@gobing-ai/spur 0.4.8 → 0.4.10

package/plugins/sp/scripts/inline-run-setup.ts

@@ -1,198 +0,0 @@
-#!/usr/bin/env bun
-/** Inline run setup driver (ADR-117/1006 R3): thin glue — argv/env, app-entry resolution, the installed-CLI
- *  handshake, mode dispatch. Mode bodies live in the bundled app service (`runInlineRun*` exports); the `.mjs`
- *  twin re-enters Bun in `main()` (SQLite) and imports the bundle dynamically, so bare `node` never loads app code. */
-import { spawnSync } from 'node:child_process';
-import { fileURLToPath } from 'node:url';
-// Type-only namespace import (erased before bundling; the smoke scanner exempts `import type`).
-import type * as spurApp from '@gobing-ai/spur-app';
-import { getEnvVar } from '../lib/env';
-import { loadInlineApp, resolveAppEntry } from '../lib/inline-run-app';
-import { writeCloseSummary } from './run-summary';
-
-// EMBEDDED_SPUR_SCHEMAS: declared by the bundle twin, never exported by the barrel — optional
-// intersection member, exactly what the previous structural cast expressed.
-type InlineApp = typeof spurApp & { EMBEDDED_SPUR_SCHEMAS?: ReadonlyMap<string, string> };
-
-function usage(): never {
-    const text = [
-        'Usage: bun plugins/sp/scripts/inline-run-setup.ts --run-id <id> --file <definition> [--spur-bin <path>]',
-        '       bun plugins/sp/scripts/inline-run-setup.ts --fingerprint --task-file <path> [--feature-file <path>] [--spur-bin <path>]',
-        '       bun plugins/sp/scripts/inline-run-setup.ts --action --run-id <id> --node <state> --kind <kind> --status <done|failed> --ok <true|false> [--duration-ms <n>] [--estimated] [--project-root <path>] [--spur-bin <path>]',
-        '       bun plugins/sp/scripts/inline-run-setup.ts --node-enter --run-id <id> --node <state> [--project-root <path>] [--spur-bin <path>]  (1136 R4: stamps the node enter time)',
-        '       bun plugins/sp/scripts/inline-run-setup.ts --actions-file <json-file> --run-id <id> [--project-root <path>] [--spur-bin <path>]  (1007 R5 batch trace emission)',
-        '       bun plugins/sp/scripts/inline-run-setup.ts --close --run-id <id> --status <done|failed|paused> [--reason <terminal-reason>] [--no-summary] [--project-root <path>] [--spur-bin <path>]',
-        '       --project-root (1136 R1) names the tree that OWNS the run row; without it the run row is read from the cwd tree, and a miss exits 1 with RUN_NOT_FOUND',
-        '       --duration-ms is optional on --action (1136 R4): omitted, the duration is measured from the calling --node-enter; supplied, it records provenance host-reported',
-        '       bun plugins/sp/scripts/inline-run-setup.ts --persist-out --from <worktree-path> [--task-file <path>]... [--spur-bin <path>]',
-        '       terminal-reason is a closed enum (0937 R2): done, paused-operator, failed-check, failed-agent, failed-timeout, failed-guard, cancelled, interrupted, retry-exhausted',
-        '       close defaults (1051 AC1): --status done → reason done, --status paused → reason paused-operator; --status failed requires an explicit --reason',
-        '       bun plugins/sp/scripts/inline-run-setup.ts --decide --run-id <id> --node <state> --options-json <file> [--spur-bin <path>]',
-    ].join('\n');
-    console.error(text);
-    process.exit(2);
-}
-
-// Run ids become filenames under `.spur/run/` — single safe component only (0804 R8).
-const SAFE_RUN_ID_RE = /^[A-Za-z0-9][A-Za-z0-9._-]*$/;
-
-function refuseUnsafeRunId(runId: string): never {
-    console.error(`inline-run-setup: refusing unsafe run id: ${runId}`);
-    console.error(
-        '  The run id must be a single safe filename component (alphanumeric/._-, no leading dot, no path separators, interpolation or traversal; same class as the task-pipeline route-reason guard, task 0804 R8). Allocate a fresh run id (uuid or timestamp slug) and retry.',
-    );
-    process.exit(1);
-}
-
-/** Resolve the app entry: --spur-bin/SPUR_BIN main module if it proves a repo checkout, else the adjacent bundle. */
-
-const SETUP_EXPORTS = ['readInstalledInventory', 'runInlineRunSetup', 'writeInlineRunOutcome'] as const;
-
-async function main(): Promise<void> {
-    // The portable Node twin has no workspace imports; SQLite still uses Spur's existing Bun runtime.
