@gobing-ai/spur 0.4.2 → 0.4.4

package/plugins/sp/scripts/run-summary.ts

@@ -4,9 +4,10 @@
  * (`--no-summary` skips it). Inputs: one or more `spur workflow progress <run-id> --json` files
  * (`--progress [<label>=]<file>`) and the host transcript (resolved like session-timeline, or
  * `--transcript`), OR the close-written per-run summary files (`--rollup [<label>=]<file>`, 1146 R3).
- * Measurement and rendering live in `../lib/run-summary-core` (ADR-130 glue budget); this script is
- * argv parsing and dispatch. Reporting only: no transcript or no timed attempts → an `n/a` result,
- * exit 0. Node builtins only.
+ * Measurement lives in `packages/app/src/workflow/run-summary.ts` (reached through the generated
+ * pure bundle entry); presentation and host IO live in `../lib/run-summary-core` (ADR-130 glue
+ * budget). This script is argv parsing and dispatch. Reporting only: no transcript or no timed
+ * attempts → an `n/a` result, exit 0. Node builtins only.
  */
 import { readFileSync } from 'node:fs';
 import { getEnvVars } from '../lib/env';
@@ -18,7 +19,7 @@ import {
     renderRollupMarkdown,
     renderSummaryMarkdown,
 } from '../lib/run-summary-core';
-import { resolveTranscript } from '../lib/transcript';
+import { parseRows, resolveTranscript } from '../lib/transcript';
 
 // Re-exported so the suite and any consumer keep one import path for the whole surface.
 export * from '../lib/run-summary-core';
@@ -90,7 +91,8 @@ export function main(
             const [label, file] = eq > 0 ? [arg.slice(0, eq), arg.slice(eq + 1)] : [undefined, arg];
             return { label, progress: JSON.parse(readFileSync(file, 'utf8')) as Progress };
         });
-        const summary = buildRunSummary(readFileSync(resolved.path, 'utf8').split('\n'), inputs, since);
+        const { rows, skippedLines } = parseRows(readFileSync(resolved.path, 'utf8').split('\n'));
+        const summary = buildRunSummary(rows, inputs, { since, skippedLines });
         summary.gate = gateFromReceipt(process.cwd(), inputs[0]?.progress.runId ?? '');
         write(
             `${markdown ? renderSummaryMarkdown(summary) : JSON.stringify({ ...summary, transcript: resolved.path })}\n`,

package/plugins/sp/scripts/script-root.mjs

@@ -119,11 +119,11 @@ function main(argv, env = getEnvVars(), options = {}) {
   process.exit(main(process.argv.slice(2)));
 }
 export {
-  runScriptRoot,
-  main,
-  digestScriptSet,
-  SOURCE_REPO_MARKER,
-  SCRIPT_ROOT_USAGE,
+  PROJECT_SCRIPTS_DIR,
   SCRIPT_ROOT_TWIN_REL,
-  PROJECT_SCRIPTS_DIR
+  SCRIPT_ROOT_USAGE,
+  SOURCE_REPO_MARKER,
+  digestScriptSet,
+  main,
+  runScriptRoot
 };

