@gobing-ai/spur 0.4.3 → 0.4.5

package/plugins/sp/lib/residual-scan.generated.mjs

@@ -21,14 +21,6 @@ function hasClaimMarker(evidence) {
 function hasCitationForm(evidence) {
   return CITATION_FORMS.some((re) => re.test(evidence));
 }
-var CONFIDENCE_LEVELS = ["HIGH", "MEDIUM", "LOW"];
-function extractAnswerConfidence(text) {
-  const matches = [...text.matchAll(/^\s*Confidence:\s*(\S+)\s*$/gim)];
-  if (matches.length !== 1)
-    return;
-  const value = (matches[0]?.[1] ?? "").toUpperCase();
-  return CONFIDENCE_LEVELS.includes(value) ? value : undefined;
-}
 
 // packages/app/src/services/residual-scan.ts
 var MARKER_PATTERN = /TODO|FIXME|XXX|HACK/;
@@ -202,13 +194,6 @@ function blockingReviewFindings(taskContent, deferrals) {
 }
 function reviewContractViolations(taskContent) {
   const violations = [];
-  const body = reviewBody(taskContent);
-  if (body !== null && extractAnswerConfidence(body.replace(/\*\*/g, "")) === undefined) {
-    violations.push({
-      location: "task-file:Review",
-      text: "Review report carries no single valid `**Confidence:** HIGH | MEDIUM | LOW` line — " + "state the level the report can defend (HIGH: every requirement row MET, every finding " + "dispositioned, evidence cited; MEDIUM/LOW: name the gap)."
-    });
-  }
   for (const row of parseReviewFindings(taskContent)) {
     if (hasClaimMarker(row.text) && !hasCitationForm(row.text)) {
       violations.push({
@@ -220,9 +205,10 @@ function reviewContractViolations(taskContent) {
   return violations;
 }
 function buildReviewGateArtifact(wbs, taskContent, deferrals) {
+  const contractViolations = reviewContractViolations(taskContent);
   const items = [
     ...blockingReviewFindings(taskContent, deferrals),
-    ...reviewContractViolations(taskContent).map((v) => ({
+    ...contractViolations.map((v) => ({
       id: makeItemId("review-contract", v.location, v.text),
       category: "review-contract",
       class: "blocking",
@@ -375,23 +361,23 @@ function parseScanArgs(argv, cwd, defaultTmpDir) {
   return mode === "" || wbs === "" ? null : { mode, wbs, spurBin, root, tmpDir };
 }
 export {
-  verdictDisagreementNote,
-  scanResiduals,
-  reviewContractViolations,
-  renderReport,
-  recordedVerdictPath,
-  parseScanArgs,
-  parseReviewFindings,
-  parseDiffMarkers,
-  parseDeferralEntries,
-  normalizeAnchor,
-  makeItemId,
-  locationOf,
-  foldVerdict,
-  findUncheckedBoxes,
-  classify,
-  buildReviewGateArtifact,
-  blockingReviewFindings,
+  ALLOW_PRAGMA,
   blockingAnchors,
-  ALLOW_PRAGMA
+  blockingReviewFindings,
+  buildReviewGateArtifact,
+  classify,
+  findUncheckedBoxes,
+  foldVerdict,
+  locationOf,
+  makeItemId,
+  normalizeAnchor,
+  parseDeferralEntries,
+  parseDiffMarkers,
+  parseReviewFindings,
+  parseScanArgs,
+  recordedVerdictPath,
+  renderReport,
+  reviewContractViolations,
+  scanResiduals,
+  verdictDisagreementNote
 };

package/plugins/sp/lib/step-profile.generated.mjs

@@ -162,13 +162,13 @@ function formatStepProfileHuman(profile) {
 `;
 }
 export {
-  rowFlags,
-  nonDryRuns,
-  nearestRankP50,
-  formatStepProfileHuman,
-  extractExecutions,
-  buildStepProfile,
-  buildRows,
+  DEFAULT_LAST,
   DEFAULT_WINDOW_SEC,
-  DEFAULT_LAST
+  buildRows,
+  buildStepProfile,
+  extractExecutions,
+  formatStepProfileHuman,
+  nearestRankP50,
+  nonDryRuns,
+  rowFlags
 };