-    if (!process.versions.bun) {
-        const child = spawnSync('bun', [fileURLToPath(import.meta.url), ...process.argv.slice(2)], {
-            stdio: 'inherit',
-        });
-        if (child.error) console.error(`inline-run-setup requires Bun on PATH: ${child.error.message}`);
-        process.exit(child.status ?? 1);
-    }
-    const flags = new Map<string, string>();
-    let fingerprint = false,
-        action = false,
-        close = false,
-        decide = false,
-        persistOut = false,
-        nodeEnter = false,
-        estimated = false,
-        noSummary = false;
-    const taskFiles: string[] = [];
-    let spurBin = getEnvVar('SPUR_BIN') ?? '';
-    const argv = process.argv.slice(2);
-    for (let i = 0; i < argv.length; i++) {
-        const flag = argv[i];
-        if (flag === '--fingerprint') fingerprint = true;
-        else if (flag === '--action') action = true;
-        else if (flag === '--close') close = true;
-        else if (flag === '--decide') decide = true;
-        else if (flag === '--node-enter') nodeEnter = true;
-        else if (flag === '--persist-out') persistOut = true;
-        else if (flag === '--estimated') estimated = true;
-        else if (flag === '--no-summary') noSummary = true;
-        else if (flag === '--task-file') taskFiles.push(argv[++i] ?? '');
-        else if (flag === '--spur-bin') spurBin = argv[++i] ?? spurBin;
-        else if (flag !== undefined) flags.set(flag, argv[++i] ?? '');
-    }
-    // Repeated value flags: last occurrence wins (Map.set), matching the previous assignment chain.
-    const runId = flags.get('--run-id') ?? '';
-    const file = flags.get('--file') ?? '';
-    const featureFile = flags.get('--feature-file') ?? '';
-    const from = flags.get('--from') ?? '';
-    const optionsJson = flags.get('--options-json') ?? '';
-    const node = flags.get('--node') ?? '';
-    const kind = flags.get('--kind') ?? '';
-    const projectRoot = flags.get('--project-root') ?? '';
-    const status = flags.get('--status') ?? '';
-    const reason = flags.get('--reason') ?? '';
-    const okRaw = flags.get('--ok') ?? '';
-    const durationRaw = flags.get('--duration-ms') ?? '';
-    const actionsFile = flags.get('--actions-file') ?? '';
-
-    // `--estimated` labels a host-reported duration the driver did NOT time around the action
-    // (1070 R2). Only `--action` carries one: every other mode is refused here, before any write.
-    if (estimated && !action) usage();
-    // 1146 AC3: `--no-summary` belongs to the close step; any other mode is a usage error.
-    if (noSummary && !close) usage();
-
-    if (fingerprint) {
-        if (runId !== '' || file !== '' || taskFiles.length !== 1 || (taskFiles[0] ?? '').trim() === '') usage();
-        const { app } = await loadInlineApp<InlineApp>(spurBin, resolveAppEntry, ['runInlineRunFingerprint']);
-        process.exit(await app.runInlineRunFingerprint({ taskFile: taskFiles[0] ?? '', featureFile }));
-    }
-
-    if (decide) {
-        if (action || close || fingerprint || file !== '' || taskFiles.length > 0) usage();
-        if (runId.trim() === '' || node.trim() === '' || optionsJson.trim() === '') usage();
-        if (!SAFE_RUN_ID_RE.test(runId)) refuseUnsafeRunId(runId);
-        try {
-            const { app, portable } = await loadInlineApp<InlineApp>(spurBin, resolveAppEntry, ['runInlineRunDecide']);
-            // Decide switch + catalog config, resolved once (1094, ADR-082), behind the skew guard (1120 R2).