package/plugins/sp/scripts/session-timeline.mjs

@@ -13,9 +13,12 @@ function getEnvVars() {
 import { existsSync, readdirSync } from "node:fs";
 import { homedir } from "node:os";
 import { join } from "node:path";
-var SESSION_ID = /^[A-Za-z0-9_-]+$/;
-var OPERATOR_TOOLS = new Set(["AskUserQuestion", "ask_user_question"]);
-var PI_ROLES = new Set(["user", "assistant", "toolResult"]);
+
+// plugins/sp/lib/plan-projection.generated.mjs
+var NON_ABORTING_PREFLIGHT_CODES = new Set([
+  "L4.scenario-unverified",
+  "L4.verifying-incomplete-tasks"
+]);
 var zeroTokens = () => ({ input: 0, cacheCreate: 0, cacheRead: 0, output: 0 });
 function formatDuration(ms) {
   const s = Math.round(ms / 1000);
@@ -35,6 +38,23 @@ function formatTokenSplit(t) {
   const nonCached = t.input + t.cacheCreate + t.output;
   return `${formatTokens(nonCached + t.cacheRead)} / ${formatTokens(nonCached)}`;
 }
+var OPERATOR_TOOLS = new Set(["AskUserQuestion", "ask_user_question"]);
+function firstTextContent(row) {
+  const content = row.message?.content;
+  if (typeof content === "string")
+    return content;
+  if (!Array.isArray(content))
+    return;
+  return content.find((b) => b.type === "text")?.text;
+}
+function skillInvocationPrompt(text) {
+  const name = /^\s*<skill name="([^"]+)"/.exec(text)?.[1];
+  if (name === undefined)
+    return;
+  const close = text.lastIndexOf("</skill>");
+  const args = close < 0 ? "" : text.slice(close + "</skill>".length).trim();
+  return args === "" ? `/${name}` : `/${name} ${args}`;
+}
 function promptText(row) {
   if (row.type === "custom_message") {
     if (row.display === false)
@@ -59,22 +79,6 @@ function promptText(row) {
     return;
   return content.find((b) => b.type === "text")?.text;
 }
-function firstTextContent(row) {
-  const content = row.message?.content;
-  if (typeof content === "string")
-    return content;
-  if (!Array.isArray(content))
-    return;
-  return content.find((b) => b.type === "text")?.text;
-}
-function skillInvocationPrompt(text) {
-  const name = /^\s*<skill name="([^"]+)"/.exec(text)?.[1];
-  if (name === undefined)
-    return;
-  const close = text.lastIndexOf("</skill>");
-  const args = close < 0 ? "" : text.slice(close + "</skill>".length).trim();
-  return args === "" ? `/${name}` : `/${name} ${args}`;
-}
 function sumTokens(all) {
   const total = zeroTokens();
   for (const t of all)
@@ -103,21 +107,21 @@ function accumulate(acc, row, ts) {
   if (row.type === "message") {
     const m = row.message;
     if (m?.role === "assistant") {
-      const blocks2 = Array.isArray(m.content) ? m.content : [];
-      for (const b of blocks2) {
+      const blocks = Array.isArray(m.content) ? m.content : [];
+      for (const b of blocks) {
         if (b.type === "toolCall" && b.id) {
           acc.toolIds.add(b.id);
           if (b.name && OPERATOR_TOOLS.has(b.name))
             acc.asks.set(b.id, ts);
         }
       }
-      const u2 = m.usage;
-      if (u2 && row.id)
+      const u = m.usage;
+      if (u && row.id)
         acc.messages.set(row.id, {
-          input: u2.input ?? 0,
-          cacheCreate: u2.cacheWrite ?? 0,
-          cacheRead: u2.cacheRead ?? 0,
-          output: u2.output ?? 0
+          input: u.input ?? 0,
+          cacheCreate: u.cacheWrite ?? 0,
+          cacheRead: u.cacheRead ?? 0,
+          output: u.output ?? 0
         });
     } else if (m?.role === "toolResult" && m.toolCallId && acc.asks.has(m.toolCallId)) {
       acc.askMs += ts - (acc.asks.get(m.toolCallId) ?? ts);
@@ -146,6 +150,29 @@ function accumulate(acc, row, ts) {
     });
   }
 }
+var SHELL_TOOLS = new Set(["bash", "shell", "exec", "exec_command", "run_command", "command"]);
+var SUBAGENT_TOOLS = new Set(["agent", "task", "invoke_subagent", "subagent", "dispatch_agent"]);
+var LOWERCASE_OPERATOR_TOOLS = new Set(["askuserquestion", "ask_user_question"]);
+var SENSITIVE_PREFIXES = ["drizzle/", "packages/config/", ".github/", "plugins/sp/hooks/"];
+var SENSITIVE_GLOBS = ["apps/server/src/**/auth*", "**/*secret*", "**/*.sql"];
+function globToRegex(glob) {
+  const escaped = glob.replace(/[.+^${}()|[\]\\]/g, "\\$&").replaceAll("**/", "\x00").replaceAll("**", "\x01").replaceAll("*", "[^/]*").replaceAll("\x00", "(?:.*/)?").replaceAll("\x01", ".*");
+  return new RegExp(`^${escaped}$`, "s");
+}
+var SENSITIVE_MATCHERS = [
+  ...SENSITIVE_PREFIXES.map((prefix) => ({
+    label: prefix,
+    test: (path) => path.startsWith(prefix)
+  })),
+  ...SENSITIVE_GLOBS.map((glob) => {
+    const regex = globToRegex(glob);
+    return { label: glob, test: (path) => regex.test(path) };
+  })
+];
+
+// plugins/sp/lib/transcript.ts
+var SESSION_ID = /^[A-Za-z0-9_-]+$/;
+var PI_ROLES = new Set(["user", "assistant", "toolResult"]);
 function sniffFormat(rows) {
   for (const row of rows) {
     if (row.type === "message" && PI_ROLES.has(row.message?.role ?? ""))
@@ -320,13 +347,13 @@ function main(argv, env = getEnvVars(), write = (s) => process.stdout.write(s),
 }
 process.exit(main(process.argv.slice(2)));
 export {
-  zeroSegmentReason,
-  resolveTranscript,
-  parseGroups,
-  main,
-  formatTokens,
-  formatTokenSplit,
-  formatDuration,
+  SESSION_TIMELINE_USAGE,
   buildTimeline,
-  SESSION_TIMELINE_USAGE
+  formatDuration,
+  formatTokenSplit,
+  formatTokens,
+  main,
+  parseGroups,
+  resolveTranscript,
+  zeroSegmentReason
 };