package/plugins/sp/plugin.json

@@ -1,6 +1,6 @@
 {
     "name": "sp",
-    "version": "0.4.3",
+    "version": "0.4.5",
     "description": "Spur — a local-first harness engineering toolkit that wraps mainstream coding agents with constraint checking, workflow orchestration, and history analytics.",
     "extensions": {
         "pi": ["./hooks/pi/guard-extension.ts"]

package/plugins/sp/scripts/batch-plan.mjs

@@ -5,6 +5,12 @@
 import { readFileSync } from "fs";
 
 // plugins/sp/lib/plan-projection.generated.mjs
+function isTaskFrozen(status) {
+  return status?.toLowerCase() === "deprecated";
+}
+function undeprecateTaskCommand(wbs) {
+  return `spur task update ${wbs} todo`;
+}
 var NON_ABORTING_PREFLIGHT_CODES = new Set([
   "L4.scenario-unverified",
   "L4.verifying-incomplete-tasks"
@@ -55,6 +61,13 @@ function quickReadiness(input) {
       };
     }
   }
+  if (isTaskFrozen(status)) {
+    return {
+      action: "skipped",
+      code: "DEPRECATED",
+      reason: `quick-readiness: deprecated (frozen) — no ${operation} hop; un-deprecate with \`${undeprecateTaskCommand(input.wbs)}\` (${input.wbs})`
+    };
+  }
   if (status === "cancelled" || status === "done") {
     if (operation === "verify" && input.force === true) {
       return {
@@ -79,10 +92,12 @@ function quickReadiness(input) {
   if (operation === "run" && input.dependencies && input.dependencies.length > 0) {
     const unmet = input.dependencies.filter((d) => (input.depStatuses?.[d] ?? "missing").toLowerCase() !== "done");
     if (unmet.length > 0) {
+      const frozen = unmet.filter((d) => isTaskFrozen(input.depStatuses?.[d]));
+      const hint = frozen.length > 0 ? ` — ${frozen.map((d) => `${d} deprecated (frozen); re-point the edge or un-deprecate: \`${undeprecateTaskCommand(d)}\``).join("; ")}` : "";
       return {
         action: "blocked",
         code: "DEP",
-        reason: `quick-readiness: unmet deps — ${unmet.join(", ")} (${input.wbs})`,
+        reason: `quick-readiness: unmet deps — ${unmet.join(", ")} (${input.wbs})${hint}`,
         unmetDeps: unmet
       };
     }
@@ -167,6 +182,13 @@ function preflightTask(input) {
       reason: `dev-next: blocked — do not launch pipeline; human/handover first (${input.wbs})`
     };
   }
+  if (isTaskFrozen(status)) {
+    return {
+      action: "skip",
+      code: "DEPRECATED",
+      reason: `dev-next: deprecated (frozen) — un-deprecate first: ${undeprecateTaskCommand(input.wbs)} (${input.wbs})`
+    };
+  }
   if (status === "todo" || status === "backlog") {