-            const { app: lib } = await loadInlineApp<typeof import('../lib/inline-run.generated.mjs')>(
-                spurBin,
-                () => ({ entry: fileURLToPath(new URL('../lib/inline-run.generated.mjs', import.meta.url)), portable }),
-                ['resolveDecideDecisionMakerEnabled', 'loadSpurConfig'],
-            );
-            const loadOpts = portable ? { embeddedSchemas: lib.EMBEDDED_SPUR_SCHEMAS } : undefined;
-            const [enabled, spurConfig] = await Promise.all([
-                lib.resolveDecideDecisionMakerEnabled(process.cwd(), loadOpts),
-                lib.loadSpurConfig(process.cwd(), loadOpts),
-            ]);
-            process.exit(await app.runInlineRunDecide({ runId, node, optionsFile: optionsJson, enabled, spurConfig }));
-        } catch (error) {
-            const message = error instanceof Error ? error.message : String(error);
-            process.stdout.write(`${JSON.stringify({ ok: false, runId, error: message })}\n`);
-            process.exit(1);
-        }
-    }
-
-    if (persistOut) {
-        if (fingerprint || decide || action || close || runId !== '' || file !== '') usage();
-        if (from.trim() === '' || taskFiles.some((taskFile) => taskFile.trim() === '')) usage();
-        const { app } = await loadInlineApp<InlineApp>(spurBin, resolveAppEntry, ['runInlineRunPersistOut']);
-        process.exit(await app.runInlineRunPersistOut({ from, taskFiles }));
-    }
-
-    if (nodeEnter || actionsFile !== '' || action || close) {
-        if (!SAFE_RUN_ID_RE.test(runId)) refuseUnsafeRunId(runId);
-        const mode = nodeEnter ? 'node-enter' : actionsFile !== '' ? 'actions-file' : close ? 'close' : 'action';
-        const { app } = await loadInlineApp<InlineApp>(spurBin, resolveAppEntry, ['runInlineRunTraceMode']);
-        const code = await app.runInlineRunTraceMode({
-            mode,
-            runId,
-            node,
-            kind,
-            status,
-            reason,
-            ok: okRaw,
-            durationMs: durationRaw,
-            actionsFile,
-            projectRoot,
-            estimated,
-            noSummary,
-            ...(noSummary ? {} : { summarize: async (run) => writeCloseSummary(run) }),
-        });
-        if (code === 2) usage();
-        process.exit(code);
-    }
-
-    if (runId.trim() === '' || file.trim() === '') usage();
-    if (!SAFE_RUN_ID_RE.test(runId)) refuseUnsafeRunId(runId);
-    const { app, portable } = await loadInlineApp<InlineApp>(spurBin, resolveAppEntry, SETUP_EXPORTS);
-    let inventory: unknown;
-    try {
-        // The CLI walk lives in the app service (ADR-130 glue budget): the script passes only the
-        // paths it derives from its own module URL.
-        inventory = await app.readInstalledInventory({
-            file,
-            spurBin,
-            localCli: fileURLToPath(new URL('../../../apps/cli/src/index.ts', import.meta.url)),
-        });
-    } catch (error) {
-        const message = `could not resolve the workflow definition: ${error instanceof Error ? error.message : String(error)}`;
-        app.writeInlineRunOutcome(runId, { ok: false, runId, error: message });
-        throw new Error(message);
-    }
-    process.exit(
-        await app.runInlineRunSetup({
-            runId,
-            file,
-            inventory,
-            ...(portable ? { embeddedSchemas: app.EMBEDDED_SPUR_SCHEMAS } : {}),
-        }),
-    );
-}
-
-main().catch((e: unknown) => {
-    console.error(`inline-run-setup: FAIL — ${e instanceof Error ? e.message : String(e)}`);
-    process.exit(1);
-});

package/plugins/sp/scripts/persist-out-check.mjs

@@ -1,217 +0,0 @@
-#!/usr/bin/env node
-// @bun
-
-// plugins/sp/scripts/persist-out-check.ts
-import { spawnSync } from "child_process";
-import { existsSync, readdirSync, readFileSync, statSync } from "fs";
