@gobing-ai/spur 0.4.9 → 0.4.11

package/spur.js

@@ -14967,7 +14967,6 @@ var init_finding_codes = __esm(() => {
     "L4.feature-receipt-run",
     "L4.feature-receipt-stale",
     "L4.feature-receipt-contract",
-    "L4.feature-receipt-confidence",
     "precheck-size",
     "precheck-evidence",
     "inventory-coverage",
@@ -15040,7 +15039,6 @@ var init_finding_codes = __esm(() => {
     L4_FEATURE_RECEIPT_RUN: "L4.feature-receipt-run",
     L4_FEATURE_RECEIPT_STALE: "L4.feature-receipt-stale",
     L4_FEATURE_RECEIPT_CONTRACT: "L4.feature-receipt-contract",
-    L4_FEATURE_RECEIPT_CONFIDENCE: "L4.feature-receipt-confidence",
     PRECHECK_SIZE: "precheck-size",
     PRECHECK_EVIDENCE: "precheck-evidence",
     INVENTORY_COVERAGE: "inventory-coverage",
@@ -15065,6 +15063,7 @@ var init_projects = __esm(() => {
   projectEntrySchema = object2({
     name: string2().min(1),
     path: string2().min(1),
+    host: string2().optional(),
     port: number2().int().nonnegative().default(0)
   });
   projectsFileSchema = object2({
@@ -85638,6 +85637,12 @@ function normalizeProjectPath(pathInput) {
 function setPortProbeForTests(probe) {
   testPortProbe = probe;
 }
+function isLocalHost(host) {
+  if (!host)
+    return true;
+  const trimmed = host.trim().toLowerCase();
+  return trimmed === "localhost" || trimmed === "127.0.0.1" || trimmed === "::1" || trimmed === "";
+}
 function classifyPortBindError(err) {
   const code = err && typeof err === "object" && "code" in err ? String(err.code) : "";
   if (code === "EADDRINUSE" || code === "EADDRNOTAVAIL") {
@@ -85648,31 +85653,34 @@ function classifyPortBindError(err) {
 async function isPortLiveOnHost(port, host, timeoutMs) {
   return new Promise((resolve) => {
     const socket = connect({ port, host, timeout: timeoutMs });
-    socket.on("connect", () => {
-      socket.destroy();
-      resolve(true);
-    });
-    socket.on("timeout", () => {
-      socket.destroy();
-      resolve(false);
-    });
-    socket.on("error", () => {
+    socket.unref();
+    let settled = false;
+    const cleanup = (res) => {
+      if (settled)
+        return;
+      settled = true;
       socket.destroy();
-      resolve(false);
-    });
+      resolve(res);
+    };
+    socket.on("connect", () => cleanup(true));
+    socket.on("timeout", () => cleanup(false));
+    socket.on("error", () => cleanup(false));
   });
 }
-async function isPortLive(port, timeoutMs = 200) {
+async function isPortLive(port, timeoutMs = 200, host = "localhost") {
   if (testPortProbe) {
-    return await testPortProbe(port) === "in-use";
+    return await testPortProbe(port, host) === "in-use";
   }
-  if (port <= 0)
+  if (port <= 0 || port > 65535)
     return false;
-  if (await isPortLiveOnHost(port, "127.0.0.1", timeoutMs))
-    return true;
-  if (await isPortLiveOnHost(port, "::1", timeoutMs))
-    return true;
-  return false;
+  if (isLocalHost(host)) {
+    if (await isPortLiveOnHost(port, "127.0.0.1", timeoutMs))
+      return true;
+    if (await isPortLiveOnHost(port, "::1", timeoutMs))
+      return true;
+    return false;
+  }
+  return isPortLiveOnHost(port, host, timeoutMs);
 }
 async function probePort(port) {
   if (testPortProbe) {
@@ -85943,10 +85951,12 @@ class ProjectRegistry {
       const data = this.readRaw();
       let changed = false;
       for (const project of data.projects) {
-        const normalized = normalizeProjectPath(project.path);
-        if (normalized !== project.path) {
-          project.path = normalized;
-          changed = true;
+        if (isLocalHost(project.host)) {
+          const normalized = normalizeProjectPath(project.path);
+          if (normalized !== project.path) {
+            project.path = normalized;
+            changed = true;
+          }
         }
       }
       if (changed) {
@@ -85957,13 +85967,17 @@ class ProjectRegistry {
   async list() {
     await this.healTildePaths();
     await this.refreshProjects();
-    await this.healStale();
     return this.readRaw().projects;
   }
   async getByPath(pathInput) {
     const normalized = normalizeProjectPath(pathInput);
     const projects = await this.list();
-    return projects.find((p) => normalizeProjectPath(p.path) === normalized);
+    return projects.find((p) => {
+      if (isLocalHost(p.host)) {
+        return normalizeProjectPath(p.path) === normalized;
+      }
+      return p.path === pathInput || p.path === normalized;
+    });
   }
   async getByName(nameInput) {
     const trimmed = nameInput.trim();
@@ -85973,11 +85987,20 @@ class ProjectRegistry {
   async upsert(entry) {
     return this.withLock(async () => {
       const currentData = this.readRaw();
-      const normalizedPath = normalizeProjectPath(entry.path);
-      const index = currentData.projects.findIndex((p) => normalizeProjectPath(p.path) === normalizedPath);
+      const host = entry.host && entry.host.trim() !== "" ? entry.host.trim() : "localhost";
+      const isLocal = isLocalHost(host);
+      const normalizedPath = isLocal ? normalizeProjectPath(entry.path) : entry.path;
+      const index = currentData.projects.findIndex((p) => {
+        const pHost = p.host && p.host.trim() !== "" ? p.host.trim() : "localhost";
+        if (isLocal) {
+          return isLocalHost(pHost) && normalizeProjectPath(p.path) === normalizedPath;
+        }
+        return pHost.toLowerCase() === host.toLowerCase() && p.path === normalizedPath;
+      });
       const newEntry = {
         name: entry.name,
         path: normalizedPath,
+        host,
         port: entry.port ?? 0
       };
       if (index >= 0 && currentData.projects[index]) {
@@ -85985,13 +86008,20 @@ class ProjectRegistry {
         currentData.projects[index] = {
           ...existing,
           name: entry.name,
+          host: entry.host ?? existing.host ?? "localhost",
           port: entry.port ?? existing.port
         };
       } else {
         currentData.projects.push(newEntry);
       }
       this.writeRaw(currentData);
-      const res = currentData.projects.find((p) => normalizeProjectPath(p.path) === normalizedPath);
+      const res = currentData.projects.find((p) => {
+        const pHost = p.host && p.host.trim() !== "" ? p.host.trim() : "localhost";
+        if (isLocal) {
+          return isLocalHost(pHost) && normalizeProjectPath(p.path) === normalizedPath;
+        }
+        return pHost.toLowerCase() === host.toLowerCase() && p.path === normalizedPath;
+      });
       if (!res) {
         throw new Error(`Failed to upsert project: ${normalizedPath}`);
       }
@@ -86004,9 +86034,10 @@ class ProjectRegistry {
       const normalized = normalizeProjectPath(nameOrPath);
       const initialLen = currentData.projects.length;
       currentData.projects = currentData.projects.filter((p) => {
-        const pNorm = normalizeProjectPath(p.path);
+        const pNorm = isLocalHost(p.host) ? normalizeProjectPath(p.path) : p.path;
+        const pathMatch = pNorm === normalized || p.path === nameOrPath;
         const nameMatch = p.name.toLowerCase() === nameOrPath.trim().toLowerCase();
-        return pNorm !== normalized && !nameMatch;
+        return !pathMatch && !nameMatch;
       });
       if (currentData.projects.length !== initialLen) {
         this.writeRaw(currentData);
@@ -86019,7 +86050,10 @@ class ProjectRegistry {
     return this.withLock(async () => {
       const currentData = this.readRaw();
       const normalized = normalizeProjectPath(pathInput);
-      const project = currentData.projects.find((p) => normalizeProjectPath(p.path) === normalized);
+      const project = currentData.projects.find((p) => {
+        const pNorm = isLocalHost(p.host) ? normalizeProjectPath(p.path) : p.path;
+        return pNorm === normalized || p.path === pathInput;
+      });
       if (project) {
         project.port = port;
         this.writeRaw(currentData);
@@ -86057,10 +86091,13 @@ class ProjectRegistry {
     return this.withLock(async () => {
       const data = this.readRaw();
       let changed = false;
+      const resetProjects = [];
       for (const project of data.projects) {
         if (project.port > 0) {
-          const live = await isPortLive(project.port);
+          const host = project.host ?? "localhost";
+          const live = await isPortLive(project.port, 200, host);
           if (!live) {
+            resetProjects.push({ ...project });
             project.port = 0;
             changed = true;
           }
@@ -86069,6 +86106,7 @@ class ProjectRegistry {
       if (changed) {
         this.writeRaw(data);
       }
+      return resetProjects;
     });
   }
   async refreshProjects(options) {
@@ -86078,9 +86116,15 @@ class ProjectRegistry {
     await Promise.resolve().then(() => init_project_stop());
     const removed = await this.withLock(async () => {
       const data = this.readRaw();
-      const purged = data.projects.filter((p) => !existsSync8(normalizeProjectPath(p.path)));
+      const purged = data.projects.filter((p) => {
+        if (isLocalHost(p.host)) {
+          return !existsSync8(normalizeProjectPath(p.path));
+        }
+        return false;
+      });
       if (purged.length > 0) {
-        data.projects = data.projects.filter((p) => existsSync8(normalizeProjectPath(p.path)));
+        const purgedPaths = new Set(purged.map((p) => `${p.host ?? "localhost"}:${normalizeProjectPath(p.path)}`));
+        data.projects = data.projects.filter((p) => !purgedPaths.has(`${p.host ?? "localhost"}:${normalizeProjectPath(p.path)}`));
         this.writeRaw(data);
       }
       return purged;
@@ -86088,7 +86132,7 @@ class ProjectRegistry {
     const terminated = [];
     if (terminate) {
       for (const project of removed) {
-        if (project.port > 0) {
+        if (project.port > 0 && isLocalHost(project.host)) {
           const stop = await stopRegisteredProject(project, {
             processExecutor: executor,
             killTimeoutMs,
@@ -86101,11 +86145,13 @@ class ProjectRegistry {
         }
       }
     }
+    const resetPorts = await this.healStale();
     return {
       removed,
       terminated,
       purgedProjects: removed,
-      terminatedProcesses: terminated
+      terminatedProcesses: terminated,
+      resetPorts
     };
   }
 }
@@ -89363,22 +89409,11 @@ async function completeFeatureVerificationReceipt(fs, runDir, running, options)
   if (running.status !== "RUNNING") {
     throw new Error(`receipt for run ${running.runId} is already ${running.status}`);
   }
-  if (options.confidence !== undefined) {
-    if (!FEATURE_RECEIPT_CONFIDENCE_LEVELS.includes(options.confidence)) {
-      throw new Error(`confidence must be HIGH, MEDIUM or LOW (got ${JSON.stringify(options.confidence)})`);
-    }
-    if (options.confidenceBasis === undefined || options.confidenceBasis.length === 0) {
-      throw new Error(`confidence ${options.confidence} requires a non-empty confidenceBasis`);
-    }
-  }
   const receipt = {
     ...running,
     status: options.status,
     inputDigest: options.inputDigest ?? running.inputDigest,
-    completedAt: options.completedAt ?? new Date().toISOString().replace(/\.\d{3}Z$/, "Z"),
-    ...options.confidence === undefined ? {} : { confidence: options.confidence },
-    ...options.confidenceBasis === undefined ? {} : { confidenceBasis: [...options.confidenceBasis] },
-    ...options.confidenceAcknowledged === true ? { confidenceAcknowledged: true } : {}
+    completedAt: options.completedAt ?? new Date().toISOString().replace(/\.\d{3}Z$/, "Z")
   };
   const paths = featureReceiptPaths(runDir, receipt.featureId, receipt.runId);
   await fs.ensureDir(runDir);
@@ -89406,23 +89441,6 @@ function parseFeatureVerificationReceipt(raw) {
   if (typeof r.featureId !== "string" || typeof r.runId !== "string" || typeof r.workdir !== "string" || typeof v?.name !== "string" || typeof v?.sourcePath !== "string" || typeof v?.layer !== "string" || typeof v?.definitionDigest !== "string" || typeof r.verificationCmd !== "string" || typeof r.inputDigest !== "string" || r.status !== "RUNNING" && r.status !== "PASS" && r.status !== "FAIL" || typeof r.startedAt !== "string" || r.completedAt !== null && typeof r.completedAt !== "string") {
     throw new Error("required fields missing or mistyped");
   }
-  if (r.confidence !== undefined) {
-    if (!FEATURE_RECEIPT_CONFIDENCE_LEVELS.includes(r.confidence)) {
-      throw new Error(`confidence must be HIGH, MEDIUM or LOW (got ${JSON.stringify(r.confidence)})`);
-    }
-    if (!Array.isArray(r.confidenceBasis) || r.confidenceBasis.length === 0) {
-      throw new Error("confidence requires a non-empty confidenceBasis");
-    }
-    if (!r.confidenceBasis.every((entry) => typeof entry === "string" && entry.length > 0)) {
-      throw new Error("confidenceBasis entries must be non-empty strings");
-    }
-  }
-  if (r.confidenceBasis !== undefined && !Array.isArray(r.confidenceBasis)) {
-    throw new Error("confidenceBasis must be an array");
-  }
-  if (r.confidenceAcknowledged !== undefined && typeof r.confidenceAcknowledged !== "boolean") {
-    throw new Error("confidenceAcknowledged must be a boolean");
-  }
   return parsed;
 }
 async function readReceiptCopy(fs, path, label) {
@@ -89560,15 +89578,6 @@ async function validateFeatureVerificationReceipt(fs, options) {
       detail: `receipt digest ${latest.inputDigest} \u2260 current inputs ${options.currentDigest} \u2014 tree, spec, learnings or check contract changed after the pass`
     };
   }
-  const confidence = latest.confidence;
-  const certified = confidence === "HIGH" || confidence === "MEDIUM";
-  if (!certified && latest.confidenceAcknowledged !== true) {
-    return {
-      ok: false,
-      reason: "unacknowledged-low-confidence",
-      detail: confidence === undefined ? "receipt records a PASS with no confidence level (written before the field existed) \u2014 re-run the feature-scoped verification pass, which derives HIGH or MEDIUM from its own evidence" : `receipt records a ${confidence} confidence${(latest.confidenceBasis ?? []).length > 0 ? ` (basis: ${(latest.confidenceBasis ?? []).join("; ")})` : ""} \u2014 re-run the pass where the level can be HIGH or MEDIUM, or re-run it with the acknowledgement (ackLowConfidence) when LOW is the honest level`
-    };
-  }
   return { ok: true, receipt: latest };
 }
 async function captureFeatureReceiptDigest(repoRoot, featureContent, learningsContent) {
@@ -89577,12 +89586,11 @@ async function captureFeatureReceiptDigest(repoRoot, featureContent, learningsCo
 function isProofCaptureError(err) {
   return err instanceof ProofCaptureError;
 }
-var FEATURE_RECEIPT_SCHEMA_VERSION = 1, DEFAULT_FEATURE_VERIFICATION_CMD = "bun run spur-check-feature", FEATURE_RECEIPT_CONFIDENCE_LEVELS, RECEIPT_ID_PATTERN;
+var FEATURE_RECEIPT_SCHEMA_VERSION = 1, DEFAULT_FEATURE_VERIFICATION_CMD = "bun run spur-check-feature", RECEIPT_ID_PATTERN;
 var init_feature_verification_receipt = __esm(() => {
   init_durable_plane_ignore();
   init_run_path();
   init_proof_input_fingerprint();
-  FEATURE_RECEIPT_CONFIDENCE_LEVELS = ["HIGH", "MEDIUM", "LOW"];
   RECEIPT_ID_PATTERN = /^[A-Za-z0-9][A-Za-z0-9._-]*$/;
 });
 
@@ -92018,7 +92026,6 @@ var init_planning_check_base = __esm(() => {
     FINDING_CODES.L4_FEATURE_RECEIPT_RUN,
     FINDING_CODES.L4_FEATURE_RECEIPT_STALE,
     FINDING_CODES.L4_FEATURE_RECEIPT_CONTRACT,
-    FINDING_CODES.L4_FEATURE_RECEIPT_CONFIDENCE,
     FINDING_CODES.L3_REVIEW_TESTING_CONTRADICTION,
     FINDING_CODES.L4_ROLLUP_SUBTASKS_OPEN,
     FINDING_CODES.L4_ROLLUP_MISSING_ROSTER,
@@ -93604,8 +93611,7 @@ var init_feature_check = __esm(() => {
         failed: FINDING_CODES.L4_FEATURE_RECEIPT_FAILED,
         run: FINDING_CODES.L4_FEATURE_RECEIPT_RUN,
         stale: FINDING_CODES.L4_FEATURE_RECEIPT_STALE,
-        "contract-mismatch": FINDING_CODES.L4_FEATURE_RECEIPT_CONTRACT,
-        "unacknowledged-low-confidence": FINDING_CODES.L4_FEATURE_RECEIPT_CONFIDENCE
+        "contract-mismatch": FINDING_CODES.L4_FEATURE_RECEIPT_CONTRACT
       };
       findings.push({
         layer: "L4",
@@ -101835,39 +101841,6 @@ var init_proof_fingerprint = __esm(() => {
   ACCEPTED_OPTION_KEYS = ["expect", "featureFile", "taskFile", "var"];
 });
 
-// ../../packages/app/src/workflow/actions/response-validate.ts
-class ResponseValidateActionRunner {
-  kind = KIND14;
-  engine;
-  constructor(engine) {
-    this.engine = engine;
-  }
-  async execute(options, _context) {
-    const text = asString5(options.text);
-    if (text === undefined) {
-      return {
-        ok: false,
-        error: "response.validate: text is required (use a template like {{ steps.generate.answer }})"
-      };
-    }
-    const result = this.engine.validate(text);
-    return {
-      ok: result.ok,
-      data: {
-        reason: result.reason,
-        ...result.issues !== undefined ? { issues: result.issues } : {}
-      },
-      error: result.ok ? undefined : result.reason
-    };
-  }
-}
-function asString5(value) {
-  if (value === undefined || value === null)
-    return;
-  return String(value);
-}
-var KIND14 = "response.validate";
-
 // ../../packages/app/src/workflow/utils.ts
 var identity5 = (s) => s, NO_COLOR;
 var init_utils3 = __esm(() => {
@@ -101883,15 +101856,15 @@ var init_utils3 = __esm(() => {
 
