@gobing-ai/spur 0.4.9 → 0.4.10

package/spur.js

@@ -14967,7 +14967,6 @@ var init_finding_codes = __esm(() => {
     "L4.feature-receipt-run",
     "L4.feature-receipt-stale",
     "L4.feature-receipt-contract",
-    "L4.feature-receipt-confidence",
     "precheck-size",
     "precheck-evidence",
     "inventory-coverage",
@@ -15040,7 +15039,6 @@ var init_finding_codes = __esm(() => {
     L4_FEATURE_RECEIPT_RUN: "L4.feature-receipt-run",
     L4_FEATURE_RECEIPT_STALE: "L4.feature-receipt-stale",
     L4_FEATURE_RECEIPT_CONTRACT: "L4.feature-receipt-contract",
-    L4_FEATURE_RECEIPT_CONFIDENCE: "L4.feature-receipt-confidence",
     PRECHECK_SIZE: "precheck-size",
     PRECHECK_EVIDENCE: "precheck-evidence",
     INVENTORY_COVERAGE: "inventory-coverage",
@@ -15065,6 +15063,7 @@ var init_projects = __esm(() => {
   projectEntrySchema = object2({
     name: string2().min(1),
     path: string2().min(1),
+    host: string2().optional(),
     port: number2().int().nonnegative().default(0)
   });
   projectsFileSchema = object2({
@@ -85638,6 +85637,12 @@ function normalizeProjectPath(pathInput) {
 function setPortProbeForTests(probe) {
   testPortProbe = probe;
 }
+function isLocalHost(host) {
+  if (!host)
+    return true;
+  const trimmed = host.trim().toLowerCase();
+  return trimmed === "localhost" || trimmed === "127.0.0.1" || trimmed === "::1" || trimmed === "";
+}
 function classifyPortBindError(err) {
   const code = err && typeof err === "object" && "code" in err ? String(err.code) : "";
   if (code === "EADDRINUSE" || code === "EADDRNOTAVAIL") {
@@ -85648,31 +85653,34 @@ function classifyPortBindError(err) {
 async function isPortLiveOnHost(port, host, timeoutMs) {
   return new Promise((resolve) => {
     const socket = connect({ port, host, timeout: timeoutMs });
-    socket.on("connect", () => {
-      socket.destroy();
-      resolve(true);
-    });
-    socket.on("timeout", () => {
-      socket.destroy();
-      resolve(false);
-    });
-    socket.on("error", () => {
+    socket.unref();
+    let settled = false;
+    const cleanup = (res) => {
+      if (settled)
+        return;
+      settled = true;
       socket.destroy();
-      resolve(false);
-    });
+      resolve(res);
+    };
+    socket.on("connect", () => cleanup(true));
+    socket.on("timeout", () => cleanup(false));
+    socket.on("error", () => cleanup(false));
   });
 }
-async function isPortLive(port, timeoutMs = 200) {
+async function isPortLive(port, timeoutMs = 200, host = "localhost") {
   if (testPortProbe) {
-    return await testPortProbe(port) === "in-use";
+    return await testPortProbe(port, host) === "in-use";
   }
-  if (port <= 0)
+  if (port <= 0 || port > 65535)
     return false;
-  if (await isPortLiveOnHost(port, "127.0.0.1", timeoutMs))
-    return true;
-  if (await isPortLiveOnHost(port, "::1", timeoutMs))
-    return true;
-  return false;
+  if (isLocalHost(host)) {
+    if (await isPortLiveOnHost(port, "127.0.0.1", timeoutMs))
+      return true;
+    if (await isPortLiveOnHost(port, "::1", timeoutMs))
+      return true;
+    return false;
+  }
+  return isPortLiveOnHost(port, host, timeoutMs);
 }
 async function probePort(port) {
   if (testPortProbe) {
@@ -85943,10 +85951,12 @@ class ProjectRegistry {
       const data = this.readRaw();
       let changed = false;
       for (const project of data.projects) {
-        const normalized = normalizeProjectPath(project.path);
-        if (normalized !== project.path) {
-          project.path = normalized;
-          changed = true;
+        if (isLocalHost(project.host)) {
+          const normalized = normalizeProjectPath(project.path);
+          if (normalized !== project.path) {
+            project.path = normalized;
+            changed = true;
+          }
         }
       }
       if (changed) {
@@ -85957,13 +85967,17 @@ class ProjectRegistry {
   async list() {
     await this.healTildePaths();
     await this.refreshProjects();
-    await this.healStale();
     return this.readRaw().projects;
   }
   async getByPath(pathInput) {
     const normalized = normalizeProjectPath(pathInput);
     const projects = await this.list();
-    return projects.find((p) => normalizeProjectPath(p.path) === normalized);
+    return projects.find((p) => {
+      if (isLocalHost(p.host)) {
+        return normalizeProjectPath(p.path) === normalized;
+      }
+      return p.path === pathInput || p.path === normalized;
+    });
   }
   async getByName(nameInput) {
     const trimmed = nameInput.trim();
@@ -85973,11 +85987,20 @@ class ProjectRegistry {
   async upsert(entry) {
     return this.withLock(async () => {
       const currentData = this.readRaw();
-      const normalizedPath = normalizeProjectPath(entry.path);
-      const index = currentData.projects.findIndex((p) => normalizeProjectPath(p.path) === normalizedPath);
+      const host = entry.host && entry.host.trim() !== "" ? entry.host.trim() : "localhost";
+      const isLocal = isLocalHost(host);
+      const normalizedPath = isLocal ? normalizeProjectPath(entry.path) : entry.path;
+      const index = currentData.projects.findIndex((p) => {
+        const pHost = p.host && p.host.trim() !== "" ? p.host.trim() : "localhost";
+        if (isLocal) {
+          return isLocalHost(pHost) && normalizeProjectPath(p.path) === normalizedPath;
+        }
+        return pHost.toLowerCase() === host.toLowerCase() && p.path === normalizedPath;
+      });
       const newEntry = {
         name: entry.name,
         path: normalizedPath,
+        host,
         port: entry.port ?? 0
       };
       if (index >= 0 && currentData.projects[index]) {
@@ -85985,13 +86008,20 @@ class ProjectRegistry {
         currentData.projects[index] = {
           ...existing,
           name: entry.name,
+          host: entry.host ?? existing.host ?? "localhost",
           port: entry.port ?? existing.port
         };
       } else {
         currentData.projects.push(newEntry);
       }
       this.writeRaw(currentData);
-      const res = currentData.projects.find((p) => normalizeProjectPath(p.path) === normalizedPath);
+      const res = currentData.projects.find((p) => {
+        const pHost = p.host && p.host.trim() !== "" ? p.host.trim() : "localhost";
+        if (isLocal) {
+          return isLocalHost(pHost) && normalizeProjectPath(p.path) === normalizedPath;
+        }
+        return pHost.toLowerCase() === host.toLowerCase() && p.path === normalizedPath;
+      });
       if (!res) {
         throw new Error(`Failed to upsert project: ${normalizedPath}`);
       }
@@ -86004,9 +86034,10 @@ class ProjectRegistry {
       const normalized = normalizeProjectPath(nameOrPath);
       const initialLen = currentData.projects.length;
       currentData.projects = currentData.projects.filter((p) => {
-        const pNorm = normalizeProjectPath(p.path);
+        const pNorm = isLocalHost(p.host) ? normalizeProjectPath(p.path) : p.path;
+        const pathMatch = pNorm === normalized || p.path === nameOrPath;
         const nameMatch = p.name.toLowerCase() === nameOrPath.trim().toLowerCase();
-        return pNorm !== normalized && !nameMatch;
+        return !pathMatch && !nameMatch;
       });
       if (currentData.projects.length !== initialLen) {
         this.writeRaw(currentData);
@@ -86019,7 +86050,10 @@ class ProjectRegistry {
     return this.withLock(async () => {
       const currentData = this.readRaw();
       const normalized = normalizeProjectPath(pathInput);
-      const project = currentData.projects.find((p) => normalizeProjectPath(p.path) === normalized);
+      const project = currentData.projects.find((p) => {
+        const pNorm = isLocalHost(p.host) ? normalizeProjectPath(p.path) : p.path;
+        return pNorm === normalized || p.path === pathInput;
+      });
       if (project) {
         project.port = port;
         this.writeRaw(currentData);
@@ -86057,10 +86091,13 @@ class ProjectRegistry {
     return this.withLock(async () => {
       const data = this.readRaw();
       let changed = false;
+      const resetProjects = [];
       for (const project of data.projects) {
         if (project.port > 0) {
-          const live = await isPortLive(project.port);
+          const host = project.host ?? "localhost";
+          const live = await isPortLive(project.port, 200, host);
           if (!live) {
+            resetProjects.push({ ...project });
             project.port = 0;
             changed = true;
           }
@@ -86069,6 +86106,7 @@ class ProjectRegistry {
       if (changed) {
         this.writeRaw(data);
       }
+      return resetProjects;
     });
   }
   async refreshProjects(options) {
@@ -86078,9 +86116,15 @@ class ProjectRegistry {
     await Promise.resolve().then(() => init_project_stop());
     const removed = await this.withLock(async () => {
       const data = this.readRaw();
-      const purged = data.projects.filter((p) => !existsSync8(normalizeProjectPath(p.path)));
+      const purged = data.projects.filter((p) => {
+        if (isLocalHost(p.host)) {
+          return !existsSync8(normalizeProjectPath(p.path));
+        }
+        return false;
+      });
       if (purged.length > 0) {
-        data.projects = data.projects.filter((p) => existsSync8(normalizeProjectPath(p.path)));
+        const purgedPaths = new Set(purged.map((p) => `${p.host ?? "localhost"}:${normalizeProjectPath(p.path)}`));
+        data.projects = data.projects.filter((p) => !purgedPaths.has(`${p.host ?? "localhost"}:${normalizeProjectPath(p.path)}`));
         this.writeRaw(data);
       }
       return purged;
@@ -86088,7 +86132,7 @@ class ProjectRegistry {
     const terminated = [];
     if (terminate) {
       for (const project of removed) {
-        if (project.port > 0) {
+        if (project.port > 0 && isLocalHost(project.host)) {
           const stop = await stopRegisteredProject(project, {
             processExecutor: executor,
             killTimeoutMs,
@@ -86101,11 +86145,13 @@ class ProjectRegistry {
         }
       }
     }
+    const resetPorts = await this.healStale();
     return {
       removed,
       terminated,
       purgedProjects: removed,
-      terminatedProcesses: terminated
+      terminatedProcesses: terminated,
+      resetPorts
     };
   }
 }
@@ -89363,22 +89409,11 @@ async function completeFeatureVerificationReceipt(fs, runDir, running, options)
   if (running.status !== "RUNNING") {
     throw new Error(`receipt for run ${running.runId} is already ${running.status}`);
   }
-  if (options.confidence !== undefined) {
-    if (!FEATURE_RECEIPT_CONFIDENCE_LEVELS.includes(options.confidence)) {
-      throw new Error(`confidence must be HIGH, MEDIUM or LOW (got ${JSON.stringify(options.confidence)})`);
-    }
-    if (options.confidenceBasis === undefined || options.confidenceBasis.length === 0) {
-      throw new Error(`confidence ${options.confidence} requires a non-empty confidenceBasis`);
-    }
-  }
   const receipt = {
     ...running,
     status: options.status,
     inputDigest: options.inputDigest ?? running.inputDigest,
-    completedAt: options.completedAt ?? new Date().toISOString().replace(/\.\d{3}Z$/, "Z"),
-    ...options.confidence === undefined ? {} : { confidence: options.confidence },
-    ...options.confidenceBasis === undefined ? {} : { confidenceBasis: [...options.confidenceBasis] },
-    ...options.confidenceAcknowledged === true ? { confidenceAcknowledged: true } : {}
+    completedAt: options.completedAt ?? new Date().toISOString().replace(/\.\d{3}Z$/, "Z")
   };
   const paths = featureReceiptPaths(runDir, receipt.featureId, receipt.runId);
   await fs.ensureDir(runDir);
@@ -89406,23 +89441,6 @@ function parseFeatureVerificationReceipt(raw) {
   if (typeof r.featureId !== "string" || typeof r.runId !== "string" || typeof r.workdir !== "string" || typeof v?.name !== "string" || typeof v?.sourcePath !== "string" || typeof v?.layer !== "string" || typeof v?.definitionDigest !== "string" || typeof r.verificationCmd !== "string" || typeof r.inputDigest !== "string" || r.status !== "RUNNING" && r.status !== "PASS" && r.status !== "FAIL" || typeof r.startedAt !== "string" || r.completedAt !== null && typeof r.completedAt !== "string") {
     throw new Error("required fields missing or mistyped");
   }
-  if (r.confidence !== undefined) {
-    if (!FEATURE_RECEIPT_CONFIDENCE_LEVELS.includes(r.confidence)) {
-      throw new Error(`confidence must be HIGH, MEDIUM or LOW (got ${JSON.stringify(r.confidence)})`);
-    }
-    if (!Array.isArray(r.confidenceBasis) || r.confidenceBasis.length === 0) {
-      throw new Error("confidence requires a non-empty confidenceBasis");
-    }
-    if (!r.confidenceBasis.every((entry) => typeof entry === "string" && entry.length > 0)) {
-      throw new Error("confidenceBasis entries must be non-empty strings");
-    }
-  }
-  if (r.confidenceBasis !== undefined && !Array.isArray(r.confidenceBasis)) {
-    throw new Error("confidenceBasis must be an array");
-  }
-  if (r.confidenceAcknowledged !== undefined && typeof r.confidenceAcknowledged !== "boolean") {
-    throw new Error("confidenceAcknowledged must be a boolean");
-  }
   return parsed;
 }
 async function readReceiptCopy(fs, path, label) {
@@ -89560,15 +89578,6 @@ async function validateFeatureVerificationReceipt(fs, options) {
       detail: `receipt digest ${latest.inputDigest} \u2260 current inputs ${options.currentDigest} \u2014 tree, spec, learnings or check contract changed after the pass`
     };
   }
-  const confidence = latest.confidence;
-  const certified = confidence === "HIGH" || confidence === "MEDIUM";
-  if (!certified && latest.confidenceAcknowledged !== true) {
-    return {
-      ok: false,
-      reason: "unacknowledged-low-confidence",
-      detail: confidence === undefined ? "receipt records a PASS with no confidence level (written before the field existed) \u2014 re-run the feature-scoped verification pass, which derives HIGH or MEDIUM from its own evidence" : `receipt records a ${confidence} confidence${(latest.confidenceBasis ?? []).length > 0 ? ` (basis: ${(latest.confidenceBasis ?? []).join("; ")})` : ""} \u2014 re-run the pass where the level can be HIGH or MEDIUM, or re-run it with the acknowledgement (ackLowConfidence) when LOW is the honest level`
-    };
-  }
   return { ok: true, receipt: latest };
 }
 async function captureFeatureReceiptDigest(repoRoot, featureContent, learningsContent) {
@@ -89577,12 +89586,11 @@ async function captureFeatureReceiptDigest(repoRoot, featureContent, learningsCo
 function isProofCaptureError(err) {
   return err instanceof ProofCaptureError;
 }
-var FEATURE_RECEIPT_SCHEMA_VERSION = 1, DEFAULT_FEATURE_VERIFICATION_CMD = "bun run spur-check-feature", FEATURE_RECEIPT_CONFIDENCE_LEVELS, RECEIPT_ID_PATTERN;
+var FEATURE_RECEIPT_SCHEMA_VERSION = 1, DEFAULT_FEATURE_VERIFICATION_CMD = "bun run spur-check-feature", RECEIPT_ID_PATTERN;
 var init_feature_verification_receipt = __esm(() => {
   init_durable_plane_ignore();
   init_run_path();
   init_proof_input_fingerprint();
-  FEATURE_RECEIPT_CONFIDENCE_LEVELS = ["HIGH", "MEDIUM", "LOW"];
   RECEIPT_ID_PATTERN = /^[A-Za-z0-9][A-Za-z0-9._-]*$/;
 });
 