     const unmet = deps.filter((d) => {
       const st = (depStatuses[d] ?? "missing").toLowerCase();
@@ -274,21 +296,21 @@ function accumulate(acc, row, ts) {
   if (row.type === "message") {
     const m = row.message;
     if (m?.role === "assistant") {
-      const blocks2 = Array.isArray(m.content) ? m.content : [];
-      for (const b of blocks2) {
+      const blocks = Array.isArray(m.content) ? m.content : [];
+      for (const b of blocks) {
         if (b.type === "toolCall" && b.id) {
           acc.toolIds.add(b.id);
           if (b.name && OPERATOR_TOOLS.has(b.name))
             acc.asks.set(b.id, ts);
         }
       }
-      const u2 = m.usage;
-      if (u2 && row.id)
+      const u = m.usage;
+      if (u && row.id)
         acc.messages.set(row.id, {
-          input: u2.input ?? 0,
-          cacheCreate: u2.cacheWrite ?? 0,
-          cacheRead: u2.cacheRead ?? 0,
-          output: u2.output ?? 0
+          input: u.input ?? 0,
+          cacheCreate: u.cacheWrite ?? 0,
+          cacheRead: u.cacheRead ?? 0,
+          output: u.output ?? 0
         });
     } else if (m?.role === "toolResult" && m.toolCallId && acc.asks.has(m.toolCallId)) {
       acc.askMs += ts - (acc.asks.get(m.toolCallId) ?? ts);
@@ -1039,36 +1061,36 @@ function main(argv) {
   process.exit(main(process.argv.slice(2)));
 }
 export {
-  zeroTokens,
-  validatePhaseTable,
-  taskPhaseChildren,
-  sumTokens,
-  sumSpans,
-  skillInvocationPrompt,
-  sensitiveReasonForPath,
-  scheduleBatch,
-  quickReadiness,
-  promptText,
-  preflightTask,
-  planLetter,
-  planChild,
-  newAcc,
-  main,
-  isCompaction,
-  insertOnEntry,
-  hostText,
-  hostStatus,
-  formatTokens,
-  formatTokenSplit,
-  formatDuration,
-  classifyFeaturePreflightFindings,
-  buildRunSummary,
-  buildPhasedPlan,
-  buildBatchPlan,
-  actorSplit,
-  accumulate,
-  SENSITIVE_PREFIXES,
-  SENSITIVE_GLOBS,
+  BATCH_PLAN_USAGE,
   NON_ABORTING_PREFLIGHT_CODES,
-  BATCH_PLAN_USAGE
+  SENSITIVE_GLOBS,
+  SENSITIVE_PREFIXES,
+  accumulate,
+  actorSplit,
+  buildBatchPlan,
+  buildPhasedPlan,
+  buildRunSummary,
+  classifyFeaturePreflightFindings,
+  formatDuration,
+  formatTokenSplit,
+  formatTokens,
+  hostStatus,
+  hostText,
+  insertOnEntry,
+  isCompaction,
+  main,
+  newAcc,
+  planChild,
+  planLetter,
+  preflightTask,
+  promptText,
+  quickReadiness,
+  scheduleBatch,
+  sensitiveReasonForPath,
+  skillInvocationPrompt,
+  sumSpans,
+  sumTokens,
+  taskPhaseChildren,
+  validatePhaseTable,
+  zeroTokens
 };