-import { basename, dirname, isAbsolute, join, relative } from "path";
-var EVIDENCE_DIR = join(".spur", "memory", "evidence");
-var RUN_DIR = join(".spur", "run");
-var NAMED_CAP = 32;
-var PREFIX_CAP = 64;
-var DURABLE_FAMILY_RE = /^\d{4}-(?:verdict|feature-verification)\.json$/;
-function wbsOfTaskFile(path) {
-  const m = /^(\d+)_/.exec(basename(path));
-  return m?.[1] ?? null;
-}
-function walkFiles(dir, root) {
-  if (!existsSync(dir))
-    return [];
-  const out = [];
-  const walk = (cur) => {
-    for (const e of readdirSync(cur, { withFileTypes: true }).sort((a, b) => a.name.localeCompare(b.name))) {
-      const p = join(cur, e.name);
-      if (e.isDirectory())
-        walk(p);
-      else if (e.isFile())
-        out.push(relative(root, p));
-    }
-  };
-  walk(dir);
-  return out;
-}
-function collectOwned(rels, prefixes, counts, out) {
-  for (const rel of rels) {
-    const prefix = prefixes.find((p) => basename(rel).startsWith(`${p}-`));
-    if (prefix === undefined)
-      continue;
-    const count = (counts.get(prefix) ?? 0) + 1;
-    if (count > PREFIX_CAP)
-      return false;
-    counts.set(prefix, count);
-    out.push(rel);
-  }
-  return true;
-}
-function listObligations(wtRoot, wbsList, runIds) {
-  const prefixes = [...new Set([...wbsList, ...runIds].filter(Boolean))];
-  if (prefixes.length === 0)
-    return null;
-  const evDir = join(wtRoot, EVIDENCE_DIR);
-  const runDir = join(wtRoot, RUN_DIR);
-  const evFiles = walkFiles(evDir, wtRoot);
-  const runFiles = walkFiles(runDir, wtRoot);
-  const files = [];
-  const counts = new Map;
-  if (!collectOwned(evFiles, prefixes, counts, files))
-    return null;
-  if (!collectOwned(runFiles, prefixes, counts, files))
-    return null;
-  const unowned = evFiles.length - files.filter((f) => f.startsWith(EVIDENCE_DIR)).length;
-  return { files: [...new Set(files)].sort(), unowned, planeFiles: [...evFiles, ...runFiles] };
-}
-function compareTrees(wtRoot, invokeRoot, files, foreignDivergent = new Set) {
-  const missing = [];
-  const divergent = [];
-  let ok = 0;
-  for (const rel of files) {
-    if (foreignDivergent.has(rel) || foreignDivergent.has(basename(rel))) {
-      continue;
-    }
-    const wtPath = join(wtRoot, rel);
-    const invPath = join(invokeRoot, rel);
-    if (!existsSync(invPath)) {
-      missing.push(rel);
-      continue;
-    }
-    try {
-      const same = readFileSync(wtPath).equals(readFileSync(invPath));
-      if (same)
-        ok++;
-      else
-        divergent.push(rel);
-    } catch {
-      divergent.push(rel);
-    }
-  }
-  return { missing, divergent, ok };
-}
-function persistOutCheckUsage() {
-  return "usage: persist-out-check --from <worktree> [--task-file <path>]\u2026 [--run-id <id>]\u2026 [--root <invoke-tree>] [--success-json <path>]";
-}
-function defaultInvokeRoot(cwd) {
-  try {
-    const run = spawnSync("git", ["-C", cwd, "rev-parse", "--git-common-dir"], { encoding: "utf8" });
-    const common = run.stdout.trim();
-    if (run.status === 0 && common)
-      return dirname(isAbsolute(common) ? common : join(cwd, common));
-  } catch {}
-  return cwd;
-}
-function main(argv, invokeRoot = defaultInvokeRoot(process.cwd())) {
-  let wtRoot = "";
-  let successJsonPath = "";
-  const wbsList = [];
-  const runIds = [];
-  for (let i = 0;i < argv.length; i++) {
-    const arg = argv[i];
-    if (arg === "--spur-bin") {
-      i++;
-    } else if (arg === "--from") {
-      wtRoot = argv[++i] ?? "";
-    } else if (arg === "--root") {
-      invokeRoot = argv[++i] ?? invokeRoot;
-    } else if (arg === "--task-file") {
-      const wbs = wbsOfTaskFile(argv[++i] ?? "");
-      if (wbs)
-        wbsList.push(wbs);
-    } else if (arg === "--run-id") {
-      const id = argv[++i] ?? "";
-      if (id)
-        runIds.push(id);
-    } else if (arg === "--success-json") {