@@ -92018,7 +92026,6 @@ var init_planning_check_base = __esm(() => {
     FINDING_CODES.L4_FEATURE_RECEIPT_RUN,
     FINDING_CODES.L4_FEATURE_RECEIPT_STALE,
     FINDING_CODES.L4_FEATURE_RECEIPT_CONTRACT,
-    FINDING_CODES.L4_FEATURE_RECEIPT_CONFIDENCE,
     FINDING_CODES.L3_REVIEW_TESTING_CONTRADICTION,
     FINDING_CODES.L4_ROLLUP_SUBTASKS_OPEN,
     FINDING_CODES.L4_ROLLUP_MISSING_ROSTER,
@@ -93604,8 +93611,7 @@ var init_feature_check = __esm(() => {
         failed: FINDING_CODES.L4_FEATURE_RECEIPT_FAILED,
         run: FINDING_CODES.L4_FEATURE_RECEIPT_RUN,
         stale: FINDING_CODES.L4_FEATURE_RECEIPT_STALE,
-        "contract-mismatch": FINDING_CODES.L4_FEATURE_RECEIPT_CONTRACT,
-        "unacknowledged-low-confidence": FINDING_CODES.L4_FEATURE_RECEIPT_CONFIDENCE
+        "contract-mismatch": FINDING_CODES.L4_FEATURE_RECEIPT_CONTRACT
       };
       findings.push({
         layer: "L4",
@@ -101835,39 +101841,6 @@ var init_proof_fingerprint = __esm(() => {
   ACCEPTED_OPTION_KEYS = ["expect", "featureFile", "taskFile", "var"];
 });
 
-// ../../packages/app/src/workflow/actions/response-validate.ts
-class ResponseValidateActionRunner {
-  kind = KIND14;
-  engine;
-  constructor(engine) {
-    this.engine = engine;
-  }
-  async execute(options, _context) {
-    const text = asString5(options.text);
-    if (text === undefined) {
-      return {
-        ok: false,
-        error: "response.validate: text is required (use a template like {{ steps.generate.answer }})"
-      };
-    }
-    const result = this.engine.validate(text);
-    return {
-      ok: result.ok,
-      data: {
-        reason: result.reason,
-        ...result.issues !== undefined ? { issues: result.issues } : {}
-      },
-      error: result.ok ? undefined : result.reason
-    };
-  }
-}
-function asString5(value) {
-  if (value === undefined || value === null)
-    return;
-  return String(value);
-}
-var KIND14 = "response.validate";
-
 // ../../packages/app/src/workflow/utils.ts
 var identity5 = (s) => s, NO_COLOR;
 var init_utils3 = __esm(() => {
@@ -101883,15 +101856,15 @@ var init_utils3 = __esm(() => {
 
 // ../../packages/app/src/workflow/actions/rule-check.ts
 class RuleCheckActionRunner {
-  kind = KIND15;
+  kind = KIND14;
   ruleService;
   constructor(ruleService) {
     this.ruleService = ruleService;
   }
   async execute(options, _context) {
-    const preset = asString6(options.preset) ?? "recommended-pre-check";
-    const rule = asString6(options.rule);
-    const failOn = asString6(options.failOn) ?? "error";
+    const preset = asString5(options.preset) ?? "recommended-pre-check";
+    const rule = asString5(options.rule);
+    const failOn = asString5(options.failOn) ?? "error";
     const result = await this.ruleService.evaluate({
       preset,
       failOn,
@@ -101913,12 +101886,12 @@ class RuleCheckActionRunner {
     };
   }
 }
-function asString6(value) {
+function asString5(value) {
   if (value === undefined || value === null)
     return;
   return String(value);
 }
-var KIND15 = "rule.check";
+var KIND14 = "rule.check";
 var init_rule_check = __esm(() => {
   init_utils3();
 });
@@ -101986,7 +101959,7 @@ class RunArtifactActionRunner {
   fileSystem;
   artifactDao;
   processExecutor;
-  kind = KIND16;
+  kind = KIND15;
   constructor(getDb, fileSystem = createNodeFileSystem2(), artifactDao, processExecutor) {
     this.getDb = getDb;
     this.fileSystem = fileSystem;
@@ -102012,7 +101985,7 @@ class RunArtifactActionRunner {
     if (proofBinding !== undefined && proofBinding !== "current") {
       return {
         ok: false,
-        error: `${KIND16}: unsupported proofBinding "${String(proofBinding)}" - only "current" is defined (ADR-071)`
+        error: `${KIND15}: unsupported proofBinding "${String(proofBinding)}" - only "current" is defined (ADR-071)`
       };
     }
     const workdir = context.workdir ?? process.cwd();
@@ -102046,7 +102019,7 @@ class RunArtifactActionRunner {
       try {
         registeredPath = await persistDurableArtifact(normalized, workdir, context.runId, this.fileSystem, !requireExisting);
       } catch (error) {
-        return { ok: false, error: `${KIND16}: durable persist failed: ${error.message}` };
+        return { ok: false, error: `${KIND15}: durable persist failed: ${error.message}` };
       }
     }
     let dao = this.artifactDao;
@@ -102077,24 +102050,24 @@ class RunArtifactActionRunner {
     if (artifactKind !== "verify-verdict") {
       return {
         ok: false,
-        error: `${KIND16}: proofBinding "current" is only supported for the verify-verdict artifact kind (got "${artifactKind}")`
+        error: `${KIND15}: proofBinding "current" is only supported for the verify-verdict artifact kind (got "${artifactKind}")`
       };
     }
     if (!this.getDb) {
       return {
         ok: false,
-        error: `${KIND16}: proofBinding "current" requires the composed database context (RunDao run identity) \u2014 refusing an unverifiable binding`
+        error: `${KIND15}: proofBinding "current" requires the composed database context (RunDao run identity) \u2014 refusing an unverifiable binding`
       };
     }
     if (typeof options.taskFile !== "string" || options.taskFile.trim() === "") {
       return {
         ok: false,
-        error: `${KIND16}: proofBinding "current" requires a non-empty "taskFile" option \u2014 the fresh digest must cover the canonical task spec`
+        error: `${KIND15}: proofBinding "current" requires a non-empty "taskFile" option \u2014 the fresh digest must cover the canonical task spec`
       };
     }
     const inputs = await readProofInputContents(this.fileSystem, workdir, options);
     if (!inputs.ok) {
-      return { ok: false, error: `${KIND16}: ${inputs.error}` };
+      return { ok: false, error: `${KIND15}: ${inputs.error}` };
     }
     let digest;
     try {
@@ -102106,19 +102079,19 @@ class RunArtifactActionRunner {
         fileSystem: this.fileSystem
       });
     } catch (error) {
-      return { ok: false, error: `${KIND16}: fresh proof capture failed: ${error.message}` };
+      return { ok: false, error: `${KIND15}: fresh proof capture failed: ${error.message}` };
     }
     const varDigest = context.vars.proofDigestNow ?? context.vars.proofDigest;
     if (typeof varDigest !== "string" || !PROOF_DIGEST_RE.test(varDigest)) {
       return {
         ok: false,
-        error: `${KIND16}: proofBinding "current" does not hold - the run has no current proof input ` + `digest (vars.proofDigestNow/proofDigest missing or malformed), so the artifact cannot be ` + `bound to a proof that was never captured; capture one with proof.fingerprint first`
+        error: `${KIND15}: proofBinding "current" does not hold - the run has no current proof input ` + `digest (vars.proofDigestNow/proofDigest missing or malformed), so the artifact cannot be ` + `bound to a proof that was never captured; capture one with proof.fingerprint first`
       };
     }
     if (varDigest !== digest) {
       return {
         ok: false,
-        error: `${KIND16}: the run's declared proof digest (${varDigest}) does not match the freshly ` + `captured digest (${digest}) \u2014 a stale or forged var cannot bless artifact content (0785 R3)`
+        error: `${KIND15}: the run's declared proof digest (${varDigest}) does not match the freshly ` + `captured digest (${digest}) \u2014 a stale or forged var cannot bless artifact content (0785 R3)`
       };
     }
     let normalized;
@@ -102148,7 +102121,7 @@ class RunArtifactActionRunner {
     try {
       raw = await this.fileSystem.readFile(normalized);
     } catch (error) {
-      return { ok: false, error: `${KIND16}: verdict artifact unreadable: ${error.message}` };
+      return { ok: false, error: `${KIND15}: verdict artifact unreadable: ${error.message}` };
     }
     const taskWbs = String(context.vars.wbs ?? "");
     const outcome = parseVerifyVerdict(raw, taskWbs);
@@ -102156,33 +102129,33 @@ class RunArtifactActionRunner {
       const detail = outcome.kind === "invalid" && outcome.reason !== undefined ? `: ${outcome.reason}` : "";
       return {
         ok: false,
-        error: `${KIND16}: verdict artifact is ${outcome.kind}${detail} \u2014 refusing to bind (0785 R3)`
+        error: `${KIND15}: verdict artifact is ${outcome.kind}${detail} \u2014 refusing to bind (0785 R3)`
       };
     }
     const verdict = outcome.verdict;
     if (verdict.wbs !== taskWbs) {
       return {
         ok: false,
-        error: `${KIND16}: verdict artifact names wbs "${verdict.wbs}" but the run carries task "${taskWbs}"`
+        error: `${KIND15}: verdict artifact names wbs "${verdict.wbs}" but the run carries task "${taskWbs}"`
       };
     }
     if (verdict.verdict !== "PASS") {
       return {
         ok: false,
-        error: `${KIND16}: verdict aggregate is ${verdict.verdict}, not PASS \u2014 refusing to bind`
+        error: `${KIND15}: verdict aggregate is ${verdict.verdict}, not PASS \u2014 refusing to bind`
       };
     }
     let root;
     try {
       root = JSON.parse(raw);
     } catch {
-      return { ok: false, error: `${KIND16}: verdict artifact is malformed JSON` };
+      return { ok: false, error: `${KIND15}: verdict artifact is malformed JSON` };
     }
     const proof = root.proof;
     if (proof === null || typeof proof !== "object" || Array.isArray(proof)) {
       return {
         ok: false,
-        error: `${KIND16}: verdict artifact carries no raw proof block \u2014 binding refused (0785 R3)`
+        error: `${KIND15}: verdict artifact carries no raw proof block \u2014 binding refused (0785 R3)`
       };
     }
     const p = proof;
@@ -102196,13 +102169,13 @@ class RunArtifactActionRunner {
     if (p.digest !== digest) {
       return {
         ok: false,
-        error: `${KIND16}: proof.digest ${String(p.digest)} does not equal the freshly captured digest (${digest})`
+        error: `${KIND15}: proof.digest ${String(p.digest)} does not equal the freshly captured digest (${digest})`
       };
     }
     if (p.runId !== context.runId) {
       return {
         ok: false,
-        error: `${KIND16}: proof.runId ${String(p.runId)} does not match the certifying run ${context.runId}`
+        error: `${KIND15}: proof.runId ${String(p.runId)} does not match the certifying run ${context.runId}`
       };
     }
     const db = await this.getDb();
@@ -102210,21 +102183,21 @@ class RunArtifactActionRunner {
     if (runRow === undefined) {
       return {
         ok: false,
-        error: `${KIND16}: run ${context.runId} has no authoritative row \u2014 refusing binding (0785 R3)`
+        error: `${KIND15}: run ${context.runId} has no authoritative row \u2014 refusing binding (0785 R3)`
       };
     }
     let metadata = {};
     try {
       metadata = JSON.parse(runRow.metadata_json || "{}");
     } catch {
-      return { ok: false, error: `${KIND16}: run ${context.runId} metadata_json is malformed \u2014 refusing binding` };
+      return { ok: false, error: `${KIND15}: run ${context.runId} metadata_json is malformed \u2014 refusing binding` };
     }
     const resumeDigest = metadata.resumeDefinitionDigest;
     const expectedDefinition = typeof resumeDigest === "string" && resumeDigest !== "" ? resumeDigest : metadata.definitionDigest;
     if (typeof expectedDefinition !== "string" || p.definitionDigest !== expectedDefinition) {
       return {
         ok: false,
-        error: `${KIND16}: proof.definitionDigest ${String(p.definitionDigest)} does not match the run's ` + `${typeof resumeDigest === "string" && resumeDigest !== "" ? "resume " : ""}definition digest \u2014 ` + `a stale-definition artifact cannot certify this run (0785 R3)`
+        error: `${KIND15}: proof.definitionDigest ${String(p.definitionDigest)} does not match the run's ` + `${typeof resumeDigest === "string" && resumeDigest !== "" ? "resume " : ""}definition digest \u2014 ` + `a stale-definition artifact cannot certify this run (0785 R3)`
       };
     }
     const qualityGate = stageOf("qualityGate");
@@ -102233,7 +102206,7 @@ class RunArtifactActionRunner {
     if (qualityGate === null || review === null || verification === null) {
       return {
         ok: false,
-        error: `${KIND16}: proof.stages is missing qualityGate/review/verification evidence \u2014 binding refused`
+        error: `${KIND15}: proof.stages is missing qualityGate/review/verification evidence \u2014 binding refused`
       };
     }
     for (const [name, stage] of [
@@ -102244,26 +102217,26 @@ class RunArtifactActionRunner {
       if (stage.digest !== digest) {
         return {
           ok: false,
-          error: `${KIND16}: proof.stages.${name}.digest does not equal the freshly captured digest`
+          error: `${KIND15}: proof.stages.${name}.digest does not equal the freshly captured digest`
         };
       }
     }
     if (qualityGate.status !== "PASS") {
       return {
         ok: false,
-        error: `${KIND16}: proof.stages.qualityGate.status is ${String(qualityGate.status)}, not PASS`
+        error: `${KIND15}: proof.stages.qualityGate.status is ${String(qualityGate.status)}, not PASS`
       };
     }
     if (verification.status !== "PASS") {
       return {
         ok: false,
-        error: `${KIND16}: proof.stages.verification.status is ${String(verification.status)}, not PASS`
+        error: `${KIND15}: proof.stages.verification.status is ${String(verification.status)}, not PASS`
       };
     }
     if (review.status !== "completed") {
       return {
         ok: false,
-        error: `${KIND16}: proof.stages.review.status is "${String(review.status)}" \u2014 a skipped or stale review is not completed evidence (0785 R4)`
+        error: `${KIND15}: proof.stages.review.status is "${String(review.status)}" \u2014 a skipped or stale review is not completed evidence (0785 R4)`
       };
     }
     const markerPath = join41(resolve15(workdir), ".spur", "run", `${context.runId}-review-proof.digest`);
@@ -102276,7 +102249,7 @@ class RunArtifactActionRunner {
     if (marker === null || marker.trim() !== digest) {
       return {
         ok: false,
-        error: `${KIND16}: review-proof marker ${context.runId}-review-proof.digest is missing or does not name ` + `the current digest \u2014 review completion is not evidenced for this run (0785 R4)`
+        error: `${KIND15}: review-proof marker ${context.runId}-review-proof.digest is missing or does not name ` + `the current digest \u2014 review completion is not evidenced for this run (0785 R4)`
       };
     }
     const dao = this.artifactDao ?? new ArtifactDao(db);
@@ -102287,7 +102260,7 @@ class RunArtifactActionRunner {
         registeredPath = await persistDurableArtifact(normalized, workdir, context.runId, this.fileSystem);
       }
     } catch (error) {
-      return { ok: false, error: `${KIND16}: durable persist failed: ${error.message}` };
+      return { ok: false, error: `${KIND15}: durable persist failed: ${error.message}` };
     }
     const record = await dao.record({
       path: registeredPath,
@@ -102308,7 +102281,7 @@ class RunArtifactActionRunner {
     };
   }
 }
-var copyFile2, link, mkdir2, readFile5, unlink2, writeFile3, KIND16 = "run.artifact", PROOF_DIGEST_RE;
+var copyFile2, link, mkdir2, readFile5, unlink2, writeFile3, KIND15 = "run.artifact", PROOF_DIGEST_RE;
 var init_run_artifact = __esm(() => {
   init_src2();
   init_dist5();
@@ -102322,7 +102295,7 @@ var init_run_artifact = __esm(() => {
 