package/plugins/sp/scripts/task-diffstat.mjs

@@ -11,7 +11,15 @@ function getEnvVars() {
   return process.env;
 }
 
-// plugins/sp/scripts/task-diffstat.ts
+// plugins/sp/lib/plan-projection.generated.mjs
+var NON_ABORTING_PREFLIGHT_CODES = new Set([
+  "L4.scenario-unverified",
+  "L4.verifying-incomplete-tasks"
+]);
+var OPERATOR_TOOLS = new Set(["AskUserQuestion", "ask_user_question"]);
+var SHELL_TOOLS = new Set(["bash", "shell", "exec", "exec_command", "run_command", "command"]);
+var SUBAGENT_TOOLS = new Set(["agent", "task", "invoke_subagent", "subagent", "dispatch_agent"]);
+var LOWERCASE_OPERATOR_TOOLS = new Set(["askuserquestion", "ask_user_question"]);
 var SENSITIVE_PREFIXES = ["drizzle/", "packages/config/", ".github/", "plugins/sp/hooks/"];
 var SENSITIVE_GLOBS = ["apps/server/src/**/auth*", "**/*secret*", "**/*.sql"];
 function globToRegex(glob) {
@@ -32,6 +40,8 @@ function sensitiveReasonForPath(path) {
   const match = SENSITIVE_MATCHERS.find((entry) => entry.test(path));
   return match ? `matches sensitive pattern ${match.label}` : null;
 }
+
+// plugins/sp/scripts/task-diffstat.ts
 function defaultGitRunner(cwd) {
   return (args) => {
     const run = spawnSync("git", args, { cwd, encoding: "utf8" });
@@ -74,9 +84,9 @@ function runDiffstat(env, options = {}, git = defaultGitRunner(options.cwd)) {
   const failSafe = (reason) => {
     process.stderr.write(`task-diffstat: ${reason} \u2014 failing safe (sensitive)
 `);
-    const row2 = { files: 0, insertions: 0, deletions: 0, paths: [], sensitive: true };
-    writeArtifact(abs(relResult), row2);
-    return { ...row2, resultFile: relResult, exitCode: 0 };
+    const row = { files: 0, insertions: 0, deletions: 0, paths: [], sensitive: true };
+    writeArtifact(abs(relResult), row);
+    return { ...row, resultFile: relResult, exitCode: 0 };
   };
   let stdoutIsArtifact = false;
   try {
@@ -162,10 +172,10 @@ function main(argv, env = getEnvVars(), options = {}) {
   process.exit(main(process.argv.slice(2)));
 }
 export {
-  sensitiveReasonForPath,
-  runDiffstat,
-  main,
-  TASK_DIFFSTAT_USAGE,
+  SENSITIVE_GLOBS,
   SENSITIVE_PREFIXES,
-  SENSITIVE_GLOBS
+  TASK_DIFFSTAT_USAGE,
+  main,
+  runDiffstat,
+  sensitiveReasonForPath
 };

package/plugins/sp/scripts/task-diffstat.ts

@@ -65,45 +65,14 @@ export interface DiffstatResult extends Diffstat {
     exitCode: number;
 }
 
