@gobing-ai/spur 0.4.6 → 0.4.8

package/plugins/sp/skills/code-verification/SKILL.md

@@ -324,7 +324,7 @@ node "$RESIDUAL" fold <wbs>
 > `review` coordinator (`/sp:dev-review` → `sp:super-reviewer`), which merges
 > `functional-review` + `code-verification` review mode + `code-improvement` fragments. The
 > `record` step backfills `## Review` from the verdict artifact **only** if the section is bare
-> (`sectionIsBare` guard, `task-service.ts`) — a standalone compatibility fallback, never an
+> (`sectionIsBare` guard, `task-section-bodies.ts`) — a standalone compatibility fallback, never an
 > overwrite of authored Review. Writing `## Review` here destroys the review step's
 > three-dimensional findings.
 

package/plugins/sp/skills/code-verification/references/verdict-schema.md

@@ -161,7 +161,7 @@ every Testing/Solution anchor against the repo root. A basename citation — `de
 `spur task update <wbs> done`, because the gate cannot tell which file the row meant. Write the
 repo-root-relative form from the first pass:
 
-- Right: `packages/app/src/decision/decision-events.ts:83`, `apps/cli/tests/commands/task.test.ts:42`
+- Right: `packages/app/src/decision/decision-events.ts:83`, `apps/cli/tests/commands/task/verdict.test.ts:42`
 - Wrong: `decision-events.ts:83`, `../services/foo.ts:12`, `@gobing-ai/ts-x/src/persistence.ts:108`
   (a scoped package is never repo-relative — use the external named-origin form below)
 

package/plugins/sp/skills/functional-review/SKILL.md

@@ -296,7 +296,7 @@ Include the per-requirement traceability table in the report:
 fragment to the coordinator (`sp:super-reviewer` — the invoking session under `/sp:dev-review`),
 which writes the combined `## Review`. The
 `record` step transcribes only `## Testing` from the verdict artifact and backfills `## Review`
-only when the section is bare (`sectionIsBare` guard, `task-service.ts`); it never overwrites the
+only when the section is bare (`sectionIsBare` guard, `task-section-bodies.ts`); it never overwrites the
 coordinator's authored Review. Keep the priority-table lead stable in the fragment so the L3 gate
 stays satisfied through `record` → `done`.
 

package/plugins/sp/skills/spur-dev/references/dev-operations.md

@@ -590,9 +590,13 @@ host instructions does not add one. An opt-in gate is explicit: `gitmsg --check
      - `keepachangelog` (default): `## [<version>] - <date>` header, then category headings per the keepachangelog convention — `### Added` / `### Fixed` / `### Changed` / `### Removed` / `### Other` — mapped from conventional-commit types.
      - `simple`: flat bulleted list grouped by type heading (`### feat`, `### fix`, …).
   6. Emit: with `<file>`, insert the section into that file above its newest `## [` release heading (or after its title when none exists) and touch nothing else in the file; without `<file>`, print it to stdout.
-  7. Self-check before emitting: every short hash in `<since>..<until>` appears exactly once. Fix any miss or duplicate; do not report a verdict.
-  8. Reply in at most three lines: the range, bullet counts per category, and the output target.
-- **Invariants:** Output is derived from `git log` only. No quality gates — no `bun run gate`/lint/typecheck/test/`spur-check`/rule runs, citation or manifest lookups, confidence ratings, or edits beyond the one inserted section. The file is left uncommitted.
+  7. **Verify claims before emitting:** scan the generated bullets for API/library claims — bullets asserting what code, APIs, libraries, dependencies, or versions do (skip merge/bookkeeping bullets that assert no such fact). Verify each affected bullet, then append an HTML comment line directly under it: `<!-- src: <citation> · <HIGH|MEDIUM|LOW> -->`.
+     - Internal claims (what a commit or the code does): confirm against the commit diff (`git show --stat <hash>`, reading hunks when the summary asserts behavior) or the artifact's presence in the tree; cite `path[:line]` — bare path for whole-file claims, `path:line` for a specific behavior or symbol.
+     - External claims (framework/library/version behavior): confirm against official docs for the installed version; cite the URL. Unverifiable → LOW plus the reason in one clause.
+     - Confidence: HIGH = the diff/artifact confirms the summary as written; MEDIUM = the evidence is real but narrower than the summary; LOW = cannot be confirmed from available sources.
+  8. Self-check before emitting: every short hash in `<since>..<until>` appears exactly once, and every verified bullet carries exactly one `<!-- src: … -->` comment whose level is `HIGH`, `MEDIUM`, or `LOW` — no off-rubric levels, no unannotated claim bullets. Fix any miss, duplicate, or bad level; do not report a verdict.
+  9. Reply in at most three lines: the range, bullet counts per category plus verified-claim counts (`x HIGH / y MEDIUM / z LOW`), and the output target.
+- **Invariants:** Bullets are derived from `git log` only; the claim-verification pass (step 7) adds evidence from commit diffs, the working tree, and official docs. No quality gates — no `bun run gate`/lint/typecheck/test/`spur-check`/rule runs, and no edits beyond the one inserted section (its verification comments included). The file is left uncommitted.
 
 ### 9. gitmsg
 

package/plugins/sp/skills/spur-dev/references/execution-batch.md

@@ -625,7 +625,7 @@ Before launching a full `spur-check-new`:
 3. **Promoted code must satisfy the boundary rules `scripts/` never enforced.** A command module
    moving from `scripts/` into `apps/cli/src` must route output through the `CommandOutput` seam (no
    `console.*`), spawn processes via `NodeProcessExecutor` (no `Bun.spawnSync`), get a
-   `runtime-boundaries` fs-io exemption for sync reads (mirrors `task.ts`), and a non-command helper
+   `runtime-boundaries` fs-io exemption for sync reads (mirrors `commands/task/shared.ts`), and a non-command helper
    must not live in `apps/cli/src/commands/` (the noun scan treats every file there as a noun).
 4. **Doc/TSDoc edits shift `file:line` anchors** cited by other tasks — the per-task gate surfaces
    them as `L4.anchor-subject-mismatch` (0775: the corpus sweep retired; run `spur task check <wbs>`

package/plugins/sp/skills/spur-dev/references/execution-worktree-setup.md

@@ -202,7 +202,7 @@ install rule (source: task 0481) — create mode always installs because a fresh
 
 After creation or adoption, immediately write/adopt the state marker (WT-3), then run the
 existing batch loop (Steps 1–5) with the worktree as process cwd. `spur workflow run` resolves cwd
-from the process (`apps/cli/src/commands/workflow.ts:124`), so no CLI change is needed — `cd` into
+from the process (`apps/cli/src/commands/workflow/run.ts`), so no CLI change is needed — `cd` into
 the worktree directory before launching the loop.
 
 #### Evidence staging before the first task (create and reuse mode)

package/plugins/sp/skills/spur-dev/references/gate-checklists.md

@@ -188,7 +188,7 @@ transition to `done`.
 > in-sandbox for the same reason.
 >
 > **Triage without a baseline run:** list the failing test *files*, then grep them for the surface
-> you changed. If your change touches `task.ts` and no failing file references task/lifecycle, the
+> you changed. If your change touches `commands/task/` and no failing file references task/lifecycle, the
 > failure is not yours. This costs seconds and mutates nothing — do **not** `git stash` to get a
 > clean baseline on a shared working tree. Treat any failure that does *not* name a port/listen/`ps`
 > cause as yours until proven otherwise; the count is a moving baseline, not a constant.