 // ../../packages/app/src/workflow/guards/contract-violation.ts
 class ContractViolationGuardRunner {
-  kind = KIND17;
+  kind = KIND16;
   constructor() {}
   async evaluate(_options, context) {
     const data = context.lastActionResult?.data;
@@ -102339,7 +102312,7 @@ class ContractViolationGuardRunner {
     };
   }
 }
-var KIND17 = "contract-violation";
+var KIND16 = "contract-violation";
 
 // ../../packages/app/src/workflow/builtins.ts
 function registerSpurBuiltins(host, options) {
@@ -102370,9 +102343,6 @@ function registerSpurBuiltins(host, options) {
   if (options.httpRequester) {
     host.registerAction(new HttpRequestActionRunner(options.httpRequester, options.hostAllowlist ?? new Set), "builtin");
   }
-  if (options.responseValidateEngine) {
-    host.registerAction(new ResponseValidateActionRunner(options.responseValidateEngine), "builtin");
-  }
 }
 var init_builtins2 = __esm(() => {
   init_dist5();
@@ -108278,11 +108248,15 @@ function classifyProviderUsage(usage) {
   const hasWindow = RATE_WINDOW_NAMES.some((n) => usage[n] !== null && usage[n] !== undefined);
   return hasWindow ? { status: "headroom", exhaustedWindow: undefined } : { status: "no-usage", exhaustedWindow: undefined };
 }
+function agentProviderSlug(agent) {
+  const lower = (agent ?? "").toLowerCase();
+  return PROVIDER_ALIASES[lower] ?? lower;
+}
 function mapProvidersToExecutors(providers, executors) {
   const mapping = new Map;
   for (const provider of providers) {
     const lower = provider.toLowerCase();
-    const names = executors.filter((e) => (e.agent ?? "").toLowerCase() === lower || typeof e.model === "string" && e.model.split("/")[0]?.toLowerCase() === lower).map((e) => e.name);
+    const names = executors.filter((e) => agentProviderSlug(e.agent) === lower || typeof e.model === "string" && e.model.split("/")[0]?.toLowerCase() === lower).map((e) => e.name);
     if (names.length > 0)
       mapping.set(provider, names);
   }
@@ -108534,7 +108508,7 @@ async function finalizeOutcomes(entries, context) {
     }
   }
 }
-var codexbarWindowSchema, codexbarEntrySchema, RATE_WINDOW_NAMES, AgentUsageProducerError;
+var codexbarWindowSchema, codexbarEntrySchema, RATE_WINDOW_NAMES, AgentUsageProducerError, PROVIDER_ALIASES;
 var init_agent_usage_producer = __esm(() => {
   init_src();
   init_agent_quota_events();
@@ -108566,6 +108540,9 @@ var init_agent_usage_producer = __esm(() => {
       this.name = "AgentUsageProducerError";
     }
   };
+  PROVIDER_ALIASES = {
+    "antigravity-cli": "antigravity"
+  };
 });
 
 // ../../packages/app/src/services/agent-usage-source.ts
@@ -119962,36 +119939,6 @@ async function createFeatureLookup(workdir, fileSystem = createNodeFileSystem2()
     return { path, content: await fileSystem.readFile(path) };
   };
 }
-function deriveFeatureConfidence(input) {
-  const override = input.override === undefined || input.override === "" ? undefined : input.override;
-  const measured = [];
-  if (input.status === "PASS")
-    measured.push("verification command exited 0");
-  else
-    measured.push("verification command did not exit 0");
-  if (input.afterDigest !== undefined) {
-    measured.push(input.afterDigest === input.inputDigest ? "proof-input digest unchanged across the pass" : "proof-input digest changed across the pass");
-  }
-  if (input.status !== "PASS")
-    return { confidence: "LOW", basis: measured };
-  const derived = input.effectiveCmd === input.configuredCmd ? "HIGH" : "MEDIUM";
-  if (input.effectiveCmd !== input.configuredCmd) {
-    measured.push(`caller command override: ${input.effectiveCmd}`);
-    measured.push(`the selected definition declares: ${input.configuredCmd}`);
-  }
-  if (override === undefined)
-    return { confidence: derived, basis: measured };
-  return { confidence: override, basis: [`operator-declared ${override}`, ...measured] };
-}
-function assertConfidenceOverride(raw) {
-  if (raw === undefined || raw === "")
-    return;
-  const upper = raw.toUpperCase();
-  if (!FEATURE_RECEIPT_CONFIDENCE_LEVELS.includes(upper)) {
-    throw new Error(`confidence must be HIGH, MEDIUM or LOW (got ${JSON.stringify(raw)})`);
-  }
-  return upper;
-}
 async function defaultRegisterArtifact(workdir, artifact) {
   const db = await openInlineRunProjectDb(workdir);
   try {
@@ -120027,7 +119974,6 @@ async function runFeatureVerification(input) {
   const vars = selected.workflow.vars;
   const configuredCmd = typeof vars?.verificationCmd === "string" && vars.verificationCmd.length > 0 ? vars.verificationCmd : "bun run spur-check-feature";
   const effectiveCmd = input.cmdOverride !== undefined && input.cmdOverride !== "" ? input.cmdOverride : configuredCmd;
-  const confidenceOverride = assertConfidenceOverride(input.confidenceOverride);
   const spec = await lookup(input.featureId);
   if (spec === null) {
     throw new Error(`feature ${input.featureId} not found in the configured features directory`);
@@ -120053,25 +119999,13 @@ async function runFeatureVerification(input) {
   const base = { featureId: input.featureId, runId: input.runId, effectiveCmd, logPath, receiptPath: runScoped };
   const launchSplit = split(effectiveCmd, "feature-verification verificationCmd");
   if ("error" in launchSplit) {
-    const { confidence, basis } = deriveFeatureConfidence({
-      status: "FAIL",
-      configuredCmd,
-      effectiveCmd,
-      inputDigest: beforeDigest,
-      override: confidenceOverride
-    });
     await receipts.complete(fileSystem, runDir, receipt, {
       status: "FAIL",
-      inputDigest: beforeDigest,
-      confidence,
-      confidenceBasis: basis,
-      confidenceAcknowledged: input.ackLowConfidence === true
+      inputDigest: beforeDigest
     });
     return {
       ...base,
       status: "FAIL",
-      confidence,
-      confidenceBasis: basis,
       message: `verification FAIL (${launchSplit.error})`
     };
   }
@@ -120085,27 +120019,14 @@ async function runFeatureVerification(input) {
     const exit = result.status ?? 1;
     const afterDigest = await receipts.captureDigest(input.workdir, spec.content, learningsContent);
     const status = exit === 0 && afterDigest === beforeDigest ? "PASS" : "FAIL";
-    const { confidence, basis } = deriveFeatureConfidence({
-      status,
-      configuredCmd,
-      effectiveCmd,
-      inputDigest: beforeDigest,
-      afterDigest,
-      override: confidenceOverride
-    });
     await receipts.complete(fileSystem, runDir, receipt, {
       status,
-      inputDigest: afterDigest,
-      confidence,
-      confidenceBasis: basis,
-      confidenceAcknowledged: input.ackLowConfidence === true
+      inputDigest: afterDigest
     });
     return {
       ...base,
       status,
-      confidence,
-      confidenceBasis: basis,
-      message: `verification ${status} (run ${input.runId}, confidence ${confidence}, log ${logPath})`
+      message: `verification ${status} (run ${input.runId}, log ${logPath})`
     };
   } finally {
     closeLog(logFd);
@@ -120950,7 +120871,6 @@ __export(exports_src, {
   FEATURE_ACTION_NAMES: () => FEATURE_ACTION_NAMES,
   FEATURE_LIFECYCLE_PROFILE: () => FEATURE_LIFECYCLE_PROFILE,
   FEATURE_LIFECYCLE_WORKFLOW: () => FEATURE_LIFECYCLE_WORKFLOW,
-  FEATURE_RECEIPT_CONFIDENCE_LEVELS: () => FEATURE_RECEIPT_CONFIDENCE_LEVELS,
   FEATURE_RECEIPT_SCHEMA_VERSION: () => FEATURE_RECEIPT_SCHEMA_VERSION,
   FINDING_CODES: () => FINDING_CODES,
   FLEET_AUTO_TAG: () => FLEET_AUTO_TAG,
@@ -121014,7 +120934,6 @@ __export(exports_src, {
   RUN_STORE_LIST_MAX_LIMIT: () => RUN_STORE_LIST_MAX_LIMIT,
   RUN_STORE_WBS_DEFAULT_LIMIT: () => RUN_STORE_WBS_DEFAULT_LIMIT,
   RUN_STORE_WBS_MAX_LIMIT: () => RUN_STORE_WBS_MAX_LIMIT,
-  ResponseValidateActionRunner: () => ResponseValidateActionRunner,
   RetroCorrelator: () => RetroCorrelator,
   RuleCheckActionRunner: () => RuleCheckActionRunner,
   RuleService: () => RuleService,
@@ -121142,7 +121061,6 @@ __export(exports_src, {
   decodeRunListCursor: () => decodeRunListCursor,
   decorateWorkflowEvent: () => decorateWorkflowEvent,
   deduceCommandCategory: () => deduceCommandCategory,
-  deriveFeatureConfidence: () => deriveFeatureConfidence,
   deriveVerdict: () => deriveVerdict,
   discoverEnabledClaudePlugins: () => discoverEnabledClaudePlugins,
   disposeDecisionServices: () => disposeDecisionServices,
@@ -121205,6 +121123,7 @@ __export(exports_src, {
   isInlineRunActionStatus: () => isInlineRunActionStatus,
   isInlineRunCloseStatus: () => isInlineRunCloseStatus,
   isInsideRoot: () => isInsideRoot,
+  isLocalHost: () => isLocalHost,
   isPortAvailable: () => isPortAvailable,
   isPortLive: () => isPortLive,
   isProofCaptureError: () => isProofCaptureError,
@@ -128491,7 +128410,7 @@ import {
   statSync as statSync17,
   writeFileSync as writeFileSync17
 } from "fs";
-import { join as join80 } from "path";
+import { join as join81 } from "path";
 function parseScalar(raw) {
   const t = raw.trim();
   if (t.startsWith('"') && t.endsWith('"'))
@@ -128700,10 +128619,6 @@ function checkReportStructure(reportMarkdown) {
       if (!/(^|[\s`])P[123]([\s`.]|$)/.test(block) && !block.includes("symbolic-severity")) {
         problems.push("finding-invalid-severity");
       }
-      const confValue = block.match(/`confidence`\s*[:=]\s*`?([^`\n]*?)`?\s*(?:\n|$)/)?.[1]?.trim();
-      if (confValue !== undefined && confValue !== "" && !FINDING_CONFIDENCES.includes(confValue.toLowerCase())) {
-        problems.push(`finding-invalid-confidence:${confValue}`);
-      }
       const catValue = block.match(/`category`\s*[:=]\s*`?([^`\n]+?)`?\s*(?:\n|$)/)?.[1];
       if (catValue && !FINDING_CATEGORIES.includes(catValue.trim())) {
         problems.push(`finding-invalid-category:${catValue.trim()}`);
@@ -128737,7 +128652,7 @@ function logicDigest(path) {
   try {
     const h = createHash17("sha256");
     if (statSync17(path).isDirectory()) {
-      const walk = (dir) => readdirSync13(dir, { withFileTypes: true }).flatMap((e) => e.isDirectory() ? walk(join80(dir, e.name)) : /\.(md|ya?ml)$/.test(e.name) ? [join80(dir, e.name)] : []).sort();
+      const walk = (dir) => readdirSync13(dir, { withFileTypes: true }).flatMap((e) => e.isDirectory() ? walk(join81(dir, e.name)) : /\.(md|ya?ml)$/.test(e.name) ? [join81(dir, e.name)] : []).sort();
       for (const f of walk(path)) {
         h.update(f.slice(path.length));
         h.update(readFileSync25(f));
@@ -129042,7 +128957,7 @@ function diffPorcelain(before, now, expects) {
   const beforePaths = porcelainPaths(before);
   return [...porcelainPaths(now)].filter((p) => !beforePaths.has(p) && !expects.has(p)).sort();
 }
-var REPORT_SECTIONS, FINDING_FIELDS, DISPOSITIONS, FINDING_CATEGORIES, FINDING_CONFIDENCES, NOT_AVAILABLE = "not available", YAML_KEYS;
+var REPORT_SECTIONS, FINDING_FIELDS, DISPOSITIONS, FINDING_CATEGORIES, NOT_AVAILABLE = "not available", YAML_KEYS;
 var init_history_anatomy = __esm(() => {
   init_artifact_digest();
   REPORT_SECTIONS = [
@@ -129066,7 +128981,6 @@ var init_history_anatomy = __esm(() => {
     "trend",
     "observation",
     "inference",
-    "confidence",
     "contradictions",
     "evidenceAnchor",
     "severity",
@@ -129083,7 +128997,6 @@ var init_history_anatomy = __esm(() => {
     "telemetry",
     "positive"
   ];
-  FINDING_CONFIDENCES = ["high", "medium", "low"];
   YAML_KEYS = [
     "windowState",
     "generatedAt",
@@ -129108,7 +129021,7 @@ var init_history_anatomy = __esm(() => {
 // ../../packages/app/src/services/history-anatomy-cli.ts
 import { existsSync as existsSync29, mkdirSync as mkdirSync21, readFileSync as readFileSync26, writeFileSync as writeFileSync18 } from "fs";
 import { homedir as homedir13 } from "os";
-import { join as join81 } from "path";
+import { join as join82 } from "path";
 function parseFlags(args) {
   const out = {};
   for (let i = 0;i < args.length; i++) {
@@ -129130,9 +129043,9 @@ function resolveSkillDir(deps = {}) {
   const cwd = deps.cwd ?? process.cwd();
   const home = deps.home ?? homedir13();
   const candidates = [
-    join81(cwd, "plugins", "sp", "skills", "history-anatomy"),
-    join81(home, ".agents", "skills", "sp-history-anatomy"),
-    join81(home, ".claude", "skills", "sp-history-anatomy")
+    join82(cwd, "plugins", "sp", "skills", "history-anatomy"),
+    join82(home, ".agents", "skills", "sp-history-anatomy"),
+    join82(home, ".claude", "skills", "sp-history-anatomy")
   ];
   return candidates.find((dir) => existsSync29(dir)) ?? candidates[0];
 }
@@ -129363,7 +129276,7 @@ var init_history_anatomy_cli = __esm(() => {
 