-/**
- * Sensitive paths (0943 R2c): any changed path under one of these forces the safety lane
- * before the `task-triage` decide runs — sensitive work is never lane-negotiated with a
- * model. Frozen list: `drizzle/`, `packages/config/`, auth-prefixed basenames anywhere
- * under the server src tree, `*secret*` basenames, `.github/`, `plugins/sp/hooks/`, and
- * any `*.sql` — spelled out in SENSITIVE_PREFIXES / SENSITIVE_GLOBS below (kept as data,
- * not prose, so the `*` / `/` sequences survive the doc comment).
- */
-export const SENSITIVE_PREFIXES = ['drizzle/', 'packages/config/', '.github/', 'plugins/sp/hooks/'] as const;
-export const SENSITIVE_GLOBS = ['apps/server/src/**/auth*', '**/*secret*', '**/*.sql'] as const;
-
-// Glob → RegExp: `**` + `/` matches any-or-no directories, bare `**` any characters, `*` within one segment.
-function globToRegex(glob: string): RegExp {
-    const escaped = glob
-        .replace(/[.+^${}()|[\]\\]/g, '\\$&')
-        .replaceAll('**/', '\u0000')
-        .replaceAll('**', '\u0001')
-        .replaceAll('*', '[^/]*')
-        .replaceAll('\u0000', '(?:.*/)?')
-        .replaceAll('\u0001', '.*');
-    return new RegExp(`^${escaped}$`, 's');
-}
-
-const SENSITIVE_MATCHERS: Array<{ label: string; test: (path: string) => boolean }> = [
-    ...SENSITIVE_PREFIXES.map((prefix) => ({
-        label: prefix,
-        test: (path: string): boolean => path.startsWith(prefix),
-    })),
-    ...SENSITIVE_GLOBS.map((glob) => {
-        const regex = globToRegex(glob);
-        return { label: glob, test: (path: string): boolean => regex.test(path) };
-    }),
-];
-
-/** Sensitive-pattern match for one path, or null — mirrors wrapup-drift-probe's driftReasonForPath. */
-export function sensitiveReasonForPath(path: string): string | null {
-    const match = SENSITIVE_MATCHERS.find((entry) => entry.test(path));
-    return match ? `matches sensitive pattern ${match.label}` : null;
-}
+// Task 1176: the sensitive-path policy (0943 R2c) moved to the workflow/task owner —
+// `packages/app/src/workflow/task-triage.ts`, reached through the generated pure bundle. That policy
+// still forces the safety lane for any changed path under the frozen sensitive list before the
+// `task-triage` decide runs, so sensitive work is never lane-negotiated with a model; this entry
+// keeps git capture and the output artifact, and re-exports the policy for existing callers.
+import { SENSITIVE_GLOBS, SENSITIVE_PREFIXES, sensitiveReasonForPath } from '../lib/plan-projection.generated.mjs';
+
+export { SENSITIVE_GLOBS, SENSITIVE_PREFIXES, sensitiveReasonForPath };
 
 function defaultGitRunner(cwd?: string): GitRunner {
     return (args: string[]): GitRunResult => {

package/plugins/sp/scripts/workflow-step-profile.mjs

@@ -322,17 +322,17 @@ function main(argv) {
   process.exit(main(process.argv.slice(2)));
 }
 export {
-  runStepProfileCli,
-  rowFlags,
-  parseStepProfileCliArgs,
-  nonDryRuns,
-  nearestRankP50,
-  main,
-  formatStepProfileHuman,
-  extractExecutions,
-  buildStepProfile,
-  buildRows,
-  STEP_PROFILE_USAGE,
+  DEFAULT_LAST,
   DEFAULT_WINDOW_SEC,
-  DEFAULT_LAST
+  STEP_PROFILE_USAGE,
+  buildRows,
+  buildStepProfile,
+  extractExecutions,
+  formatStepProfileHuman,
+  main,
+  nearestRankP50,
+  nonDryRuns,
+  parseStepProfileCliArgs,
+  rowFlags,
+  runStepProfileCli
 };

package/plugins/sp/scripts/wrapup-drift-probe.mjs

@@ -114,13 +114,13 @@ function runDriftProbe(env, options = {}, spur = defaultSpurRunner(env, options.
   mkdirSync(abs(join(".spur", "run")), { recursive: true });
   writeFileSync(abs(relModeFile), `
 `);
-  const finish = (clean, reasons2, paths) => {
-    writeFileSync(abs(relProbeFile), `${JSON.stringify({ clean, reasons: reasons2, paths })}
+  const finish = (clean, reasons, paths) => {
+    writeFileSync(abs(relProbeFile), `${JSON.stringify({ clean, reasons, paths })}
 `);
     writeFileSync(abs(relModeFile), clean ? `fast
 ` : `
 `);
-    return { clean, reasons: reasons2, paths, probeFile: relProbeFile, modeFile: relModeFile, exitCode: 0 };
+    return { clean, reasons, paths, probeFile: relProbeFile, modeFile: relModeFile, exitCode: 0 };
   };
   let tasks;
   try {
@@ -180,11 +180,11 @@ function main(argv, env = getEnvVars(), options = {}) {
   process.exit(main(process.argv.slice(2)));
 }
 export {
-  solutionSectionOf,
-  runDriftProbe,
-  main,
-  driftReasonForPath,
-  changedPathsOf,
+  DOC_OWNED_SURFACES,
   WRAPUP_DRIFT_PROBE_USAGE,
-  DOC_OWNED_SURFACES
+  changedPathsOf,
+  driftReasonForPath,
+  main,
+  runDriftProbe,
+  solutionSectionOf
 };