-      successJsonPath = argv[++i] ?? "";
-    } else {
-      process.stderr.write(`${persistOutCheckUsage()}
-`);
-      return 2;
-    }
-  }
-  if (wbsList.length === 0 && runIds.length === 0) {
-    process.stderr.write(`${persistOutCheckUsage()}
-persist-out-check: at least one --task-file or --run-id required
-`);
-    return 2;
-  }
-  if (!wtRoot || !existsSync(wtRoot) || !statSync(wtRoot).isDirectory()) {
-    process.stderr.write(`${persistOutCheckUsage()}
-persist-out-check: --from must be an existing directory
-`);
-    return 2;
-  }
-  const foreignDivergent = new Set;
-  const skips = [];
-  const candidates = [
-    successJsonPath,
-    join(invokeRoot, ".spur", "run", "persist-out.json"),
-    join(wtRoot, ".spur", "run", "persist-out.json")
-  ].filter(Boolean);
-  for (const cand of candidates) {
-    if (!existsSync(cand))
-      continue;
-    try {
-      const parsed = JSON.parse(readFileSync(cand, "utf8"));
-      if (Array.isArray(parsed.evidenceSkipped)) {
-        for (const item of parsed.evidenceSkipped) {
-          if (item.reason === "foreign-divergent" && typeof item.name === "string") {
-            foreignDivergent.add(item.name);
-            foreignDivergent.add(join(EVIDENCE_DIR, item.name));
-          }
-        }
-      }
-      if (Array.isArray(parsed.skipped)) {
-        for (const item of parsed.skipped) {
-          if (typeof item.id === "string" && typeof item.reason === "string") {
-            skips.push({ id: item.id, reason: item.reason });
-          }
-        }
-      }
-      break;
-    } catch {}
-  }
-  const obligations = listObligations(wtRoot, wbsList, runIds);
-  if (obligations === null) {
-    process.stderr.write(`persist-out-check: BLOCKED \u2014 worktree evidence listing failed or exceeded caps (${PREFIX_CAP}/prefix) \u2014 inspect by hand
-`);
-    return 1;
-  }
-  const { files, unowned, planeFiles } = obligations;
-  const unforwarded = planeFiles.filter((rel) => DURABLE_FAMILY_RE.test(basename(rel))).filter((rel) => !files.includes(rel) && !foreignDivergent.has(rel) && !foreignDivergent.has(basename(rel)));
-  const unforwardedFindings = unforwarded.map((f) => `UNFORWARDED ${f} \u2014 durable verdict/receipt outside the forwarded prefixes`);
-  const { missing, divergent, ok } = compareTrees(wtRoot, invokeRoot, files, foreignDivergent);
-  const findings = [
-    ...missing.map((f) => `MISSING ${f}`),
-    ...divergent.map((f) => `DIVERGENT ${f} \u2014 reconcile by hand (persist-out never overwrites)`),
-    ...unforwardedFindings
-  ];
-  for (const line of findings.slice(0, NAMED_CAP))
-    process.stdout.write(`${line}
-`);
-  if (findings.length > NAMED_CAP)
-    process.stdout.write(`\u2026 +${findings.length - NAMED_CAP} more
-`);
-  if (findings.length === 0) {
-    for (const skip of skips) {
-      process.stdout.write(`SKIP ${skip.id}: ${skip.reason}
-`);
-    }
-    const abandonedMsg = skips.length > 0 ? `${skips.length} skipped` : "nothing abandoned";
-    process.stdout.write(`persist-out-check: ok \u2014 ${ok} evidence file(s) persisted, unowned: ${unowned}, ${abandonedMsg}
-`);
-    return 0;
-  }
-  process.stderr.write(`persist-out-check: BLOCKED ${missing.length} missing, ${divergent.length} divergent` + `${unforwarded.length > 0 ? `, ${unforwarded.length} unforwarded durable verdict/receipt` : ""}` + ` \u2014 run inline-run-setup --persist-out --from <worktree> (--task-file <wbs>_<slug>.md) before worktree removal
-`);
-  return 1;
-}
-{
-  process.exit(main(process.argv.slice(2)));
-}
-export {
-  compareTrees,
-  defaultInvokeRoot,
-  listObligations,
-  main,
-  persistOutCheckUsage,
-  wbsOfTaskFile
-};

package/plugins/sp/scripts/persist-out-check.ts

@@ -1,249 +0,0 @@
-#!/usr/bin/env bun
-/**
- * persist-out-check — WT-4 pre-removal assertion for E71 persist-out (task 1067 R1, 1148 R1).