 // ../../packages/app/src/services/daily-summary.ts
 import { existsSync as existsSync30, mkdirSync as mkdirSync22, readlinkSync as readlinkSync2, writeFileSync as writeFileSync19 } from "fs";
-import { dirname as dirname40, isAbsolute as isAbsolute14, join as join82, resolve as resolve30 } from "path";
+import { dirname as dirname40, isAbsolute as isAbsolute14, join as join83, resolve as resolve30 } from "path";
 function parseArgs2(argv) {
   const args = argv;
   const options = {
@@ -129750,8 +129663,8 @@ function ensureDir(path) {
 }
 function writeSummary(markdown, options) {
   const filename = `summary_${options.date.replace(/-/g, "")}.md`;
-  const outputPath = options.outputPath || join82(DAILY_DIR, filename);
-  ensureDir(join82(outputPath, ".."));
+  const outputPath = options.outputPath || join83(DAILY_DIR, filename);
+  ensureDir(join83(outputPath, ".."));
   writeFileSync19(outputPath, markdown, "utf-8");
   return outputPath;
 }
@@ -129900,7 +129813,7 @@ var init_daily_summary = __esm(() => {
 // ../../packages/app/src/workflow/transcript.ts
 import { existsSync as existsSync31, readdirSync as readdirSync14 } from "fs";
 import { homedir as homedir14 } from "os";
-import { join as join83 } from "path";
+import { join as join84 } from "path";
 function sniffTranscriptFormat(rows) {
   for (const row of rows) {
     if (row.type === "message" && PI_ROLES.has(row.message?.role ?? ""))
@@ -129929,7 +129842,7 @@ function parseTranscriptRows(lines) {
   }
   return { rows, skippedLines, format: sniffTranscriptFormat(rows.map(([r]) => r)) };
 }
-function resolveTranscript(env, projectsRoot = join83(homedir14(), ".claude", "projects"), override) {
+function resolveTranscript(env, projectsRoot = join84(homedir14(), ".claude", "projects"), override) {
   if (override)
     return existsSync31(override) ? { ok: true, path: override } : { ok: false, reason: "no transcript" };
   const id = env.CLAUDE_CODE_SESSION_ID;
@@ -129948,7 +129861,7 @@ function resolveTranscript(env, projectsRoot = join83(homedir14(), ".claude", "p
   if (!existsSync31(projectsRoot))
     return { ok: false, reason: `no transcript root ${projectsRoot}` };
   for (const dir of readdirSync14(projectsRoot)) {
-    const path = join83(projectsRoot, dir, `${id}.jsonl`);
+    const path = join84(projectsRoot, dir, `${id}.jsonl`);
     if (existsSync31(path))
       return { ok: true, path };
   }
@@ -130143,7 +130056,7 @@ var require_src9 = __commonJS(function(exports, module) {
 
 // ../../packages/app/src/workflow/run-summary-render.ts
 import { existsSync as existsSync32, mkdirSync as mkdirSync24, readFileSync as readFileSync29, writeFileSync as writeFileSync21 } from "fs";
-import { join as join98 } from "path";
+import { join as join99 } from "path";
 function renderSummaryMarkdown(summary) {
   const line = (r, bold = false) => {
     const stage = bold ? `**${r.stage}**` : r.stage;
@@ -130229,9 +130142,9 @@ function renderRollupMarkdown(rows) {
 }
 function writeCloseSummary(run, opts = {}) {
   const cwd = opts.cwd ?? process.cwd();
-  const runDir = join98(cwd, ".spur", "run");
-  const rel = join98(".spur", "run", `${run.runId}-summary.md`);
-  const abs = join98(cwd, rel);
+  const runDir = join99(cwd, ".spur", "run");
+  const rel = join99(".spur", "run", `${run.runId}-summary.md`);
+  const abs = join99(cwd, rel);
   const na = (reason) => {
     mkdirSync24(runDir, { recursive: true });
     writeFileSync21(abs, `Execution summary: n/a (${reason})
@@ -130256,14 +130169,14 @@ function writeCloseSummary(run, opts = {}) {
     mkdirSync24(runDir, { recursive: true });
     writeFileSync21(abs, `${renderSummaryMarkdown(summary)}
 `);
-    writeFileSync21(join98(runDir, `${run.runId}-summary.json`), JSON.stringify({ ...summary, runId: run.runId, startedAt: run.startedAt, completedAt: run.completedAt }, null, 2));
+    writeFileSync21(join99(runDir, `${run.runId}-summary.json`), JSON.stringify({ ...summary, runId: run.runId, startedAt: run.startedAt, completedAt: run.completedAt }, null, 2));
     return rel;
   } catch (error) {
     return na(error instanceof Error ? error.message : String(error));
   }
 }
 function gateFromReceipt(cwd, runId) {
-  const path = join98(cwd, ".spur", "run", `${runId}-check-receipt.json`);
+  const path = join99(cwd, ".spur", "run", `${runId}-check-receipt.json`);
   if (!existsSync32(path))
     return { ms: null, reason: "no matching check receipt" };
   try {
@@ -138207,8 +138120,18 @@ init_src();
 init_dist5();
 import { homedir as homedir12 } from "os";
 import { join as join67 } from "path";
-var CODEXBAR_ARGV = ["codexbar", "usage", "--format", "json", "--provider", "all"];
-var DEFAULT_CAPTURE_TIMEOUT_MS = 180000;
+var CODEXBAR_ARGV = ["codexbar", "usage", "--format", "json"];
+var DEFAULT_CAPTURE_TIMEOUT_MS = 300000;
+var CAPTURE_TIMEOUT_OPTION = "agentUsageCaptureTimeoutMs";
+var MAX_TIMER_MS = 2147483647;
+function resolveCaptureTimeoutMs(spurConfig) {
+  const raw = getAppOptions(spurConfig, CAPTURE_TIMEOUT_OPTION, undefined);
+  if (raw === undefined)
+    return DEFAULT_CAPTURE_TIMEOUT_MS;
+  if (typeof raw === "number" && Number.isInteger(raw) && raw > 0 && raw <= MAX_TIMER_MS)
+    return raw;
+  throw new UsageSourceError(`bootstrap.options.${CAPTURE_TIMEOUT_OPTION} must be a positive integer number of milliseconds (at most ${MAX_TIMER_MS}); received ${JSON.stringify(raw)}`);
+}
 
 class CodexbarUsageSource {
   command;
@@ -138238,7 +138161,7 @@ class CodexbarUsageSource {
     }
     const outcome = result.outcome ?? "exit";
     if (outcome === "timeout" || outcome === "cancelled") {
-      throw new UsageSourceError(`\`${this.command.join(" ")}\` capture exceeded the ${this.timeoutMs} ms deadline and was terminated \u2014 ` + "result is unusable (fail-closed); retry or investigate the codexbar hang");
+      throw new UsageSourceError(`\`${this.command.join(" ")}\` capture exceeded the ${this.timeoutMs} ms deadline and was terminated \u2014 ` + `result is unusable (fail-closed); retry, raise bootstrap.options.${CAPTURE_TIMEOUT_OPTION}, or investigate the codexbar hang`);
     }
     if (outcome === "signal" || outcome === "error") {
       throw new UsageSourceError(`\`${this.command.join(" ")}\` capture ended abnormally (${outcome}) \u2014 capture is unusable (fail-closed)`);
@@ -142424,13 +142347,13 @@ async function runAgentUsage(context, flags, deps) {
     }
     return 2;
   }
-  const options = {
-    source: deps?.source ?? _testUsageDeps?.source ?? new CodexbarUsageSource,
-    snapshotPath: deps?.snapshotPath ?? _testUsageDeps?.snapshotPath ?? defaultAgentUsageSnapshotPath(),
-    dryRun: flags.dryRun === true
-  };
   let result;
   try {
+    const options = {
+      source: deps?.source ?? _testUsageDeps?.source ?? new CodexbarUsageSource(undefined, resolveCaptureTimeoutMs(context.spurConfig)),
+      snapshotPath: deps?.snapshotPath ?? _testUsageDeps?.snapshotPath ?? defaultAgentUsageSnapshotPath(),
+      dryRun: flags.dryRun === true
+    };
     result = await runAgentUsageProducer({
       getDb: () => context.getDb(),
       projectRoot: context.cwd,
@@ -142725,12 +142648,33 @@ function registerAgentCommand(program, context) {
 init_src();
 init_dist5();
 import { existsSync as existsSync26, readdirSync as readdirSync12, readFileSync as readFileSync23 } from "fs";
-import { join as join78 } from "path";
+import { join as join79 } from "path";
+
+// ../../scripts/commands/bundle-plugins.ts
+import { cp, rm as rm4 } from "fs/promises";
+import { join as join77 } from "path";
+import { fileURLToPath as fileURLToPath6 } from "url";
+var REPO_ROOT = fileURLToPath6(new URL("../../", import.meta.url));
+var PLUGIN_SOURCE = join77(REPO_ROOT, "plugins");
+var PLUGIN_TARGET = join77(REPO_ROOT, "apps/cli/plugins");
+var MARKETPLACE_SOURCE = join77(REPO_ROOT, ".claude-plugin");
+var MARKETPLACE_TARGET = join77(REPO_ROOT, "apps/cli/.claude-plugin");
+var EXCLUDE = /(^|\/)(\.DS_Store|tests|evals)($|\/)|\.test\.ts$/;
+async function bundlePlugins(pluginTarget = PLUGIN_TARGET, marketplaceTarget = MARKETPLACE_TARGET, pluginSource = PLUGIN_SOURCE, marketplaceSource = MARKETPLACE_SOURCE) {
+  await rm4(pluginTarget, { recursive: true, force: true });
+  await rm4(marketplaceTarget, { recursive: true, force: true });
+  await cp(pluginSource, pluginTarget, {
+    recursive: true,
+    filter: (src) => !EXCLUDE.test(src.slice(pluginSource.length))
+  });
+  await cp(marketplaceSource, marketplaceTarget, { recursive: true });
+  return { pluginTarget, marketplaceTarget };
+}
 