package/plugins/sp/scripts/wrapup-steps.mjs

@@ -296,7 +296,7 @@ function runMetrics(env, options = {}) {
     const parsed = JSON.parse(shown.stdout);
     const frontmatter = parsed.frontmatter !== null && typeof parsed.frontmatter === "object" ? parsed.frontmatter : {};
     const featureId = String(jqPick(frontmatter.feature_id, parsed.feature_id, ""));
-    const status2 = String(jqPick(frontmatter.status, parsed.status, "unknown"));
+    const status = String(jqPick(frontmatter.status, parsed.status, "unknown"));
     const durable = join(".spur", "memory", "evidence", `${wbs}-verdict.json`);
     const hasDurable = existsSync(abs(durable));
     const verdictPath = hasDurable ? durable : join(".spur", "run", `${wbs}-verdict.json`);
@@ -308,7 +308,7 @@ function runMetrics(env, options = {}) {
 `);
     }
     const timestamp = new Date().toISOString().replace(/\.\d{3}Z$/, "Z");
-    const row = { wbs, feature_id: featureId, status: status2, verdict, timestamp };
+    const row = { wbs, feature_id: featureId, status, verdict, timestamp };
     try {
       appendFileSync(abs(relMetricsFile), `${JSON.stringify(row)}
 `);
@@ -600,28 +600,28 @@ function main(argv, env = getEnvVars(), options = {}) {
   process.exit(main(process.argv.slice(2)));
 }
 export {
-  writeRouteReason,
-  verdictFromTestingSection,
-  taskStatusOf,
-  runMetrics,
-  runFeatureTransition,
-  runDocSyncSnapshot,
-  runDocSyncScope,
-  runDocSupersessionCheck,
-  resolveTasks,
-  preflightFeature,
-  porcelainPath,
-  main,
-  jqPick,
-  isDocSyncAllowedPath,
-  docSyncScopeViolations,
-  classifySync,
-  WRAPUP_STEPS_USAGE,
-  WBS_PATTERN,
-  SUPERSESSION_PIN,
-  SNAPSHOT_MISSING,
-  GIT_UNAVAILABLE_MARKER,
-  DOC_SYNC_SUPERSESSION_STATUS_SUFFIX,
+  DOC_SYNC_SCOPE_STATUS_SUFFIX,
   DOC_SYNC_SNAPSHOT_SUFFIX,
-  DOC_SYNC_SCOPE_STATUS_SUFFIX
+  DOC_SYNC_SUPERSESSION_STATUS_SUFFIX,
+  GIT_UNAVAILABLE_MARKER,
+  SNAPSHOT_MISSING,
+  SUPERSESSION_PIN,
+  WBS_PATTERN,
+  WRAPUP_STEPS_USAGE,
+  classifySync,
+  docSyncScopeViolations,
+  isDocSyncAllowedPath,
+  jqPick,
+  main,
+  porcelainPath,
+  preflightFeature,
+  resolveTasks,
+  runDocSupersessionCheck,
+  runDocSyncScope,
+  runDocSyncSnapshot,
+  runFeatureTransition,
+  runMetrics,
+  taskStatusOf,
+  verdictFromTestingSection,
+  writeRouteReason
 };

package/plugins/sp/skills/code-implementation/SKILL.md

@@ -82,6 +82,12 @@ not have and work you were not asked to do.
 - **Never implement a requirement belonging to another WBS**, even when it looks like a
   prerequisite. If the target genuinely cannot proceed without it, stop and say so — a blocked task
   is a cheap finding; a two-task diff costs the reverts.
+- **Flip the target's `## Plan` boxes as each step completes.** They are this pass's progress
+  ledger, and the record-time residual sweep treats an *unchecked* Plan box as blocking: it
+  downgrades the verdict to PARTIAL and closes the `done` gate
+  (`docs/design/task-residual-sweep.md`), which costs a remediation cycle and a manual re-record.
+  Leave every finished step ticked through `spur task update <wbs> --section Plan --from-file`, and
+  if you deliberately skipped one, say so in the Solution change map.
 
 Why this is a rule and not a nicety: driving task 0486 lost several hours to exactly this. Task 0485
 was committed but still `todo` in the tree, and two different executors (omp run `ca130182`, claude
@@ -165,7 +171,7 @@ that single full gate.
 1. The **changed-path matrix** below (narrow behavior tests + affected consumers);
 2. the resolved `quality-gate` script in `light` mode (source-repo probe, else the installed twin) (biome on changed files, per-workspace typecheck, rule presets `rules:pre`/`rules:post`, related tests).
 