package/plugins/sp/scripts/batch-preflight.mjs

@@ -3,6 +3,12 @@ import { createRequire } from "node:module";
 var __require = /* @__PURE__ */ createRequire(import.meta.url);
 
 // plugins/sp/lib/plan-projection.generated.mjs
+function isTaskFrozen(status) {
+  return status?.toLowerCase() === "deprecated";
+}
+function undeprecateTaskCommand(wbs) {
+  return `spur task update ${wbs} todo`;
+}
 var NON_ABORTING_PREFLIGHT_CODES = new Set([
   "L4.scenario-unverified",
   "L4.verifying-incomplete-tasks"
@@ -53,6 +59,13 @@ function quickReadiness(input) {
       };
     }
   }
+  if (isTaskFrozen(status)) {
+    return {
+      action: "skipped",
+      code: "DEPRECATED",
+      reason: `quick-readiness: deprecated (frozen) — no ${operation} hop; un-deprecate with \`${undeprecateTaskCommand(input.wbs)}\` (${input.wbs})`
+    };
+  }
   if (status === "cancelled" || status === "done") {
     if (operation === "verify" && input.force === true) {
       return {
@@ -77,10 +90,12 @@ function quickReadiness(input) {
   if (operation === "run" && input.dependencies && input.dependencies.length > 0) {
     const unmet = input.dependencies.filter((d) => (input.depStatuses?.[d] ?? "missing").toLowerCase() !== "done");
     if (unmet.length > 0) {
+      const frozen = unmet.filter((d) => isTaskFrozen(input.depStatuses?.[d]));
+      const hint = frozen.length > 0 ? ` — ${frozen.map((d) => `${d} deprecated (frozen); re-point the edge or un-deprecate: \`${undeprecateTaskCommand(d)}\``).join("; ")}` : "";
       return {
         action: "blocked",
         code: "DEP",
-        reason: `quick-readiness: unmet deps — ${unmet.join(", ")} (${input.wbs})`,
+        reason: `quick-readiness: unmet deps — ${unmet.join(", ")} (${input.wbs})${hint}`,
         unmetDeps: unmet
       };
     }
@@ -165,6 +180,13 @@ function preflightTask(input) {
       reason: `dev-next: blocked — do not launch pipeline; human/handover first (${input.wbs})`
     };
   }
+  if (isTaskFrozen(status)) {
+    return {
+      action: "skip",
+      code: "DEPRECATED",
+      reason: `dev-next: deprecated (frozen) — un-deprecate first: ${undeprecateTaskCommand(input.wbs)} (${input.wbs})`
+    };
+  }
   if (status === "todo" || status === "backlog") {
     const unmet = deps.filter((d) => {
       const st = (depStatuses[d] ?? "missing").toLowerCase();
@@ -332,7 +354,7 @@ function runPreflightCli(argv) {
     return { exitCode: 0, stdout: body, stderr: "" };
   }
   if (args.operation !== null) {
-    const result2 = quickReadiness({
+    const result = quickReadiness({
       wbs: args.wbs,
       status: args.status,
       operation: args.operation,
@@ -343,14 +365,14 @@ function runPreflightCli(argv) {
       ...args.presentSections.length > 0 ? { presentSections: args.presentSections } : {},
       ...args.force ? { force: true } : {}
     });
-    const runnable = result2.action === "runnable" || result2.action === "needs-refinement";
+    const runnable = result.action === "runnable" || result.action === "needs-refinement";
     if (args.json) {
-      return { exitCode: runnable ? 0 : 2, stdout: `${JSON.stringify(result2, null, 2)}
+      return { exitCode: runnable ? 0 : 2, stdout: `${JSON.stringify(result, null, 2)}
 `, stderr: "" };
     }
     return {
       exitCode: runnable ? 0 : 2,
-      stdout: `${result2.action}${result2.code ? ` ${result2.code}` : ""}: ${result2.reason}
+      stdout: `${result.action}${result.code ? ` ${result.code}` : ""}: ${result.reason}
 `,
       stderr: ""
     };
@@ -390,12 +412,12 @@ function runPreflightCli(argv) {
   process.exit(exitCode);
 }
 export {
-  runPreflightCli,
-  recoveryHint,
-  quickReadiness,
-  preflightTask,
-  parsePreflightCliArgs,
-  classifyFeaturePreflightFindings,
+  NON_ABORTING_PREFLIGHT_CODES,
   PREFLIGHT_CLI_USAGE,
-  NON_ABORTING_PREFLIGHT_CODES
+  classifyFeaturePreflightFindings,
+  parsePreflightCliArgs,
+  preflightTask,
+  quickReadiness,
+  recoveryHint,
+  runPreflightCli
 };

package/plugins/sp/scripts/commit-guard.mjs

@@ -206,11 +206,11 @@ function main(argv, options = {}) {
   process.exit(main(process.argv.slice(2)));
 }
 export {
-  runStart,
-  runStage,
-  runCheck,
-  parsePorcelainZ,
-  main,
+  COMMIT_GUARD_USAGE,
   conflictMarkerLine,
-  COMMIT_GUARD_USAGE
+  main,
+  parsePorcelainZ,
+  runCheck,
+  runStage,
+  runStart
 };

package/plugins/sp/scripts/daily-summary/daily-summary.mjs

@@ -1,7 +1,5 @@
 #!/usr/bin/env node
 // @bun
-import { createRequire } from "node:module";
-var __require = /* @__PURE__ */ createRequire(import.meta.url);
 
