scrumrun 2.7.3 → 2.7.5

package/CHANGELOG.md

@@ -4,6 +4,22 @@ All notable changes follow Semantic Versioning.
 
 ## Unreleased
 
+## 2.7.5 - 2026-08-22
+
+### Added
+
+- **Project-root discovery.** The `sc` CLI now walks up from the current directory to find the nearest `.scrumrun/method.json`, so commands run from any subdirectory (e.g. `app/front`) operate on the project root instead of failing with a cryptic "Mutation Gateway requires a valid method.json" error. `sc config init` and `sc-init` still initialize in the current directory.
+
+### Fixed
+
+- **Missing-project error.** `sc plan task --add` now reports a clear "ScrumRun project not found" message (with `scrumrun init` / run-from-root guidance) instead of leaking an internal ENOENT, and no longer leaves a stray `.scrumrun/.cache` lock directory behind when the command is run outside a project.
+
+## 2.7.4 - 2026-08-22
+
+### Fixed
+
+- **Approval token truncated in interactive intake.** The pretty terminal renderer was shrinking the approval command to the first 20 characters of the token, so a copy-pasted `sc plan intake --approve …` failed with "Approval token is malformed or was modified." The full token now renders wrapped across lines (copyable, no ellipsis), and `decodeApproval` strips surrounding/interstitial whitespace so pasted tokens with line breaks or spaces still validate.
+
 ## 2.7.3 - 2026-08-22
 
 ### Added

package/README.md

@@ -4,7 +4,7 @@
 
 ScrumRun gives an agent a small command surface and a precise project memory: what should be done, how each attempt happened, which decisions constrain the code, and why the architecture exists in its current form.
 
-**Package:** `2.7.3` · **Method target:** `2.0.0` · **Runtime:** Node.js `>=22.13.0` · **License:** MIT
+**Package:** `2.7.5` · **Method target:** `2.0.0` · **Runtime:** Node.js `>=22.13.0` · **License:** MIT
 
 **New here?** Read the [Quickstart](docs/QUICKSTART.md) — first Run in under 10 minutes, no `SPEC.md` reading required. Full docs map in [`docs/INDEX.md`](docs/INDEX.md).
 

package/bin/scrumrun.js

@@ -1198,6 +1198,25 @@ function v2Project(cwd = process.cwd()) {
   }
 }
 
+function findProjectRoot(startDir = process.cwd()) {
+  let dir = path.resolve(startDir);
+  while (true) {
+    const marker = path.join(dir, ".scrumrun", "method.json");
+    if (fs.existsSync(marker) && !fs.lstatSync(marker).isSymbolicLink() && fs.lstatSync(marker).isFile()) {
+      return dir;
+    }
+    const parent = path.dirname(dir);
+    if (parent === dir) return null;
+    dir = parent;
+  }
+}
+
+function chdirToProjectRoot() {
+  const root = findProjectRoot();
+  if (root && root !== process.cwd()) process.chdir(root);
+  return root;
+}
+
 function optionValues(args, flag) {
   const values = [];
   for (let index = 0; index < args.length; index++) {
@@ -1644,6 +1663,7 @@ function runRoot(parts) {
     process.exitCode = 1;
     return;
   }
+  if (!(route.noun === "config" && route.subject === "init")) chdirToProjectRoot();
   return executeRootRoute(route);
 }
 
@@ -1652,6 +1672,7 @@ function runCompatibilityAlias(alias, parts) {
   console.warn(`Deprecated: ${alias} now executes /sc ${route.noun} ${route.subject}.`);
   if (route.note) console.warn(route.note);
   if (alias === "sc-backlog") return runBacklog(parts);
+  if (alias !== "sc-init") chdirToProjectRoot();
   return executeRootRoute({ type: "route", noun: route.noun, subject: route.subject, args: route.args });
 }
 

package/lib/commands/pretty-intake.js

@@ -89,6 +89,15 @@ function wrap(text, width) {
   return lines.length ? lines : [""];
 }
 