 // src/version-carriers.ts
 init_zod();
 import { existsSync as existsSync25 } from "fs";
-import { join as join77 } from "path";
+import { join as join78 } from "path";
 var defaultLiteralProbe = { file: "src/config.ts", identifier: "binaryVersion" };
 var registry3 = new Map;
 function registerCarrierType(type, def) {
@@ -142789,7 +142733,7 @@ registerCarrierType("plugin-manifest", {
   schema: PluginManifestCarrierSchema,
   async syncRepoWide(carrier, { repoRoot }, version, staged, output) {
     for (const rel of carrier.paths) {
-      const absPath = join77(repoRoot, rel);
+      const absPath = join78(repoRoot, rel);
       const manifest = await readJson(absPath);
       if (manifest === null) {
         output.write(`  \u26A0 ${rel}: not found or malformed \u2014 skipping`);
@@ -142849,7 +142793,7 @@ async function run2(repoRoot, cmd, timeoutMs) {
   };
 }
 async function verifyLockfile(ctx, output) {
-  const lockPath = join78(ctx.repoRoot, "bun.lock");
+  const lockPath = join79(ctx.repoRoot, "bun.lock");
   if (!existsSync26(lockPath) || Bun.file(lockPath).size === 0)
     return;
   const result = await run2(ctx.repoRoot, ["bun", "install", "--frozen-lockfile"]);
@@ -142859,7 +142803,7 @@ async function verifyLockfile(ctx, output) {
   output.write("  \u21B3 bun.lock: verified (bun install --frozen-lockfile)");
 }
 async function assertPluginInstallable(ctx, output) {
-  const smokePath = join78(ctx.repoRoot, "scripts", "commands", "plugin-install-smoke.ts");
+  const smokePath = join79(ctx.repoRoot, "scripts", "commands", "plugin-install-smoke.ts");
   if (!existsSync26(smokePath)) {
     output.write("  \u21B3 plugin-install-smoke: gate script not present in this repo \u2014 skipped");
     return;
@@ -142901,7 +142845,7 @@ async function readJson2(path) {
 function rootWorkspaceGlobs(repoRoot) {
   let root;
   try {
-    root = JSON.parse(readFileSync23(join78(repoRoot, "package.json"), "utf8"));
+    root = JSON.parse(readFileSync23(join79(repoRoot, "package.json"), "utf8"));
   } catch {
     return [];
   }
@@ -142918,11 +142862,11 @@ function workspaceDirs(repoRoot) {
     if (!glob.endsWith("/*"))
       continue;
     const parent = glob.slice(0, -2);
-    const parentAbs = join78(repoRoot, parent);
+    const parentAbs = join79(repoRoot, parent);
     if (!existsSync26(parentAbs))
       continue;
     for (const entry of readdirSync12(parentAbs, { withFileTypes: true })) {
-      if (entry.isDirectory() && existsSync26(join78(parentAbs, entry.name, "package.json"))) {
+      if (entry.isDirectory() && existsSync26(join79(parentAbs, entry.name, "package.json"))) {
         dirs.push(`${parent}/${entry.name}`);
       }
     }
@@ -142930,14 +142874,14 @@ function workspaceDirs(repoRoot) {
   return dirs;
 }
 async function releaseContext(repoRoot, bumpVerConfig = resolveBuilderBumpVerConfig(null)) {
-  const rootManifest = await readJson2(join78(repoRoot, "package.json"));
+  const rootManifest = await readJson2(join79(repoRoot, "package.json"));
   if (rootManifest === null) {
     throw new Error(`no package.json found at ${repoRoot} \u2014 builder operates on a package workspace root.`);
   }
   const rootName = typeof rootManifest.name === "string" ? rootManifest.name : "root";
   const workspaces = [];
   for (const dir of workspaceDirs(repoRoot)) {
-    const manifest = await readJson2(join78(repoRoot, dir, "package.json"));
+    const manifest = await readJson2(join79(repoRoot, dir, "package.json"));
     if (manifest === null)
       continue;
     workspaces.push({
@@ -142952,8 +142896,8 @@ async function releaseContext(repoRoot, bumpVerConfig = resolveBuilderBumpVerCon
   const packages = new Map;
   for (const ws of workspaces) {
     const probe = findLiteralProbe(versionCarriers, ws.dir) ?? defaultLiteralProbe;
-    const literalProbe = join78(ws.dir, probe.file);
-    const versionSourceFile = existsSync26(join78(repoRoot, literalProbe)) ? literalProbe : undefined;
+    const literalProbe = join79(ws.dir, probe.file);
+    const versionSourceFile = existsSync26(join79(repoRoot, literalProbe)) ? literalProbe : undefined;
     packages.set(shortName(ws.name), {
       packageDir: ws.dir,
       packageName: ws.name,
@@ -142991,7 +142935,7 @@ async function updateWorkspacePins(ctx, pkgName, oldVersion, newVersion, output)
   const changed = [];
   for (const dir of [".", ...workspaceDirs(ctx.repoRoot)]) {
     const relPath = dir === "." ? "package.json" : `${dir}/package.json`;
-    const manifest = await readJson2(join78(ctx.repoRoot, relPath));
+    const manifest = await readJson2(join79(ctx.repoRoot, relPath));
     if (manifest === null)
       continue;
     let dirty = false;
@@ -143008,7 +142952,7 @@ async function updateWorkspacePins(ctx, pkgName, oldVersion, newVersion, output)
       }
     }
     if (dirty) {
-      await Bun.write(join78(ctx.repoRoot, relPath), `${JSON.stringify(manifest, null, 4)}
+      await Bun.write(join79(ctx.repoRoot, relPath), `${JSON.stringify(manifest, null, 4)}
 `);
       output.write(`  \u21B3 ${relPath}: ${pkgName} workspace pin ${oldVersion} \u2192 ${newVersion}`);
       changed.push(relPath);
@@ -143016,7 +142960,7 @@ async function updateWorkspacePins(ctx, pkgName, oldVersion, newVersion, output)
   }
   if (changed.length === 0)
     return changed;
-  const lockPath = join78(ctx.repoRoot, "bun.lock");
+  const lockPath = join79(ctx.repoRoot, "bun.lock");
   if (existsSync26(lockPath)) {
     const lock = await Bun.file(lockPath).text();
     const staleSpec = `"${pkgName}": "workspace:${oldVersion}"`;
@@ -143028,7 +142972,7 @@ async function updateWorkspacePins(ctx, pkgName, oldVersion, newVersion, output)
   return changed;
 }
 async function updateVersionSourceFile(ctx, filePath, previous, next, output, identifier = "binaryVersion") {
-  const absPath = join78(ctx.repoRoot, filePath);
+  const absPath = join79(ctx.repoRoot, filePath);
   const content = await Bun.file(absPath).text();
   const pattern = new RegExp(`(${identifier.replace(/[.*+?^${}()|[\]\\]/g, "\\$&")}:\\s*['"])\\d+\\.\\d+\\.\\d+(?:-[0-9A-Za-z-.]+)?(?:\\+[0-9A-Za-z-.]+)?(['"])`);
   const updated = content.replace(pattern, `$1${next}$2`);
@@ -143046,7 +142990,7 @@ async function syncExtraCarriers(ctx, version, staged, output) {
   }
 }
 async function syncMarketplaceAndPlugins(ctx, version, staged, output) {
-  const marketplacePath = join78(ctx.repoRoot, ".claude-plugin", "marketplace.json");
+  const marketplacePath = join79(ctx.repoRoot, ".claude-plugin", "marketplace.json");
   const marketplaceFile = Bun.file(marketplacePath);
   if (!await marketplaceFile.exists())
     return;
@@ -143071,7 +143015,7 @@ async function syncMarketplaceAndPlugins(ctx, version, staged, output) {
     output.write(`Bumped marketplace plugins to ${version}`);
   }
   for (const entry of plugins) {
-    const pluginJsonPath = join78(ctx.repoRoot, entry.source, "plugin.json");
+    const pluginJsonPath = join79(ctx.repoRoot, entry.source, "plugin.json");
     const pluginJson = await readJson2(pluginJsonPath);
     if (pluginJson === null) {
       output.write(`  \u26A0 plugin.json not found at ${entry.source}/plugin.json \u2014 skipping`);
@@ -143085,6 +143029,14 @@ async function syncMarketplaceAndPlugins(ctx, version, staged, output) {
       output.write(`Bumped ${entry.source}/plugin.json to ${version}`);
     }
   }
+  for (const config of ctx.packages.values()) {
+    const pkgDir = join79(ctx.repoRoot, config.packageDir);
+    const stagedMarketplace = join79(pkgDir, ".claude-plugin", "marketplace.json");
+    if (!existsSync26(stagedMarketplace))
+      continue;
+    await bundlePlugins(join79(pkgDir, "plugins"), join79(pkgDir, ".claude-plugin"), join79(ctx.repoRoot, "plugins"), join79(ctx.repoRoot, ".claude-plugin"));
+    output.write(`Refreshed staged plugin copy in ${config.packageDir}`);
+  }
 }
 async function assertCleanTreeOnBranch(ctx) {
   const RUNTIME_NOISE = /^\?\? \.spur\/(?:spur\.db|spur\.db-shm|spur\.db-wal|logs\/)/;
@@ -143125,7 +143077,7 @@ async function bumpVersion(ctx, config, version, options, output) {
     throw new Error(`${config.packageName}@${version} is already published on npm. Use a new version.`);
   }
   await assertPluginInstallable(ctx, output);
-  const manifestPath = join78(ctx.repoRoot, config.packageDir, "package.json");
+  const manifestPath = join79(ctx.repoRoot, config.packageDir, "package.json");
   const manifest = await readJson2(manifestPath);
   if (manifest === null)
     throw new Error(`missing or malformed manifest at ${config.packageDir}/package.json`);
@@ -143144,7 +143096,7 @@ async function bumpVersion(ctx, config, version, options, output) {
   await syncMarketplaceAndPlugins(ctx, version, staged, output);
   await syncExtraCarriers(ctx, version, staged, output);
   await verifyLockfile(ctx, output);
-  const lockPath = join78(ctx.repoRoot, "bun.lock");
+  const lockPath = join79(ctx.repoRoot, "bun.lock");
   if (existsSync26(lockPath) && Bun.file(lockPath).size > 0)
     staged.push("bun.lock");
   await git2(ctx.repoRoot, ["add", ...staged]);
@@ -143201,7 +143153,7 @@ async function bumpAll(ctx, version, options, output) {
   }
   const staged = [];
   for (const config of configs) {
-    const manifestPath = join78(ctx.repoRoot, config.packageDir, "package.json");
+    const manifestPath = join79(ctx.repoRoot, config.packageDir, "package.json");
     const manifest = await readJson2(manifestPath);
     if (manifest === null) {
       throw new Error(`missing or malformed manifest at ${config.packageDir}/package.json`);
@@ -143222,7 +143174,7 @@ async function bumpAll(ctx, version, options, output) {
   await syncMarketplaceAndPlugins(ctx, version, staged, output);
   await syncExtraCarriers(ctx, version, staged, output);
   await verifyLockfile(ctx, output);
-  const lockPath = join78(ctx.repoRoot, "bun.lock");
+  const lockPath = join79(ctx.repoRoot, "bun.lock");
   if (existsSync26(lockPath) && Bun.file(lockPath).size > 0)
     staged.push("bun.lock");
   await git2(ctx.repoRoot, ["add", ...staged]);
@@ -143378,9 +143330,9 @@ async function checkVersionDrift(target, repoRoot = process.cwd(), output = cons
   if (config === undefined) {
     throw releaseUsage(target === undefined ? "bump-ver --check needs a package id (no aggregate package is configured)" : `unknown package "${target}". Package IDs: ${[...ctx.packages.keys()].join(", ")}`);
   }
-  const manifest = await readJson2(join78(repoRoot, config.packageDir, "package.json"));
+  const manifest = await readJson2(join79(repoRoot, config.packageDir, "package.json"));
   const pkgVersion = typeof manifest?.version === "string" ? manifest.version : "";
-  const marketplacePath = join78(repoRoot, ".claude-plugin", "marketplace.json");
+  const marketplacePath = join79(repoRoot, ".claude-plugin", "marketplace.json");
   const marketplaceFile = Bun.file(marketplacePath);
   if (!await marketplaceFile.exists()) {
     output.write("No .claude-plugin/marketplace.json \u2014 nothing to check.");
@@ -143393,8 +143345,8 @@ async function checkVersionDrift(target, repoRoot = process.cwd(), output = cons
     for (const entry of parsed.plugins ?? []) {
       if (typeof entry.source !== "string")
         continue;
-      const label = join78(entry.source, "plugin.json").replace(/^\.\//, "");
-      const pluginJson = await readJson2(join78(repoRoot, entry.source, "plugin.json"));
+      const label = join79(entry.source, "plugin.json").replace(/^\.\//, "");
+      const pluginJson = await readJson2(join79(repoRoot, entry.source, "plugin.json"));
       plugins.push({ label, version: typeof pluginJson?.version === "string" ? pluginJson.version : "" });
     }
   } catch {}
@@ -143462,8 +143414,8 @@ async function publishPackage(target, opts = {}) {
   const repoRoot = opts.repoRoot ?? process.cwd();
   const output = opts.output ?? consoleOutput;
   const runner = opts.runner ?? defaultPublishRunner;
-  const dir = (target.startsWith("/") ? target : join78(repoRoot, target)).replace(/\/+$/, "");
-  const manifestPath = join78(dir, "package.json");
+  const dir = (target.startsWith("/") ? target : join79(repoRoot, target)).replace(/\/+$/, "");
+  const manifestPath = join79(dir, "package.json");
   const manifestFile = Bun.file(manifestPath);
   if (!await manifestFile.exists())
     throw new Error(`no package.json at ${dir}`);
@@ -143471,7 +143423,7 @@ async function publishPackage(target, opts = {}) {
   const manifest = JSON.parse(original);
   const workspaces = new Map;
   for (const wsDir of workspaceDirs(repoRoot)) {
-    const pkg = await readJson2(join78(repoRoot, wsDir, "package.json"));
+    const pkg = await readJson2(join79(repoRoot, wsDir, "package.json"));
     if (pkg !== null && typeof pkg.name === "string") {
       workspaces.set(pkg.name, {
         ...typeof pkg.version === "string" ? { version: pkg.version } : {},
@@ -143479,7 +143431,7 @@ async function publishPackage(target, opts = {}) {
       });
     }
   }
-  const root = await readJson2(join78(repoRoot, "package.json"));
+  const root = await readJson2(join79(repoRoot, "package.json"));
   const catalog = root?.workspaces?.catalog ?? {};
   const changed = resolvePublishRanges(manifest, workspaces, catalog);
   if (changed > 0) {
@@ -143514,7 +143466,7 @@ async function publishPackage(target, opts = {}) {
 init_src();
 import { spawnSync as spawnSync7 } from "child_process";
 import { existsSync as existsSync27, readFileSync as readFileSync24, writeFileSync as writeFileSync16 } from "fs";
-import { join as join79, resolve as resolve28 } from "path";
+import { join as join80, resolve as resolve28 } from "path";
 function createSpawnRunner(context = {}) {
   return (cmd) => {
     const proc = spawnSync7(cmd[0] ?? "", [...cmd.slice(1)], {
@@ -143657,7 +143609,7 @@ function extractSeverity2(body) {
 }
 var DEFAULT_FOCUS = "for correctness and regressions, security boundaries, data-loss risks, concurrency or race conditions, " + "API/backward compatibility, migration safety, error handling, and missing high-value tests. " + "Prioritize actionable issues over style or nits.";
 function hasCodeReviewRules(repoRoot) {
-  const agentsPath = join79(repoRoot, "AGENTS.md");
+  const agentsPath = join80(repoRoot, "AGENTS.md");
   if (!existsSync27(agentsPath))
     return false;
   return /^## Code Review Rules\s*$/m.test(readFileSync24(agentsPath, "utf8"));
@@ -144717,9 +144669,9 @@ function registerFeatureVerifyCommand(feature, context) {
     "Runs the selected feature-verification definition\u2019s command once (or --cmd) and writes the",
     "run-scoped + feature-latest receipts and .spur/run/<runId>-feature-verification.status.",
     "Exit: 0 after a completed pass (PASS or FAIL); 1 when the pass could not run.",
-    "Flags fall back to the workflow env names: featureId, __runId, verificationCmd, confidence, ackLowConfidence."
+    "Flags fall back to the workflow env names: featureId, __runId, verificationCmd."
   ].join(`
-`)).argument("[id]", "Feature ID (env: featureId)").option("--run-id <id>", "workflow run id the receipt binds to (env: __runId)").option("--cmd <command>", "verification command override (env: verificationCmd)").option("--confidence <level>", "declared confidence HIGH | MEDIUM | LOW (env: confidence)").option("--ack-low-confidence", "acknowledge a LOW confidence level on the receipt (env: ackLowConfidence=true)").action(async (id, options) => {
+`)).argument("[id]", "Feature ID (env: featureId)").option("--run-id <id>", "workflow run id the receipt binds to (env: __runId)").option("--cmd <command>", "verification command override (env: verificationCmd)").action(async (id, options) => {
     await Promise.resolve().then(() => init_src3());
     const env = context.env;
     const featureId = id || env.featureId || "";
@@ -144728,9 +144680,7 @@ function registerFeatureVerifyCommand(feature, context) {
         workdir: context.cwd,
         featureId,
         runId: options.runId || env.__runId || "",
-        cmdOverride: options.cmd || env.verificationCmd || "",
-        confidenceOverride: options.confidence || env.confidence || "",
-        ackLowConfidence: options.ackLowConfidence === true || env.ackLowConfidence === "true"
+        cmdOverride: options.cmd || env.verificationCmd || ""
       });
       context.output.write(`feature verify: ${featureId} ${result.message}`);
     } catch (err) {
@@ -145177,7 +145127,7 @@ import { createRequire as createRequire3 } from "module";
 var CLI_CONFIG = {
   binaryName: "spur",
   binaryLabel: "spur",
-  binaryVersion: "0.4.9",
+  binaryVersion: "0.4.10",
   configDir: ".spur",
   configFile: ".spur/config.yaml",
   databaseFile: ".spur/spur.db"
@@ -145721,7 +145671,7 @@ init_loader2();
 init_src2();
 init_dist11();
 import { homedir as homedir15 } from "os";
-import { join as join84, resolve as resolve31 } from "path";
+import { join as join85, resolve as resolve31 } from "path";
 