 // plugins/sp/scripts/daily-summary/daily-summary.ts
 import { spawn, spawnSync } from "child_process";
@@ -41,8 +39,8 @@ function resolveAppEntry(spurBin) {
   }
   return { entry, portable: true };
 }
-async function loadInlineApp(spurBin, resolveAppEntry2, required) {
-  const { entry, portable } = resolveAppEntry2(spurBin);
+async function loadInlineApp(spurBin, resolveAppEntry, required) {
+  const { entry, portable } = resolveAppEntry(spurBin);
   const app = await import(entry);
   const missing = portable ? required.filter((name) => typeof app[name] !== "function") : [];
   if (missing.length > 0) {
@@ -143,7 +141,7 @@ function getDateRange(dateStr) {
   return { start, end };
 }
 var defaultProcessSpawner = (cmd, args, env) => {
-  return new Promise((resolve3, reject) => {
+  return new Promise((resolve, reject) => {
     try {
       const proc = spawn(cmd, args, {
         stdio: ["ignore", "pipe", "pipe"],
@@ -154,7 +152,7 @@ var defaultProcessSpawner = (cmd, args, env) => {
       proc.stdout.on("data", (chunk) => stdoutChunks.push(Buffer.from(chunk)));
       proc.stderr.on("data", (chunk) => stderrChunks.push(Buffer.from(chunk)));
       proc.on("close", (exitCode) => {
-        resolve3({
+        resolve({
           stdout: Buffer.concat(stdoutChunks).toString("utf8"),
           stderr: Buffer.concat(stderrChunks).toString("utf8"),
           exitCode: exitCode ?? 0
@@ -319,12 +317,12 @@ Please provide the following (press Enter to skip):
       chunks.push(chunk);
     }
     const buffered = Buffer.concat(chunks).toString("utf-8");
-    const [learnings2 = "", issuesFixed2 = "", pending2 = ""] = buffered.split(`
+    const [learnings = "", issuesFixed = "", pending = ""] = buffered.split(`
 `);
     return {
-      learnings: learnings2.trim(),
-      issuesFixed: issuesFixed2.trim(),
-      pending: pending2.trim()
+      learnings: learnings.trim(),
+      issuesFixed: issuesFixed.trim(),
+      pending: pending.trim()
     };
   }
   const readline = await import("readline");
@@ -332,9 +330,9 @@ Please provide the following (press Enter to skip):
     input: process.stdin,
     output: process.stdout
   });
-  const question = (prompt) => new Promise((resolve3) => {
+  const question = (prompt) => new Promise((resolve) => {
     rl.question(prompt, (answer) => {
-      resolve3(answer.trim());
+      resolve(answer.trim());
     });
   });
   const learnings = await question(`1. What did you learn today? (optional)
@@ -608,21 +606,21 @@ ${markdown}
   });
 }
 export {
-  yesterdayLocal,
-  writeSummary,
-  todayLocal,
-  setProcessSpawner,
-  promptUser,
-  printUsage,
-  parseArgs,
-  main,
-  getSpurHistoryHealth,
-  getGitCommits,
-  getDateRange,
-  getCcusageData,
-  generateMarkdown,
-  ensureDir,
-  enableLogger,
+  buildDailySummary,
   defaultProcessSpawner,
-  buildDailySummary
+  enableLogger,
+  ensureDir,
+  generateMarkdown,
+  getCcusageData,
+  getDateRange,
+  getGitCommits,
+  getSpurHistoryHealth,
+  main,
+  parseArgs,
+  printUsage,
+  promptUser,
+  setProcessSpawner,
+  todayLocal,
+  writeSummary,
+  yesterdayLocal
 };