 // ../../packages/app/src/workflow/actions/rule-check.ts
 class RuleCheckActionRunner {
-  kind = KIND15;
+  kind = KIND14;
   ruleService;
   constructor(ruleService) {
     this.ruleService = ruleService;
   }
   async execute(options, _context) {
-    const preset = asString6(options.preset) ?? "recommended-pre-check";
-    const rule = asString6(options.rule);
-    const failOn = asString6(options.failOn) ?? "error";
+    const preset = asString5(options.preset) ?? "recommended-pre-check";
+    const rule = asString5(options.rule);
+    const failOn = asString5(options.failOn) ?? "error";
     const result = await this.ruleService.evaluate({
       preset,
       failOn,
@@ -101913,12 +101886,12 @@ class RuleCheckActionRunner {
     };
   }
 }
-function asString6(value) {
+function asString5(value) {
   if (value === undefined || value === null)
     return;
   return String(value);
 }
-var KIND15 = "rule.check";
+var KIND14 = "rule.check";
 var init_rule_check = __esm(() => {
   init_utils3();
 });
@@ -101986,7 +101959,7 @@ class RunArtifactActionRunner {
   fileSystem;
   artifactDao;
   processExecutor;
-  kind = KIND16;
+  kind = KIND15;
   constructor(getDb, fileSystem = createNodeFileSystem2(), artifactDao, processExecutor) {
     this.getDb = getDb;
     this.fileSystem = fileSystem;
@@ -102012,7 +101985,7 @@ class RunArtifactActionRunner {
     if (proofBinding !== undefined && proofBinding !== "current") {
       return {
         ok: false,
-        error: `${KIND16}: unsupported proofBinding "${String(proofBinding)}" - only "current" is defined (ADR-071)`
+        error: `${KIND15}: unsupported proofBinding "${String(proofBinding)}" - only "current" is defined (ADR-071)`
       };
     }
     const workdir = context.workdir ?? process.cwd();
@@ -102046,7 +102019,7 @@ class RunArtifactActionRunner {
       try {
         registeredPath = await persistDurableArtifact(normalized, workdir, context.runId, this.fileSystem, !requireExisting);
       } catch (error) {
-        return { ok: false, error: `${KIND16}: durable persist failed: ${error.message}` };
+        return { ok: false, error: `${KIND15}: durable persist failed: ${error.message}` };
       }
     }
     let dao = this.artifactDao;
@@ -102077,24 +102050,24 @@ class RunArtifactActionRunner {
     if (artifactKind !== "verify-verdict") {
       return {
         ok: false,
-        error: `${KIND16}: proofBinding "current" is only supported for the verify-verdict artifact kind (got "${artifactKind}")`
+        error: `${KIND15}: proofBinding "current" is only supported for the verify-verdict artifact kind (got "${artifactKind}")`
       };
     }
     if (!this.getDb) {
       return {
         ok: false,
-        error: `${KIND16}: proofBinding "current" requires the composed database context (RunDao run identity) \u2014 refusing an unverifiable binding`
+        error: `${KIND15}: proofBinding "current" requires the composed database context (RunDao run identity) \u2014 refusing an unverifiable binding`
       };
     }
     if (typeof options.taskFile !== "string" || options.taskFile.trim() === "") {
       return {
         ok: false,
-        error: `${KIND16}: proofBinding "current" requires a non-empty "taskFile" option \u2014 the fresh digest must cover the canonical task spec`
+        error: `${KIND15}: proofBinding "current" requires a non-empty "taskFile" option \u2014 the fresh digest must cover the canonical task spec`
       };
     }
     const inputs = await readProofInputContents(this.fileSystem, workdir, options);
     if (!inputs.ok) {
-      return { ok: false, error: `${KIND16}: ${inputs.error}` };
+      return { ok: false, error: `${KIND15}: ${inputs.error}` };
     }
     let digest;
     try {
@@ -102106,19 +102079,19 @@ class RunArtifactActionRunner {
         fileSystem: this.fileSystem
       });
     } catch (error) {
-      return { ok: false, error: `${KIND16}: fresh proof capture failed: ${error.message}` };
+      return { ok: false, error: `${KIND15}: fresh proof capture failed: ${error.message}` };
     }
     const varDigest = context.vars.proofDigestNow ?? context.vars.proofDigest;
     if (typeof varDigest !== "string" || !PROOF_DIGEST_RE.test(varDigest)) {
       return {
         ok: false,
-        error: `${KIND16}: proofBinding "current" does not hold - the run has no current proof input ` + `digest (vars.proofDigestNow/proofDigest missing or malformed), so the artifact cannot be ` + `bound to a proof that was never captured; capture one with proof.fingerprint first`
+        error: `${KIND15}: proofBinding "current" does not hold - the run has no current proof input ` + `digest (vars.proofDigestNow/proofDigest missing or malformed), so the artifact cannot be ` + `bound to a proof that was never captured; capture one with proof.fingerprint first`
       };
     }
     if (varDigest !== digest) {
       return {
         ok: false,
-        error: `${KIND16}: the run's declared proof digest (${varDigest}) does not match the freshly ` + `captured digest (${digest}) \u2014 a stale or forged var cannot bless artifact content (0785 R3)`
+        error: `${KIND15}: the run's declared proof digest (${varDigest}) does not match the freshly ` + `captured digest (${digest}) \u2014 a stale or forged var cannot bless artifact content (0785 R3)`
       };
     }
     let normalized;
@@ -102148,7 +102121,7 @@ class RunArtifactActionRunner {
     try {
       raw = await this.fileSystem.readFile(normalized);
     } catch (error) {
-      return { ok: false, error: `${KIND16}: verdict artifact unreadable: ${error.message}` };
+      return { ok: false, error: `${KIND15}: verdict artifact unreadable: ${error.message}` };
     }
     const taskWbs = String(context.vars.wbs ?? "");
     const outcome = parseVerifyVerdict(raw, taskWbs);
@@ -102156,33 +102129,33 @@ class RunArtifactActionRunner {
       const detail = outcome.kind === "invalid" && outcome.reason !== undefined ? `: ${outcome.reason}` : "";
       return {
         ok: false,
-        error: `${KIND16}: verdict artifact is ${outcome.kind}${detail} \u2014 refusing to bind (0785 R3)`
+        error: `${KIND15}: verdict artifact is ${outcome.kind}${detail} \u2014 refusing to bind (0785 R3)`
       };
     }
     const verdict = outcome.verdict;
     if (verdict.wbs !== taskWbs) {
       return {
         ok: false,
-        error: `${KIND16}: verdict artifact names wbs "${verdict.wbs}" but the run carries task "${taskWbs}"`
+        error: `${KIND15}: verdict artifact names wbs "${verdict.wbs}" but the run carries task "${taskWbs}"`
       };
     }
     if (verdict.verdict !== "PASS") {
       return {
         ok: false,
-        error: `${KIND16}: verdict aggregate is ${verdict.verdict}, not PASS \u2014 refusing to bind`
+        error: `${KIND15}: verdict aggregate is ${verdict.verdict}, not PASS \u2014 refusing to bind`
       };
     }
     let root;
     try {
       root = JSON.parse(raw);
     } catch {
-      return { ok: false, error: `${KIND16}: verdict artifact is malformed JSON` };
+      return { ok: false, error: `${KIND15}: verdict artifact is malformed JSON` };
     }
     const proof = root.proof;
     if (proof === null || typeof proof !== "object" || Array.isArray(proof)) {
       return {
         ok: false,
-        error: `${KIND16}: verdict artifact carries no raw proof block \u2014 binding refused (0785 R3)`
+        error: `${KIND15}: verdict artifact carries no raw proof block \u2014 binding refused (0785 R3)`
       };
     }
     const p = proof;
@@ -102196,13 +102169,13 @@ class RunArtifactActionRunner {
     if (p.digest !== digest) {
       return {
         ok: false,
-        error: `${KIND16}: proof.digest ${String(p.digest)} does not equal the freshly captured digest (${digest})`
+        error: `${KIND15}: proof.digest ${String(p.digest)} does not equal the freshly captured digest (${digest})`
       };
     }
     if (p.runId !== context.runId) {
       return {
         ok: false,
-        error: `${KIND16}: proof.runId ${String(p.runId)} does not match the certifying run ${context.runId}`
+        error: `${KIND15}: proof.runId ${String(p.runId)} does not match the certifying run ${context.runId}`
       };
     }
     const db = await this.getDb();
@@ -102210,21 +102183,21 @@ class RunArtifactActionRunner {
     if (runRow === undefined) {
       return {
         ok: false,
-        error: `${KIND16}: run ${context.runId} has no authoritative row \u2014 refusing binding (0785 R3)`
+        error: `${KIND15}: run ${context.runId} has no authoritative row \u2014 refusing binding (0785 R3)`
       };
     }
     let metadata = {};
     try {
       metadata = JSON.parse(runRow.metadata_json || "{}");
     } catch {
-      return { ok: false, error: `${KIND16}: run ${context.runId} metadata_json is malformed \u2014 refusing binding` };
+      return { ok: false, error: `${KIND15}: run ${context.runId} metadata_json is malformed \u2014 refusing binding` };
     }
     const resumeDigest = metadata.resumeDefinitionDigest;
     const expectedDefinition = typeof resumeDigest === "string" && resumeDigest !== "" ? resumeDigest : metadata.definitionDigest;
     if (typeof expectedDefinition !== "string" || p.definitionDigest !== expectedDefinition) {
       return {
         ok: false,
-        error: `${KIND16}: proof.definitionDigest ${String(p.definitionDigest)} does not match the run's ` + `${typeof resumeDigest === "string" && resumeDigest !== "" ? "resume " : ""}definition digest \u2014 ` + `a stale-definition artifact cannot certify this run (0785 R3)`
+        error: `${KIND15}: proof.definitionDigest ${String(p.definitionDigest)} does not match the run's ` + `${typeof resumeDigest === "string" && resumeDigest !== "" ? "resume " : ""}definition digest \u2014 ` + `a stale-definition artifact cannot certify this run (0785 R3)`
       };
     }
     const qualityGate = stageOf("qualityGate");
@@ -102233,7 +102206,7 @@ class RunArtifactActionRunner {
     if (qualityGate === null || review === null || verification === null) {
       return {
         ok: false,
-        error: `${KIND16}: proof.stages is missing qualityGate/review/verification evidence \u2014 binding refused`
+        error: `${KIND15}: proof.stages is missing qualityGate/review/verification evidence \u2014 binding refused`
       };
     }
     for (const [name, stage] of [
@@ -102244,26 +102217,26 @@ class RunArtifactActionRunner {
       if (stage.digest !== digest) {
         return {
           ok: false,
-          error: `${KIND16}: proof.stages.${name}.digest does not equal the freshly captured digest`
+          error: `${KIND15}: proof.stages.${name}.digest does not equal the freshly captured digest`
         };
       }
     }
     if (qualityGate.status !== "PASS") {
       return {
         ok: false,
-        error: `${KIND16}: proof.stages.qualityGate.status is ${String(qualityGate.status)}, not PASS`
+        error: `${KIND15}: proof.stages.qualityGate.status is ${String(qualityGate.status)}, not PASS`
       };
     }
     if (verification.status !== "PASS") {
       return {
         ok: false,
-        error: `${KIND16}: proof.stages.verification.status is ${String(verification.status)}, not PASS`
+        error: `${KIND15}: proof.stages.verification.status is ${String(verification.status)}, not PASS`
       };
     }
     if (review.status !== "completed") {
       return {
         ok: false,
-        error: `${KIND16}: proof.stages.review.status is "${String(review.status)}" \u2014 a skipped or stale review is not completed evidence (0785 R4)`
+        error: `${KIND15}: proof.stages.review.status is "${String(review.status)}" \u2014 a skipped or stale review is not completed evidence (0785 R4)`
       };
     }
     const markerPath = join41(resolve15(workdir), ".spur", "run", `${context.runId}-review-proof.digest`);
@@ -102276,7 +102249,7 @@ class RunArtifactActionRunner {
     if (marker === null || marker.trim() !== digest) {
       return {
         ok: false,
-        error: `${KIND16}: review-proof marker ${context.runId}-review-proof.digest is missing or does not name ` + `the current digest \u2014 review completion is not evidenced for this run (0785 R4)`
+        error: `${KIND15}: review-proof marker ${context.runId}-review-proof.digest is missing or does not name ` + `the current digest \u2014 review completion is not evidenced for this run (0785 R4)`
       };
     }
     const dao = this.artifactDao ?? new ArtifactDao(db);
@@ -102287,7 +102260,7 @@ class RunArtifactActionRunner {
         registeredPath = await persistDurableArtifact(normalized, workdir, context.runId, this.fileSystem);
       }
     } catch (error) {
-      return { ok: false, error: `${KIND16}: durable persist failed: ${error.message}` };
+      return { ok: false, error: `${KIND15}: durable persist failed: ${error.message}` };
     }
     const record = await dao.record({
       path: registeredPath,
@@ -102308,7 +102281,7 @@ class RunArtifactActionRunner {
     };
   }
 }
-var copyFile2, link, mkdir2, readFile5, unlink2, writeFile3, KIND16 = "run.artifact", PROOF_DIGEST_RE;
+var copyFile2, link, mkdir2, readFile5, unlink2, writeFile3, KIND15 = "run.artifact", PROOF_DIGEST_RE;
 var init_run_artifact = __esm(() => {
   init_src2();
   init_dist5();
@@ -102322,7 +102295,7 @@ var init_run_artifact = __esm(() => {
 
 // ../../packages/app/src/workflow/guards/contract-violation.ts
 class ContractViolationGuardRunner {
-  kind = KIND17;
+  kind = KIND16;
   constructor() {}
   async evaluate(_options, context) {
     const data = context.lastActionResult?.data;
@@ -102339,7 +102312,7 @@ class ContractViolationGuardRunner {
     };
   }
 }
-var KIND17 = "contract-violation";
+var KIND16 = "contract-violation";
 
 // ../../packages/app/src/workflow/builtins.ts
 function registerSpurBuiltins(host, options) {
@@ -102370,9 +102343,6 @@ function registerSpurBuiltins(host, options) {
   if (options.httpRequester) {
     host.registerAction(new HttpRequestActionRunner(options.httpRequester, options.hostAllowlist ?? new Set), "builtin");
   }
-  if (options.responseValidateEngine) {
-    host.registerAction(new ResponseValidateActionRunner(options.responseValidateEngine), "builtin");
-  }
 }
 var init_builtins2 = __esm(() => {
   init_dist5();
@@ -108278,11 +108248,15 @@ function classifyProviderUsage(usage) {
   const hasWindow = RATE_WINDOW_NAMES.some((n) => usage[n] !== null && usage[n] !== undefined);
   return hasWindow ? { status: "headroom", exhaustedWindow: undefined } : { status: "no-usage", exhaustedWindow: undefined };
 }
+function agentProviderSlug(agent) {
+  const lower = (agent ?? "").toLowerCase();
+  return PROVIDER_ALIASES[lower] ?? lower;
+}
 function mapProvidersToExecutors(providers, executors) {
   const mapping = new Map;
   for (const provider of providers) {
     const lower = provider.toLowerCase();
-    const names = executors.filter((e) => (e.agent ?? "").toLowerCase() === lower || typeof e.model === "string" && e.model.split("/")[0]?.toLowerCase() === lower).map((e) => e.name);
+    const names = executors.filter((e) => agentProviderSlug(e.agent) === lower || typeof e.model === "string" && e.model.split("/")[0]?.toLowerCase() === lower).map((e) => e.name);
     if (names.length > 0)
       mapping.set(provider, names);
   }
@@ -108534,7 +108508,7 @@ async function finalizeOutcomes(entries, context) {
     }
   }
 }
-var codexbarWindowSchema, codexbarEntrySchema, RATE_WINDOW_NAMES, AgentUsageProducerError;
+var codexbarWindowSchema, codexbarEntrySchema, RATE_WINDOW_NAMES, AgentUsageProducerError, PROVIDER_ALIASES;
 var init_agent_usage_producer = __esm(() => {
   init_src();
   init_agent_quota_events();
@@ -108566,6 +108540,9 @@ var init_agent_usage_producer = __esm(() => {
       this.name = "AgentUsageProducerError";
     }
   };
+  PROVIDER_ALIASES = {
+    "antigravity-cli": "antigravity"
+  };
 });
 
