, { recursive: true });
-    },
-    writeFile: (path: string, body: string) => {
-        writeFileSync(path, body);
-    },
-    rename: (src: string, dest: string) => {
-        renameSync(src, dest);
-    },
-    readFile: (path: string) => {
-        return readFileSync(path, 'utf8');
-    },
-} as never;
-
 /** One full verification pass for one feature. Always exits 0. */
 async function verify(
     featureId: string,
@@ -177,90 +103,35 @@ async function verify(
     cmdOverride: string,
     spurBin: string,
     mode: ModuleMode,
+    confidenceOverride: string,
+    ackLowConfidence: boolean,
 ): Promise<void> {
-    assertSafeId('feature id', featureId);
-    assertSafeId('run id', runId);
-    const cwd = process.cwd();
     const mod = await loadModule(spurBin, mode);
-    const runDir = join(cwd, '.spur', 'run');
-    mkdirSync(runDir, { recursive: true });
-
-    // 1. Selected verifier definition (project override wins); its configured
-    // command is the completion contract — an override records but can't complete.
-    const selected = await mod.resolveWorkflowDefinition(cwd, 'feature-verification');
-    const vars = selected.workflow.vars as { verificationCmd?: unknown } | undefined;
-    const configuredCmd =
-        typeof vars?.verificationCmd === 'string' && vars.verificationCmd.length > 0
-            ? vars.verificationCmd
-            : 'bun run spur-check-feature';
-    const effectiveCmd = cmdOverride !== '' ? cmdOverride : configuredCmd;
-
-    const featureFile = findFeatureFile(join(cwd, 'docs', 'features'), featureId);
-    if (featureFile === undefined) {
-        throw new Error(`feature ${featureId} not found under ${join(cwd, 'docs', 'features')}`);
-    }
-    const featureContent = readFileSync(featureFile, 'utf8');
-    const learningsPath = join(cwd, '.spur', 'context', 'learnings.md');
-    const learningsContent = existsSync(learningsPath) ? readFileSync(learningsPath, 'utf8') : undefined;
-
-    // 2. Before digest + RUNNING receipt (both copies) + artifact registration.
-    const beforeDigest = await mod.captureFeatureReceiptDigest(cwd, featureContent, learningsContent);
-    const receipt = await mod.startFeatureVerificationReceipt(nodeFsShim, runDir, {
+    const result = await mod.runFeatureVerification({
+        workdir: process.cwd(),
         featureId,
         runId,
-        workdir: cwd,
-        verifier: {
-            name: 'feature-verification',
-            sourcePath: selected.path,
-            layer: selected.layer,
-            definitionDigest: selected.digest,
-        },
-        verificationCmd: effectiveCmd,
-        inputDigest: beforeDigest,
+        cmdOverride,
+        // Operator-declared level (empty = derive from the pass) and the acknowledgement of a LOW
+        // level. Both ride the receipt, so the completion boundary reads them from the evidence
+        // rather than from whatever flags a later transition happens to pass.
+        confidenceOverride,
+        ackLowConfidence,
     });
-    const db = await mod.openInlineRunProjectDb(cwd);
-    try {
-        await new mod.ArtifactDao(db.adapter as never).record({
-            runId,
-            path: mod.featureReceiptPaths(runDir, featureId, runId).runScoped,
-            kind: 'feature-verification',
-        });
-    } finally {
-        db.close();
-    }
-
-    // 3. Run the effective command via the safe splitter (no `sh -c`).
-    const logPath = join(runDir, `${runId}-feature-verification.log`);
-    const launch = mod.splitLaunchCommand(effectiveCmd, 'feature-verification verificationCmd');
-    if ('error' in launch) {
-        await mod.completeFeatureVerificationReceipt(nodeFsShim, runDir, receipt, {
-            status: 'FAIL',
-            inputDigest: beforeDigest,
-        });
-        console.log(`feature-verification-steps: ${featureId} verification FAIL (${launch.error})`);
-        return;
-    }
-    const logFd = openSync(logPath, 'a');
-    try {
-        const result = spawnSync(launch.command, launch.leadingArgs, {
-            cwd,
-            stdio: ['ignore', logFd, logFd],
-            timeout: 4 * 60 * 60 * 1000,
-        });
-        const exit = result.status ?? 1;
-
-        // 4/5. After digest — a mismatch records FAIL (the pass did not verify
-        // the tree it left behind); otherwise the exit code decides.
-        const afterDigest = await mod.captureFeatureReceiptDigest(cwd, featureContent, learningsContent);
-        const status: 'PASS' | 'FAIL' = exit === 0 && afterDigest === beforeDigest ? 'PASS' : 'FAIL';
-        await mod.completeFeatureVerificationReceipt(nodeFsShim, runDir, receipt, { status, inputDigest: afterDigest });
-        console.log(`feature-verification-steps: ${featureId} verification ${status} (run ${runId}, log ${logPath})`);
-    } finally {
-        closeSync(logFd);
-    }
+    console.log(`feature-verification-steps: ${featureId} ${result.message}`);
 }
 