-Neither step takes the host-wide full-gate lock. The full gate is named only for the pipeline's `test` and `test-recheck` hops.
+Neither step takes the full project gate. The full gate is named only for the pipeline's `test` and `test-recheck` hops.
 
 | Changed surface | Required targeted tests | Required typechecks |
 | --- | --- | --- |

package/plugins/sp/skills/code-verification/references/secu-review.md

@@ -92,7 +92,8 @@ Before declaring a task `done`, run this lightweight checklist. It catches the m
 - [ ] Solution section contains `file:line` citations for every changed file.
 - [ ] API/library claims in changed docs carry a source citation (URL or `path:line`) and an honest
       confidence level (HIGH/MEDIUM/LOW) per source-driven-development; the deterministic advisory backstop is
-      the `cited-version-strings` / `cited-api-claims` rules (`.spur/rules/docs/sourced-api-claims.yaml`).
+      the `cited-version-strings` / `cited-api-claims` / `cited-api-claims-confidence` rules
+      (`.spur/rules/docs/sourced-api-claims.yaml`, run ad hoc — not wired into a preset).
 - [ ] Review section has P1–P4 findings table (even if all rows are empty — the table itself proves review happened).
 
 This checklist runs as part of the verify step when the task reaches `testing` status. It does not replace the formal gates — it augments them with between-pipeline hygiene checks.

package/plugins/sp/skills/code-verification/references/verdict-schema.md

@@ -202,6 +202,10 @@ citation in the SAME cell, or lint rejects the row with `evidence-citation` (blo
 - The rule is cell-local: a citation in another row or a "receipt above" cross-reference does not
   satisfy it. Marker-free receipts (test counts, reviewed-log notes) need no citation. The check is
   presence-only — which citation proves which claim is not deterministically decidable.
+- The same two predicates (`hasClaimMarker` / `hasCitationForm` in
+  `packages/app/src/services/verify-answer-lint.ts`) gate the review report's findings table through
+  `residual-scan review-gate` as the blocking `review-contract` category — one definition of
+  "external claim" and one set of accepted citation forms for both paths.
 
 ## Hedged evidence is rejected on MET rows
 

package/plugins/sp/skills/dogfood-testing/SKILL.md

@@ -82,11 +82,11 @@ The command forwards these via `$ARGUMENTS`:
 >   <!-- pipeline-tokens:end -->
 >   matched as a **distinct hyphen-word**
 >   (machine-checked by
->   [`detectPipelineDriving`](../../scripts/dogfood-testing/detect-pipeline-driving.ts);
+>   [`detectPipelineDriving`](../../lib/dogfood-pipeline.ts);
 >   see [§Pipeline-driving word-boundary contract](#pipeline-driving-word-boundary-contract))
 >   → `⚠ pipeline-driving testee detected; pass --max-retry 0 (observe-only) or --max-retry N (fix mode, tree mutation acknowledged)`.
 > - **Mutating `--fix` modes** — `--fix all` / `--fix blockers-first`, boundary-guarded via
->   [`hasMutatingFixMode`](../../scripts/dogfood-testing/detect-pipeline-driving.ts) (never matches
+>   [`hasMutatingFixMode`](../../lib/dogfood-pipeline.ts) (never matches
 >   `--fix none` / `--focus all` / `--prefix all`). No pipeline token required: a verify/review leg
 >   with `--fix all` mutates the tree on its own (0280 dogfood P2, task 0293). Honesty note:
 >   `--max-retry 0` here bounds **the driver only** — the testee still mutates the tree — so the

package/plugins/sp/skills/next-feature/SKILL.md

@@ -64,7 +64,7 @@ Run the steps in order. Each step's depth lives in its reference; this file is t
    change a frontier feature's status, the report **leads with the drift summary** ("sync first")
    and the ranking is computed over the *post-sync* status view. Details:
    [references/signal-derivation.md](references/signal-derivation.md) §0.
-1. **Assemble the candidate set.** `spur feature list --json`; drop `done`/`cancelled`, drop
+1. **Assemble the candidate set.** `spur feature list --json`; drop `done`/`cancelled`/`deprecated`, drop
    structural containers (has children, no own open tasks — defect D1), drop the map/feature that
    owns this investigation if present. The `group` tag is **not** a reliable container marker (D3).
 2. **Gate on actionability.** Read the frontier predicate **at runtime** from

package/plugins/sp/skills/next-router/SKILL.md

@@ -142,7 +142,8 @@ but redundant. See the glossary entry for the disambiguation in full.
 