 // ../../packages/app/src/services/agent-usage-source.ts
@@ -119962,36 +119939,6 @@ async function createFeatureLookup(workdir, fileSystem = createNodeFileSystem2()
     return { path, content: await fileSystem.readFile(path) };
   };
 }
-function deriveFeatureConfidence(input) {
-  const override = input.override === undefined || input.override === "" ? undefined : input.override;
-  const measured = [];
-  if (input.status === "PASS")
-    measured.push("verification command exited 0");
-  else
-    measured.push("verification command did not exit 0");
-  if (input.afterDigest !== undefined) {
-    measured.push(input.afterDigest === input.inputDigest ? "proof-input digest unchanged across the pass" : "proof-input digest changed across the pass");
-  }
-  if (input.status !== "PASS")
-    return { confidence: "LOW", basis: measured };
-  const derived = input.effectiveCmd === input.configuredCmd ? "HIGH" : "MEDIUM";
-  if (input.effectiveCmd !== input.configuredCmd) {
-    measured.push(`caller command override: ${input.effectiveCmd}`);
-    measured.push(`the selected definition declares: ${input.configuredCmd}`);
-  }
-  if (override === undefined)
-    return { confidence: derived, basis: measured };
-  return { confidence: override, basis: [`operator-declared ${override}`, ...measured] };
-}
-function assertConfidenceOverride(raw) {
-  if (raw === undefined || raw === "")
-    return;
-  const upper = raw.toUpperCase();
-  if (!FEATURE_RECEIPT_CONFIDENCE_LEVELS.includes(upper)) {
-    throw new Error(`confidence must be HIGH, MEDIUM or LOW (got ${JSON.stringify(raw)})`);
-  }
-  return upper;
-}
 async function defaultRegisterArtifact(workdir, artifact) {
   const db = await openInlineRunProjectDb(workdir);
   try {
@@ -120027,7 +119974,6 @@ async function runFeatureVerification(input) {
   const vars = selected.workflow.vars;
   const configuredCmd = typeof vars?.verificationCmd === "string" && vars.verificationCmd.length > 0 ? vars.verificationCmd : "bun run spur-check-feature";
   const effectiveCmd = input.cmdOverride !== undefined && input.cmdOverride !== "" ? input.cmdOverride : configuredCmd;
-  const confidenceOverride = assertConfidenceOverride(input.confidenceOverride);
   const spec = await lookup(input.featureId);
   if (spec === null) {
     throw new Error(`feature ${input.featureId} not found in the configured features directory`);
@@ -120053,25 +119999,13 @@ async function runFeatureVerification(input) {
   const base = { featureId: input.featureId, runId: input.runId, effectiveCmd, logPath, receiptPath: runScoped };
   const launchSplit = split(effectiveCmd, "feature-verification verificationCmd");
   if ("error" in launchSplit) {
-    const { confidence, basis } = deriveFeatureConfidence({
-      status: "FAIL",
-      configuredCmd,
-      effectiveCmd,
-      inputDigest: beforeDigest,
-      override: confidenceOverride
-    });
     await receipts.complete(fileSystem, runDir, receipt, {
       status: "FAIL",
-      inputDigest: beforeDigest,
-      confidence,
-      confidenceBasis: basis,
-      confidenceAcknowledged: input.ackLowConfidence === true
+      inputDigest: beforeDigest
     });
     return {
       ...base,
       status: "FAIL",
-      confidence,
-      confidenceBasis: basis,
       message: `verification FAIL (${launchSplit.error})`
     };
   }
@@ -120085,27 +120019,14 @@ async function runFeatureVerification(input) {
     const exit = result.status ?? 1;
     const afterDigest = await receipts.captureDigest(input.workdir, spec.content, learningsContent);
     const status = exit === 0 && afterDigest === beforeDigest ? "PASS" : "FAIL";
-    const { confidence, basis } = deriveFeatureConfidence({
-      status,
-      configuredCmd,
-      effectiveCmd,
-      inputDigest: beforeDigest,
-      afterDigest,
-      override: confidenceOverride
-    });
     await receipts.complete(fileSystem, runDir, receipt, {
       status,
-      inputDigest: afterDigest,
-      confidence,
-      confidenceBasis: basis,
-      confidenceAcknowledged: input.ackLowConfidence === true
+      inputDigest: afterDigest
     });
     return {
       ...base,
       status,
-      confidence,
-      confidenceBasis: basis,
-      message: `verification ${status} (run ${input.runId}, confidence ${confidence}, log ${logPath})`
+      message: `verification ${status} (run ${input.runId}, log ${logPath})`
     };
   } finally {
     closeLog(logFd);
@@ -120950,7 +120871,6 @@ __export(exports_src, {
   FEATURE_ACTION_NAMES: () => FEATURE_ACTION_NAMES,
   FEATURE_LIFECYCLE_PROFILE: () => FEATURE_LIFECYCLE_PROFILE,
   FEATURE_LIFECYCLE_WORKFLOW: () => FEATURE_LIFECYCLE_WORKFLOW,
-  FEATURE_RECEIPT_CONFIDENCE_LEVELS: () => FEATURE_RECEIPT_CONFIDENCE_LEVELS,
   FEATURE_RECEIPT_SCHEMA_VERSION: () => FEATURE_RECEIPT_SCHEMA_VERSION,
   FINDING_CODES: () => FINDING_CODES,
   FLEET_AUTO_TAG: () => FLEET_AUTO_TAG,
@@ -121014,7 +120934,6 @@ __export(exports_src, {
   RUN_STORE_LIST_MAX_LIMIT: () => RUN_STORE_LIST_MAX_LIMIT,
   RUN_STORE_WBS_DEFAULT_LIMIT: () => RUN_STORE_WBS_DEFAULT_LIMIT,
   RUN_STORE_WBS_MAX_LIMIT: () => RUN_STORE_WBS_MAX_LIMIT,
-  ResponseValidateActionRunner: () => ResponseValidateActionRunner,
   RetroCorrelator: () => RetroCorrelator,
   RuleCheckActionRunner: () => RuleCheckActionRunner,
   RuleService: () => RuleService,
@@ -121142,7 +121061,6 @@ __export(exports_src, {
   decodeRunListCursor: () => decodeRunListCursor,
   decorateWorkflowEvent: () => decorateWorkflowEvent,
   deduceCommandCategory: () => deduceCommandCategory,
-  deriveFeatureConfidence: () => deriveFeatureConfidence,
   deriveVerdict: () => deriveVerdict,
   discoverEnabledClaudePlugins: () => discoverEnabledClaudePlugins,
   disposeDecisionServices: () => disposeDecisionServices,
@@ -121205,6 +121123,7 @@ __export(exports_src, {
   isInlineRunActionStatus: () => isInlineRunActionStatus,
   isInlineRunCloseStatus: () => isInlineRunCloseStatus,
   isInsideRoot: () => isInsideRoot,
+  isLocalHost: () => isLocalHost,
   isPortAvailable: () => isPortAvailable,
   isPortLive: () => isPortLive,
   isProofCaptureError: () => isProofCaptureError,
@@ -128491,7 +128410,7 @@ import {
   statSync as statSync17,
   writeFileSync as writeFileSync17
 } from "fs";
-import { join as join80 } from "path";
+import { join as join81 } from "path";
 function parseScalar(raw) {
   const t = raw.trim();
   if (t.startsWith('"') && t.endsWith('"'))
@@ -128700,10 +128619,6 @@ function checkReportStructure(reportMarkdown) {
       if (!/(^|[\s`])P[123]([\s`.]|$)/.test(block) && !block.includes("symbolic-severity")) {
         problems.push("finding-invalid-severity");
       }
-      const confValue = block.match(/`confidence`\s*[:=]\s*`?([^`\n]*?)`?\s*(?:\n|$)/)?.[1]?.trim();
-      if (confValue !== undefined && confValue !== "" && !FINDING_CONFIDENCES.includes(confValue.toLowerCase())) {
-        problems.push(`finding-invalid-confidence:${confValue}`);
-      }
       const catValue = block.match(/`category`\s*[:=]\s*`?([^`\n]+?)`?\s*(?:\n|$)/)?.[1];
       if (catValue && !FINDING_CATEGORIES.includes(catValue.trim())) {
         problems.push(`finding-invalid-category:${catValue.trim()}`);
@@ -128737,7 +128652,7 @@ function logicDigest(path) {
   try {
     const h = createHash17("sha256");
     if (statSync17(path).isDirectory()) {
-      const walk = (dir) => readdirSync13(dir, { withFileTypes: true }).flatMap((e) => e.isDirectory() ? walk(join80(dir, e.name)) : /\.(md|ya?ml)$/.test(e.name) ? [join80(dir, e.name)] : []).sort();
+      const walk = (dir) => readdirSync13(dir, { withFileTypes: true }).flatMap((e) => e.isDirectory() ? walk(join81(dir, e.name)) : /\.(md|ya?ml)$/.test(e.name) ? [join81(dir, e.name)] : []).sort();
       for (const f of walk(path)) {
         h.update(f.slice(path.length));
         h.update(readFileSync25(f));
@@ -129042,7 +128957,7 @@ function diffPorcelain(before, now, expects) {
   const beforePaths = porcelainPaths(before);
   return [...porcelainPaths(now)].filter((p) => !beforePaths.has(p) && !expects.has(p)).sort();
 }
-var REPORT_SECTIONS, FINDING_FIELDS, DISPOSITIONS, FINDING_CATEGORIES, FINDING_CONFIDENCES, NOT_AVAILABLE = "not available", YAML_KEYS;
+var REPORT_SECTIONS, FINDING_FIELDS, DISPOSITIONS, FINDING_CATEGORIES, NOT_AVAILABLE = "not available", YAML_KEYS;
 var init_history_anatomy = __esm(() => {
   init_artifact_digest();
   REPORT_SECTIONS = [
@@ -129066,7 +128981,6 @@ var init_history_anatomy = __esm(() => {
     "trend",
     "observation",
     "inference",
-    "confidence",
     "contradictions",
     "evidenceAnchor",
     "severity",
@@ -129083,7 +128997,6 @@ var init_history_anatomy = __esm(() => {
     "telemetry",
     "positive"
   ];
-  FINDING_CONFIDENCES = ["high", "medium", "low"];
   YAML_KEYS = [
     "windowState",
     "generatedAt",
@@ -129108,7 +129021,7 @@ var init_history_anatomy = __esm(() => {
 // ../../packages/app/src/services/history-anatomy-cli.ts
 import { existsSync as existsSync29, mkdirSync as mkdirSync21, readFileSync as readFileSync26, writeFileSync as writeFileSync18 } from "fs";
 import { homedir as homedir13 } from "os";
-import { join as join81 } from "path";
+import { join as join82 } from "path";
 function parseFlags(args) {
   const out = {};
   for (let i = 0;i < args.length; i++) {
@@ -129130,9 +129043,9 @@ function resolveSkillDir(deps = {}) {
   const cwd = deps.cwd ?? process.cwd();
   const home = deps.home ?? homedir13();
   const candidates = [
-    join81(cwd, "plugins", "sp", "skills", "history-anatomy"),
-    join81(home, ".agents", "skills", "sp-history-anatomy"),
-    join81(home, ".claude", "skills", "sp-history-anatomy")
+    join82(cwd, "plugins", "sp", "skills", "history-anatomy"),
+    join82(home, ".agents", "skills", "sp-history-anatomy"),
+    join82(home, ".claude", "skills", "sp-history-anatomy")
   ];
   return candidates.find((dir) => existsSync29(dir)) ?? candidates[0];
 }
@@ -129363,7 +129276,7 @@ var init_history_anatomy_cli = __esm(() => {
 
 // ../../packages/app/src/services/daily-summary.ts
 import { existsSync as existsSync30, mkdirSync as mkdirSync22, readlinkSync as readlinkSync2, writeFileSync as writeFileSync19 } from "fs";
-import { dirname as dirname40, isAbsolute as isAbsolute14, join as join82, resolve as resolve30 } from "path";
+import { dirname as dirname40, isAbsolute as isAbsolute14, join as join83, resolve as resolve30 } from "path";
 function parseArgs2(argv) {
   const args = argv;
   const options = {
@@ -129750,8 +129663,8 @@ function ensureDir(path) {
 }
 function writeSummary(markdown, options) {
   const filename = `summary_${options.date.replace(/-/g, "")}.md`;
-  const outputPath = options.outputPath || join82(DAILY_DIR, filename);
-  ensureDir(join82(outputPath, ".."));
+  const outputPath = options.outputPath || join83(DAILY_DIR, filename);
+  ensureDir(join83(outputPath, ".."));
   writeFileSync19(outputPath, markdown, "utf-8");
   return outputPath;
 }
@@ -129900,7 +129813,7 @@ var init_daily_summary = __esm(() => {
 // ../../packages/app/src/workflow/transcript.ts
 import { existsSync as existsSync31, readdirSync as readdirSync14 } from "fs";
 import { homedir as homedir14 } from "os";
-import { join as join83 } from "path";
+import { join as join84 } from "path";
 function sniffTranscriptFormat(rows) {
   for (const row of rows) {
     if (row.type === "message" && PI_ROLES.has(row.message?.role ?? ""))
@@ -129929,7 +129842,7 @@ function parseTranscriptRows(lines) {
   }
   return { rows, skippedLines, format: sniffTranscriptFormat(rows.map(([r]) => r)) };
 }
-function resolveTranscript(env, projectsRoot = join83(homedir14(), ".claude", "projects"), override) {
+function resolveTranscript(env, projectsRoot = join84(homedir14(), ".claude", "projects"), override) {
   if (override)
     return existsSync31(override) ? { ok: true, path: override } : { ok: false, reason: "no transcript" };
   const id = env.CLAUDE_CODE_SESSION_ID;
@@ -129948,7 +129861,7 @@ function resolveTranscript(env, projectsRoot = join83(homedir14(), ".claude", "p
   if (!existsSync31(projectsRoot))
     return { ok: false, reason: `no transcript root ${projectsRoot}` };
   for (const dir of readdirSync14(projectsRoot)) {
-    const path = join83(projectsRoot, dir, `${id}.jsonl`);
+    const path = join84(projectsRoot, dir, `${id}.jsonl`);
     if (existsSync31(path))
       return { ok: true, path };
   }
@@ -130143,7 +130056,7 @@ var require_src9 = __commonJS(function(exports, module) {
 
 // ../../packages/app/src/workflow/run-summary-render.ts
 import { existsSync as existsSync32, mkdirSync as mkdirSync24, readFileSync as readFileSync29, writeFileSync as writeFileSync21 } from "fs";
-import { join as join98 } from "path";
+import { join as join99 } from "path";
 function renderSummaryMarkdown(summary) {
   const line = (r, bold = false) => {
     const stage = bold ? `**${r.stage}**` : r.stage;
@@ -130229,9 +130142,9 @@ function renderRollupMarkdown(rows) {
 }
 function writeCloseSummary(run, opts = {}) {
   const cwd = opts.cwd ?? process.cwd();
-  const runDir = join98(cwd, ".spur", "run");
-  const rel = join98(".spur", "run", `${run.runId}-summary.md`);
-  const abs = join98(cwd, rel);
+  const runDir = join99(cwd, ".spur", "run");
+  const rel = join99(".spur", "run", `${run.runId}-summary.md`);
+  const abs = join99(cwd, rel);
   const na = (reason) => {
     mkdirSync24(runDir, { recursive: true });
     writeFileSync21(abs, `Execution summary: n/a (${reason})
@@ -130256,14 +130169,14 @@ function writeCloseSummary(run, opts = {}) {
     mkdirSync24(runDir, { recursive: true });
     writeFileSync21(abs, `${renderSummaryMarkdown(summary)}
 `);
-    writeFileSync21(join98(runDir, `${run.runId}-summary.json`), JSON.stringify({ ...summary, runId: run.runId, startedAt: run.startedAt, completedAt: run.completedAt }, null, 2));
+    writeFileSync21(join99(runDir, `${run.runId}-summary.json`), JSON.stringify({ ...summary, runId: run.runId, startedAt: run.startedAt, completedAt: run.completedAt }, null, 2));
     return rel;
   } catch (error) {
     return na(error instanceof Error ? error.message : String(error));
   }
 }
 function gateFromReceipt(cwd, runId) {
-  const path = join98(cwd, ".spur", "run", `${runId}-check-receipt.json`);
+  const path = join99(cwd, ".spur", "run", `${runId}-check-receipt.json`);
   if (!existsSync32(path))
     return { ms: null, reason: "no matching check receipt" };
   try {
@@ -138207,8 +138120,18 @@ init_src();
 init_dist5();
 import { homedir as homedir12 } from "os";
 import { join as join67 } from "path";
-var CODEXBAR_ARGV = ["codexbar", "usage", "--format", "json", "--provider", "all"];
-var DEFAULT_CAPTURE_TIMEOUT_MS = 180000;
+var CODEXBAR_ARGV = ["codexbar", "usage", "--format", "json"];
+var DEFAULT_CAPTURE_TIMEOUT_MS = 300000;
+var CAPTURE_TIMEOUT_OPTION = "agentUsageCaptureTimeoutMs";
+var MAX_TIMER_MS = 2147483647;
+function resolveCaptureTimeoutMs(spurConfig) {
+  const raw = getAppOptions(spurConfig, CAPTURE_TIMEOUT_OPTION, undefined);
+  if (raw === undefined)
+    return DEFAULT_CAPTURE_TIMEOUT_MS;
+  if (typeof raw === "number" && Number.isInteger(raw) && raw > 0 && raw <= MAX_TIMER_MS)
+    return raw;
+  throw new UsageSourceError(`bootstrap.options.${CAPTURE_TIMEOUT_OPTION} must be a positive integer number of milliseconds (at most ${MAX_TIMER_MS}); received ${JSON.stringify(raw)}`);
+}
 
 class CodexbarUsageSource {
   command;
@@ -138238,7 +138161,7 @@ class CodexbarUsageSource {
     }
     const outcome = result.outcome ?? "exit";
     if (outcome === "timeout" || outcome === "cancelled") {
-      throw new UsageSourceError(`\`${this.command.join(" ")}\` capture exceeded the ${this.timeoutMs} ms deadline and was terminated \u2014 ` + "result is unusable (fail-closed); retry or investigate the codexbar hang");
+      throw new UsageSourceError(`\`${this.command.join(" ")}\` capture exceeded the ${this.timeoutMs} ms deadline and was terminated \u2014 ` + `result is unusable (fail-closed); retry, raise bootstrap.options.${CAPTURE_TIMEOUT_OPTION}, or investigate the codexbar hang`);
     }
     if (outcome === "signal" || outcome === "error") {
       throw new UsageSourceError(`\`${this.command.join(" ")}\` capture ended abnormally (${outcome}) \u2014 capture is unusable (fail-closed)`);
@@ -142424,13 +142347,13 @@ async function runAgentUsage(context, flags, deps) {
     }
     return 2;
   }
-  const options = {
-    source: deps?.source ?? _testUsageDeps?.source ?? new CodexbarUsageSource,
-    snapshotPath: deps?.snapshotPath ?? _testUsageDeps?.snapshotPath ?? defaultAgentUsageSnapshotPath(),
-    dryRun: flags.dryRun === true
-  };
   let result;
   try {
+    const options = {
+      source: deps?.source ?? _testUsageDeps?.source ?? new CodexbarUsageSource(undefined, resolveCaptureTimeoutMs(context.spurConfig)),
+      snapshotPath: deps?.snapshotPath ?? _testUsageDeps?.snapshotPath ?? defaultAgentUsageSnapshotPath(),
+      dryRun: flags.dryRun === true
+    };
     result = await runAgentUsageProducer({
       getDb: () => context.getDb(),
       projectRoot: context.cwd,
@@ -142725,12 +142648,33 @@ function registerAgentCommand(program, context) {
 init_src();
 init_dist5();
 import { existsSync as existsSync26, readdirSync as readdirSync12, readFileSync as readFileSync23 } from "fs";
-import { join as join78 } from "path";
+import { join as join79 } from "path";
+
+// ../../scripts/commands/bundle-plugins.ts
+import { cp, rm as rm4 } from "fs/promises";
+import { join as join77 } from "path";
+import { fileURLToPath as fileURLToPath6 } from "url";
+var REPO_ROOT = fileURLToPath6(new URL("../../", import.meta.url));
+var PLUGIN_SOURCE = join77(REPO_ROOT, "plugins");
+var PLUGIN_TARGET = join77(REPO_ROOT, "apps/cli/plugins");
+var MARKETPLACE_SOURCE = join77(REPO_ROOT, ".claude-plugin");
+var MARKETPLACE_TARGET = join77(REPO_ROOT, "apps/cli/.claude-plugin");
+var EXCLUDE = /(^|\/)(\.DS_Store|tests|evals)($|\/)|\.test\.ts$/;
+async function bundlePlugins(pluginTarget = PLUGIN_TARGET, marketplaceTarget = MARKETPLACE_TARGET, pluginSource = PLUGIN_SOURCE, marketplaceSource = MARKETPLACE_SOURCE) {
+  await rm4(pluginTarget, { recursive: true, force: true });
+  await rm4(marketplaceTarget, { recursive: true, force: true });
+  await cp(pluginSource, pluginTarget, {
+    recursive: true,
+    filter: (src) => !EXCLUDE.test(src.slice(pluginSource.length))
+  });
+  await cp(marketplaceSource, marketplaceTarget, { recursive: true });
+  return { pluginTarget, marketplaceTarget };
+}
 