 // src/config/scaffold-manifest.ts
 var SCAFFOLD_MANIFEST = [
@@ -145750,8 +145700,8 @@ var SCAFFOLD_MANIFEST = [
 ];
 
 // src/commands/init.ts
-var GLOBAL_CONFIG_DIR = join84(".config", "spur");
-var GLOBAL_RULES_DIR2 = join84(GLOBAL_CONFIG_DIR, "rules");
+var GLOBAL_CONFIG_DIR = join85(".config", "spur");
+var GLOBAL_RULES_DIR2 = join85(GLOBAL_CONFIG_DIR, "rules");
 var GLOBAL_CONFIG_EXAMPLE = BUNDLED_GLOBAL_CONFIG;
 var GLOBAL_CONFIG_FILE2 = "config.yaml";
 var INDEXED_CONTEXT_MARKER = "## Indexed context";
@@ -145782,7 +145732,7 @@ If \`.spur/context/\` is absent, proceed normally. Never block work on its absen
 `;
 function globalRulesRoot(context) {
   const override = context.env.SPUR_GLOBAL_RULES_DIR;
-  return override !== undefined && override.length > 0 ? resolve31(context.cwd, override) : join84(homedir15(), GLOBAL_RULES_DIR2);
+  return override !== undefined && override.length > 0 ? resolve31(context.cwd, override) : join85(homedir15(), GLOBAL_RULES_DIR2);
 }
 async function writeIfNew(context, path, content, force, result) {
   if (!force && await context.fs.exists(path)) {
@@ -145799,18 +145749,18 @@ async function seedGlobalRules(context) {
   const target = globalRulesRoot(context);
   let written = 0;
   for (const relPath of await listBundledRuleFiles()) {
-    const destination = join84(target, relPath);
+    const destination = join85(target, relPath);
     if (await context.fs.exists(destination))
       continue;
-    await context.fs.ensureDir(join84(target, ...relPath.split("/").slice(0, -1)));
-    await context.fs.writeFile(destination, await context.fs.readFile(join84(source, relPath)));
+    await context.fs.ensureDir(join85(target, ...relPath.split("/").slice(0, -1)));
+    await context.fs.writeFile(destination, await context.fs.readFile(join85(source, relPath)));
     written += 1;
   }
   return written;
 }
 function resolveGlobalConfigDir(context) {
   const globalOverride = context.env.SPUR_GLOBAL_RULES_DIR;
-  return globalOverride !== undefined && globalOverride.length > 0 ? resolve31(context.cwd, globalOverride) : join84(homedir15(), GLOBAL_CONFIG_DIR);
+  return globalOverride !== undefined && globalOverride.length > 0 ? resolve31(context.cwd, globalOverride) : join85(homedir15(), GLOBAL_CONFIG_DIR);
 }
 async function seedGlobalConfig(context) {
   const source = bundledConfigRoot();
@@ -145821,15 +145771,15 @@ async function seedGlobalConfig(context) {
   for (const relPath of listBundledConfigFiles()) {
     if (relPath === GLOBAL_CONFIG_EXAMPLE)
       continue;
-    const destination = join84(target, relPath);
+    const destination = join85(target, relPath);
     if (await context.fs.exists(destination))
       continue;
-    await context.fs.ensureDir(join84(target, ...relPath.split("/").slice(0, -1)));
-    await context.fs.writeFile(destination, await context.fs.readFile(join84(source, relPath)));
+    await context.fs.ensureDir(join85(target, ...relPath.split("/").slice(0, -1)));
+    await context.fs.writeFile(destination, await context.fs.readFile(join85(source, relPath)));
     written += 1;
   }
-  const examplePath = join84(source, GLOBAL_CONFIG_EXAMPLE);
-  const globalConfigPath = join84(target, GLOBAL_CONFIG_FILE2);
+  const examplePath = join85(source, GLOBAL_CONFIG_EXAMPLE);
+  const globalConfigPath = join85(target, GLOBAL_CONFIG_FILE2);
   if (await context.fs.exists(examplePath) && !await context.fs.exists(globalConfigPath)) {
     await context.fs.ensureDir(target);
     await context.fs.writeFile(globalConfigPath, await context.fs.readFile(examplePath));
@@ -145844,10 +145794,10 @@ function registerInitCommand(program, context, options = {}) {
     const minimal = options.minimal === true;
     const adoptGlobal = options.adoptGlobalConfig === true;
     const projectName = options.name ?? "default";
-    const configPath = join84(context.cwd, CLI_CONFIG.configFile);
+    const configPath = join85(context.cwd, CLI_CONFIG.configFile);
     const result = { created: [], skipped: [] };
     const globalConfigDir = resolveGlobalConfigDir(context);
-    const globalConfigPath = join84(globalConfigDir, GLOBAL_CONFIG_FILE2);
+    const globalConfigPath = join85(globalConfigDir, GLOBAL_CONFIG_FILE2);
     const globalConfigExists = await context.fs.exists(globalConfigPath);
     let misplacedKeys = [];
     if (globalConfigExists) {
@@ -145860,20 +145810,20 @@ function registerInitCommand(program, context, options = {}) {
       const configRoot = bundledConfigRoot();
       if (configRoot !== null && !minimal) {
         for (const relPath of listBundledProjectSeedFiles()) {
-          const sourcePath = join84(configRoot, relPath);
+          const sourcePath = join85(configRoot, relPath);
           if (!await context.fs.exists(sourcePath))
             continue;
-          const targetPath = join84(context.cwd, CLI_CONFIG.configDir, relPath);
-          await context.fs.ensureDir(join84(targetPath, ".."));
+          const targetPath = join85(context.cwd, CLI_CONFIG.configDir, relPath);
+          await context.fs.ensureDir(join85(targetPath, ".."));
           await writeIfNew(context, targetPath, await context.fs.readFile(sourcePath), false, result);
         }
         for (const entry of SCAFFOLD_MANIFEST) {
-          const sourcePath = join84(configRoot, entry.source);
+          const sourcePath = join85(configRoot, entry.source);
           if (!await context.fs.exists(sourcePath))
             continue;
-          const baseDir = entry.root === true ? context.cwd : join84(context.cwd, CLI_CONFIG.configDir);
-          const targetPath = join84(baseDir, entry.target);
-          await context.fs.ensureDir(join84(targetPath, ".."));
+          const baseDir = entry.root === true ? context.cwd : join85(context.cwd, CLI_CONFIG.configDir);
+          const targetPath = join85(baseDir, entry.target);
+          await context.fs.ensureDir(join85(targetPath, ".."));
           const entryForce = false;
           let body = await context.fs.readFile(sourcePath);
           if (entry.target === "AGENTS.md") {
@@ -145890,7 +145840,7 @@ function registerInitCommand(program, context, options = {}) {
         const backupPath = `${globalConfigPath}.bak-${new Date().toISOString().replace(/[:.]/g, "-")}`;
         await context.fs.writeFile(backupPath, await context.fs.readFile(globalConfigPath));
         const bundledRoot = bundledConfigRoot();
-        const examplePath = bundledRoot !== null ? join84(bundledRoot, GLOBAL_CONFIG_EXAMPLE) : null;
+        const examplePath = bundledRoot !== null ? join85(bundledRoot, GLOBAL_CONFIG_EXAMPLE) : null;
         if (examplePath !== null && await context.fs.exists(examplePath)) {
           await context.fs.writeFile(globalConfigPath, await context.fs.readFile(examplePath));
           adoptedGlobal = true;
@@ -145963,13 +145913,13 @@ function registerInitCommand(program, context, options = {}) {
     ].join(`
 `)}
 `;
-    await context.fs.ensureDir(join84(context.cwd, CLI_CONFIG.configDir));
+    await context.fs.ensureDir(join85(context.cwd, CLI_CONFIG.configDir));
     await context.fs.writeFile(configPath, configYaml);
     result.created.push(configPath);
-    const agentsDir = join84(context.cwd, CLI_CONFIG.configDir, "agents");
+    const agentsDir = join85(context.cwd, CLI_CONFIG.configDir, "agents");
     await context.fs.ensureDir(agentsDir);
-    await writeIfNew(context, join84(agentsDir, ".gitkeep"), "", force, result);
-    const gitignorePath = join84(context.cwd, ".gitignore");
+    await writeIfNew(context, join85(agentsDir, ".gitkeep"), "", force, result);
+    const gitignorePath = join85(context.cwd, ".gitignore");
     const contextEntry = ".spur/context/";
     if (await context.fs.exists(gitignorePath)) {
       const existing = await context.fs.readFile(gitignorePath);
@@ -145989,20 +145939,20 @@ ${contextEntry}
       const configRoot = bundledConfigRoot();
       if (configRoot !== null) {
         for (const relPath of listBundledProjectSeedFiles()) {
-          const sourcePath = join84(configRoot, relPath);
+          const sourcePath = join85(configRoot, relPath);
           if (!await context.fs.exists(sourcePath))
             continue;
-          const targetPath = join84(context.cwd, CLI_CONFIG.configDir, relPath);
-          await context.fs.ensureDir(join84(targetPath, ".."));
+          const targetPath = join85(context.cwd, CLI_CONFIG.configDir, relPath);
+          await context.fs.ensureDir(join85(targetPath, ".."));
           await writeIfNew(context, targetPath, await context.fs.readFile(sourcePath), force, result);
         }
         for (const entry of SCAFFOLD_MANIFEST) {
-          const sourcePath = join84(configRoot, entry.source);
+          const sourcePath = join85(configRoot, entry.source);
           if (!await context.fs.exists(sourcePath))
             continue;
-          const baseDir = entry.root === true ? context.cwd : join84(context.cwd, CLI_CONFIG.configDir);
-          const targetPath = join84(baseDir, entry.target);
-          await context.fs.ensureDir(join84(targetPath, ".."));
+          const baseDir = entry.root === true ? context.cwd : join85(context.cwd, CLI_CONFIG.configDir);
+          const targetPath = join85(baseDir, entry.target);
+          await context.fs.ensureDir(join85(targetPath, ".."));
           const entryForce = entry.preserve === true ? false : force;
           let body = await context.fs.readFile(sourcePath);
           if (entry.target === "AGENTS.md") {
@@ -146015,7 +145965,7 @@ ${contextEntry}
         }
       }
     }
-    const agentsMdPath = join84(context.cwd, "AGENTS.md");
+    const agentsMdPath = join85(context.cwd, "AGENTS.md");
     if (await context.fs.exists(agentsMdPath)) {
       const existing = await context.fs.readFile(agentsMdPath);
       if (!existing.includes(INDEXED_CONTEXT_MARKER)) {
@@ -146056,11 +146006,11 @@ ${contextEntry}
 // src/commands/maintain.ts
 init_src();
 init_src2();
-import { join as join85 } from "path";
+import { join as join86 } from "path";
 function registerMaintainCommand(program, context, options = {}) {
   program.command("maintain", { hidden: options.hidden === true }).summary("run database maintenance (optimize, WAL checkpoint truncation, optional VACUUM)").description("Run database maintenance: PRAGMA optimize, WAL checkpoint truncation; optionally VACUUM compaction.").option("--vacuum", "Run VACUUM defragmentation and page compaction", false).option(...SHARED_OPTIONS.jsonSupported).option(...SHARED_OPTIONS.jsonEnvelope).action(async (options) => {
     const db = await context.getDb();
-    const dbPath = context.env.DATABASE_URL ?? join85(context.cwd, DEFAULT_DATABASE_URL);
+    const dbPath = context.env.DATABASE_URL ?? join86(context.cwd, DEFAULT_DATABASE_URL);
     const result = await maintainDatabase(db, {
       vacuum: options.vacuum === true,
       dbPath: dbPath.startsWith(":memory:") ? undefined : dbPath
@@ -146484,14 +146434,14 @@ async function waitForPendingDrain(agentService, coordination, pin, timeoutMs, s
 
 // src/commands/migrate.ts
 init_src2();
-import { join as join87, relative as relative18 } from "path";
+import { join as join88, relative as relative18 } from "path";
 
 // src/context.ts
 init_src3();
 init_src();
 init_src2();
 init_dist5();
-import { dirname as dirname41, join as join86, resolve as resolve32 } from "path";
+import { dirname as dirname41, join as join87, resolve as resolve32 } from "path";
 import { isatty as isatty4 } from "tty";
 