- * Before `git worktree remove`, verify the worktree's OWNED durable evidence would not be abandoned:
- * every `.spur/run/` and `.spur/memory/evidence/` file starting with a forwarded `<wbs>-`/`<runId>-`
- * prefix must exist in the invoking tree with identical bytes. Unowned evidence is counted
- * (`unowned: N`) and does not block (1148 R1). Node builtins only; helpers are exported for tests.
- * Exit 0 ok, 1 blocked/divergent, 2 usage error. Normal output is the finding lines themselves.
- */
-
-import { spawnSync } from 'node:child_process';
-import { existsSync, readdirSync, readFileSync, statSync } from 'node:fs';
-import { basename, dirname, isAbsolute, join, relative } from 'node:path';
-
-const EVIDENCE_DIR = join('.spur', 'memory', 'evidence');
-const RUN_DIR = join('.spur', 'run');
-const NAMED_CAP = 32;
-const PREFIX_CAP = 64;
-/** The durable-verdict family persist-out itself transfers (1026/1043) — the one artifact class whose
- *  silent abandonment WT-4 exists to prevent, even when the driver forwarded no matching prefix. */
-const DURABLE_FAMILY_RE = /^\d{4}-(?:verdict|feature-verification)\.json$/;
-
-/** Task files own their `<wbs>-*` evidence: leading digits before `_` in the basename. */
-export function wbsOfTaskFile(path: string): string | null {
-    const m = /^(\d+)_/.exec(basename(path));
-    return m?.[1] ?? null;
-}
-
-export interface ListObligationsResult {
-    files: string[];
-    unowned: number;
-    /** Every file seen in both planes (recursive) — lets callers audit outside the forwarded prefixes. */
-    planeFiles: string[];
-}
-
-/** Recursively list files under `dir`, relative to `root`. */
-function walkFiles(dir: string, root: string): string[] {
-    if (!existsSync(dir)) return [];
-    const out: string[] = [];
-    const walk = (cur: string): void => {
-        for (const e of readdirSync(cur, { withFileTypes: true }).sort((a, b) => a.name.localeCompare(b.name))) {
-            const p = join(cur, e.name);
-            if (e.isDirectory()) walk(p);
-            else if (e.isFile()) out.push(relative(root, p));
-        }
-    };
-    walk(dir);
-    return out;
-}
-
-/** Owned evidence (prefix-matched) under one plane; null once a prefix exceeds PREFIX_CAP. */
-function collectOwned(rels: string[], prefixes: string[], counts: Map<string, number>, out: string[]): boolean {
-    for (const rel of rels) {
-        const prefix = prefixes.find((p) => basename(rel).startsWith(`${p}-`));
-        if (prefix === undefined) continue;
-        const count = (counts.get(prefix) ?? 0) + 1;
-        if (count > PREFIX_CAP) return false;
-        counts.set(prefix, count);
-        out.push(rel);
-    }
-    return true;
-}
-
-/**
- * Evidence the worktree owns: `.spur/memory/evidence/` (recursive) and `.spur/run/` (recursive — the
- * driver keeps run scratch under `.spur/run/<run-id>/`, which a flat scan silently missed) files whose
- * basename starts with a forwarded `<wbs>-`/`<runId>-` prefix. Evidence matching no prefix is
- * counted as `unowned` (1148 R1). Null when no prefix is forwarded or a prefix cap is exceeded.