 // src/version-carriers.ts
 init_zod();
 import { existsSync as existsSync25 } from "fs";
-import { join as join77 } from "path";
+import { join as join78 } from "path";
 var defaultLiteralProbe = { file: "src/config.ts", identifier: "binaryVersion" };
 var registry3 = new Map;
 function registerCarrierType(type, def) {
@@ -142789,7 +142733,7 @@ registerCarrierType("plugin-manifest", {
   schema: PluginManifestCarrierSchema,
   async syncRepoWide(carrier, { repoRoot }, version, staged, output) {
     for (const rel of carrier.paths) {
-      const absPath = join77(repoRoot, rel);
+      const absPath = join78(repoRoot, rel);
       const manifest = await readJson(absPath);
       if (manifest === null) {
         output.write(`  \u26A0 ${rel}: not found or malformed \u2014 skipping`);
@@ -142849,7 +142793,7 @@ async function run2(repoRoot, cmd, timeoutMs) {
   };
 }
 async function verifyLockfile(ctx, output) {
-  const lockPath = join78(ctx.repoRoot, "bun.lock");
+  const lockPath = join79(ctx.repoRoot, "bun.lock");
   if (!existsSync26(lockPath) || Bun.file(lockPath).size === 0)
     return;
   const result = await run2(ctx.repoRoot, ["bun", "install", "--frozen-lockfile"]);
@@ -142859,7 +142803,7 @@ async function verifyLockfile(ctx, output) {
   output.write("  \u21B3 bun.lock: verified (bun install --frozen-lockfile)");
 }
 async function assertPluginInstallable(ctx, output) {
-  const smokePath = join78(ctx.repoRoot, "scripts", "commands", "plugin-install-smoke.ts");
+  const smokePath = join79(ctx.repoRoot, "scripts", "commands", "plugin-install-smoke.ts");
   if (!existsSync26(smokePath)) {
     output.write("  \u21B3 plugin-install-smoke: gate script not present in this repo \u2014 skipped");
     return;
@@ -142901,7 +142845,7 @@ async function readJson2(path) {
 function rootWorkspaceGlobs(repoRoot) {
   let root;
   try {
-    root = JSON.parse(readFileSync23(join78(repoRoot, "package.json"), "utf8"));
+    root = JSON.parse(readFileSync23(join79(repoRoot, "package.json"), "utf8"));
   } catch {
     return [];
   }
@@ -142918,11 +142862,11 @@ function workspaceDirs(repoRoot) {
     if (!glob.endsWith("/*"))
       continue;
     const parent = glob.slice(0, -2);
-    const parentAbs = join78(repoRoot, parent);
+    const parentAbs = join79(repoRoot, parent);
     if (!existsSync26(parentAbs))
       continue;
     for (const entry of readdirSync12(parentAbs, { withFileTypes: true })) {
-      if (entry.isDirectory() && existsSync26(join78(parentAbs, entry.name, "package.json"))) {
+      if (entry.isDirectory() && existsSync26(join79(parentAbs, entry.name, "package.json"))) {
         dirs.push(`${parent}/${entry.name}`);
       }
     }
@@ -142930,14 +142874,14 @@ function workspaceDirs(repoRoot) {
   return dirs;
 }
 async function releaseContext(repoRoot, bumpVerConfig = resolveBuilderBumpVerConfig(null)) {
-  const rootManifest = await readJson2(join78(repoRoot, "package.json"));
+  const rootManifest = await readJson2(join79(repoRoot, "package.json"));
   if (rootManifest === null) {
     throw new Error(`no package.json found at ${repoRoot} \u2014 builder operates on a package workspace root.`);
   }
   const rootName = typeof rootManifest.name === "string" ? rootManifest.name : "root";
   const workspaces = [];
   for (const dir of workspaceDirs(repoRoot)) {
-    const manifest = await readJson2(join78(repoRoot, dir, "package.json"));
+    const manifest = await readJson2(join79(repoRoot, dir, "package.json"));
     if (manifest === null)
       continue;
     workspaces.push({
@@ -142952,8 +142896,8 @@ async function releaseContext(repoRoot, bumpVerConfig = resolveBuilderBumpVerCon
   const packages = new Map;
   for (const ws of workspaces) {
     const probe = findLiteralProbe(versionCarriers, ws.dir) ?? defaultLiteralProbe;
-    const literalProbe = join78(ws.dir, probe.file);
-    const versionSourceFile = existsSync26(join78(repoRoot, literalProbe)) ? literalProbe : undefined;
+    const literalProbe = join79(ws.dir, probe.file);
+    const versionSourceFile = existsSync26(join79(repoRoot, literalProbe)) ? literalProbe : undefined;
     packages.set(shortName(ws.name), {
       packageDir: ws.dir,
       packageName: ws.name,
@@ -142991,7 +142935,7 @@ async function updateWorkspacePins(ctx, pkgName, oldVersion, newVersion, output)
   const changed = [];
   for (const dir of [".", ...workspaceDirs(ctx.repoRoot)]) {
     const relPath = dir === "." ? "package.json" : `${dir}/package.json`;
-    const manifest = await readJson2(join78(ctx.repoRoot, relPath));
+    const manifest = await readJson2(join79(ctx.repoRoot, relPath));
     if (manifest === null)
       continue;
     let dirty = false;
@@ -143008,7 +142952,7 @@ async function updateWorkspacePins(ctx, pkgName, oldVersion, newVersion, output)
       }
     }
     if (dirty) {
-      await Bun.write(join78(ctx.repoRoot, relPath), `${JSON.stringify(manifest, null, 4)}
+      await Bun.write(join79(ctx.repoRoot, relPath), `${JSON.stringify(manifest, null, 4)}
 `);
       output.write(`  \u21B3 ${relPath}: ${pkgName} workspace pin ${oldVersion} \u2192 ${newVersion}`);
       changed.push(relPath);
@@ -143016,7 +142960,7 @@ async function updateWorkspacePins(ctx, pkgName, oldVersion, newVersion, output)
   }
   if (changed.length === 0)
     return changed;
-  const lockPath = join78(ctx.repoRoot, "bun.lock");
+  const lockPath = join79(ctx.repoRoot, "bun.lock");
   if (existsSync26(lockPath)) {
     const lock = await Bun.file(lockPath).text();
     const staleSpec = `"${pkgName}": "workspace:${oldVersion}"`;
@@ -143028,7 +142972,7 @@ async function updateWorkspacePins(ctx, pkgName, oldVersion, newVersion, output)
   return changed;
 }
 async function updateVersionSourceFile(ctx, filePath, previous, next, output, identifier = "binaryVersion") {
-  const absPath = join78(ctx.repoRoot, filePath);
+  const absPath = join79(ctx.repoRoot, filePath);
   const content = await Bun.file(absPath).text();
   const pattern = new RegExp(`(${identifier.replace(/[.*+?^${}()|[\]\\]/g, "\\$&")}:\\s*['"])\\d+\\.\\d+\\.\\d+(?:-[0-9A-Za-z-.]+)?(?:\\+[0-9A-Za-z-.]+)?(['"])`);
   const updated = content.replace(pattern, `$1${next}$2`);
@@ -143046,7 +142990,7 @@ async function syncExtraCarriers(ctx, version, staged, output) {
   }
 }
 async function syncMarketplaceAndPlugins(ctx, version, staged, output) {
-  const marketplacePath = join78(ctx.repoRoot, ".claude-plugin", "marketplace.json");
+  const marketplacePath = join79(ctx.repoRoot, ".claude-plugin", "marketplace.json");
   const marketplaceFile = Bun.file(marketplacePath);
   if (!await marketplaceFile.exists())
     return;
@@ -143071,7 +143015,7 @@ async function syncMarketplaceAndPlugins(ctx, version, staged, output) {
     output.write(`Bumped marketplace plugins to ${version}`);
   }
   for (const entry of plugins) {
-    const pluginJsonPath = join78(ctx.repoRoot, entry.source, "plugin.json");
+    const pluginJsonPath = join79(ctx.repoRoot, entry.source, "plugin.json");
     const pluginJson = await readJson2(pluginJsonPath);
     if (pluginJson === null) {
       output.write(`  \u26A0 plugin.json not found at ${entry.source}/plugin.json \u2014 skipping`);
@@ -143085,6 +143029,14 @@ async function syncMarketplaceAndPlugins(ctx, version, staged, output) {
       output.write(`Bumped ${entry.source}/plugin.json to ${version}`);
     }
   }
+  for (const config of ctx.packages.values()) {
+    const pkgDir = join79(ctx.repoRoot, config.packageDir);
+    const stagedMarketplace = join79(pkgDir, ".claude-plugin", "marketplace.json");
+    if (!existsSync26(stagedMarketplace))
+      continue;
+    await bundlePlugins(join79(pkgDir, "plugins"), join79(pkgDir, ".claude-plugin"), join79(ctx.repoRoot, "plugins"), join79(ctx.repoRoot, ".claude-plugin"));
+    output.write(`Refreshed staged plugin copy in ${config.packageDir}`);
+  }
 }
 async function assertCleanTreeOnBranch(ctx) {
   const RUNTIME_NOISE = /^\?\? \.spur\/(?:spur\.db|spur\.db-shm|spur\.db-wal|logs\/)/;
@@ -143125,7 +143077,7 @@ async function bumpVersion(ctx, config, version, options, output) {
     throw new Error(`${config.packageName}@${version} is already published on npm. Use a new version.`);
   }
   await assertPluginInstallable(ctx, output);
-  const manifestPath = join78(ctx.repoRoot, config.packageDir, "package.json");
+  const manifestPath = join79(ctx.repoRoot, config.packageDir, "package.json");
   const manifest = await readJson2(manifestPath);
   if (manifest === null)
     throw new Error(`missing or malformed manifest at ${config.packageDir}/package.json`);
@@ -143144,7 +143096,7 @@ async function bumpVersion(ctx, config, version, options, output) {
   await syncMarketplaceAndPlugins(ctx, version, staged, output);
   await syncExtraCarriers(ctx, version, staged, output);
   await verifyLockfile(ctx, output);
-  const lockPath = join78(ctx.repoRoot, "bun.lock");
+  const lockPath = join79(ctx.repoRoot, "bun.lock");
   if (existsSync26(lockPath) && Bun.file(lockPath).size > 0)
     staged.push("bun.lock");
   await git2(ctx.repoRoot, ["add", ...staged]);
@@ -143201,7 +143153,7 @@ async function bumpAll(ctx, version, options, output) {
   }
   const staged = [];
   for (const config of configs) {
-    const manifestPath = join78(ctx.repoRoot, config.packageDir, "package.json");
+    const manifestPath = join79(ctx.repoRoot, config.packageDir, "package.json");
     const manifest = await readJson2(manifestPath);
     if (manifest === null) {
       throw new Error(`missing or malformed manifest at ${config.packageDir}/package.json`);
@@ -143222,7 +143174,7 @@ async function bumpAll(ctx, version, options, output) {
   await syncMarketplaceAndPlugins(ctx, version, staged, output);
   await syncExtraCarriers(ctx, version, staged, output);
   await verifyLockfile(ctx, output);
-  const lockPath = join78(ctx.repoRoot, "bun.lock");
+  const lockPath = join79(ctx.repoRoot, "bun.lock");
   if (existsSync26(lockPath) && Bun.file(lockPath).size > 0)
     staged.push("bun.lock");
   await git2(ctx.repoRoot, ["add", ...staged]);
@@ -143378,9 +143330,9 @@ async function checkVersionDrift(target, repoRoot = process.cwd(), output = cons
   if (config === undefined) {
     throw releaseUsage(target === undefined ? "bump-ver --check needs a package id (no aggregate package is configured)" : `unknown package "${target}". Package IDs: ${[...ctx.packages.keys()].join(", ")}`);
   }
-  const manifest = await readJson2(join78(repoRoot, config.packageDir, "package.json"));
+  const manifest = await readJson2(join79(repoRoot, config.packageDir, "package.json"));
   const pkgVersion = typeof manifest?.version === "string" ? manifest.version : "";
-  const marketplacePath = join78(repoRoot, ".claude-plugin", "marketplace.json");
+  const marketplacePath = join79(repoRoot, ".claude-plugin", "marketplace.json");
   const marketplaceFile = Bun.file(marketplacePath);
   if (!await marketplaceFile.exists()) {
     output.write("No .claude-plugin/marketplace.json \u2014 nothing to check.");
@@ -143393,8 +143345,8 @@ async function checkVersionDrift(target, repoRoot = process.cwd(), output = cons
     for (const entry of parsed.plugins ?? []) {
       if (typeof entry.source !== "string")
         continue;
-      const label = join78(entry.source, "plugin.json").replace(/^\.\//, "");
-      const pluginJson = await readJson2(join78(repoRoot, entry.source, "plugin.json"));
+      const label = join79(entry.source, "plugin.json").replace(/^\.\//, "");
+      const pluginJson = await readJson2(join79(repoRoot, entry.source, "plugin.json"));
       plugins.push({ label, version: typeof pluginJson?.version === "string" ? pluginJson.version : "" });
     }
   } catch {}
@@ -143462,8 +143414,8 @@ async function publishPackage(target, opts = {}) {
   const repoRoot = opts.repoRoot ?? process.cwd();
   const output = opts.output ?? consoleOutput;
   const runner = opts.runner ?? defaultPublishRunner;
-  const dir = (target.startsWith("/") ? target : join78(repoRoot, target)).replace(/\/+$/, "");
-  const manifestPath = join78(dir, "package.json");
+  const dir = (target.startsWith("/") ? target : join79(repoRoot, target)).replace(/\/+$/, "");
+  const manifestPath = join79(dir, "package.json");
   const manifestFile = Bun.file(manifestPath);
   if (!await manifestFile.exists())
     throw new Error(`no package.json at ${dir}`);
@@ -143471,7 +143423,7 @@ async function publishPackage(target, opts = {}) {
   const manifest = JSON.parse(original);
   const workspaces = new Map;
   for (const wsDir of workspaceDirs(repoRoot)) {
-    const pkg = await readJson2(join78(repoRoot, wsDir, "package.json"));
+    const pkg = await readJson2(join79(repoRoot, wsDir, "package.json"));
     if (pkg !== null && typeof pkg.name === "string") {
       workspaces.set(pkg.name, {
         ...typeof pkg.version === "string" ? { version: pkg.version } : {},
@@ -143479,7 +143431,7 @@ async function publishPackage(target, opts = {}) {
       });
     }
   }
-  const root = await readJson2(join78(repoRoot, "package.json"));
+  const root = await readJson2(join79(repoRoot, "package.json"));
   const catalog = root?.workspaces?.catalog ?? {};
   const changed = resolvePublishRanges(manifest, workspaces, catalog);
   if (changed > 0) {
@@ -143514,7 +143466,7 @@ async function publishPackage(target, opts = {}) {
 init_src();
 import { spawnSync as spawnSync7 } from "child_process";
 import { existsSync as existsSync27, readFileSync as readFileSync24, writeFileSync as writeFileSync16 } from "fs";
-import { join as join79, resolve as resolve28 } from "path";
+import { join as join80, resolve as resolve28 } from "path";
 function createSpawnRunner(context = {}) {
   return (cmd) => {
     const proc = spawnSync7(cmd[0] ?? "", [...cmd.slice(1)], {
@@ -143657,7 +143609,7 @@ function extractSeverity2(body) {
 }
 var DEFAULT_FOCUS = "for correctness and regressions, security boundaries, data-loss risks, concurrency or race conditions, " + "API/backward compatibility, migration safety, error handling, and missing high-value tests. " + "Prioritize actionable issues over style or nits.";
 function hasCodeReviewRules(repoRoot) {
-  const agentsPath = join79(repoRoot, "AGENTS.md");
+  const agentsPath = join80(repoRoot, "AGENTS.md");
   if (!existsSync27(agentsPath))
     return false;
   return /^## Code Review Rules\s*$/m.test(readFileSync24(agentsPath, "utf8"));
@@ -144215,10 +144167,333 @@ function runSpine(argv, rt) {
     return 2;
   }
 }
+function obj(value) {
+  return typeof value === "object" && value !== null ? value : {};
+}
+function text4(value) {
+  return typeof value === "string" ? value : "";
+}
+function list(value) {
+  return Array.isArray(value) ? value : [];
+}
+function word(payload, fallback = "FAIL") {
+  const verdict = payload?.verdict;
+  return typeof verdict === "string" && verdict !== "" ? verdict : fallback;
+}
+function findingsArg(value) {
+  return list(value);
+}
+function runVerbOp(argv, rt, sink) {
+  const out = [];
+  const previous = io;
+  io = { out: (line) => out.push(line), err: (line) => sink.err(line) };
+  try {
+    const code = runSpine(argv, rt);
+    let payload = null;
+    for (let i = out.length - 1;i >= 0; i--) {
+      const line = (out[i] ?? "").trim();
+      if (!line.startsWith("{"))
+        continue;
+      try {
+        payload = JSON.parse(line);
+      } catch {
+        payload = null;
+      }
+      break;
+    }
+    return { code, payload };
+  } finally {
+    io = previous;
+  }
+}
+function validPollBudget(opts, sink) {
+  if (opts.timeout !== undefined && !(Number.isFinite(Number(opts.timeout)) && Number(opts.timeout) >= 0)) {
+    sink.err("error: --timeout must be a non-negative number");
+    return false;
+  }
+  if (opts.interval !== undefined && !(Number.isFinite(Number(opts.interval)) && Number(opts.interval) > 0)) {
+    sink.err("error: --interval must be a positive number");
+    return false;
+  }
+  return true;
+}
+function writeVerbStatus(rt, opts, verdict) {
+  if (opts.statusFile !== undefined)
+    rt.writeStatus(opts.statusFile, `${verdict}
+`);
+}
+function currentHead(rt) {
+  const res = run3(rt, ["git", "rev-parse", "HEAD"]);
+  const head = res.stdout.trim();
+  return res.code === 0 && head !== "" ? head : undefined;
+}
+function composeStatus(rt, opts, sink) {
+  const flags = ["--json"];
+  if (opts.since !== undefined)
+    flags.push("--since", opts.since);
+  const head = opts.head ?? currentHead(rt);
+  if (head !== undefined)
+    flags.push("--head", head);
+  const status = runVerbOp(["status", ...flags], rt, sink);
+  if (status.code !== 0)
+    return { code: status.code, payload: { ...obj(status.payload), review: null } };
+  if (status.payload?.pr === null || status.payload?.pr === undefined) {
+    return { code: 0, payload: { ...obj(status.payload), review: null } };
+  }
+  const collect = runVerbOp(["collect", ...flags], rt, sink);
+  return { code: collect.code, payload: { ...obj(status.payload), review: collect.payload } };
+}
+function composeCheck(rt, opts, sink) {
+  const flags = ["--json"];
+  if (opts.statusFile !== undefined)
+    flags.push("--status-file", opts.statusFile);
+  if (opts.base !== undefined)
+    flags.push("--base", opts.base);
+  const preflight = opts.scanOnly === true ? null : runVerbOp(["preflight", ...flags], rt, sink);
+  if (preflight !== null && preflight.code !== 0) {
+    return {
+      code: preflight.code,
+      payload: { ok: false, verdict: "FAIL", preflight: preflight.payload, hygiene: null }
+    };
+  }
+  const hygiene = runVerbOp(["hygiene", ...flags], rt, sink);
+  const opWord = word(hygiene.payload, "PASS");
+  const verdict = hygiene.code === 0 ? opWord : opWord === "BLOCK" ? "BLOCK" : "FAIL";
+  return {
+    code: hygiene.code,
+    payload: { ok: hygiene.code === 0, verdict, preflight: preflight?.payload ?? null, hygiene: hygiene.payload }
+  };
+}
+function composeOpen(rt, opts, sink) {
+  const flags = ["--json"];
+  if (opts.statusFile !== undefined)
+    flags.push("--status-file", opts.statusFile);
+  const push = runVerbOp(["push", ...flags], rt, sink);
+  if (push.code !== 0) {
+    return { code: push.code, payload: { ok: false, verdict: "FAIL", push: push.payload, pr: null } };
+  }
+  const ensureFlags = [...flags];
+  if (opts.base !== undefined)
+    ensureFlags.push("--base", opts.base);
+  const ensure = runVerbOp(["ensure", ...ensureFlags], rt, sink);
+  const verdict = ensure.code === 0 ? ensure.payload?.created === true ? "CREATED" : "FOUND" : "FAIL";
+  return {
+    code: ensure.code,
+    payload: { ok: ensure.code === 0, verdict, push: push.payload, pr: ensure.payload?.pr ?? null }
+  };
+}
+function composeReview(rt, opts, sink) {
+  const statusFlags = opts.statusFile !== undefined ? ["--status-file", opts.statusFile] : [];
+  if (!validPollBudget(opts, sink)) {
+    return { code: 1, payload: { ok: false, verdict: "FAIL", request: null, findings: [] } };
+  }
+  const requestFlags = ["--json", ...statusFlags];
+  if (opts.force === true)
+    requestFlags.push("--force");
+  if (opts.focus !== undefined)
+    requestFlags.push("--focus", opts.focus);
+  const request = runVerbOp(["request", ...requestFlags], rt, sink);
+  if (request.code !== 0) {
+    return { code: request.code, payload: { ok: false, verdict: "FAIL", request: request.payload, findings: [] } };
+  }
+  const record = obj(request.payload);
+  const correlation = [];
+  if (text4(record.requestedAt) !== "")
+    correlation.push("--since", text4(record.requestedAt));
+  if (text4(record.head) !== "")
+    correlation.push("--head", text4(record.head));
+  const collected = () => {
+    const collect = runVerbOp(["collect", ...correlation, "--json", ...statusFlags], rt, sink);
+    return {
+      code: collect.code,
+      payload: {
+        ok: collect.code === 0,
+        verdict: collect.code === 0 ? word(collect.payload) : "FAIL",
+        request: request.payload,
+        findings: collect.code === 0 ? list(collect.payload?.findings) : []
+      }
+    };
+  };
+  const pending = (code) => {
+    writeVerbStatus(rt, opts, "PENDING");
+    return { code, payload: { ok: true, verdict: "PENDING", request: request.payload, findings: [] } };
+  };
+  if (record.alreadyReviewed === true)
+    return collected();
+  if (record.pending === true || record.requested === true && opts.noWait === true)
+    return pending(0);
+  const waitFlags = [...correlation, "--json", ...statusFlags];
+  if (opts.timeout !== undefined)
+    waitFlags.push("--timeout", opts.timeout);
+  if (opts.interval !== undefined)
+    waitFlags.push("--interval", opts.interval);
+  const waited = runVerbOp(["wait", ...waitFlags], rt, sink);
+  if (waited.code === 3)
+    return pending(3);
+  if (waited.code !== 0) {
+    return { code: waited.code, payload: { ok: false, verdict: "FAIL", request: request.payload, findings: [] } };
+  }
+  return collected();
+}
+function renderPrVerb(verb, payload) {
+  if (verb === "status") {
+    const pr = payload.pr === null || payload.pr === undefined ? null : obj(payload.pr);
+    const review = payload.review === null || payload.review === undefined ? null : obj(payload.review);
+    const lines = [
+      `Repository: ${text4(payload.repo) || "unknown"}`,
+      `PR:         ${pr === null ? "none" : `#${String(pr.number ?? "")} ${text4(pr.url)}`}`,
+      `Branch:     ${text4(payload.branch)}`,
+      `HEAD:       ${text4(payload.head)}`,
+      `Base:       ${text4(payload.base)}`,
+      `Local:      ${text4(payload.local)}`,
+      `CI:         ${text4(payload.ci)}`,
+      `Codex:      ${text4(payload.codex)}`
+    ];
+    if (review === null)
+      return [...lines, "Review:     no PR \u2014 nothing collected"];
+    lines.push(`Review:     ${text4(review.verdict) || "unknown"}`);
+    const findings = findingsArg(review.findings);
+    if (findings.length > 0)
+      lines.push("", renderFindings(findings));
+    return lines;
+  }
+  if (verb === "check") {
+    const preflight = payload.preflight === null || payload.preflight === undefined ? null : obj(payload.preflight);
+    const hygiene = payload.hygiene === null || payload.hygiene === undefined ? null : obj(payload.hygiene);
+    const lines = [
+      preflight === null ? "Preflight:  skipped (--scan-only)" : preflight.ok === true ? `Preflight:  ${text4(preflight.nameWithOwner)} ${text4(preflight.branch)} @ ${text4(preflight.shortHead)}` : `Preflight:  FAIL \u2014 ${text4(preflight.error) || "probe failed"}`
+    ];
+    if (hygiene === null)
+      return lines;
+    lines.push(`Hygiene:    ${text4(hygiene.verdict) || "FAIL"}`);
+    for (const blocker of list(hygiene.blockers))
+      lines.push(`  BLOCK ${String(blocker)}`);
+    for (const warning of list(hygiene.warnings))
+      lines.push(`  WARN  ${String(warning)}`);
+    return lines;
+  }
+  if (verb === "open") {
+    const push = obj(payload.push);
+    const pr = payload.pr === null || payload.pr === undefined ? null : obj(payload.pr);
+    return [
+      `Push:       ${push.pushed === true ? "PUSHED" : "UP_TO_DATE"} ${text4(push.head).slice(0, 7)}`,
+      `PR:         ${pr === null ? "none" : `#${String(pr.number ?? "")} ${text4(pr.url)} (${text4(payload.verdict)})`}`
+    ];
+  }
+  const request = obj(payload.request);
+  const outcome = request.requested === true ? "REQUESTED" : request.alreadyReviewed === true ? "ALREADY_REVIEWED" : request.pending === true ? "ALREADY_REQUESTED" : "FAIL";
+  const lines = [
+    `Request:    ${outcome} PR #${String(request.pr ?? "?")} ${text4(request.url)}`,
+    `HEAD:       ${text4(request.head).slice(0, 7)}`,
+    `Review:     ${text4(payload.verdict) || "unknown"}`
+  ];
+  const findings = findingsArg(payload.findings);
+  if (findings.length > 0)
+    lines.push("", renderFindings(findings));
+  return lines;
+}
+var PR_VERB_COMPOSERS = { status: composeStatus, check: composeCheck, open: composeOpen, review: composeReview };
+function runPrVerb(verb, opts, sink, context = {}) {
+  const rt = createRuntime(context);
+  const result = PR_VERB_COMPOSERS[verb](rt, opts, sink);
+  if (opts.json === true)
+    sink.out(JSON.stringify(result.payload));
+  else
+    for (const line of renderPrVerb(verb, result.payload))
+      sink.out(line);
+  return result.code;
+}
 