 function main(): void {
+    // The portable Node twin has no workspace imports; the generated bundle still uses Spur's Bun
+    // runtime (bun:sqlite stays external by design). Re-enter Bun before any app import; fail closed
+    // when Bun is missing — the verifier must not report a pass it could not run.
+    if (!process.versions.bun) {
+        const child = spawnSync('bun', [fileURLToPath(import.meta.url), ...process.argv.slice(2)], {
+            stdio: 'inherit',
+        });
+        if (child.error) console.error(`feature-verification-steps requires Bun on PATH: ${child.error.message}`);
+        process.exit(child.status ?? 1);
+    }
     const args = process.argv.slice(2);
     const command = args[0];
     const flag = (name: string): string => {
@@ -268,7 +139,10 @@ function main(): void {
         return i >= 0 && i + 1 < args.length ? (args[i + 1] ?? '') : '';
     };
     if (command !== 'verify') {
-        console.error('Usage: feature-verification-steps.ts verify --feature-id <id> --run-id <id> [--cmd <command>]');
+        console.error(
+            'Usage: feature-verification-steps.ts verify --feature-id <id> --run-id <id> [--cmd <command>] ' +
+                '[--confidence HIGH|MEDIUM|LOW] [--ack-low-confidence]',
+        );
         process.exit(2);
     }
     verify(
@@ -277,6 +151,8 @@ function main(): void {
         flag('--cmd') || getEnvVar('verificationCmd') || '',
         flag('--spur-bin') || getEnvVar('spurBin') || '',
         resolveModuleMode(flag('--module-mode')),
+        flag('--confidence') || getEnvVar('confidence') || '',
+        args.includes('--ack-low-confidence') || getEnvVar('ackLowConfidence') === 'true',
     )
         .then(() => process.exit(0))
         .catch((err: unknown) => {

package/plugins/sp/scripts/history-anatomy-cache.mjs

@@ -908,24 +908,24 @@ ${reasons}`, stderr: "" };
   process.exitCode = exitCode;
 }
 export {
-  validateSelector,
-  stampReport,
-  semanticArtifactDigest,
-  runCacheCli,
-  resolvePaths,
-  renderProvenanceFrontmatter,
-  refreshReport,
-  publishAtomically,
-  probe,
-  porcelainPaths,
-  parseProvenance,
-  logicDigest,
-  importedSnapshotAsOf,
-  diffPorcelain,
-  decideCache,
-  checkReportStructure,
-  buildProvenance,
-  bannerLine,
+  FINDING_FIELDS,
   REPORT_SECTIONS,
-  FINDING_FIELDS
+  bannerLine,
+  buildProvenance,
+  checkReportStructure,
+  decideCache,
+  diffPorcelain,
+  importedSnapshotAsOf,
+  logicDigest,
+  parseProvenance,
+  porcelainPaths,
+  probe,
+  publishAtomically,
+  refreshReport,
+  renderProvenanceFrontmatter,
+  resolvePaths,
+  runCacheCli,
+  semanticArtifactDigest,
+  stampReport,
+  validateSelector
 };

package/plugins/sp/scripts/idea-handoff.mjs

@@ -26,7 +26,7 @@ async function main(argv, env = getEnvVars()) {
   process.exit(await main(process.argv.slice(2)));
 }
 export {
-  main,
+  IDEA_HANDOFF_USAGE,
   loadHandoffLib,
-  IDEA_HANDOFF_USAGE
+  main
 };

package/plugins/sp/scripts/inline-run-dispatch.mjs

@@ -3,9 +3,7 @@
 
 // plugins/sp/scripts/inline-run-dispatch.ts
 import { spawnSync } from "child_process";
-import { existsSync } from "fs";
-import { dirname, join, resolve } from "path";
-import { fileURLToPath } from "url";
+import { fileURLToPath as fileURLToPath2 } from "url";
 