 // ../../node_modules/.bun/@clack+core@1.4.1/node_modules/@clack/core/dist/index.mjs
@@ -147476,7 +147426,7 @@ function createCliContext(options) {
 }
 function noopSetExitCode(_code) {}
 function resolveDatabaseUrl(cwd, env) {
-  return env.DATABASE_URL === undefined ? join86(cwd, DEFAULT_DATABASE_URL) : buildConfigFromEnv(env).database.url;
+  return env.DATABASE_URL === undefined ? join87(cwd, DEFAULT_DATABASE_URL) : buildConfigFromEnv(env).database.url;
 }
 async function createMigratedDbAdapter(cwd = process.cwd(), env = getEnvVars(), dbUrl) {
   const url = dbUrl ?? resolveDatabaseUrl(cwd, env);
@@ -147539,7 +147489,7 @@ function registerMigrateCommand(program, context, options = {}) {
         context.setExitCode(1);
       return;
     }
-    const migrations = await loadSqlMigrations(join87(context.cwd, "drizzle")).catch(() => {
+    const migrations = await loadSqlMigrations(join88(context.cwd, "drizzle")).catch(() => {
       return;
     });
     const db = await context.getDb();
@@ -147554,22 +147504,28 @@ function registerMigrateCommand(program, context, options = {}) {
 init_src3();
 init_src2();
 init_dist5();
-import { basename as basename19, dirname as dirname42, join as join88, resolve as resolve33 } from "path";
+import { basename as basename19, dirname as dirname42, join as join89, resolve as resolve33 } from "path";
 function registerProjectsCommand(program, context) {
   const projectsCmd = program.command("projects").summary("manage the Spur multi-project registry");
-  projectsCmd.command("add").argument("<path>", "Project root directory path").option(...SHARED_OPTIONS.nameProjectDisplay).option(...SHARED_OPTIONS.jsonProjectsResponse).option(...SHARED_OPTIONS.jsonEnvelope).action(async (pathArg, options) => {
+  projectsCmd.command("add").argument("<path>", "Project root directory path").option("--host <host>", 'Host for local or remote project (default: "localhost")').option(...SHARED_OPTIONS.nameProjectDisplay).option(...SHARED_OPTIONS.jsonProjectsResponse).option(...SHARED_OPTIONS.jsonEnvelope).action(async (pathArg, options) => {
     try {
-      const absolutePath = resolve33(context.cwd, pathArg);
-      if (!await context.fs.exists(absolutePath)) {
-        throw new Error(`Directory does not exist: ${absolutePath}`);
+      const host = options.host ?? "localhost";
+      const isLocal = isLocalHost(host);
+      let absolutePath = pathArg;
+      if (isLocal) {
+        absolutePath = resolve33(context.cwd, pathArg);
+        if (!await context.fs.exists(absolutePath)) {
+          throw new Error(`Directory does not exist: ${absolutePath}`);
+        }
       }
       const name = options.name ?? basename19(absolutePath);
       const registry = new ProjectRegistry;
-      const entry = await registry.upsert({ path: absolutePath, name, port: 0 });
+      const entry = await registry.upsert({ path: absolutePath, name, host, port: 0 });
       if (options.json) {
         context.output.write(toEnvelopeJson({ ok: true, project: entry }, { enveloped: options.jsonEnvelope }));
       } else {
-        context.output.write(`Registered project "${entry.name}" at ${entry.path}`);
+        const hostLabel = !isLocalHost(entry.host) ? ` on host ${entry.host}` : "";
+        context.output.write(`Registered project "${entry.name}" at ${entry.path}${hostLabel}`);
       }
     } catch (err) {
       const message = err instanceof Error ? err.message : String(err);
@@ -147614,14 +147570,17 @@ function registerProjectsCommand(program, context) {
           ok: true,
           purgedCount: result.purgedProjects.length,
           purgedProjects: result.purgedProjects,
-          terminatedProcesses: result.terminatedProcesses
+          terminatedProcesses: result.terminatedProcesses,
+          ...result.resetPorts && result.resetPorts.length > 0 ? { resetPorts: result.resetPorts } : {}
         }, { enveloped: options.jsonEnvelope }));
-      } else if (result.purgedProjects.length === 0) {
+      } else if (result.purgedProjects.length === 0 && (!result.resetPorts || result.resetPorts.length === 0)) {
         context.output.write("Registry is clean. No stale project entries found.");
       } else {
-        context.output.write(`Purged ${result.purgedProjects.length} stale project(s):`);
-        for (const project of result.purgedProjects) {
-          context.output.write(`- ${project.name} (${project.path})`);
+        if (result.purgedProjects.length > 0) {
+          context.output.write(`Purged ${result.purgedProjects.length} stale project(s):`);
+          for (const project of result.purgedProjects) {
+            context.output.write(`- ${project.name} (${project.path})`);
+          }
         }
         if (result.terminatedProcesses.length > 0) {
           context.output.write(`Terminated ${result.terminatedProcesses.length} lingering process(es):`);
@@ -147629,6 +147588,13 @@ function registerProjectsCommand(program, context) {
             context.output.write(`- PID ${proc.pid} on port ${proc.port} (${proc.signal})`);
           }
         }
+        if (result.resetPorts && result.resetPorts.length > 0) {
+          context.output.write(`Reset ${result.resetPorts.length} closed port(s):`);
+          for (const project of result.resetPorts) {
+            const hostLabel = !isLocalHost(project.host) ? `${project.host}:` : "";
+            context.output.write(`- ${project.name} (${hostLabel}${project.port} -> 0)`);
+          }
+        }
       }
     } catch (err) {
       const message = err instanceof Error ? err.message : String(err);
@@ -147646,10 +147612,10 @@ function registerProjectsCommand(program, context) {
       const rawProjects = await registry.list();
       const projects = await Promise.all(rawProjects.map(async (p) => ({
         ...p,
-        running: p.port > 0 ? await isPortLive(p.port) : false
+        running: p.port > 0 ? await isPortLive(p.port, undefined, p.host) : false
       })));
       const openProjectDb = async (projectPath) => {
-        const url = join88(projectPath, ".spur", "spur.db");
+        const url = join89(projectPath, ".spur", "spur.db");
         await context.fs.ensureDir(dirname42(url));
         return createMigratedDb({ url });
       };
@@ -147715,8 +147681,9 @@ function registerProjectsCommand(program, context) {
         context.output.write(`Registered Projects:
 `);
         for (const [i, p] of projects.entries()) {
+          const hostLabel = !isLocalHost(p.host) ? ` (${p.host})` : "";
           const status = p.running ? `[RUNNING: ${p.port}]` : "[STOPPED]";
-          context.output.write(`- ${p.name} ${status} (${p.path})`);
+          context.output.write(`- ${p.name}${hostLabel} ${status} (${p.path})`);
           const f = fleets?.[i];
           if (f === undefined)
             continue;
@@ -148078,7 +148045,7 @@ function formatTraceDetail(detail) {
 // src/commands/serve.ts
 init_src();
 import { statSync as statSync18 } from "fs";
-import { join as join93, resolve as resolve36 } from "path";
+import { join as join94, resolve as resolve36 } from "path";
 
 // ../server/src/index.ts
 init_src();
@@ -148089,11 +148056,11 @@ init_src();
 init_loader2();
 init_src2();
 import { homedir as homedir17 } from "os";
-import { basename as basename21, dirname as dirname44, isAbsolute as isAbsolute15, join as join92 } from "path";
+import { basename as basename21, dirname as dirname44, isAbsolute as isAbsolute15, join as join93 } from "path";
 init_dist5();
 
 // ../server/src/bootstrap.ts
-import { join as join90 } from "path";
+import { join as join91 } from "path";
 
 // ../../node_modules/.bun/@orpc+shared@1.14.4+e40b0dfdd726a224/node_modules/@orpc/shared/dist/index.mjs
 function resolveMaybeOptionalOptions(rest) {
@@ -154946,9 +154913,9 @@ init_loader2();
 init_src2();
 init_dist5();
 import { homedir as homedir16 } from "os";
-import { basename as basename20, join as join89, relative as relative19, resolve as resolve35 } from "path";
+import { basename as basename20, join as join90, relative as relative19, resolve as resolve35 } from "path";
 // ../server/package.json
-var version3 = "0.4.9";
+var version3 = "0.4.10";
 
 // ../server/src/modules/health/index.ts
 var startedAt = Date.now();
@@ -155421,8 +155388,8 @@ var healthModule = {
           }
         });
       }
-      const projectPath = join89(ctx.cwd, ".spur", "config.yaml");
-      const globalPath = join89(homedir16(), ".config", "spur", "config.yaml");
+      const projectPath = join90(ctx.cwd, ".spur", "config.yaml");
+      const globalPath = join90(homedir16(), ".config", "spur", "config.yaml");
       let projectExists = false;
       let projectContent = "";
       let projectSizeBytes = 0;
@@ -155539,7 +155506,7 @@ var healthModule = {
         const projectRoot = ctx.cwd ?? process.cwd();
         const fs = ctx.fs ?? createNodeFileSystem2(projectRoot);
         const files = [];
-        const rootDesignPath = join89(projectRoot, "DESIGN.md");
+        const rootDesignPath = join90(projectRoot, "DESIGN.md");
         if (await fs.exists(rootDesignPath)) {
           let title = "UI/UX Design System";
           try {
@@ -155556,7 +155523,7 @@ var healthModule = {
             category: "root"
           });
         }
-        const doc04Path = join89(projectRoot, "docs", "04_DESIGN.md");
+        const doc04Path = join90(projectRoot, "docs", "04_DESIGN.md");
         if (await fs.exists(doc04Path)) {
           let title = "Concrete Surfaces & Contracts";
           try {
@@ -155573,7 +155540,7 @@ var healthModule = {
             category: "architecture"
           });
         }
-        const designDir = join89(projectRoot, "docs", "design");
+        const designDir = join90(projectRoot, "docs", "design");
         if (await fs.exists(designDir)) {
           let mdFiles = [];
           try {
@@ -155582,7 +155549,7 @@ var healthModule = {
           } catch {}
           mdFiles.sort((a, b) => a.localeCompare(b));
           for (const filename of mdFiles) {
-            const fullPath = join89(designDir, filename);
+            const fullPath = join90(designDir, filename);
             const relPath = `docs/design/${filename}`;
             let title = filename.replace(/\.md$/, "").replace(/-/g, " ");
             try {
@@ -155620,7 +155587,7 @@ var healthModule = {
       try {
         const projectRoot = ctx.cwd ?? process.cwd();
         const fs = ctx.fs ?? createNodeFileSystem2(projectRoot);
-        const fullPath = join89(projectRoot, reqPath);
+        const fullPath = join90(projectRoot, reqPath);
         if (!await fs.exists(fullPath)) {
           return c.json({ ok: false, error: "File not found" }, 404);
         }
@@ -155646,7 +155613,7 @@ var healthModule = {
         const projectRoot = ctx.cwd ?? process.cwd();
         const fs = ctx.fs ?? createNodeFileSystem2(projectRoot);
         const files = [];
-        const roadmapPath = join89(projectRoot, "docs", "02_ROADMAP.md");
+        const roadmapPath = join90(projectRoot, "docs", "02_ROADMAP.md");
         if (await fs.exists(roadmapPath)) {
           let title = "02 Roadmap \u2014 Spur";
           try {
@@ -155663,7 +155630,7 @@ var healthModule = {
             category: "roadmap"
           });
         }
-        const plansDir = join89(projectRoot, "docs", "plans");
+        const plansDir = join90(projectRoot, "docs", "plans");
         if (await fs.exists(plansDir)) {
           let mdFiles = [];
           try {
@@ -155672,7 +155639,7 @@ var healthModule = {
           } catch {}
           mdFiles.sort((a, b) => b.localeCompare(a));
           for (const filename of mdFiles) {
-            const fullPath = join89(plansDir, filename);
+            const fullPath = join90(plansDir, filename);
             const relPath = `docs/plans/${filename}`;
             let title = filename.replace(/\.md$/, "").replace(/-/g, " ");
             try {
@@ -155710,7 +155677,7 @@ var healthModule = {
       try {
         const projectRoot = ctx.cwd ?? process.cwd();
         const fs = ctx.fs ?? createNodeFileSystem2(projectRoot);
-        const fullPath = join89(projectRoot, reqPath);
+        const fullPath = join90(projectRoot, reqPath);
         if (!await fs.exists(fullPath)) {
           return c.json({ ok: false, error: "File not found" }, 404);
         }
@@ -158224,7 +158191,7 @@ function createApp(appRt, opts) {
     app.use("*", async (c, next) => {
       const pathname = c.req.path === "/" ? "/index.html" : c.req.path;
       try {
-        const file = Bun.file(join90(webDistPath, pathname));
+        const file = Bun.file(join91(webDistPath, pathname));
         if (await file.exists()) {
           const headers = new Headers({ "content-type": file.type });
           return new Response(file.stream(), { headers });
@@ -158237,7 +158204,7 @@ function createApp(appRt, opts) {
         return c.json({ error: "Not Found" }, 404);
       }
       try {
-        const indexFile = Bun.file(join90(webDistPath, "index.html"));
+        const indexFile = Bun.file(join91(webDistPath, "index.html"));
         if (await indexFile.exists()) {
           return new Response(indexFile.stream(), {
             headers: { "content-type": "text/html; charset=utf-8" }
@@ -158259,7 +158226,7 @@ init_src();
 init_loader2();
 init_src2();
 init_dist5();
-import { dirname as dirname43, join as join91 } from "path";
+import { dirname as dirname43, join as join92 } from "path";
 var NOOP_OUTPUT = { write: (_s) => {}, error: (_s) => {} };
 
 class LazyPlanningEventEmitter {
@@ -158295,7 +158262,7 @@ class NotConfiguredError extends Error {
 function createServerContext(appRt, options) {
   const cwd = options.cwd;
   const fs = options.fs;
-  const dbUrl = options.dbUrl ?? join91(cwd, DEFAULT_DATABASE_URL);
+  const dbUrl = options.dbUrl ?? join92(cwd, DEFAULT_DATABASE_URL);
   const eventsBus = options.eventsBus ?? appRt.events;
   const jobQueueEnabled = options.jobQueueEnabled ?? false;
   const eventProjectContext = systemEventProjectContext(cwd);
@@ -158331,7 +158298,7 @@ function createServerContext(appRt, options) {
   return {
     cwd,
     fs,
-    runDir: join91(cwd, ".spur", "run"),
+    runDir: join92(cwd, ".spur", "run"),
     webDistPath: options.webDistPath,
     boardModules: options.boardModules,
     logger: appRt.logger,
@@ -158695,7 +158662,7 @@ var BOARD_RUNTIME_MANIFEST_FILE = "board-runtime.json";
 async function readBoardHostRuntime(webDistPath, hasContributions) {
   if (!webDistPath)
     return null;
-  const manifestPath = join92(webDistPath, BOARD_RUNTIME_MANIFEST_FILE);
+  const manifestPath = join93(webDistPath, BOARD_RUNTIME_MANIFEST_FILE);
   try {
     const file = Bun.file(manifestPath);
     if (!await file.exists())
@@ -158732,7 +158699,7 @@ function defaultUsageSnapshotPath(env) {
   const override = env.SPUR_AGENT_USAGE_SNAPSHOT;
   if (override !== undefined && override.length > 0)
     return override;
-  return join92(env.HOME ?? homedir17(), ".config", "spur", "agent-usage.json");
+  return join93(env.HOME ?? homedir17(), ".config", "spur", "agent-usage.json");
 }
 var JOB_WORKER_START_DELAY_MS = 30000;
 var defaultDeps = {
@@ -158996,15 +158963,15 @@ async function handleFeatureActionJob(ctx, env, payload) {
   await runFeatureActionJob(ctx, env, payload);
 }
 async function resolveWebDistPath(configuredPath, projectRoot = process.cwd()) {
-  const candidates = configuredPath && configuredPath.trim() !== "" ? [isAbsolute15(configuredPath) ? configuredPath : join92(projectRoot, configuredPath)] : [
-    join92(projectRoot, "dist/web"),
-    join92(import.meta.dir, "web"),
-    join92(dirname44(process.execPath), "web"),
-    join92(dirname44(process.execPath), "../web"),
-    join92(import.meta.dir, "../../../dist/web")
+  const candidates = configuredPath && configuredPath.trim() !== "" ? [isAbsolute15(configuredPath) ? configuredPath : join93(projectRoot, configuredPath)] : [
+    join93(projectRoot, "dist/web"),
+    join93(import.meta.dir, "web"),
+    join93(dirname44(process.execPath), "web"),
+    join93(dirname44(process.execPath), "../web"),
+    join93(import.meta.dir, "../../../dist/web")
   ];
   for (const candidate of candidates) {
-    if (await Bun.file(join92(candidate, "index.html")).exists()) {
+    if (await Bun.file(join93(candidate, "index.html")).exists()) {
       return candidate;
     }
   }
@@ -159479,7 +159446,7 @@ var SQLITE_BUSY_MESSAGE_CONSTANTS = Object.freeze({
 