 // src/commands/builder/pr.ts
-function registerBuilderPrCommand(builder, context) {
-  builder.command("pr").summary("GitHub Codex PR-review loop (preflight | push | ensure | hygiene | request | wait | collect | status)").description(PR_REVIEW_HELP).allowUnknownOption(true).allowExcessArguments(true).argument("[argv...]", "subcommand and flags (see description)").action((argv) => {
+var PR_VERB_FOR_OP = {
+  preflight: "pr-check",
+  hygiene: "pr-check",
+  push: "pr-open",
+  ensure: "pr-open",
+  "ensure-pr": "pr-open",
+  request: "pr-review",
+  wait: "pr-review",
+  collect: "pr-status",
+  status: "pr-status"
+};
+function prDeprecationLine(op) {
+  const replacement = op === undefined ? undefined : PR_VERB_FOR_OP[op];
+  return replacement !== undefined ? `spur builder pr ${op} is deprecated; use spur builder ${replacement}` : "spur builder pr is deprecated; use spur builder pr-status | pr-check | pr-open | pr-review";
+}
+function registerBuilderPrCommands(builder, context) {
+  const io = () => ({
+    out: (line) => context.output.write(line),
+    err: (line) => context.output.error(line)
+  });
+  const ctx = () => ({ cwd: context.cwd, env: context.env });
+  const run = (verb, opts) => {
+    context.setExitCode(runPrVerb(verb, opts, io(), ctx()));
+  };
+  builder.command("pr-status").summary("read-only PR/CI/Codex status with the current-HEAD review as `review`").description([
+    "Read-only composition of the status and collect operations:",
+    "repository, branch, PR/base, local changes, CI and Codex state, plus",
+    "`review` \u2014 the current-HEAD Codex record when the branch has a PR,",
+    "else null. Writes no verdict: a status probe is not a gate.",
+    "Exit codes: 0 ok \xB7 2 probe failure."
+  ].join(`
+`)).option("--since <iso>", "only count review output submitted at or after this time").option("--head <sha>", "pin the reviewed commit (default: the current local HEAD)").option(...SHARED_OPTIONS.json).option("--status-file <path>", "accepted for symmetry; a read-only status writes no verdict").action((options) => {
+    run("status", {
+      ...options.since !== undefined ? { since: options.since } : {},
+      ...options.head !== undefined ? { head: options.head } : {},
+      ...options.json === true ? { json: true } : {},
+      ...options.statusFile !== undefined ? { statusFile: options.statusFile } : {}
+    });
+  });
+  builder.command("pr-check").summary("PR submission gate: preflight then hygiene (PASS | WARN | BLOCK | FAIL)").description([
+    "Preflight (git/gh/repo checks, clean tree, not the base branch) then",
+    "the hygiene scan of base...HEAD for secrets/.env/conflict markers",
+    "(BLOCK) and debug residue (WARN). A preflight FAIL stops before",
+    "hygiene. `--scan-only` runs hygiene alone, for a local review on a",
+    "dirty tree. Exit codes: 0 ok \xB7 2 BLOCK/preflight FAIL/probe failure."
+  ].join(`
+`)).option("--base <branch>", "base branch for the base...HEAD diff (default: the PR base, else the repo default)").option("--scan-only", "hygiene only; skip preflight (a dirty tree is expected)").option(...SHARED_OPTIONS.json).option("--status-file <path>", "write the one-word verdict (PASS | WARN | BLOCK | FAIL)").action((options) => {
+    run("check", {
+      ...options.base !== undefined ? { base: options.base } : {},
+      ...options.scanOnly === true ? { scanOnly: true } : {},
+      ...options.json === true ? { json: true } : {},
+      ...options.statusFile !== undefined ? { statusFile: options.statusFile } : {}
+    });
+  });
+  builder.command("pr-open").summary("publish the branch and reuse or create its pull request (FOUND | CREATED | FAIL)").description([
+    "Push the branch (normal push only \u2014 never force; sets upstream when",
+    "missing), then reuse the branch PR or create one with",
+    "`gh pr create --fill`. A rejected push stops before any PR work.",
+    "Exit codes: 0 ok \xB7 2 push rejected or ensure failed."
+  ].join(`
+`)).option("--base <branch>", "base for a newly created PR (default: the repo default branch)").option(...SHARED_OPTIONS.json).option("--status-file <path>", "write the one-word verdict (FOUND | CREATED | FAIL)").action((options) => {
+    run("open", {
+      ...options.base !== undefined ? { base: options.base } : {},
+      ...options.json === true ? { json: true } : {},
+      ...options.statusFile !== undefined ? { statusFile: options.statusFile } : {}
+    });
+  });
+  builder.command("pr-review").summary("request the GitHub Codex review and collect its result (CLEAN | FINDINGS | PENDING | FAIL)").description([
+    "Post the `@codex review` request (per-HEAD dedupe unless --force),",
+    "poll for the result, then collect it. An already-reviewed HEAD is",
+    "collected without a new request; an in-flight request or --no-wait",
+    "returns PENDING. Exit codes: 0 ok \xB7 2 hard failure \xB7 3 wait timeout",
+    "(verdict PENDING \u2014 pending, never failure)."
+  ].join(`
+`)).option("--force", "request a fresh review even when the current HEAD is already reviewed").option("--focus <text>", "extra review focus appended to the request").option("--no-wait", "post the request and return PENDING without polling").option("--timeout <s>", "wait budget in seconds (service default 600)").option("--interval <s>", "poll interval in seconds (service default 30)").option(...SHARED_OPTIONS.json).option("--status-file <path>", "write the one-word verdict (CLEAN | FINDINGS | PENDING | FAIL)").action((options) => {
+    run("review", {
+      ...options.force === true ? { force: true } : {},
+      ...options.focus !== undefined ? { focus: options.focus } : {},
+      ...options.wait === false ? { noWait: true } : {},
+      ...options.timeout !== undefined ? { timeout: options.timeout } : {},
+      ...options.interval !== undefined ? { interval: options.interval } : {},
+      ...options.json === true ? { json: true } : {},
+      ...options.statusFile !== undefined ? { statusFile: options.statusFile } : {}
+    });
+  });
+}
+function registerBuilderPrAliasCommand(builder, context) {
+  builder.command("pr", { hidden: true }).summary("deprecated alias for the flat pr-<verb> commands").description(PR_REVIEW_HELP).allowUnknownOption(true).allowExcessArguments(true).argument("[argv...]", "subcommand and flags (see description)").action((argv) => {
+    context.output.error(prDeprecationLine(argv[0]));
     context.setExitCode(main(argv, {
       out: (line) => context.output.write(line),
       err: (line) => context.output.error(line)
@@ -144226,9 +144501,574 @@ function registerBuilderPrCommand(builder, context) {
   });
 }
 