package/plugins/sp/scripts/dogfood-testing/detect-pipeline-driving.mjs

@@ -196,16 +196,16 @@ function runCli(argv) {
   process.exit(exitCode);
 }
 export {
-  runCli,
-  parseCliArgs,
-  isImplementHeavyStep,
-  hasMutatingFixMode,
-  evaluateDogfoodGate,
-  detectPipelineDriving,
-  detectImplementHeavy,
-  PIPELINE_TOKENS,
-  PIPELINE_DRIVING_REFUSE_MESSAGE,
-  MUTATING_FIX_REFUSE_MESSAGE,
+  CLI_USAGE,
   IMPLEMENT_HEAVY_ADVISORY_MESSAGE,
-  CLI_USAGE
+  MUTATING_FIX_REFUSE_MESSAGE,
+  PIPELINE_DRIVING_REFUSE_MESSAGE,
+  PIPELINE_TOKENS,
+  detectImplementHeavy,
+  detectPipelineDriving,
+  evaluateDogfoodGate,
+  hasMutatingFixMode,
+  isImplementHeavyStep,
+  parseCliArgs,
+  runCli
 };

package/plugins/sp/scripts/dogfood-testing/validate-report.mjs

@@ -274,9 +274,9 @@ function mainCli(argv = process.argv.slice(2)) {
   process.exit(mainCli());
 }
 export {
-  validateReport,
-  runValidateCli,
-  parseValidateCliArgs,
+  VALIDATE_CLI_USAGE,
   mainCli,
-  VALIDATE_CLI_USAGE
+  parseValidateCliArgs,
+  runValidateCli,
+  validateReport
 };

package/plugins/sp/scripts/feature-verification-steps.mjs

@@ -2,6 +2,7 @@
 // @bun
 
 // plugins/sp/scripts/feature-verification-steps.ts
+import { spawnSync } from "child_process";
 import { existsSync } from "fs";
 import { fileURLToPath } from "url";
 
@@ -42,17 +43,27 @@ async function requireModule(entry, mode) {
   }
   return mod;
 }
-async function verify(featureId, runId, cmdOverride, spurBin, mode) {
+async function verify(featureId, runId, cmdOverride, spurBin, mode, confidenceOverride, ackLowConfidence) {
   const mod = await loadModule(spurBin, mode);
   const result = await mod.runFeatureVerification({
     workdir: process.cwd(),
     featureId,
     runId,
-    cmdOverride
+    cmdOverride,
+    confidenceOverride,
+    ackLowConfidence
   });
   console.log(`feature-verification-steps: ${featureId} ${result.message}`);
 }
 function main() {
+  if (!process.versions.bun) {
+    const child = spawnSync("bun", [fileURLToPath(import.meta.url), ...process.argv.slice(2)], {
+      stdio: "inherit"
+    });
+    if (child.error)
+      console.error(`feature-verification-steps requires Bun on PATH: ${child.error.message}`);
+    process.exit(child.status ?? 1);
+  }
   const args = process.argv.slice(2);
   const command = args[0];
   const flag = (name) => {
@@ -60,10 +71,10 @@ function main() {
     return i >= 0 && i + 1 < args.length ? args[i + 1] ?? "" : "";
   };
   if (command !== "verify") {
-    console.error("Usage: feature-verification-steps.ts verify --feature-id <id> --run-id <id> [--cmd <command>]");
+    console.error("Usage: feature-verification-steps.ts verify --feature-id <id> --run-id <id> [--cmd <command>] [--confidence HIGH|MEDIUM|LOW] [--ack-low-confidence]");
     process.exit(2);
   }
-  verify(flag("--feature-id") || getEnvVar("featureId") || "", flag("--run-id") || getEnvVar("__runId") || "", flag("--cmd") || getEnvVar("verificationCmd") || "", flag("--spur-bin") || getEnvVar("spurBin") || "", resolveModuleMode(flag("--module-mode"))).then(() => process.exit(0)).catch((err) => {
+  verify(flag("--feature-id") || getEnvVar("featureId") || "", flag("--run-id") || getEnvVar("__runId") || "", flag("--cmd") || getEnvVar("verificationCmd") || "", flag("--spur-bin") || getEnvVar("spurBin") || "", resolveModuleMode(flag("--module-mode")), flag("--confidence") || getEnvVar("confidence") || "", args.includes("--ack-low-confidence") || getEnvVar("ackLowConfidence") === "true").then(() => process.exit(0)).catch((err) => {
     console.error(`feature-verification-steps: ${String(err)}`);
     process.exit(1);
   });