- */
-export function listObligations(wtRoot: string, wbsList: string[], runIds: string[]): ListObligationsResult | null {
-    const prefixes = [...new Set([...wbsList, ...runIds].filter(Boolean))];
-    if (prefixes.length === 0) return null;
-
-    const evDir = join(wtRoot, EVIDENCE_DIR);
-    const runDir = join(wtRoot, RUN_DIR);
-    const evFiles = walkFiles(evDir, wtRoot);
-    const runFiles = walkFiles(runDir, wtRoot);
-
-    const files: string[] = [];
-    const counts = new Map<string, number>();
-    if (!collectOwned(evFiles, prefixes, counts, files)) return null;
-    if (!collectOwned(runFiles, prefixes, counts, files)) return null;
-    const unowned = evFiles.length - files.filter((f) => f.startsWith(EVIDENCE_DIR)).length;
-    return { files: [...new Set(files)].sort(), unowned, planeFiles: [...evFiles, ...runFiles] };
-}
-
-/** Classify obligations against the invoking tree: missing, divergent (byte-differs), or ok. */
-export function compareTrees(
-    wtRoot: string,
-    invokeRoot: string,
-    files: string[],
-    foreignDivergent = new Set<string>(),
-): { missing: string[]; divergent: string[]; ok: number } {
-    const missing: string[] = [];
-    const divergent: string[] = [];
-    let ok = 0;
-    for (const rel of files) {
-        if (foreignDivergent.has(rel) || foreignDivergent.has(basename(rel))) {
-            continue;
-        }
-        const wtPath = join(wtRoot, rel);
-        const invPath = join(invokeRoot, rel);
-        if (!existsSync(invPath)) {
-            missing.push(rel);
-            continue;
-        }
-        try {
-            const same = readFileSync(wtPath).equals(readFileSync(invPath));
-            if (same) ok++;
-            else divergent.push(rel);
-        } catch {
-            divergent.push(rel);
-        }
-    }
-    return { missing, divergent, ok };
-}
-
-export function persistOutCheckUsage(): string {
-    return 'usage: persist-out-check --from <worktree> [--task-file <path>]… [--run-id <id>]… [--root <invoke-tree>] [--success-json <path>]';
-}
-
-/**
- * The invoking tree is the MAIN repo root — never default to cwd: WT-4 runs from the
- * worktree, and comparing the worktree against itself is a vacuous pass (caught live in
- * task 1067 R4). `--git-common-dir` resolves to the shared `.git`, whose parent is the
- * main tree; inside the main tree itself this falls back to cwd, which is correct there.
- */
-export function defaultInvokeRoot(cwd: string): string {
-    try {
-        const run = spawnSync('git', ['-C', cwd, 'rev-parse', '--git-common-dir'], { encoding: 'utf8' });
-        const common = run.stdout.trim();
-        if (run.status === 0 && common) return dirname(isAbsolute(common) ? common : join(cwd, common));
-    } catch {
-        // git unavailable — fall through to cwd
-    }
-    return cwd;
-}
-
-export function main(argv: string[], invokeRoot = defaultInvokeRoot(process.cwd())): number {
-    let wtRoot = '';
-    let successJsonPath = '';
-    const wbsList: string[] = [];
-    const runIds: string[] = [];
-    for (let i = 0; i < argv.length; i++) {
-        const arg = argv[i];
-        if (arg === '--spur-bin') {
-            i++;
-        } else if (arg === '--from') {
-            wtRoot = argv[++i] ?? '';
-        } else if (arg === '--root') {
-            invokeRoot = argv[++i] ?? invokeRoot;
-        } else if (arg === '--task-file') {
-            const wbs = wbsOfTaskFile(argv[++i] ?? '');
-            if (wbs) wbsList.push(wbs);
-        } else if (arg === '--run-id') {
-            const id = argv[++i] ?? '';
-            if (id) runIds.push(id);
-        } else if (arg === '--success-json') {
-            successJsonPath = argv[++i] ?? '';
-        } else {
-            process.stderr.write(`${persistOutCheckUsage()}\n`);
-            return 2;
-        }
-    }
-    if (wbsList.length === 0 && runIds.length === 0) {
-        process.stderr.write(
-            `${persistOutCheckUsage()}\npersist-out-check: at least one --task-file or --run-id required\n`,