+// ../../packages/app/src/services/branch-topology/render.ts
+var INDENT = "    ";
+var MERMAID_DEFAULT_BRANCH = "main";
+var TABLE_HEADERS = ["branch", "ahead", "behind", "contained", "last commit", "worktree", "PR"];
+function renderMarkdown2(topology, graph) {
+  const lines = [
+    `## Branch topology vs \`${markdownCell(topology.base)}\``,
+    "",
+    `Generated ${topology.generatedAt}.`
+  ];
+  for (const warning of topology.warnings)
+    lines.push("", `> warning: ${warning}`);
+  lines.push("", ...markdownTable(topology.branches), ...omittedFooter(topology, "_", "_"));
+  lines.push("", "```mermaid", renderGitGraph(topology, graph), "```");
+  return `${lines.join(`
+`)}
+`;
+}
+function renderText(topology) {
+  const rows = [TABLE_HEADERS.map((header) => header), ...topology.branches.map(rowCells)];
+  const widths = TABLE_HEADERS.map((_, column) => Math.max(...rows.map((row) => (row[column] ?? "").length)));
+  const lines = [`base: ${topology.base}`, `generated: ${topology.generatedAt}`];
+  for (const warning of topology.warnings)
+    lines.push(`warning: ${warning}`);
+  lines.push("", ...rows.map((row) => alignRow(row, widths)), ...omittedFooter(topology, "", ""));
+  return `${lines.join(`
+`)}
+`;
+}
+function markdownTable(branches) {
+  const lines = [`| ${TABLE_HEADERS.join(" | ")} |`, `| ${TABLE_HEADERS.map(() => "---").join(" | ")} |`];
+  for (const row of branches) {
+    lines.push(`| ${rowCells(row).map(markdownCell).join(" | ")} |`);
+  }
+  return lines;
+}
+function rowCells(row) {
+  return [
+    row.name,
+    String(row.ahead),
+    String(row.behind),
+    row.contained ? "yes" : "no",
+    row.lastCommitAt.slice(0, 10),
+    row.worktree ?? "-",
+    row.pr === null ? "-" : `#${row.pr.number} ${row.pr.state}${row.pr.reviewDecision === null ? "" : ` ${row.pr.reviewDecision}`}`
+  ];
+}
+function alignRow(cells, widths) {
+  return cells.map((cell, column) => {
+    const width = widths[column] ?? cell.length;
+    return column === 0 ? cell.padEnd(width) : cell.padStart(width);
+  }).join("  ").trimEnd();
+}
+function omittedFooter(topology, open, close) {
+  if (topology.omitted === 0)
+    return [];
+  const noun = topology.omitted === 1 ? "branch" : "branches";
+  return ["", `${open}Omitted: ${topology.omitted} ${noun} beyond --limit.${close}`];
+}
+function markdownCell(value) {
+  return value.replaceAll("|", "\\|").replaceAll("`", "'");
+}
+function renderGitGraph(topology, graph) {
+  const lines = [];
+  if (graph.theme !== undefined && graph.theme.length > 0) {
+    lines.push(`%%{init: { 'theme': '${sanitizeId(graph.theme)}' } }%%`);
+  }
+  lines.push("gitGraph");
+  const baseId = sanitizeId(topology.base);
+  const usedRefs = new Set;
+  const base = refToken(topology.base, usedRefs);
+  const baseRow = baseRowOf(topology);
+  if (baseId !== MERMAID_DEFAULT_BRANCH)
+    lines.push(`${INDENT}branch ${base}`);
+  const tagsBySha = collectTags(topology.branches);
+  const usedIds = new Set;
+  const usedTags = new Set;
+  const window2 = (baseRow?.commits ?? []).slice(0, Math.max(graph.maxCommits, 0));
+  for (const { sha } of deepForkPoints(topology, baseRow, window2.length, graph.hideContained)) {
+    lines.push(`${INDENT}${commitStatement({ sha, subject: "", tags: tagsBySha.get(sha) ?? [] }, usedIds, usedTags, undefined)}`);
+  }
+  for (const [index, commit] of window2.slice().reverse().entries()) {
+    const isTip = index === window2.length - 1;
+    lines.push(`${INDENT}${commitStatement(commit, usedIds, usedTags, isTip ? "HIGHLIGHT" : commitType(commit))}`);
+  }
+  for (const row of topology.branches) {
+    if (row === baseRow)
+      continue;
+    if (row.contained && graph.hideContained)
+      continue;
+    lines.push(`${INDENT}checkout ${base}`);
+    const branch = refToken(row.name, usedRefs);
+    lines.push(branch === MERMAID_DEFAULT_BRANCH ? `${INDENT}checkout ${branch}` : `${INDENT}branch ${branch}`);
+    if (row.contained) {
+      lines.push(`${INDENT}${commitStatement({ sha: row.tip, subject: "", tags: tagsBySha.get(row.tip) ?? [] }, usedIds, usedTags, undefined)}`);
+      lines.push(`${INDENT}checkout ${base}`);
+      lines.push(`${INDENT}merge ${branch}`);
+      continue;
+    }
+    const shown = row.commits.slice(0, Math.max(Math.min(graph.maxCommits, row.ahead), 0)).reverse();
+    const hidden = Math.max(row.ahead - shown.length, 0);
+    if (hidden > 0) {
+      lines.push(`${INDENT}commit id:"${uniqueId(`+${hidden} earlier`, usedIds)}"`);
+    }
+    for (const [index, commit] of shown.entries()) {
+      const isTip = index === shown.length - 1;
+      lines.push(`${INDENT}${commitStatement(commit, usedIds, usedTags, isTip ? "HIGHLIGHT" : commitType(commit))}`);
+    }
+  }
+  return lines.join(`
+`);
+}
+function commitStatement(commit, usedIds, usedTags, type) {
+  const sha = short(commit.sha);
+  const id = uniqueId(sanitizeId(sha), usedIds);
+  const tag = claimTag(commit.tags[0], usedTags);
+  let line = `commit id:"${id}"`;
+  if (tag !== undefined)
+    line += ` tag:"${tag}"`;
+  if (type !== undefined)
+    line += ` type: ${type}`;
+  return line;
+}
+function claimTag(name, usedTags) {
+  if (name === undefined)
+    return;
+  const sanitized = sanitizeId(name);
+  if (usedTags.has(sanitized))
+    return;
+  usedTags.add(sanitized);
+  return sanitized;
+}
+function deepForkPoints(topology, baseRow, windowLength, hideContained) {
+  const behindBySha = new Map;
+  for (const row of topology.branches) {
+    if (row === baseRow)
+      continue;
+    if (row.contained && hideContained)
+      continue;
+    if (row.forkPoint.length === 0 || row.forkPoint === row.tip)
+      continue;
+    if (row.behind < windowLength)
+      continue;
+    if (!behindBySha.has(row.forkPoint))
+      behindBySha.set(row.forkPoint, row.behind);
+  }
+  return [...behindBySha].map(([sha, behind]) => ({ sha, behind })).sort((a, b) => b.behind - a.behind || (a.sha < b.sha ? -1 : 1));
+}
+function commitType(commit) {
+  return commit.subject.startsWith('Revert "') ? "REVERSE" : undefined;
+}
+function collectTags(branches) {
+  const tags = new Map;
+  for (const row of branches) {
+    for (const commit of row.commits)
+      tags.set(commit.sha, commit.tags);
+  }
+  return tags;
+}
+function isBaseRow(base, row) {
+  if (row.name === base)
+    return true;
+  if (row.kind !== "local")
+    return false;
+  return row.name === base.replace(/^[^/]+\//, "");
+}
+function short(sha) {
+  return sha.slice(0, 7);
+}
+function refToken(value, usedRefs) {
+  const id = uniqueId(sanitizeRef(value), usedRefs);
+  return /^[A-Za-z_]/.test(id) ? id : `"${id}"`;
+}
+function sanitizeId(value) {
+  return sanitizeRef(value).slice(0, 40);
+}
+function sanitizeRef(value) {
+  return value.replace(/[^A-Za-z0-9._/-]/g, "-");
+}
+function baseRowOf(topology) {
+  return topology.branches.find((row) => row.name === topology.base) ?? topology.branches.find((row) => isBaseRow(topology.base, row)) ?? null;
+}
+function uniqueId(id, usedIds) {
+  let candidate = id;
+  let suffix = 2;
+  while (usedIds.has(candidate)) {
+    candidate = `${id}-${suffix}`;
+    suffix += 1;
+  }
+  usedIds.add(candidate);
+  return candidate;
+}
+
+// ../../packages/app/src/services/branch-topology/index.ts
+var GRAPH_COMMIT_WINDOW = 10;
+var FIELD_SEP = "\x00";
+
+class BranchTopologyUsageError extends Error {
+}
+
+class BranchTopologyGitError extends Error {
+}
+function collectBranchTopology(runner, opts) {
+  const warnings = [];
+  const base = resolveBase(runner, opts.base);
+  const refs = listRefs(runner, opts.scope);
+  const worktrees = readWorktrees(runner, warnings);
+  const tagIndex = readTagIndex(runner, warnings);
+  const rows = refs.map((ref) => buildRow(runner, base.sha, ref));
+  const detached = detachedHead(runner, base.sha);
+  if (detached !== null && opts.scope !== "remote")
+    rows.push(detached);
+  for (const row of rows) {
+    row.worktree = row.kind === "detached" ? worktrees.bySha.get(row.tip) ?? null : worktrees.byBranch.get(row.name) ?? null;
+  }
+  if (opts.pr)
+    attachPullRequests(rows, readOpenPullRequests(runner, warnings));
+  const sorted = sortRows(rows);
+  const branches = sorted.slice(0, Math.max(opts.limit, 0));
+  const omitted = sorted.length - branches.length;
+  for (const row of branches) {
+    if (row.contained && !isBaseRow(base.name, row))
+      continue;
+    row.commits = readCommits(runner, row.tip, tagIndex, warnings);
+  }
+  return { base: base.name, generatedAt: new Date().toISOString(), branches, omitted, warnings };
+}
+function resolveBase(runner, explicit) {
+  const trimmed = explicit?.trim();
+  const requested = trimmed !== undefined && trimmed.length > 0 ? trimmed : undefined;
+  let candidate = requested ?? "";
+  if (candidate.length === 0) {
+    const originHead = runner(["git", "symbolic-ref", "--short", "refs/remotes/origin/HEAD"]);
+    const target = originHead.code === 0 ? originHead.stdout.trim() : "";
+    candidate = target.length > 0 ? target : "main";
+  }
+  const resolved = runner(["git", "rev-parse", "--verify", "--quiet", `${candidate}^{commit}`]);
+  if (resolved.code !== 0) {
+    if ((resolved.error ?? "").length > 0) {
+      throw new BranchTopologyGitError(`git is not available: ${resolved.error}`);
+    }
+    if (/not a git repository/i.test(resolved.stderr)) {
+      throw new BranchTopologyGitError(`not a git repository: ${failureDetail(resolved)}`);
+    }
+    throw new BranchTopologyUsageError(requested === undefined ? `unknown base ref '${candidate}' (no --base given; tried origin/HEAD, then main)` : `unknown base ref '${candidate}'`);
+  }
+  return { name: candidate, sha: resolved.stdout.trim() };
+}
+function listRefs(runner, scope) {
+  const namespaces = scope === "local" ? ["refs/heads"] : scope === "remote" ? ["refs/remotes"] : ["refs/heads", "refs/remotes"];
+  const res = runner(["git", "for-each-ref", "--format=%(refname)%00%(objectname)", ...namespaces]);
+  if (res.code !== 0)
+    throw gitFailure(res, "git for-each-ref");
+  const refs = [];
+  for (const line of res.stdout.split(`
+`)) {
+    if (line.length === 0)
+      continue;
+    const [refname, sha] = line.split(FIELD_SEP);
+    if (refname === undefined || sha === undefined || sha.length === 0)
+      continue;
+    if (refname.endsWith("/HEAD"))
+      continue;
+    if (refname.startsWith("refs/heads/")) {
+      refs.push({ name: refname.slice("refs/heads/".length), kind: "local", sha });
+    } else if (refname.startsWith("refs/remotes/")) {
+      refs.push({ name: refname.slice("refs/remotes/".length), kind: "remote", sha });
+    }
+  }
+  if (scope !== "all")
+    return refs;
+  const localTips = new Map(refs.filter((ref) => ref.kind === "local").map((ref) => [ref.name, ref.sha]));
+  return refs.filter((ref) => {
+    if (ref.kind !== "remote")
+      return true;
+    const twin = ref.name.slice(ref.name.indexOf("/") + 1);
+    return localTips.get(twin) !== ref.sha;
+  });
+}
+function buildRow(runner, baseSha, ref) {
+  const mergeBase = runner(["git", "merge-base", baseSha, ref.sha]);
+  const forkPoint = mergeBase.code === 0 ? mergeBase.stdout.trim() : "";
+  const counts = runner(["git", "rev-list", "--left-right", "--count", `${baseSha}...${ref.sha}`]);
+  if (counts.code !== 0)
+    throw gitFailure(counts, `git rev-list for ${ref.name}`);
+  const [behindRaw, aheadRaw] = counts.stdout.trim().split(/\s+/);
+  const behind = parseCount2(behindRaw, ref.name);
+  const ahead = parseCount2(aheadRaw, ref.name);
+  const log = runner(["git", "log", "-1", "--format=%H%x00%cI%x00%s", ref.sha]);
+  if (log.code !== 0)
+    throw gitFailure(log, `git log for ${ref.name}`);
+  const [tip, lastCommitAt, ...subjectParts] = log.stdout.replace(/\n$/, "").split(FIELD_SEP);
+  return {
+    name: ref.name,
+    kind: ref.kind,
+    tip: tip ?? ref.sha,
+    forkPoint,
+    ahead,
+    behind,
+    contained: ahead === 0,
+    lastCommitAt: lastCommitAt ?? "",
+    subject: subjectParts.join(FIELD_SEP),
+    worktree: null,
+    pr: null,
+    commits: []
+  };
+}
+function parseCount2(raw, ref) {
+  const parsed = Number.parseInt(raw ?? "", 10);
+  if (!Number.isInteger(parsed)) {
+    throw new BranchTopologyGitError(`git rev-list for ${ref} returned '${raw ?? ""}'`);
+  }
+  return parsed;
+}
+function detachedHead(runner, baseSha) {
+  const symbolic = runner(["git", "symbolic-ref", "--short", "-q", "HEAD"]);
+  if (symbolic.code === 0)
+    return null;
+  const head = runner(["git", "rev-parse", "--verify", "--quiet", "HEAD^{commit}"]);
+  if (head.code !== 0)
+    return null;
+  const tip = head.stdout.trim();
+  return buildRow(runner, baseSha, { name: shortSha(tip), kind: "detached", sha: tip });
+}
+function sortRows(rows) {
+  const time = (row) => {
+    const parsed = Date.parse(row.lastCommitAt);
+    return Number.isFinite(parsed) ? parsed : 0;
+  };
+  return [...rows].sort((a, b) => {
+    const byTime = time(b) - time(a);
+    if (byTime !== 0)
+      return byTime;
+    return a.name < b.name ? -1 : a.name > b.name ? 1 : 0;
+  });
+}
+function readWorktrees(runner, warnings) {
+  const index = { byBranch: new Map, bySha: new Map };
+  const res = runner(["git", "worktree", "list", "--porcelain"]);
+  if (res.code !== 0) {
+    warnings.push(`git worktree list failed: ${failureDetail(res)}`);
+    return index;
+  }
+  let path = "";
+  let head = "";
+  let detached = false;
+  const flush = () => {
+    if (detached && head.length > 0 && path.length > 0)
+      index.bySha.set(head, path);
+    path = "";
+    head = "";
+    detached = false;
+  };
+  for (const line of res.stdout.split(`
+`)) {
+    if (line.length === 0) {
+      flush();
+    } else if (line.startsWith("worktree ")) {
+      flush();
+      path = line.slice("worktree ".length).trim();
+    } else if (line.startsWith("HEAD ")) {
+      head = line.slice("HEAD ".length).trim();
+    } else if (line === "detached") {
+      detached = true;
+    } else if (line.startsWith("branch refs/heads/")) {
+      index.byBranch.set(line.slice("branch refs/heads/".length).trim(), path);
+    }
+  }
+  flush();
+  return index;
+}
+function readTagIndex(runner, warnings) {
+  const index = new Map;
+  const res = runner(["git", "for-each-ref", "--format=%(objectname) %(*objectname) %(refname:short)", "refs/tags"]);
+  if (res.code !== 0) {
+    warnings.push(`git for-each-ref refs/tags failed: ${failureDetail(res)}`);
+    return index;
+  }
+  for (const line of res.stdout.split(`
+`)) {
+    if (line.length === 0)
+      continue;
+    const [object, peeled, ...nameParts] = line.split(" ");
+    const name = nameParts.join(" ");
+    if (object === undefined || name.length === 0)
+      continue;
+    const target = (peeled ?? "").length > 0 ? peeled : object;
+    index.set(target, [...index.get(target) ?? [], name]);
+  }
+  return index;
+}
+function readCommits(runner, sha, tagIndex, warnings) {
+  const res = runner(["git", "log", "-n", String(GRAPH_COMMIT_WINDOW), "--format=%H%x00%s", sha]);
+  if (res.code !== 0) {
+    warnings.push(`git log for ${shortSha(sha)} failed: ${failureDetail(res)}`);
+    return [];
+  }
+  const commits = [];
+  for (const line of res.stdout.split(`
+`)) {
+    if (line.length === 0)
+      continue;
+    const [commitSha, ...subjectParts] = line.split(FIELD_SEP);
+    if (commitSha === undefined || commitSha.length === 0)
+      continue;
+    commits.push({
+      sha: commitSha,
+      subject: subjectParts.join(FIELD_SEP),
+      tags: tagIndex.get(commitSha) ?? []
+    });
+  }
+  return commits;
+}
+function readOpenPullRequests(runner, warnings) {
+  const index = new Map;
+  const res = runner([
+    "gh",
+    "pr",
+    "list",
+    "--state",
+    "open",
+    "--json",
+    "number,headRefName,state,reviewDecision",
+    "--limit",
+    "200"
+  ]);
+  if (res.code !== 0 || res.stdout.trim().length === 0) {
+    warnings.push(`--pr: gh pr list failed: ${failureDetail(res)}`);
+    return index;
+  }
+  let parsed;
+  try {
+    parsed = JSON.parse(res.stdout);
+  } catch {
+    warnings.push("--pr: gh pr list returned unparseable JSON");
+    return index;
+  }
+  if (!Array.isArray(parsed)) {
+    warnings.push("--pr: gh pr list returned unparseable JSON");
+    return index;
+  }
+  for (const entry of parsed) {
+    const { number, headRefName, state, reviewDecision } = entry;
+    if (typeof number !== "number" || typeof headRefName !== "string")
+      continue;
+    const pr = {
+      number,
+      state: typeof state === "string" ? state : "",
+      reviewDecision: typeof reviewDecision === "string" && reviewDecision.length > 0 ? reviewDecision : null
+    };
+    const existing = index.get(headRefName);
+    if (existing === undefined || pr.number < existing.number)
+      index.set(headRefName, pr);
+  }
+  return index;
+}
+function attachPullRequests(rows, index) {
+  for (const row of rows) {
+    if (row.kind === "detached")
+      continue;
+    const keys = row.kind === "remote" ? [row.name, row.name.replace(/^[^/]+\//, "")] : [row.name];
+    row.pr = keys.map((key) => index.get(key)).find((pr) => pr !== undefined) ?? null;
+  }
+}
+function shortSha(sha) {
+  return sha.slice(0, 7);
+}
+function gitFailure(res, what) {
+  return new BranchTopologyGitError(`${what} failed: ${failureDetail(res)}`);
+}
+function failureDetail(res) {
+  const first = (res.stderr.trim() || res.stdout.trim()).split(`
+`)[0] ?? "";
+  if (first.length > 0)
+    return first;
+  return (res.error ?? "").length > 0 ? res.error : `exit ${res.code}`;
+}
+
+// src/commands/builder/show-branches.ts
+var FORMATS = ["markdown", "json", "text"];
+function registerBuilderShowBranchesCommand(builder, context) {
+  const command = builder.command("show-branches").summary("read-only branch topology report against a base (markdown | json | text)").description([
+    "Report every branch against a base ref, read-only: fork point, commits ahead/behind,",
+    "contained flag, last commit, worktree binding, and (with --pr) open pull-request state.",
+    "Base resolution: --base, else the origin/HEAD target, else main.",
+    "markdown (default) prints the summary table and one condensed mermaid gitGraph;",
+    "json prints the raw BranchTopology object; text prints the aligned table only.",
+    "Exit codes: 0 ok \xB7 1 usage (bad --format/--limit/--max-commits, unknown base ref,",
+    "--local with --remote) \xB7 2 git failure (not a repository, git missing)."
+  ].join(`
+`)).option("--format <format>", "output format: markdown | json | text (default markdown)", "markdown").option("--json", "alias of --format json (prints the raw BranchTopology object)").option("--base <ref>", "base ref to measure every branch against (default: origin/HEAD, else main)").option("--local", "only local branches").option("--remote", "only remote branches").option("--pr", "enrich rows with open pull-request state (one gh call; degrades with a warning)").option("--limit <n>", "maximum branch rows kept, most recent last-commit first (default 30)", "30").option("--max-commits <n>", "maximum commit nodes per branch line in the graph (default 3)", "3").option("--hide-contained", "drop contained branches from the graph instead of drawing their join").option("--theme <name>", "mermaid theme name for the graph init directive").action((options) => {
+    const format = resolveFormat(options.format, command.getOptionValueSource("format") === "cli", options.json === true, context);
+    if (format === null)
+      return;
+    const limit = positiveInteger(options.limit, "--limit", context);
+    if (limit === null)
+      return;
+    const maxCommits = positiveInteger(options.maxCommits, "--max-commits", context);
+    if (maxCommits === null)
+      return;
+    if (options.local === true && options.remote === true) {
+      usageError("--local and --remote are mutually exclusive", context);
+      return;
+    }
+    try {
+      const topology = collectBranchTopology(createSpawnRunner({ cwd: context.cwd, env: context.env }), {
+        ...options.base !== undefined ? { base: options.base } : {},
+        scope: options.local === true ? "local" : options.remote === true ? "remote" : "all",
+        pr: options.pr === true,
+        limit
+      });
+      if (format === "json") {
+        context.output.write(toJson2(topology));
+      } else if (format === "text") {
+        context.output.write(renderText(topology));
+      } else {
+        context.output.write(renderMarkdown2(topology, {
+          maxCommits,
+          hideContained: options.hideContained === true,
+          ...options.theme !== undefined ? { theme: options.theme } : {}
+        }));
+      }
+      context.setExitCode(0);
+    } catch (err) {
+      if (err instanceof BranchTopologyUsageError) {
+        usageError(err.message, context);
+        return;
+      }
+      if (err instanceof BranchTopologyGitError) {
+        context.output.error(err.message);
+        context.setExitCode(2);
+        return;
+      }
+      context.output.error(err instanceof Error ? err.message : String(err));
+      context.setExitCode(2);
+    }
+  });
+}
+function resolveFormat(requested, explicitFormat, json, context) {
+  if (!FORMATS.includes(requested)) {
+    usageError(`unknown --format '${requested}': expected ${FORMATS.join(" | ")}`, context);
+    return null;
+  }
+  if (!json)
+    return requested;
+  if (explicitFormat && requested !== "json") {
+    usageError(`--json conflicts with --format ${requested}`, context);
+    return null;
+  }
+  return "json";
+}
+function positiveInteger(value, flag, context) {
+  const trimmed = value.trim();
+  const parsed = Number.parseInt(trimmed, 10);
+  if (!/^\d+$/.test(trimmed) || parsed < 1) {
+    usageError(`${flag} expects a positive integer, got '${value}'`, context);
+    return null;
+  }
+  return parsed;
+}
+function usageError(message, context) {
+  context.output.error(message);
+  context.setExitCode(1);
+}
+
 // src/commands/builder.ts
 function registerBuilderCommand(program, context) {
-  const noun = program.command("builder").summary("release plumbing: version bumps, tags, and PR-review ops");
+  const noun = program.command("builder").summary("release plumbing: version bumps, tags, branch topology, and PR-review ops");
   noun.command("bump-ver").summary("bump a package version, commit, tag, optionally push").description([
     "Bump one workspace package (or every released package with --all),",
     "rewrite workspace pins, commit, and tag. A bare version bumps all:",
@@ -144330,7 +145170,9 @@ function registerBuilderCommand(program, context) {
       context.setExitCode(1);
     }
   });
-  registerBuilderPrCommand(noun, context);
+  registerBuilderShowBranchesCommand(noun, context);
+  registerBuilderPrCommands(noun, context);
+  registerBuilderPrAliasCommand(noun, context);
 }
 
 // src/commands/decision.ts
@@ -144717,9 +145559,9 @@ function registerFeatureVerifyCommand(feature, context) {
     "Runs the selected feature-verification definition\u2019s command once (or --cmd) and writes the",
     "run-scoped + feature-latest receipts and .spur/run/<runId>-feature-verification.status.",
     "Exit: 0 after a completed pass (PASS or FAIL); 1 when the pass could not run.",
-    "Flags fall back to the workflow env names: featureId, __runId, verificationCmd, confidence, ackLowConfidence."
+    "Flags fall back to the workflow env names: featureId, __runId, verificationCmd."
   ].join(`
-`)).argument("[id]", "Feature ID (env: featureId)").option("--run-id <id>", "workflow run id the receipt binds to (env: __runId)").option("--cmd <command>", "verification command override (env: verificationCmd)").option("--confidence <level>", "declared confidence HIGH | MEDIUM | LOW (env: confidence)").option("--ack-low-confidence", "acknowledge a LOW confidence level on the receipt (env: ackLowConfidence=true)").action(async (id, options) => {
+`)).argument("[id]", "Feature ID (env: featureId)").option("--run-id <id>", "workflow run id the receipt binds to (env: __runId)").option("--cmd <command>", "verification command override (env: verificationCmd)").action(async (id, options) => {
     await Promise.resolve().then(() => init_src3());
     const env = context.env;
     const featureId = id || env.featureId || "";
@@ -144728,9 +145570,7 @@ function registerFeatureVerifyCommand(feature, context) {
         workdir: context.cwd,
         featureId,
         runId: options.runId || env.__runId || "",
-        cmdOverride: options.cmd || env.verificationCmd || "",
-        confidenceOverride: options.confidence || env.confidence || "",
-        ackLowConfidence: options.ackLowConfidence === true || env.ackLowConfidence === "true"
+        cmdOverride: options.cmd || env.verificationCmd || ""
       });
       context.output.write(`feature verify: ${featureId} ${result.message}`);
     } catch (err) {
@@ -145177,7 +146017,7 @@ import { createRequire as createRequire3 } from "module";
 var CLI_CONFIG = {
   binaryName: "spur",
   binaryLabel: "spur",
-  binaryVersion: "0.4.9",
+  binaryVersion: "0.4.11",
   configDir: ".spur",
   configFile: ".spur/config.yaml",
   databaseFile: ".spur/spur.db"
@@ -145721,7 +146561,7 @@ init_loader2();
 init_src2();
 init_dist11();
 import { homedir as homedir15 } from "os";
-import { join as join84, resolve as resolve31 } from "path";
+import { join as join85, resolve as resolve31 } from "path";
 
 // src/config/scaffold-manifest.ts
 var SCAFFOLD_MANIFEST = [
@@ -145750,8 +146590,8 @@ var SCAFFOLD_MANIFEST = [
 ];
 