+function hardWrap(text, width) {
+  const source = String(text || "");
+  const lines = [];
+  for (let index = 0; index < source.length; index += width) {
+    lines.push(source.slice(index, index + width));
+  }
+  return lines.length ? lines : [""];
+}
+
 function boxTop(width, title) {
   const label = ` ${title} `;
   const remaining = width - visibleLength(label) - 4;
@@ -154,16 +163,6 @@ function fieldLine(label, value, width, valueColor = FG.white, labelColor = FG.g
   return rendered;
 }
 
-function commandBox(interiorWidth, command) {
-  const inside = ` $ ${command} `;
-  const boxWidth = Math.min(interiorWidth, visibleLength(inside) + 4);
-  const top = paint(DIM_ACID_FG, `┌${"─".repeat(boxWidth - 2)}┐`);
-  const bottom = paint(DIM_ACID_FG, `└${"─".repeat(boxWidth - 2)}┘`);
-  const content = padEnd(inside, boxWidth - 2);
-  const middle = `${paint(DIM_ACID_FG, "│")}${paint(ACID_FG, content)}${paint(DIM_ACID_FG, "│")}`;
-  return [top, middle, bottom];
-}
-
 function pipelineDetail(stage, plan) {
   if (stage === "POLICY") {
     return `${plan.policy.checked.length} checked · ${plan.policy.deferred.length} deferred`;
@@ -240,16 +239,15 @@ function renderIntake(plan) {
       }
     }
   } else if (plan.approvalToken) {
-    const command = `scrumrun sc plan intake --approve ${plan.approvalToken}`;
-    const truncated = command.length > width - 8 ? `scrumrun sc plan intake --approve ${plan.approvalToken.slice(0, 20)}…` : command;
-    for (const boxRow of commandBox(width - 6, truncated)) {
-      lines.push(boxLine(width, `  ${boxRow}`));
+    const command = "scrumrun sc plan intake --approve";
+    const tokenWidth = Math.max(16, width - 8);
+    lines.push(boxLine(width, `  ${paint(FG.gray, "APPROVE · copy the command below to create Task + Run")}`));
+    lines.push(boxLine(width, `  ${paint(ACID_FG, "$")} ${paint(FG.white, command)}`));
+    for (const chunk of hardWrap(plan.approvalToken, tokenWidth)) {
+      lines.push(boxLine(width, `    ${paint(DIM_ACID_FG, chunk)}`));
     }
     lines.push(boxBlank(width));
     lines.push(boxLine(width, `  ${paint(FG.gray, "[ awaiting owner approval ]")}`));
-    if (command.length !== truncated.length) {
-      lines.push(boxLine(width, `  ${paint(FG.gray, "(full token above is truncated for display; copy from --json if needed)")}`));
-    }
   }
   lines.push(boxBlank(width));
   lines.push(boxBottom(width));

package/lib/runtime/orchestrator.js

@@ -521,6 +521,10 @@ function addPlanArtifactUnlocked(projectRoot, kind, label, { type = null, status
 
 function addPlanArtifact(projectRoot, kind, label, options = {}) {
   const scrumDir = path.join(projectRoot, ".scrumrun");
+  const methodFile = path.join(scrumDir, "method.json");
+  if (!fs.existsSync(methodFile) || !fs.lstatSync(methodFile).isFile()) {
+    throw new Error(`ScrumRun project not found in ${projectRoot}. Run \`scrumrun init\` there, or run this command from inside the project.`);
+  }
   return withArtifactLock(scrumDir, "create", () => addPlanArtifactUnlocked(projectRoot, kind, label, options));
 }
 

package/lib/runtime/request-engine.js

@@ -82,7 +82,8 @@ function encodeApproval(plan) {
 }
 
 function decodeApproval(token) {
-  const [encoded, checksum, extra] = String(token || "").split(".");
+  const cleaned = String(token || "").replace(/\s+/g, "");
+  const [encoded, checksum, extra] = cleaned.split(".");
   if (!encoded || !checksum || extra || sha256(`scrumrun-v2-approval\0${encoded}`) !== checksum) {
     throw new Error("Approval token is malformed or was modified.");
   }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "scrumrun",
-  "version": "2.7.3",
+  "version": "2.7.5",
   "description": "Evidence-driven Agile runtime and semantic project memory for AI coding agents.",
   "bin": {
     "scrumrun": "bin/scrumrun.js",