package/plugins/sp/scripts/feature-verification-steps.ts

@@ -18,10 +18,16 @@
  * Always exits 0 after a completed pass; the transition guard reads the status file and the
  * completion boundary validates the receipt (fail-closed). Unsafe ids are refused by the operation.
  *
+ * The installed `.mjs` twin may be launched with plain `node` (the `feature-verification` workflow
+ * selects `installed -> node`), but the generated inline bundle keeps `bun:sqlite` external by design, so the
+ * twin re-enters Bun at the top of `main()` (task 1197). Unlike daily-summary it fails closed when Bun
+ * is missing — a verifier that cannot load its bundle cannot run the checks.
+ *
  * Node-builtin imports only (ADR-065); the application seams come from the generated inline bundle,
  * never from `packages/app/src/index.ts`, which is not a plugin-script contract surface (0948 R3).
  */
 
+import { spawnSync } from 'node:child_process';
 import { existsSync } from 'node:fs';
 import { fileURLToPath } from 'node:url';
 import { getEnvVar } from '../lib/env';
@@ -97,6 +103,8 @@ async function verify(
     cmdOverride: string,
     spurBin: string,
     mode: ModuleMode,
+    confidenceOverride: string,
+    ackLowConfidence: boolean,
 ): Promise<void> {
     const mod = await loadModule(spurBin, mode);
     const result = await mod.runFeatureVerification({
@@ -104,11 +112,26 @@ async function verify(
         featureId,
         runId,
         cmdOverride,
+        // Operator-declared level (empty = derive from the pass) and the acknowledgement of a LOW
+        // level. Both ride the receipt, so the completion boundary reads them from the evidence
+        // rather than from whatever flags a later transition happens to pass.
+        confidenceOverride,
+        ackLowConfidence,
     });
     console.log(`feature-verification-steps: ${featureId} ${result.message}`);
 }
 
 function main(): void {
+    // The portable Node twin has no workspace imports; the generated bundle still uses Spur's Bun
+    // runtime (bun:sqlite stays external by design). Re-enter Bun before any app import; fail closed
+    // when Bun is missing — the verifier must not report a pass it could not run.
+    if (!process.versions.bun) {
+        const child = spawnSync('bun', [fileURLToPath(import.meta.url), ...process.argv.slice(2)], {
+            stdio: 'inherit',
+        });
+        if (child.error) console.error(`feature-verification-steps requires Bun on PATH: ${child.error.message}`);
+        process.exit(child.status ?? 1);
+    }
     const args = process.argv.slice(2);
     const command = args[0];
     const flag = (name: string): string => {
@@ -116,7 +139,10 @@ function main(): void {
         return i >= 0 && i + 1 < args.length ? (args[i + 1] ?? '') : '';
     };
     if (command !== 'verify') {
-        console.error('Usage: feature-verification-steps.ts verify --feature-id <id> --run-id <id> [--cmd <command>]');
+        console.error(
+            'Usage: feature-verification-steps.ts verify --feature-id <id> --run-id <id> [--cmd <command>] ' +
+                '[--confidence HIGH|MEDIUM|LOW] [--ack-low-confidence]',
+        );
         process.exit(2);
     }
     verify(
@@ -125,6 +151,8 @@ function main(): void {
         flag('--cmd') || getEnvVar('verificationCmd') || '',
         flag('--spur-bin') || getEnvVar('spurBin') || '',
         resolveModuleMode(flag('--module-mode')),
+        flag('--confidence') || getEnvVar('confidence') || '',
+        args.includes('--ack-low-confidence') || getEnvVar('ackLowConfidence') === 'true',
     )
         .then(() => process.exit(0))
         .catch((err: unknown) => {