 // src/commands/init.ts
-var GLOBAL_CONFIG_DIR = join84(".config", "spur");
-var GLOBAL_RULES_DIR2 = join84(GLOBAL_CONFIG_DIR, "rules");
+var GLOBAL_CONFIG_DIR = join85(".config", "spur");
+var GLOBAL_RULES_DIR2 = join85(GLOBAL_CONFIG_DIR, "rules");
 var GLOBAL_CONFIG_EXAMPLE = BUNDLED_GLOBAL_CONFIG;
 var GLOBAL_CONFIG_FILE2 = "config.yaml";
 var INDEXED_CONTEXT_MARKER = "## Indexed context";
@@ -145782,7 +146622,7 @@ If \`.spur/context/\` is absent, proceed normally. Never block work on its absen
 `;
 function globalRulesRoot(context) {
   const override = context.env.SPUR_GLOBAL_RULES_DIR;
-  return override !== undefined && override.length > 0 ? resolve31(context.cwd, override) : join84(homedir15(), GLOBAL_RULES_DIR2);
+  return override !== undefined && override.length > 0 ? resolve31(context.cwd, override) : join85(homedir15(), GLOBAL_RULES_DIR2);
 }
 async function writeIfNew(context, path, content, force, result) {
   if (!force && await context.fs.exists(path)) {
@@ -145799,18 +146639,18 @@ async function seedGlobalRules(context) {
   const target = globalRulesRoot(context);
   let written = 0;
   for (const relPath of await listBundledRuleFiles()) {
-    const destination = join84(target, relPath);
+    const destination = join85(target, relPath);
     if (await context.fs.exists(destination))
       continue;
-    await context.fs.ensureDir(join84(target, ...relPath.split("/").slice(0, -1)));
-    await context.fs.writeFile(destination, await context.fs.readFile(join84(source, relPath)));
+    await context.fs.ensureDir(join85(target, ...relPath.split("/").slice(0, -1)));
+    await context.fs.writeFile(destination, await context.fs.readFile(join85(source, relPath)));
     written += 1;
   }
   return written;
 }
 function resolveGlobalConfigDir(context) {
   const globalOverride = context.env.SPUR_GLOBAL_RULES_DIR;
-  return globalOverride !== undefined && globalOverride.length > 0 ? resolve31(context.cwd, globalOverride) : join84(homedir15(), GLOBAL_CONFIG_DIR);
+  return globalOverride !== undefined && globalOverride.length > 0 ? resolve31(context.cwd, globalOverride) : join85(homedir15(), GLOBAL_CONFIG_DIR);
 }
 async function seedGlobalConfig(context) {
   const source = bundledConfigRoot();
@@ -145821,15 +146661,15 @@ async function seedGlobalConfig(context) {
   for (const relPath of listBundledConfigFiles()) {
     if (relPath === GLOBAL_CONFIG_EXAMPLE)
       continue;
-    const destination = join84(target, relPath);
+    const destination = join85(target, relPath);
     if (await context.fs.exists(destination))
       continue;
-    await context.fs.ensureDir(join84(target, ...relPath.split("/").slice(0, -1)));
-    await context.fs.writeFile(destination, await context.fs.readFile(join84(source, relPath)));
+    await context.fs.ensureDir(join85(target, ...relPath.split("/").slice(0, -1)));
+    await context.fs.writeFile(destination, await context.fs.readFile(join85(source, relPath)));
     written += 1;
   }
-  const examplePath = join84(source, GLOBAL_CONFIG_EXAMPLE);
-  const globalConfigPath = join84(target, GLOBAL_CONFIG_FILE2);
+  const examplePath = join85(source, GLOBAL_CONFIG_EXAMPLE);
+  const globalConfigPath = join85(target, GLOBAL_CONFIG_FILE2);
   if (await context.fs.exists(examplePath) && !await context.fs.exists(globalConfigPath)) {
     await context.fs.ensureDir(target);
     await context.fs.writeFile(globalConfigPath, await context.fs.readFile(examplePath));
@@ -145844,10 +146684,10 @@ function registerInitCommand(program, context, options = {}) {
     const minimal = options.minimal === true;
     const adoptGlobal = options.adoptGlobalConfig === true;
     const projectName = options.name ?? "default";
-    const configPath = join84(context.cwd, CLI_CONFIG.configFile);
+    const configPath = join85(context.cwd, CLI_CONFIG.configFile);
     const result = { created: [], skipped: [] };
     const globalConfigDir = resolveGlobalConfigDir(context);
-    const globalConfigPath = join84(globalConfigDir, GLOBAL_CONFIG_FILE2);
+    const globalConfigPath = join85(globalConfigDir, GLOBAL_CONFIG_FILE2);
     const globalConfigExists = await context.fs.exists(globalConfigPath);
     let misplacedKeys = [];
     if (globalConfigExists) {
@@ -145860,20 +146700,20 @@ function registerInitCommand(program, context, options = {}) {
       const configRoot = bundledConfigRoot();
       if (configRoot !== null && !minimal) {
         for (const relPath of listBundledProjectSeedFiles()) {
-          const sourcePath = join84(configRoot, relPath);
+          const sourcePath = join85(configRoot, relPath);
           if (!await context.fs.exists(sourcePath))
             continue;
-          const targetPath = join84(context.cwd, CLI_CONFIG.configDir, relPath);
-          await context.fs.ensureDir(join84(targetPath, ".."));
+          const targetPath = join85(context.cwd, CLI_CONFIG.configDir, relPath);
+          await context.fs.ensureDir(join85(targetPath, ".."));
           await writeIfNew(context, targetPath, await context.fs.readFile(sourcePath), false, result);
         }
         for (const entry of SCAFFOLD_MANIFEST) {
-          const sourcePath = join84(configRoot, entry.source);
+          const sourcePath = join85(configRoot, entry.source);
           if (!await context.fs.exists(sourcePath))
             continue;
-          const baseDir = entry.root === true ? context.cwd : join84(context.cwd, CLI_CONFIG.configDir);
-          const targetPath = join84(baseDir, entry.target);
-          await context.fs.ensureDir(join84(targetPath, ".."));
+          const baseDir = entry.root === true ? context.cwd : join85(context.cwd, CLI_CONFIG.configDir);
+          const targetPath = join85(baseDir, entry.target);
+          await context.fs.ensureDir(join85(targetPath, ".."));
           const entryForce = false;
           let body = await context.fs.readFile(sourcePath);
           if (entry.target === "AGENTS.md") {
@@ -145890,7 +146730,7 @@ function registerInitCommand(program, context, options = {}) {
         const backupPath = `${globalConfigPath}.bak-${new Date().toISOString().replace(/[:.]/g, "-")}`;
         await context.fs.writeFile(backupPath, await context.fs.readFile(globalConfigPath));
         const bundledRoot = bundledConfigRoot();
-        const examplePath = bundledRoot !== null ? join84(bundledRoot, GLOBAL_CONFIG_EXAMPLE) : null;
+        const examplePath = bundledRoot !== null ? join85(bundledRoot, GLOBAL_CONFIG_EXAMPLE) : null;
         if (examplePath !== null && await context.fs.exists(examplePath)) {
           await context.fs.writeFile(globalConfigPath, await context.fs.readFile(examplePath));
           adoptedGlobal = true;
@@ -145963,13 +146803,13 @@ function registerInitCommand(program, context, options = {}) {
     ].join(`
 `)}
 `;
-    await context.fs.ensureDir(join84(context.cwd, CLI_CONFIG.configDir));
+    await context.fs.ensureDir(join85(context.cwd, CLI_CONFIG.configDir));
     await context.fs.writeFile(configPath, configYaml);
     result.created.push(configPath);
-    const agentsDir = join84(context.cwd, CLI_CONFIG.configDir, "agents");
+    const agentsDir = join85(context.cwd, CLI_CONFIG.configDir, "agents");
     await context.fs.ensureDir(agentsDir);
-    await writeIfNew(context, join84(agentsDir, ".gitkeep"), "", force, result);
-    const gitignorePath = join84(context.cwd, ".gitignore");
+    await writeIfNew(context, join85(agentsDir, ".gitkeep"), "", force, result);
+    const gitignorePath = join85(context.cwd, ".gitignore");
     const contextEntry = ".spur/context/";
     if (await context.fs.exists(gitignorePath)) {
       const existing = await context.fs.readFile(gitignorePath);
@@ -145989,20 +146829,20 @@ ${contextEntry}
       const configRoot = bundledConfigRoot();
       if (configRoot !== null) {
         for (const relPath of listBundledProjectSeedFiles()) {
-          const sourcePath = join84(configRoot, relPath);
+          const sourcePath = join85(configRoot, relPath);
           if (!await context.fs.exists(sourcePath))
             continue;
-          const targetPath = join84(context.cwd, CLI_CONFIG.configDir, relPath);
-          await context.fs.ensureDir(join84(targetPath, ".."));
+          const targetPath = join85(context.cwd, CLI_CONFIG.configDir, relPath);
+          await context.fs.ensureDir(join85(targetPath, ".."));
           await writeIfNew(context, targetPath, await context.fs.readFile(sourcePath), force, result);
         }
         for (const entry of SCAFFOLD_MANIFEST) {
-          const sourcePath = join84(configRoot, entry.source);
+          const sourcePath = join85(configRoot, entry.source);
           if (!await context.fs.exists(sourcePath))
             continue;
-          const baseDir = entry.root === true ? context.cwd : join84(context.cwd, CLI_CONFIG.configDir);
-          const targetPath = join84(baseDir, entry.target);
-          await context.fs.ensureDir(join84(targetPath, ".."));
+          const baseDir = entry.root === true ? context.cwd : join85(context.cwd, CLI_CONFIG.configDir);
+          const targetPath = join85(baseDir, entry.target);
+          await context.fs.ensureDir(join85(targetPath, ".."));
           const entryForce = entry.preserve === true ? false : force;
           let body = await context.fs.readFile(sourcePath);
           if (entry.target === "AGENTS.md") {
@@ -146015,7 +146855,7 @@ ${contextEntry}
         }
       }
     }
-    const agentsMdPath = join84(context.cwd, "AGENTS.md");
+    const agentsMdPath = join85(context.cwd, "AGENTS.md");
     if (await context.fs.exists(agentsMdPath)) {
       const existing = await context.fs.readFile(agentsMdPath);
       if (!existing.includes(INDEXED_CONTEXT_MARKER)) {
@@ -146056,11 +146896,11 @@ ${contextEntry}
 // src/commands/maintain.ts
 init_src();
 init_src2();
-import { join as join85 } from "path";
+import { join as join86 } from "path";
 function registerMaintainCommand(program, context, options = {}) {
   program.command("maintain", { hidden: options.hidden === true }).summary("run database maintenance (optimize, WAL checkpoint truncation, optional VACUUM)").description("Run database maintenance: PRAGMA optimize, WAL checkpoint truncation; optionally VACUUM compaction.").option("--vacuum", "Run VACUUM defragmentation and page compaction", false).option(...SHARED_OPTIONS.jsonSupported).option(...SHARED_OPTIONS.jsonEnvelope).action(async (options) => {
     const db = await context.getDb();
-    const dbPath = context.env.DATABASE_URL ?? join85(context.cwd, DEFAULT_DATABASE_URL);
+    const dbPath = context.env.DATABASE_URL ?? join86(context.cwd, DEFAULT_DATABASE_URL);
     const result = await maintainDatabase(db, {
       vacuum: options.vacuum === true,
       dbPath: dbPath.startsWith(":memory:") ? undefined : dbPath
@@ -146484,14 +147324,14 @@ async function waitForPendingDrain(agentService, coordination, pin, timeoutMs, s
 
 // src/commands/migrate.ts
 init_src2();
-import { join as join87, relative as relative18 } from "path";
+import { join as join88, relative as relative18 } from "path";
 
 // src/context.ts
 init_src3();
 init_src();
 init_src2();
 init_dist5();
-import { dirname as dirname41, join as join86, resolve as resolve32 } from "path";
+import { dirname as dirname41, join as join87, resolve as resolve32 } from "path";
 import { isatty as isatty4 } from "tty";
 
 // ../../node_modules/.bun/@clack+core@1.4.1/node_modules/@clack/core/dist/index.mjs
@@ -147314,7 +148154,7 @@ ${l}
   }).prompt();
 };
 var i2 = `${styleText2("gray", S_BAR)}  `;
-var text4 = (t) => new n3({
+var text5 = (t) => new n3({
   validate: t.validate,
   placeholder: t.placeholder,
   defaultValue: t.defaultValue,
@@ -147384,7 +148224,7 @@ class ClackHitlResponder {
         return { value: result };
       }
       case "input": {
-        const result = await text4({
+        const result = await text5({
           message: request.prompt
         });
         if (isCancel(result)) {
@@ -147476,7 +148316,7 @@ function createCliContext(options) {
 }
 function noopSetExitCode(_code) {}
 function resolveDatabaseUrl(cwd, env) {
-  return env.DATABASE_URL === undefined ? join86(cwd, DEFAULT_DATABASE_URL) : buildConfigFromEnv(env).database.url;
+  return env.DATABASE_URL === undefined ? join87(cwd, DEFAULT_DATABASE_URL) : buildConfigFromEnv(env).database.url;
 }
 async function createMigratedDbAdapter(cwd = process.cwd(), env = getEnvVars(), dbUrl) {
   const url = dbUrl ?? resolveDatabaseUrl(cwd, env);
@@ -147539,7 +148379,7 @@ function registerMigrateCommand(program, context, options = {}) {
         context.setExitCode(1);
       return;
     }
-    const migrations = await loadSqlMigrations(join87(context.cwd, "drizzle")).catch(() => {
+    const migrations = await loadSqlMigrations(join88(context.cwd, "drizzle")).catch(() => {
       return;
     });
     const db = await context.getDb();
@@ -147554,22 +148394,28 @@ function registerMigrateCommand(program, context, options = {}) {
 init_src3();
 init_src2();
 init_dist5();
-import { basename as basename19, dirname as dirname42, join as join88, resolve as resolve33 } from "path";
+import { basename as basename19, dirname as dirname42, join as join89, resolve as resolve33 } from "path";
 function registerProjectsCommand(program, context) {
   const projectsCmd = program.command("projects").summary("manage the Spur multi-project registry");
-  projectsCmd.command("add").argument("<path>", "Project root directory path").option(...SHARED_OPTIONS.nameProjectDisplay).option(...SHARED_OPTIONS.jsonProjectsResponse).option(...SHARED_OPTIONS.jsonEnvelope).action(async (pathArg, options) => {
+  projectsCmd.command("add").argument("<path>", "Project root directory path").option("--host <host>", 'Host for local or remote project (default: "localhost")').option(...SHARED_OPTIONS.nameProjectDisplay).option(...SHARED_OPTIONS.jsonProjectsResponse).option(...SHARED_OPTIONS.jsonEnvelope).action(async (pathArg, options) => {
     try {
-      const absolutePath = resolve33(context.cwd, pathArg);
-      if (!await context.fs.exists(absolutePath)) {
-        throw new Error(`Directory does not exist: ${absolutePath}`);
+      const host = options.host ?? "localhost";
+      const isLocal = isLocalHost(host);
+      let absolutePath = pathArg;
+      if (isLocal) {
+        absolutePath = resolve33(context.cwd, pathArg);
+        if (!await context.fs.exists(absolutePath)) {
+          throw new Error(`Directory does not exist: ${absolutePath}`);
+        }
       }
       const name = options.name ?? basename19(absolutePath);
       const registry = new ProjectRegistry;
-      const entry = await registry.upsert({ path: absolutePath, name, port: 0 });
+      const entry = await registry.upsert({ path: absolutePath, name, host, port: 0 });
       if (options.json) {
         context.output.write(toEnvelopeJson({ ok: true, project: entry }, { enveloped: options.jsonEnvelope }));
       } else {
-        context.output.write(`Registered project "${entry.name}" at ${entry.path}`);
+        const hostLabel = !isLocalHost(entry.host) ? ` on host ${entry.host}` : "";
+        context.output.write(`Registered project "${entry.name}" at ${entry.path}${hostLabel}`);
       }
     } catch (err) {
       const message = err instanceof Error ? err.message : String(err);
@@ -147614,14 +148460,17 @@ function registerProjectsCommand(program, context) {
           ok: true,
           purgedCount: result.purgedProjects.length,
           purgedProjects: result.purgedProjects,
-          terminatedProcesses: result.terminatedProcesses
+          terminatedProcesses: result.terminatedProcesses,
+          ...result.resetPorts && result.resetPorts.length > 0 ? { resetPorts: result.resetPorts } : {}
         }, { enveloped: options.jsonEnvelope }));
-      } else if (result.purgedProjects.length === 0) {
+      } else if (result.purgedProjects.length === 0 && (!result.resetPorts || result.resetPorts.length === 0)) {
         context.output.write("Registry is clean. No stale project entries found.");
       } else {
-        context.output.write(`Purged ${result.purgedProjects.length} stale project(s):`);
-        for (const project of result.purgedProjects) {
-          context.output.write(`- ${project.name} (${project.path})`);
+        if (result.purgedProjects.length > 0) {
+          context.output.write(`Purged ${result.purgedProjects.length} stale project(s):`);
+          for (const project of result.purgedProjects) {
+            context.output.write(`- ${project.name} (${project.path})`);
+          }
         }
         if (result.terminatedProcesses.length > 0) {
           context.output.write(`Terminated ${result.terminatedProcesses.length} lingering process(es):`);
@@ -147629,6 +148478,13 @@ function registerProjectsCommand(program, context) {
             context.output.write(`- PID ${proc.pid} on port ${proc.port} (${proc.signal})`);
           }
         }
+        if (result.resetPorts && result.resetPorts.length > 0) {
+          context.output.write(`Reset ${result.resetPorts.length} closed port(s):`);
+          for (const project of result.resetPorts) {
+            const hostLabel = !isLocalHost(project.host) ? `${project.host}:` : "";
+            context.output.write(`- ${project.name} (${hostLabel}${project.port} -> 0)`);
+          }
+        }
       }
     } catch (err) {
       const message = err instanceof Error ? err.message : String(err);
@@ -147646,10 +148502,10 @@ function registerProjectsCommand(program, context) {
       const rawProjects = await registry.list();
       const projects = await Promise.all(rawProjects.map(async (p) => ({
         ...p,
-        running: p.port > 0 ? await isPortLive(p.port) : false
+        running: p.port > 0 ? await isPortLive(p.port, undefined, p.host) : false
       })));
       const openProjectDb = async (projectPath) => {
-        const url = join88(projectPath, ".spur", "spur.db");
+        const url = join89(projectPath, ".spur", "spur.db");
         await context.fs.ensureDir(dirname42(url));
         return createMigratedDb({ url });
       };
@@ -147715,8 +148571,9 @@ function registerProjectsCommand(program, context) {
         context.output.write(`Registered Projects:
 `);
         for (const [i, p] of projects.entries()) {
+          const hostLabel = !isLocalHost(p.host) ? ` (${p.host})` : "";
           const status = p.running ? `[RUNNING: ${p.port}]` : "[STOPPED]";
-          context.output.write(`- ${p.name} ${status} (${p.path})`);
+          context.output.write(`- ${p.name}${hostLabel} ${status} (${p.path})`);
           const f = fleets?.[i];
           if (f === undefined)
             continue;
@@ -148078,7 +148935,7 @@ function formatTraceDetail(detail) {
 // src/commands/serve.ts
 init_src();
 import { statSync as statSync18 } from "fs";
-import { join as join93, resolve as resolve36 } from "path";
+import { join as join94, resolve as resolve36 } from "path";
 
 // ../server/src/index.ts
 init_src();
@@ -148089,11 +148946,11 @@ init_src();
 init_loader2();
 init_src2();
 import { homedir as homedir17 } from "os";
-import { basename as basename21, dirname as dirname44, isAbsolute as isAbsolute15, join as join92 } from "path";
+import { basename as basename21, dirname as dirname44, isAbsolute as isAbsolute15, join as join93 } from "path";
 init_dist5();
 
 // ../server/src/bootstrap.ts
-import { join as join90 } from "path";
+import { join as join91 } from "path";
 
 // ../../node_modules/.bun/@orpc+shared@1.14.4+e40b0dfdd726a224/node_modules/@orpc/shared/dist/index.mjs
 function resolveMaybeOptionalOptions(rest) {
@@ -154946,9 +155803,9 @@ init_loader2();
 init_src2();
 init_dist5();
 import { homedir as homedir16 } from "os";
-import { basename as basename20, join as join89, relative as relative19, resolve as resolve35 } from "path";
+import { basename as basename20, join as join90, relative as relative19, resolve as resolve35 } from "path";
 // ../server/package.json
-var version3 = "0.4.9";
+var version3 = "0.4.11";
 
 // ../server/src/modules/health/index.ts
 var startedAt = Date.now();
@@ -155421,8 +156278,8 @@ var healthModule = {
           }
         });
       }
-      const projectPath = join89(ctx.cwd, ".spur", "config.yaml");
-      const globalPath = join89(homedir16(), ".config", "spur", "config.yaml");
+      const projectPath = join90(ctx.cwd, ".spur", "config.yaml");
+      const globalPath = join90(homedir16(), ".config", "spur", "config.yaml");
       let projectExists = false;
       let projectContent = "";
       let projectSizeBytes = 0;
@@ -155539,7 +156396,7 @@ var healthModule = {
         const projectRoot = ctx.cwd ?? process.cwd();
         const fs = ctx.fs ?? createNodeFileSystem2(projectRoot);
         const files = [];
-        const rootDesignPath = join89(projectRoot, "DESIGN.md");
+        const rootDesignPath = join90(projectRoot, "DESIGN.md");
         if (await fs.exists(rootDesignPath)) {
           let title = "UI/UX Design System";
           try {
@@ -155556,7 +156413,7 @@ var healthModule = {
             category: "root"
           });
         }
-        const doc04Path = join89(projectRoot, "docs", "04_DESIGN.md");
+        const doc04Path = join90(projectRoot, "docs", "04_DESIGN.md");
         if (await fs.exists(doc04Path)) {
           let title = "Concrete Surfaces & Contracts";
           try {
@@ -155573,7 +156430,7 @@ var healthModule = {
             category: "architecture"
           });
         }
-        const designDir = join89(projectRoot, "docs", "design");
+        const designDir = join90(projectRoot, "docs", "design");
         if (await fs.exists(designDir)) {
           let mdFiles = [];
           try {
@@ -155582,7 +156439,7 @@ var healthModule = {
           } catch {}
           mdFiles.sort((a, b) => a.localeCompare(b));
           for (const filename of mdFiles) {
-            const fullPath = join89(designDir, filename);
+            const fullPath = join90(designDir, filename);
             const relPath = `docs/design/${filename}`;
             let title = filename.replace(/\.md$/, "").replace(/-/g, " ");
             try {
@@ -155620,7 +156477,7 @@ var healthModule = {
       try {
         const projectRoot = ctx.cwd ?? process.cwd();
         const fs = ctx.fs ?? createNodeFileSystem2(projectRoot);
-        const fullPath = join89(projectRoot, reqPath);
+        const fullPath = join90(projectRoot, reqPath);
         if (!await fs.exists(fullPath)) {
           return c.json({ ok: false, error: "File not found" }, 404);
         }
@@ -155646,7 +156503,7 @@ var healthModule = {
         const projectRoot = ctx.cwd ?? process.cwd();
         const fs = ctx.fs ?? createNodeFileSystem2(projectRoot);
         const files = [];
-        const roadmapPath = join89(projectRoot, "docs", "02_ROADMAP.md");
+        const roadmapPath = join90(projectRoot, "docs", "02_ROADMAP.md");
         if (await fs.exists(roadmapPath)) {
           let title = "02 Roadmap \u2014 Spur";
           try {
@@ -155663,7 +156520,7 @@ var healthModule = {
             category: "roadmap"
           });
         }
-        const plansDir = join89(projectRoot, "docs", "plans");
+        const plansDir = join90(projectRoot, "docs", "plans");
         if (await fs.exists(plansDir)) {
           let mdFiles = [];
           try {
@@ -155672,7 +156529,7 @@ var healthModule = {
           } catch {}
           mdFiles.sort((a, b) => b.localeCompare(a));
           for (const filename of mdFiles) {
-            const fullPath = join89(plansDir, filename);
+            const fullPath = join90(plansDir, filename);
             const relPath = `docs/plans/${filename}`;
             let title = filename.replace(/\.md$/, "").replace(/-/g, " ");
             try {
@@ -155710,7 +156567,7 @@ var healthModule = {
       try {
         const projectRoot = ctx.cwd ?? process.cwd();
         const fs = ctx.fs ?? createNodeFileSystem2(projectRoot);
-        const fullPath = join89(projectRoot, reqPath);
+        const fullPath = join90(projectRoot, reqPath);
         if (!await fs.exists(fullPath)) {
           return c.json({ ok: false, error: "File not found" }, 404);
         }
@@ -158224,7 +159081,7 @@ function createApp(appRt, opts) {
     app.use("*", async (c, next) => {
       const pathname = c.req.path === "/" ? "/index.html" : c.req.path;
       try {
-        const file = Bun.file(join90(webDistPath, pathname));
+        const file = Bun.file(join91(webDistPath, pathname));
         if (await file.exists()) {
           const headers = new Headers({ "content-type": file.type });
           return new Response(file.stream(), { headers });
@@ -158237,7 +159094,7 @@ function createApp(appRt, opts) {
         return c.json({ error: "Not Found" }, 404);
       }
       try {
-        const indexFile = Bun.file(join90(webDistPath, "index.html"));
+        const indexFile = Bun.file(join91(webDistPath, "index.html"));
         if (await indexFile.exists()) {
           return new Response(indexFile.stream(), {
             headers: { "content-type": "text/html; charset=utf-8" }
@@ -158259,7 +159116,7 @@ init_src();
 init_loader2();
 init_src2();
 init_dist5();
-import { dirname as dirname43, join as join91 } from "path";
+import { dirname as dirname43, join as join92 } from "path";
 var NOOP_OUTPUT = { write: (_s) => {}, error: (_s) => {} };
 