 // plugins/sp/lib/env.ts
 function getEnvVar(name, fallback) {
@@ -14,6 +12,28 @@ function getEnvVar(name, fallback) {
 }
 
 // plugins/sp/lib/inline-run-app.ts
+import { existsSync } from "node:fs";
+import { dirname, join, resolve } from "node:path";
+import { fileURLToPath } from "node:url";
+function resolveAppEntry(spurBin) {
+  const fallback = fileURLToPath(new URL("../../../apps/cli/src/index.ts", import.meta.url));
+  const candidates = spurBin !== "" ? [spurBin] : [fallback];
+  for (const candidate of candidates) {
+    const tokens = candidate.split(/\s+/).filter(Boolean);
+    const mainModule = [...tokens].reverse().find((t) => t.endsWith(".ts"));
+    if (mainModule === undefined || !existsSync(mainModule))
+      continue;
+    const repoRoot = resolve(dirname(mainModule), "..", "..", "..");
+    const appEntry = join(repoRoot, "packages", "app", "src", "index.ts");
+    if (existsSync(appEntry))
+      return { entry: appEntry, portable: false };
+  }
+  const entry = fileURLToPath(new URL("../lib/inline-run.generated.mjs", import.meta.url));
+  if (!existsSync(entry)) {
+    throw new Error("inline application bundle is missing — rebuild/install the sp plugin before running inline");
+  }
+  return { entry, portable: true };
+}
 async function loadInlineApp(spurBin, resolveAppEntry, required) {
   const { entry, portable } = resolveAppEntry(spurBin);
   const app = await import(entry);
@@ -36,28 +56,9 @@ function usage() {
   process.exit(2);
 }
 var SAFE_RUN_ID_RE = /^[A-Za-z0-9][A-Za-z0-9._-]*$/;
-function resolveAppEntry(spurBin) {
-  const fallback = fileURLToPath(new URL("../../../apps/cli/src/index.ts", import.meta.url));
-  const candidates = spurBin !== "" ? [spurBin] : [fallback];
-  for (const candidate of candidates) {
-    const tokens = candidate.split(/\s+/).filter(Boolean);
-    const mainModule = [...tokens].reverse().find((t) => t.endsWith(".ts"));
-    if (mainModule === undefined || !existsSync(mainModule))
-      continue;
-    const repoRoot = resolve(dirname(mainModule), "..", "..", "..");
-    const appEntry = join(repoRoot, "packages", "app", "src", "index.ts");
-    if (existsSync(appEntry))
-      return { entry: appEntry, portable: false };
-  }
-  const entry = fileURLToPath(new URL("../lib/inline-run.generated.mjs", import.meta.url));
-  if (!existsSync(entry)) {
-    throw new Error("inline application bundle is missing \u2014 rebuild/install the sp plugin before running inline");
-  }
-  return { entry, portable: true };
-}
 async function main() {
   if (!process.versions.bun) {
-    const child = spawnSync("bun", [fileURLToPath(import.meta.url), ...process.argv.slice(2)], {
+    const child = spawnSync("bun", [fileURLToPath2(import.meta.url), ...process.argv.slice(2)], {
       stdio: "inherit"
     });
     if (child.error)
@@ -113,7 +114,7 @@ async function main() {
   }
   if (decision.trim() === "" || text === "" === (textFile === ""))
     usage();
-  const { app: lib } = await loadInlineApp(spurBin, () => ({ entry: fileURLToPath(new URL("../lib/inline-run.generated.mjs", import.meta.url)), portable }), ["loadSpurConfig"]);
+  const { app: lib } = await loadInlineApp(spurBin, () => ({ entry: fileURLToPath2(new URL("../lib/inline-run.generated.mjs", import.meta.url)), portable }), ["loadSpurConfig"]);
   const spurConfig = await lib.loadSpurConfig(process.cwd(), portable ? { embeddedSchemas: lib.EMBEDDED_SPUR_SCHEMAS } : undefined);
   process.exit(await app.runInlineRunDispatchFailure({
     runId,