 Never: reimplement the pipeline inside the router; default `todo` to `--mode full`; infer targets
 from git/chat; auto-`--merge` on wrap; auto-author rules; use `dev-runall` as the feature default;
-bypass lifecycle guards (`--no-lifecycle`) to force progress.
+bypass lifecycle guards (`--no-lifecycle`) to force progress; select a `deprecated` task for any
+lifecycle hop (TABLE A A10 — frozen work has no forward step; un-deprecate or cancel it first).
 
 ## Common Rationalizations
 
@@ -158,6 +159,7 @@ bypass lifecycle guards (`--no-lifecycle`) to force progress.
 - Dispatching more than one primary command in a single invocation.
 - `--auto` used to choose among HITL candidates.
 - A route that is not in TABLE A/B/C (invented dispatch targets).
+- A `deprecated` WBS routed into any lifecycle command instead of stopping (A10/ADR-137).
 - `--once` honored by merely skipping the re-invoke while leaving `--next` in the child argv.
 - Omitting the `dev-next:` prefix on stop/plan messages.
 

package/plugins/sp/skills/next-router/references/routing-table.md

@@ -54,7 +54,7 @@ it or when chaining (chain links already use `--auto` per existing refine→run
 
 ## 1. TABLE A — Task primary routes (corpus status)
 
-Statuses from `TASK_STATUSES`: backlog | todo | wip | testing | blocked | done | cancelled.
+Statuses from `TASK_STATUSES`: backlog | todo | wip | testing | blocked | done | cancelled | deprecated.
 
 | # | Precondition | Primary signal | Dispatch | probe | Chain on success? | Stop / notes |
 | --- | --- | --- | --- | --- | --- | --- |
@@ -67,8 +67,9 @@ Statuses from `TASK_STATUSES`: backlog | todo | wip | testing | blocked | done |
 | A7 | `status == blocked` | `task.show` + Notes/History for blocker text | `/sp:dev-handover "<blocker summary from Notes or status>"` | no | no | **STOP** after handover doc; human unblocks |
 | A8 | `status == done` | `task.show.status` | `/sp:dev-wrap <wbs>` (`--agent <value>` preserved when the originating command supplied it; omission remains omission) | no | **no** (wrap's `--merge` is irreversible HITL; never auto) | Operator may re-invoke with `--merge` explicitly later |
 | A9 | `status == cancelled` | `task.show.status` | *(none)* | no | no | **STOP** — no-op; print "cancelled — nothing to advance" |
+| A10 | `status == deprecated` | `task.show.status` | *(none)* | no | no | **STOP** — frozen and retained (ADR-137); nothing to advance. Print "deprecated — frozen; un-deprecate with `spur task update <wbs> todo`, or cancel it once removed". Never falls through to another row |
 
-**Priority when multiple TABLE A rows could match:** lowest row number wins (A1–A9 are mutually
+**Priority when multiple TABLE A rows could match:** lowest row number wins (A1–A10 are mutually
 exclusive by status except A2/A3 which split `todo`).
 
 ## 2. TABLE B — Feature-ID path (rollup)
@@ -84,7 +85,7 @@ When input is a feature id:
 | B4 | No frontier tasks AND `feature.status == backlog` AND AC placeholder/invalid | `feature check` / AC body | `/sp:dev-plan` continuation is not WBS-shaped — **STOP** with: run `/sp:dev-plan --feature <id>` or fix AC then `spur feature check <id>` | no | no | Planning-half entry needs a description; do not invent idea text |
 | B5 | No frontier tasks AND feature has valid AC but zero tasks | feature + empty task roster | **STOP** with: `/sp:dev-plan --feature <id>` (decompose/batch-create) | no | no | Avoid auto-running plan without operator description confirmation in v1 |
 | B6 | No frontier tasks AND all child tasks `done` AND feature in `active`\|`verifying` | task list all done | `/sp:dev-wrapall --feature <id>` (`--agent <value>` preserved when the originating command supplied it; omission remains omission) | no | no | Advances feature via wrapall guards; `--merge` never auto |
-| B7 | No frontier tasks AND mixed cancelled/done only | statuses | **STOP** — print summary; suggest feature status update manually | no | no | |
+| B7 | No frontier tasks AND mixed terminal only (any combination drawn from `cancelled`, `done`, `deprecated`) | statuses | **STOP** — print summary; suggest feature status update manually | no | no | |
 | B8 | `feature.status == blocked` | feature status | **STOP** — print feature blocked; do not pick tasks | no | no | |
 