-        );
-        return 2;
-    }
-    if (!wtRoot || !existsSync(wtRoot) || !statSync(wtRoot).isDirectory()) {
-        process.stderr.write(`${persistOutCheckUsage()}\npersist-out-check: --from must be an existing directory\n`);
-        return 2;
-    }
-    const foreignDivergent = new Set<string>();
-    const skips: Array<{ id: string; reason: string }> = [];
-    const candidates = [
-        successJsonPath,
-        join(invokeRoot, '.spur', 'run', 'persist-out.json'),
-        join(wtRoot, '.spur', 'run', 'persist-out.json'),
-    ].filter(Boolean);
-    for (const cand of candidates) {
-        if (!existsSync(cand)) continue;
-        try {
-            const parsed = JSON.parse(readFileSync(cand, 'utf8'));
-            if (Array.isArray(parsed.evidenceSkipped)) {
-                for (const item of parsed.evidenceSkipped) {
-                    if (item.reason === 'foreign-divergent' && typeof item.name === 'string') {
-                        foreignDivergent.add(item.name);
-                        foreignDivergent.add(join(EVIDENCE_DIR, item.name));
-                    }
-                }
-            }
-            if (Array.isArray(parsed.skipped)) {
-                for (const item of parsed.skipped) {
-                    if (typeof item.id === 'string' && typeof item.reason === 'string') {
-                        skips.push({ id: item.id, reason: item.reason });
-                    }
-                }
-            }
-            break;
-        } catch {}
-    }
-    const obligations = listObligations(wtRoot, wbsList, runIds);
-    if (obligations === null) {
-        process.stderr.write(
-            `persist-out-check: BLOCKED — worktree evidence listing failed or exceeded caps (${PREFIX_CAP}/prefix) — inspect by hand\n`,
-        );
-        return 1;
-    }
-    const { files, unowned, planeFiles } = obligations;
-    // Session-incident class (runall-1208-1209-bdcd): the driver forwarded only the batch run id, no
-    // prefix matched, and the check passed at 0 obligations while the worktree held its verdicts. Family
-    // files outside the prefixes (not foreign-divergent) block teardown; non-family scratch never does.
-    const unforwarded = planeFiles
-        .filter((rel) => DURABLE_FAMILY_RE.test(basename(rel)))
-        .filter((rel) => !files.includes(rel) && !foreignDivergent.has(rel) && !foreignDivergent.has(basename(rel)));
-    const unforwardedFindings = unforwarded.map(
-        (f) => `UNFORWARDED ${f} — durable verdict/receipt outside the forwarded prefixes`,
-    );
-    const { missing, divergent, ok } = compareTrees(wtRoot, invokeRoot, files, foreignDivergent);
-    const findings = [
-        ...missing.map((f) => `MISSING ${f}`),
-        ...divergent.map((f) => `DIVERGENT ${f} — reconcile by hand (persist-out never overwrites)`),
-        ...unforwardedFindings,
-    ];
-    for (const line of findings.slice(0, NAMED_CAP)) process.stdout.write(`${line}\n`);
-    if (findings.length > NAMED_CAP) process.stdout.write(`… +${findings.length - NAMED_CAP} more\n`);
-    if (findings.length === 0) {
-        for (const skip of skips) {
-            process.stdout.write(`SKIP ${skip.id}: ${skip.reason}\n`);
-        }
-        const abandonedMsg = skips.length > 0 ? `${skips.length} skipped` : 'nothing abandoned';
-        process.stdout.write(
-            `persist-out-check: ok — ${ok} evidence file(s) persisted, unowned: ${unowned}, ${abandonedMsg}\n`,
-        );
-        return 0;
-    }
-    process.stderr.write(
-        `persist-out-check: BLOCKED ${missing.length} missing, ${divergent.length} divergent` +
-            `${unforwarded.length > 0 ? `, ${unforwarded.length} unforwarded durable verdict/receipt` : ''}` +
-            ' — run inline-run-setup --persist-out --from <worktree> (--task-file <wbs>_<slug>.md) before worktree removal\n',
-    );
-    return 1;
-}
-
-if (import.meta.main) {
-    process.exit(main(process.argv.slice(2)));
-}