 class LazyPlanningEventEmitter {
@@ -158295,7 +159152,7 @@ class NotConfiguredError extends Error {
 function createServerContext(appRt, options) {
   const cwd = options.cwd;
   const fs = options.fs;
-  const dbUrl = options.dbUrl ?? join91(cwd, DEFAULT_DATABASE_URL);
+  const dbUrl = options.dbUrl ?? join92(cwd, DEFAULT_DATABASE_URL);
   const eventsBus = options.eventsBus ?? appRt.events;
   const jobQueueEnabled = options.jobQueueEnabled ?? false;
   const eventProjectContext = systemEventProjectContext(cwd);
@@ -158331,7 +159188,7 @@ function createServerContext(appRt, options) {
   return {
     cwd,
     fs,
-    runDir: join91(cwd, ".spur", "run"),
+    runDir: join92(cwd, ".spur", "run"),
     webDistPath: options.webDistPath,
     boardModules: options.boardModules,
     logger: appRt.logger,
@@ -158695,7 +159552,7 @@ var BOARD_RUNTIME_MANIFEST_FILE = "board-runtime.json";
 async function readBoardHostRuntime(webDistPath, hasContributions) {
   if (!webDistPath)
     return null;
-  const manifestPath = join92(webDistPath, BOARD_RUNTIME_MANIFEST_FILE);
+  const manifestPath = join93(webDistPath, BOARD_RUNTIME_MANIFEST_FILE);
   try {
     const file = Bun.file(manifestPath);
     if (!await file.exists())
@@ -158732,7 +159589,7 @@ function defaultUsageSnapshotPath(env) {
   const override = env.SPUR_AGENT_USAGE_SNAPSHOT;
   if (override !== undefined && override.length > 0)
     return override;
-  return join92(env.HOME ?? homedir17(), ".config", "spur", "agent-usage.json");
+  return join93(env.HOME ?? homedir17(), ".config", "spur", "agent-usage.json");
 }
 var JOB_WORKER_START_DELAY_MS = 30000;
 var defaultDeps = {
@@ -158996,15 +159853,15 @@ async function handleFeatureActionJob(ctx, env, payload) {
   await runFeatureActionJob(ctx, env, payload);
 }
 async function resolveWebDistPath(configuredPath, projectRoot = process.cwd()) {
-  const candidates = configuredPath && configuredPath.trim() !== "" ? [isAbsolute15(configuredPath) ? configuredPath : join92(projectRoot, configuredPath)] : [
-    join92(projectRoot, "dist/web"),
-    join92(import.meta.dir, "web"),
-    join92(dirname44(process.execPath), "web"),
-    join92(dirname44(process.execPath), "../web"),
-    join92(import.meta.dir, "../../../dist/web")
+  const candidates = configuredPath && configuredPath.trim() !== "" ? [isAbsolute15(configuredPath) ? configuredPath : join93(projectRoot, configuredPath)] : [
+    join93(projectRoot, "dist/web"),
+    join93(import.meta.dir, "web"),
+    join93(dirname44(process.execPath), "web"),
+    join93(dirname44(process.execPath), "../web"),
+    join93(import.meta.dir, "../../../dist/web")
   ];
   for (const candidate of candidates) {
-    if (await Bun.file(join92(candidate, "index.html")).exists()) {
+    if (await Bun.file(join93(candidate, "index.html")).exists()) {
       return candidate;
     }
   }
@@ -159479,7 +160336,7 @@ var SQLITE_BUSY_MESSAGE_CONSTANTS = Object.freeze({
 
 // src/commands/serve.ts
 function resolveServeDbUrl(cwd, env, configuredUrl) {
-  return env.DATABASE_URL === undefined ? join93(cwd, DEFAULT_DATABASE_URL) : configuredUrl;
+  return env.DATABASE_URL === undefined ? join94(cwd, DEFAULT_DATABASE_URL) : configuredUrl;
 }
 function resolveServeCwd(cwd) {
   const resolved = resolve36(cwd);
@@ -159543,7 +160400,7 @@ function registerServeCommand(program, context, options = {}) {
 }
 
 // src/commands/status.ts
-import { join as join94 } from "path";
+import { join as join95 } from "path";
 
 // src/git-context.ts
 init_dist5();
@@ -159591,8 +160448,8 @@ function registerStatusCommand(program, context, options = {}) {
 }
 async function runStatusCore(path, options, context) {
   const [packageJsonExists, spurConfigExists, git, agentSpecs] = await Promise.all([
-    context.fs.exists(join94(context.cwd, "package.json")),
-    context.fs.exists(join94(context.cwd, ".spur", "config.yaml")),
+    context.fs.exists(join95(context.cwd, "package.json")),
+    context.fs.exists(join95(context.cwd, ".spur", "config.yaml")),
     gitContext(context.cwd),
     listAgentSpecIds(context)
   ]);
@@ -159623,14 +160480,14 @@ async function runStatusCore(path, options, context) {
   return status.ok ? 0 : 1;
 }
 async function listAgentSpecIds(context) {
-  const dir = join94(context.cwd, ".spur", "agents");
+  const dir = join95(context.cwd, ".spur", "agents");
   if (!await context.fs.exists(dir))
     return [];
   const entries = await context.fs.readDir(dir);
   return entries.filter((entry) => entry.endsWith(".yaml") || entry.endsWith(".yml")).map((entry) => entry.replace(/\.ya?ml$/, "")).sort();
 }
 async function readTargetStatus(context, targetPath) {
-  const resolved = join94(context.cwd, targetPath);
+  const resolved = join95(context.cwd, targetPath);
   const stat = await context.fs.stat(resolved);
   if (stat === null)
     throw new CommandError(`status failed: path does not exist at ${resolved}`);
@@ -159881,11 +160738,11 @@ function registerWorkflowCleanCommand(workflow, context) {
 // ../../packages/app/src/workflow/commit-guard.ts
 init_dist5();
 import { mkdirSync as mkdirSync23, readFileSync as readFileSync28, renameSync as renameSync11, writeFileSync as writeFileSync20 } from "fs";
-import { join as join95 } from "path";
+import { join as join96 } from "path";
 var COMMIT_GUARD_USAGE = "usage: spur workflow commit-guard start --run <id> | stage --run <id> [--base <sha>] -- <paths\u2026> | check --run <id> [--base <sha>]";
 var isBookkeeping = (path) => path === ".spur" || path.startsWith(".spur/");
-var at2 = (options, rel) => options.cwd ? join95(options.cwd, rel) : rel;
-var artifactPath = (run) => join95(".spur", "run", `${run}-tree-start.json`);
+var at2 = (options, rel) => options.cwd ? join96(options.cwd, rel) : rel;
+var artifactPath = (run) => join96(".spur", "run", `${run}-tree-start.json`);
 function gitOf(options) {
   if (options.git)
     return options.git;
@@ -159954,7 +160811,7 @@ function runContext(run, options) {
   let base = options.base ?? "";
   if (!base) {
     try {
-      const anchored = readFileSync28(at2(options, join95(".spur", "run", `${run}-base.sha`)), "utf8").trim();
+      const anchored = readFileSync28(at2(options, join96(".spur", "run", `${run}-base.sha`)), "utf8").trim();
       if (/^[0-9a-f]{7,40}$/i.test(anchored))
         base = anchored;
     } catch {}
@@ -159994,7 +160851,7 @@ function commitGuardStart(run, options = {}) {
     dirty: parsePorcelainZ(status.stdout).map((path) => ({ path, sha: hashPath(path, git) }))
   };
   const abs = at2(options, artifactPath(run));
-  mkdirSync23(join95(abs, ".."), { recursive: true });
+  mkdirSync23(join96(abs, ".."), { recursive: true });
   writeFileSync20(`${abs}.tmp`, `${JSON.stringify(snapshot, null, 2)}
 `);
   renameSync11(`${abs}.tmp`, abs);
@@ -160266,14 +161123,14 @@ function registerWorkflowContinueCommand(workflow, context) {
 }
 
 // src/commands/workflow/cost.ts
-import { join as join97 } from "path";
+import { join as join98 } from "path";
 
 // ../../packages/app/src/workflow/run-cost.ts
 init_src2();
 init_dist5();
 init_dist2();
 init_composition_baseline();
-import { join as join96 } from "path";
+import { join as join97 } from "path";
 
 // ../../packages/app/src/workflow/run-measurements.ts
 init_src2();
@@ -160507,7 +161364,7 @@ async function loadQueryCounts(workflowsDir, fs = createNodeFileSystem2()) {
       const name = /^(.+)\.ya?ml$/.exec(entry)?.[1];
       if (!name)
         continue;
-      const def = $parse(await fs.readFile(join96(workflowsDir, entry)));
+      const def = $parse(await fs.readFile(join97(workflowsDir, entry)));
       out[name] = extractResolvedWorkflowFacts(def).modelQueries.length;
     }
     return out;
@@ -160533,7 +161390,7 @@ async function runBudgetGate(opts) {
   const fs = opts.fs ?? createNodeFileSystem2();
   const gitShow = opts.gitShow ?? defaultGitShow;
   const openDb = opts.openDb ?? defaultDbOpener;
-  const absBudget = opts.budgetPath.startsWith("/") ? opts.budgetPath : join96(opts.cwd, opts.budgetPath);
+  const absBudget = opts.budgetPath.startsWith("/") ? opts.budgetPath : join97(opts.cwd, opts.budgetPath);
   const relBudget = absBudget.startsWith(`${opts.cwd}/`) ? absBudget.slice(opts.cwd.length + 1) : opts.budgetPath;
   const config = await loadPipelineBudgets(absBudget, fs);
   let head = null;
@@ -160549,7 +161406,7 @@ async function runBudgetGate(opts) {
   const queryCounts = await loadQueryCounts(opts.workflowsDir, fs);
   let measured;
   if (opts.measuredFile !== undefined) {
-    const measuredPath = opts.measuredFile.startsWith("/") ? opts.measuredFile : join96(opts.cwd, opts.measuredFile);
+    const measuredPath = opts.measuredFile.startsWith("/") ? opts.measuredFile : join97(opts.cwd, opts.measuredFile);
     measured = JSON.parse(await fs.readFile(measuredPath));
   } else if (!await fs.exists(opts.dbPath)) {
     measured = {};
@@ -160598,8 +161455,8 @@ function registerWorkflowCostCommand(workflow, context, deps = {}) {
   ].join(`
 `)).option("--workflow <name>", "restrict to a workflow (repeatable)", collect3, []).option("--by-state", "report per-state rows instead of per-workflow rows").option("--include-bookkeeping", "keep bookkeeping workflows in the default cohort").option("--since <YYYY-MM-DD>", "only runs created on/after this UTC date").option("--budget <file>", "run the pipeline budget gate against this budget file").option("--measured-file <json>", "with --budget: read measured values from this file instead of the DB").option(...SHARED_OPTIONS.json).action(async (options) => {
     const cwd = context.cwd;
-    const dbPath = join97(cwd, ".spur/spur.db");
-    const workflowsDir = join97(cwd, ".spur", "workflows");
+    const dbPath = join98(cwd, ".spur/spur.db");
+    const workflowsDir = join98(cwd, ".spur", "workflows");
     const openDb = deps.openDb ?? defaultDbOpener;
     try {
       if (options.budget !== undefined) {
@@ -160663,9 +161520,9 @@ init_run_summary_render();
 // ../../packages/app/src/workflow/persist-check.ts
 init_dist5();
 import { existsSync as existsSync33, readdirSync as readdirSync15, readFileSync as readFileSync30, statSync as statSync19 } from "fs";
-import { basename as basename22, dirname as dirname45, isAbsolute as isAbsolute16, join as join99, relative as relative20, resolve as resolve37 } from "path";
-var EVIDENCE_DIR = join99(".spur", "memory", "evidence");
-var RUN_DIR = join99(".spur", "run");
+import { basename as basename22, dirname as dirname45, isAbsolute as isAbsolute16, join as join100, relative as relative20, resolve as resolve37 } from "path";
+var EVIDENCE_DIR = join100(".spur", "memory", "evidence");
+var RUN_DIR = join100(".spur", "run");
 var NAMED_CAP = 32;
 var PREFIX_CAP = 64;
 var DURABLE_FAMILY_RE = /^\d{4}-(?:verdict|feature-verification)\.json$/;
@@ -160680,7 +161537,7 @@ function walkFiles(dir, root) {
   const out = [];
   const walk = (cur) => {
     for (const e of readdirSync15(cur, { withFileTypes: true }).sort((a, b) => a.name.localeCompare(b.name))) {
-      const p = join99(cur, e.name);
+      const p = join100(cur, e.name);
       if (e.isDirectory())
         walk(p);
       else if (e.isFile())
@@ -160707,8 +161564,8 @@ function listObligations(wtRoot, wbsList, runIds) {
   const prefixes = [...new Set([...wbsList, ...runIds].filter(Boolean))];
   if (prefixes.length === 0)
     return null;
-  const evFiles = walkFiles(join99(wtRoot, EVIDENCE_DIR), wtRoot);
-  const runFiles = walkFiles(join99(wtRoot, RUN_DIR), wtRoot);
+  const evFiles = walkFiles(join100(wtRoot, EVIDENCE_DIR), wtRoot);
+  const runFiles = walkFiles(join100(wtRoot, RUN_DIR), wtRoot);
   const files = [];
   const counts = new Map;
   if (!collectOwned(evFiles, prefixes, counts, files))
@@ -160725,13 +161582,13 @@ function compareTrees(wtRoot, invokeRoot, files, foreignDivergent = new Set) {
   for (const rel of files) {
     if (foreignDivergent.has(rel) || foreignDivergent.has(basename22(rel)))
       continue;
-    const invPath = join99(invokeRoot, rel);
+    const invPath = join100(invokeRoot, rel);
     if (!existsSync33(invPath)) {
       missing.push(rel);
       continue;
     }
     try {
-      if (readFileSync30(join99(wtRoot, rel)).equals(readFileSync30(invPath)))
+      if (readFileSync30(join100(wtRoot, rel)).equals(readFileSync30(invPath)))
         ok++;
       else
         divergent.push(rel);
@@ -160748,7 +161605,7 @@ function defaultInvokeRoot(cwd) {
   });
   const common = run.stdout.trim();
   if (run.exitCode === 0 && common)
-    return dirname45(isAbsolute16(common) ? common : join99(cwd, common));
+    return dirname45(isAbsolute16(common) ? common : join100(cwd, common));
   return cwd;
 }
 function readPersistOutSkips(candidates) {
@@ -160763,7 +161620,7 @@ function readPersistOutSkips(candidates) {
         for (const item of parsed.evidenceSkipped) {
           if (item.reason === "foreign-divergent" && typeof item.name === "string") {
             foreignDivergent.add(item.name);
-            foreignDivergent.add(join99(EVIDENCE_DIR, item.name));
+            foreignDivergent.add(join100(EVIDENCE_DIR, item.name));
           }
         }
       }
@@ -160796,8 +161653,8 @@ function runPersistCheck(input) {
   const invokeRoot = input.root === undefined ? defaultInvokeRoot(input.cwd) : resolve37(input.cwd, input.root);
   const { foreignDivergent, skips } = readPersistOutSkips([
     input.successJson === undefined || input.successJson === "" ? "" : resolve37(input.cwd, input.successJson),
-    join99(invokeRoot, ".spur", "run", "persist-out.json"),
-    join99(wtRoot, ".spur", "run", "persist-out.json")
+    join100(invokeRoot, ".spur", "run", "persist-out.json"),
+    join100(wtRoot, ".spur", "run", "persist-out.json")
   ].filter(Boolean));
   const obligations = listObligations(wtRoot, wbsList, runIds);
   if (obligations === null) {
@@ -161166,7 +162023,7 @@ init_src3();
 init_capability_attestation();
 init_src();
 init_dist7();
-import { join as join100 } from "path";
+import { join as join101 } from "path";
 import { createInterface } from "readline";
 import { setTimeout as sleep6 } from "timers/promises";
 var WORKFLOW_RUN_ACTIVE_ENV = "SPUR_WORKFLOW_RUN_ACTIVE";
@@ -161270,9 +162127,9 @@ async function writeWorkflowPlanArtifact(cwd, runId, resolved, secretValues, sta
     }))
   });
   const { mkdir, writeFile } = await import("fs/promises");
-  const artifactsDir = join100(cwd, ".spur", "run");
+  const artifactsDir = join101(cwd, ".spur", "run");
   await mkdir(artifactsDir, { recursive: true });
-  const artifactPath = join100(artifactsDir, `${runId}-workflow-plan.json`);
+  const artifactPath = join101(artifactsDir, `${runId}-workflow-plan.json`);
   await writeFile(artifactPath, payload);
   return artifactPath;
 }
@@ -161743,7 +162600,7 @@ function registerWorkflowSummaryCommand(workflow, context) {
 // src/commands/workflow/trace.ts
 init_src3();
 import { closeSync as closeSync11, fstatSync as fstatSync5, openSync as openSync11, readFileSync as readFileSync32, readSync as readSync3 } from "fs";
-import { join as join101 } from "path";
+import { join as join102 } from "path";
 import { setTimeout as sleep7 } from "timers/promises";
 function formatTraceList2(result) {
   if (result.entries.length === 0) {
@@ -161912,8 +162769,8 @@ function readRunLogChunk(logPath, offset) {
 async function followRunLog(service, runId, dir, pollMs, write, wait = (ms) => sleep7(ms), now = Date.now, deadlineMs) {
   const start = now();
   const deadline = deadlineMs === undefined ? Number.POSITIVE_INFINITY : start + deadlineMs;
-  const runDir = join101(dir, ".spur", "run");
-  const pendingMdPath = join101(runDir, `${runId}.md`);
+  const runDir = join102(dir, ".spur", "run");
+  const pendingMdPath = join102(runDir, `${runId}.md`);
   let logPath;
   let record = { kind: "missing" };
   let offset = 0;
@@ -162328,8 +163185,14 @@ function shouldRenderBanner(argv) {
     return false;
   if (argv[0] === "history" && argv[1] === "timeline")
     return false;
+  if (argv[0] === "builder" && argv[1] === "show-branches" && requestsJsonFormat(argv))
+    return false;
   return !argv.some((arg) => arg === "--no-logo" || arg === "--json" || arg === "--quiet" || arg === "--silent");
 }
+function requestsJsonFormat(argv) {
+  const index = argv.indexOf("--format");
+  return argv.includes("--format=json") || index !== -1 && argv[index + 1] === "json";
+}
 async function runCli() {
   const argv = process.argv.slice(2);
   if (shouldRenderBanner(argv)) {