 **Frontier selection algorithm (B3) — precise:**
@@ -101,6 +102,11 @@ if pick is null → TABLE B rows B4–B7
 else → TABLE A(pick)
 ```
 
+The candidate set is exactly the open statuses: `done`, `cancelled` **and `deprecated`** are never
+frontier candidates (ADR-137 — a frozen task is retained, not resumable), and a `deprecated`
+dependency is not a satisfied one, so it keeps its dependents out of the frontier exactly like any
+unfinished dep.
+
 ## 3. TABLE C — Light-gate short-circuit (probe=yes rows only)
 
 **Order is sequential short-circuit** (first match wins). Never parallel in v1 (simpler, lower

package/plugins/sp/skills/parallel-execution/references/dispatch-surface.md

@@ -167,7 +167,7 @@ rule at the source, so no per-path shim is needed:
 | `spur agent loop` | `AgentService.run` per drained iteration | Same resolution path as `spur agent run`; inherits its own `SPUR_ROLE` |
 | `spur serve` team supervisor → member | spawns `spur agent loop` | Member inherits the supervisor's `SPUR_ROLE` (recursive by construction) |
 | Native subagent fan-out (this skill's default) | in-session `Task()`/`Skill()` | In-session subagents share the host session; when they themselves dispatch, the host's role is already in the session env — the rule holds at the next `spur agent run` boundary |
-| `plugins/sp/evals/run-eval.ts` | `spawnSync('spur agent run', …)` per scenario | Out of scope: a top-level eval harness, not a fan-out — no dispatcher role exists to inherit; each scenario is an independent top-level run (documented, no shim) |
+| `scripts/commands/skill-eval.ts` | `spawnSync('spur agent run', …)` per scenario | Out of scope: a top-level eval harness, not a fan-out — no dispatcher role exists to inherit; each scenario is an independent top-level run (documented, no shim) |
 
 The inventory is recorded in `docs/04_DESIGN.md` § `spur agent run` envelope (`roleOrigin`).
 Paths that shell out to `spur agent run` without the rule would silently drop or double-attribute

package/plugins/sp/skills/source-driven-development/SKILL.md

@@ -101,10 +101,13 @@ line: `Verification: HIGH|MEDIUM|LOW — <first failing check and deviation, or
 - **Honest confidence** — the stated HIGH/MEDIUM/LOW matches the evidence: HIGH requires a check against the pinned source this session; MEDIUM/LOW items are labeled, and LOW is never presented as fact.
 - **HIGH** — all three checks pass. **MEDIUM** — coverage intact but some citations are off-version (latest docs for a pinned dependency) or secondary-source only. **LOW** — an API/library claim lacks any citation, or a LOW-confidence claim was asserted as fact.
 
-Deterministic backstop: the `cited-version-strings` / `cited-api-claims` rules
-(`.spur/rules/docs/sourced-api-claims.yaml`, run in `recommended-pre-check`) flag markdown lines that
-assert version strings or time-anchored API claims with no citation anchor on the same line. They
-are an info-severity advisory backstop for this contract (they do not gate; the checks above and the SECUA checklist are the enforcement points).
+Deterministic backstop: the `cited-version-strings`, `cited-api-claims` and
+`cited-api-claims-confidence` rules (`.spur/rules/docs/sourced-api-claims.yaml`) flag markdown lines
+that assert a version string or a time-anchored API claim with no citation anchor on the same line,
+and claim lines that carry no HIGH/MEDIUM/LOW level. They are an info-severity advisory backstop for
+this contract and are deliberately NOT wired into `recommended-pre-check` — run them ad hoc with
+`spur rule run --file .spur/rules/docs/sourced-api-claims.yaml`. The checks above and the SECUA
+checklist remain the enforcement points.
 
 ## Common Rationalizations
 

package/plugins/sp/skills/spur-cli/references/builder.md

@@ -8,8 +8,9 @@ see_also:
 # spur builder - release plumbing
 
 `spur builder` is the CLI for **version bumps and release tags**. It wraps the internal
-`spur-dev release` flow behind a public two-verb surface, promoted verbatim from
-`scripts/commands/release.ts` (now a thin forwarder to the same implementation). Package ids are
+`release-ops` implementation behind a public two-verb surface. The repo-local forwarder
+(`scripts/commands/release.ts`) and its `spur-dev` dispatcher cases were retired in task 1173; the
+root `bun run bump-ver` / `bun run drop-tags` names route to `spur builder` directly. Package ids are
 the unscoped short names (`@gobing-ai/spur` → `spur`); the released set and the aggregate tag are
 discovered from the repo's own workspace manifests, so the same code serves any git+semver
 monorepo.