 // src/commands/serve.ts
 function resolveServeDbUrl(cwd, env, configuredUrl) {
-  return env.DATABASE_URL === undefined ? join93(cwd, DEFAULT_DATABASE_URL) : configuredUrl;
+  return env.DATABASE_URL === undefined ? join94(cwd, DEFAULT_DATABASE_URL) : configuredUrl;
 }
 function resolveServeCwd(cwd) {
   const resolved = resolve36(cwd);
@@ -159543,7 +159510,7 @@ function registerServeCommand(program, context, options = {}) {
 }
 
 // src/commands/status.ts
-import { join as join94 } from "path";
+import { join as join95 } from "path";
 
 // src/git-context.ts
 init_dist5();
@@ -159591,8 +159558,8 @@ function registerStatusCommand(program, context, options = {}) {
 }
 async function runStatusCore(path, options, context) {
   const [packageJsonExists, spurConfigExists, git, agentSpecs] = await Promise.all([
-    context.fs.exists(join94(context.cwd, "package.json")),
-    context.fs.exists(join94(context.cwd, ".spur", "config.yaml")),
+    context.fs.exists(join95(context.cwd, "package.json")),
+    context.fs.exists(join95(context.cwd, ".spur", "config.yaml")),
     gitContext(context.cwd),
     listAgentSpecIds(context)
   ]);
@@ -159623,14 +159590,14 @@ async function runStatusCore(path, options, context) {
   return status.ok ? 0 : 1;
 }
 async function listAgentSpecIds(context) {
-  const dir = join94(context.cwd, ".spur", "agents");
+  const dir = join95(context.cwd, ".spur", "agents");
   if (!await context.fs.exists(dir))
     return [];
   const entries = await context.fs.readDir(dir);
   return entries.filter((entry) => entry.endsWith(".yaml") || entry.endsWith(".yml")).map((entry) => entry.replace(/\.ya?ml$/, "")).sort();
 }
 async function readTargetStatus(context, targetPath) {
-  const resolved = join94(context.cwd, targetPath);
+  const resolved = join95(context.cwd, targetPath);
   const stat = await context.fs.stat(resolved);
   if (stat === null)
     throw new CommandError(`status failed: path does not exist at ${resolved}`);
@@ -159881,11 +159848,11 @@ function registerWorkflowCleanCommand(workflow, context) {
 // ../../packages/app/src/workflow/commit-guard.ts
 init_dist5();
 import { mkdirSync as mkdirSync23, readFileSync as readFileSync28, renameSync as renameSync11, writeFileSync as writeFileSync20 } from "fs";
-import { join as join95 } from "path";
+import { join as join96 } from "path";
 var COMMIT_GUARD_USAGE = "usage: spur workflow commit-guard start --run <id> | stage --run <id> [--base <sha>] -- <paths\u2026> | check --run <id> [--base <sha>]";
 var isBookkeeping = (path) => path === ".spur" || path.startsWith(".spur/");
-var at2 = (options, rel) => options.cwd ? join95(options.cwd, rel) : rel;
-var artifactPath = (run) => join95(".spur", "run", `${run}-tree-start.json`);
+var at2 = (options, rel) => options.cwd ? join96(options.cwd, rel) : rel;
+var artifactPath = (run) => join96(".spur", "run", `${run}-tree-start.json`);
 function gitOf(options) {
   if (options.git)
     return options.git;
@@ -159954,7 +159921,7 @@ function runContext(run, options) {
   let base = options.base ?? "";
   if (!base) {
     try {
-      const anchored = readFileSync28(at2(options, join95(".spur", "run", `${run}-base.sha`)), "utf8").trim();
+      const anchored = readFileSync28(at2(options, join96(".spur", "run", `${run}-base.sha`)), "utf8").trim();
       if (/^[0-9a-f]{7,40}$/i.test(anchored))
         base = anchored;
     } catch {}
@@ -159994,7 +159961,7 @@ function commitGuardStart(run, options = {}) {
     dirty: parsePorcelainZ(status.stdout).map((path) => ({ path, sha: hashPath(path, git) }))
   };
   const abs = at2(options, artifactPath(run));
-  mkdirSync23(join95(abs, ".."), { recursive: true });
+  mkdirSync23(join96(abs, ".."), { recursive: true });
   writeFileSync20(`${abs}.tmp`, `${JSON.stringify(snapshot, null, 2)}
 `);
   renameSync11(`${abs}.tmp`, abs);
@@ -160266,14 +160233,14 @@ function registerWorkflowContinueCommand(workflow, context) {
 }
 
 // src/commands/workflow/cost.ts
-import { join as join97 } from "path";
+import { join as join98 } from "path";
 
 // ../../packages/app/src/workflow/run-cost.ts
 init_src2();
 init_dist5();
 init_dist2();
 init_composition_baseline();
-import { join as join96 } from "path";
+import { join as join97 } from "path";
 
 // ../../packages/app/src/workflow/run-measurements.ts
 init_src2();
@@ -160507,7 +160474,7 @@ async function loadQueryCounts(workflowsDir, fs = createNodeFileSystem2()) {
       const name = /^(.+)\.ya?ml$/.exec(entry)?.[1];
       if (!name)
         continue;
-      const def = $parse(await fs.readFile(join96(workflowsDir, entry)));
+      const def = $parse(await fs.readFile(join97(workflowsDir, entry)));
       out[name] = extractResolvedWorkflowFacts(def).modelQueries.length;
     }
     return out;
@@ -160533,7 +160500,7 @@ async function runBudgetGate(opts) {
   const fs = opts.fs ?? createNodeFileSystem2();
   const gitShow = opts.gitShow ?? defaultGitShow;
   const openDb = opts.openDb ?? defaultDbOpener;
-  const absBudget = opts.budgetPath.startsWith("/") ? opts.budgetPath : join96(opts.cwd, opts.budgetPath);
+  const absBudget = opts.budgetPath.startsWith("/") ? opts.budgetPath : join97(opts.cwd, opts.budgetPath);
   const relBudget = absBudget.startsWith(`${opts.cwd}/`) ? absBudget.slice(opts.cwd.length + 1) : opts.budgetPath;
   const config = await loadPipelineBudgets(absBudget, fs);
   let head = null;
@@ -160549,7 +160516,7 @@ async function runBudgetGate(opts) {
   const queryCounts = await loadQueryCounts(opts.workflowsDir, fs);
   let measured;
   if (opts.measuredFile !== undefined) {
-    const measuredPath = opts.measuredFile.startsWith("/") ? opts.measuredFile : join96(opts.cwd, opts.measuredFile);
+    const measuredPath = opts.measuredFile.startsWith("/") ? opts.measuredFile : join97(opts.cwd, opts.measuredFile);
     measured = JSON.parse(await fs.readFile(measuredPath));
   } else if (!await fs.exists(opts.dbPath)) {
     measured = {};
@@ -160598,8 +160565,8 @@ function registerWorkflowCostCommand(workflow, context, deps = {}) {
   ].join(`
 `)).option("--workflow <name>", "restrict to a workflow (repeatable)", collect3, []).option("--by-state", "report per-state rows instead of per-workflow rows").option("--include-bookkeeping", "keep bookkeeping workflows in the default cohort").option("--since <YYYY-MM-DD>", "only runs created on/after this UTC date").option("--budget <file>", "run the pipeline budget gate against this budget file").option("--measured-file <json>", "with --budget: read measured values from this file instead of the DB").option(...SHARED_OPTIONS.json).action(async (options) => {
     const cwd = context.cwd;
-    const dbPath = join97(cwd, ".spur/spur.db");
-    const workflowsDir = join97(cwd, ".spur", "workflows");
+    const dbPath = join98(cwd, ".spur/spur.db");
+    const workflowsDir = join98(cwd, ".spur", "workflows");
     const openDb = deps.openDb ?? defaultDbOpener;
     try {
       if (options.budget !== undefined) {
@@ -160663,9 +160630,9 @@ init_run_summary_render();
 // ../../packages/app/src/workflow/persist-check.ts
 init_dist5();
 import { existsSync as existsSync33, readdirSync as readdirSync15, readFileSync as readFileSync30, statSync as statSync19 } from "fs";
-import { basename as basename22, dirname as dirname45, isAbsolute as isAbsolute16, join as join99, relative as relative20, resolve as resolve37 } from "path";
-var EVIDENCE_DIR = join99(".spur", "memory", "evidence");
-var RUN_DIR = join99(".spur", "run");
+import { basename as basename22, dirname as dirname45, isAbsolute as isAbsolute16, join as join100, relative as relative20, resolve as resolve37 } from "path";
+var EVIDENCE_DIR = join100(".spur", "memory", "evidence");
+var RUN_DIR = join100(".spur", "run");
 var NAMED_CAP = 32;
 var PREFIX_CAP = 64;
 var DURABLE_FAMILY_RE = /^\d{4}-(?:verdict|feature-verification)\.json$/;
@@ -160680,7 +160647,7 @@ function walkFiles(dir, root) {
   const out = [];
   const walk = (cur) => {
     for (const e of readdirSync15(cur, { withFileTypes: true }).sort((a, b) => a.name.localeCompare(b.name))) {
-      const p = join99(cur, e.name);
+      const p = join100(cur, e.name);
       if (e.isDirectory())
         walk(p);
       else if (e.isFile())
@@ -160707,8 +160674,8 @@ function listObligations(wtRoot, wbsList, runIds) {
   const prefixes = [...new Set([...wbsList, ...runIds].filter(Boolean))];
   if (prefixes.length === 0)
     return null;
-  const evFiles = walkFiles(join99(wtRoot, EVIDENCE_DIR), wtRoot);
-  const runFiles = walkFiles(join99(wtRoot, RUN_DIR), wtRoot);
+  const evFiles = walkFiles(join100(wtRoot, EVIDENCE_DIR), wtRoot);
+  const runFiles = walkFiles(join100(wtRoot, RUN_DIR), wtRoot);
   const files = [];
   const counts = new Map;
   if (!collectOwned(evFiles, prefixes, counts, files))
@@ -160725,13 +160692,13 @@ function compareTrees(wtRoot, invokeRoot, files, foreignDivergent = new Set) {
   for (const rel of files) {
     if (foreignDivergent.has(rel) || foreignDivergent.has(basename22(rel)))
       continue;
-    const invPath = join99(invokeRoot, rel);
+    const invPath = join100(invokeRoot, rel);
     if (!existsSync33(invPath)) {
       missing.push(rel);
       continue;
     }
     try {
-      if (readFileSync30(join99(wtRoot, rel)).equals(readFileSync30(invPath)))
+      if (readFileSync30(join100(wtRoot, rel)).equals(readFileSync30(invPath)))
         ok++;
       else
         divergent.push(rel);
@@ -160748,7 +160715,7 @@ function defaultInvokeRoot(cwd) {
   });
   const common = run.stdout.trim();
   if (run.exitCode === 0 && common)
-    return dirname45(isAbsolute16(common) ? common : join99(cwd, common));
+    return dirname45(isAbsolute16(common) ? common : join100(cwd, common));
   return cwd;
 }
 function readPersistOutSkips(candidates) {
@@ -160763,7 +160730,7 @@ function readPersistOutSkips(candidates) {
         for (const item of parsed.evidenceSkipped) {
           if (item.reason === "foreign-divergent" && typeof item.name === "string") {
             foreignDivergent.add(item.name);
-            foreignDivergent.add(join99(EVIDENCE_DIR, item.name));
+            foreignDivergent.add(join100(EVIDENCE_DIR, item.name));
           }
         }
       }
@@ -160796,8 +160763,8 @@ function runPersistCheck(input) {
   const invokeRoot = input.root === undefined ? defaultInvokeRoot(input.cwd) : resolve37(input.cwd, input.root);
   const { foreignDivergent, skips } = readPersistOutSkips([
     input.successJson === undefined || input.successJson === "" ? "" : resolve37(input.cwd, input.successJson),
-    join99(invokeRoot, ".spur", "run", "persist-out.json"),
-    join99(wtRoot, ".spur", "run", "persist-out.json")
+    join100(invokeRoot, ".spur", "run", "persist-out.json"),
+    join100(wtRoot, ".spur", "run", "persist-out.json")
   ].filter(Boolean));
   const obligations = listObligations(wtRoot, wbsList, runIds);
   if (obligations === null) {
@@ -161166,7 +161133,7 @@ init_src3();
 init_capability_attestation();
 init_src();
 init_dist7();
-import { join as join100 } from "path";
+import { join as join101 } from "path";
 import { createInterface } from "readline";
 import { setTimeout as sleep6 } from "timers/promises";
 var WORKFLOW_RUN_ACTIVE_ENV = "SPUR_WORKFLOW_RUN_ACTIVE";
@@ -161270,9 +161237,9 @@ async function writeWorkflowPlanArtifact(cwd, runId, resolved, secretValues, sta
     }))
   });
   const { mkdir, writeFile } = await import("fs/promises");
-  const artifactsDir = join100(cwd, ".spur", "run");
+  const artifactsDir = join101(cwd, ".spur", "run");
   await mkdir(artifactsDir, { recursive: true });
-  const artifactPath = join100(artifactsDir, `${runId}-workflow-plan.json`);
+  const artifactPath = join101(artifactsDir, `${runId}-workflow-plan.json`);
   await writeFile(artifactPath, payload);
   return artifactPath;
 }
@@ -161743,7 +161710,7 @@ function registerWorkflowSummaryCommand(workflow, context) {
 // src/commands/workflow/trace.ts
 init_src3();
 import { closeSync as closeSync11, fstatSync as fstatSync5, openSync as openSync11, readFileSync as readFileSync32, readSync as readSync3 } from "fs";
-import { join as join101 } from "path";
+import { join as join102 } from "path";
 import { setTimeout as sleep7 } from "timers/promises";
 function formatTraceList2(result) {
   if (result.entries.length === 0) {
@@ -161912,8 +161879,8 @@ function readRunLogChunk(logPath, offset) {
 async function followRunLog(service, runId, dir, pollMs, write, wait = (ms) => sleep7(ms), now = Date.now, deadlineMs) {
   const start = now();
   const deadline = deadlineMs === undefined ? Number.POSITIVE_INFINITY : start + deadlineMs;
-  const runDir = join101(dir, ".spur", "run");
-  const pendingMdPath = join101(runDir, `${runId}.md`);
+  const runDir = join102(dir, ".spur", "run");
+  const pendingMdPath = join102(runDir, `${runId}.md`);
   let logPath;
   let record = { kind: "missing" };
   let offset = 0;