@cspeach/cli 1.1.31 → 1.1.33

package/dist/tools/dispatch-skill.js

@@ -15,8 +15,9 @@
  *     user's keypress to make.
  *   - The command argument MUST start with a known slash route. Free
  *     text without a leading `/` is rejected.
- *   - Set the slot via ctx.pendingDispatch.set(command). repl.tsx reads
- *     it after runTurn and routes as the next submission.
+ *   - Set the slot via ctx.pendingDispatch.set(command, { by: 'switch', … }).
+ *     repl.tsx reads it after runTurn and routes it as the next submission,
+ *     shown as "Auto-routed: <command>" — never as the person's own line.
  *   - Skill ends the turn naturally after this tool call. Do not also
  *     emit a "Type X at the next prompt" hint — the dispatch supersedes it.
  *
@@ -32,7 +33,7 @@
  * for every other dispatch (e.g. /abap-generate → /abap-rap switch).
  */
 import { registerTool } from './index.js';
-import { isPlanResumeCommand } from '../commands/plan-resume.js';
+import { autoRoutedNotice, isPlanResumeCommand } from '../commands/plan-resume.js';
 export const PLAN_RESUME_DISPATCH_REASON = 'Do not dispatch /abap-plan --resume. When your plan manifest is saved, CSPeach runs the next step itself with the exact saved file. Simply end the turn now.';
 registerTool({
     name: 'dispatch_skill',
@@ -91,7 +92,10 @@ registerTool({
                 }),
             };
         }
-        ctx.pendingDispatch.set(command);
+        // Must-fix follow-up (b): the person agreed to the switch, but the model
+        // wrote the command, so it is never shown as theirs ("You › …"). Tagged
+        // `switch`, both REPLs show its one "Auto-routed:" line (queuedStepView).
+        ctx.pendingDispatch.set(command, { by: 'switch', line: autoRoutedNotice(command) ?? `Auto-routed: ${command}` });
         return {
             content: JSON.stringify({
                 ok: true,

package/dist/tools/lane/app-lane-resolve.js

@@ -284,7 +284,7 @@ export async function appLaneResolveHandler(args, ctx, deps = {}) {
         ctx.chunkEmitter?.emit('info', `Lane chosen by the rules (no confirm card in this terminal): ${shown}.`);
     }
     if (flow?.specGapPath && planCmd) {
-        ctx.pendingDispatch?.set(planCmd);
+        ctx.pendingDispatch?.set(planCmd, { by: 'app' }); // audit M-2: CSPeach's step, never shown as typed
         lines.push('Next: the plan is being created.');
     }
     else if (flow?.specGapPath && headless) {

package/dist/tools/project/rules_propose.js

@@ -0,0 +1,59 @@
+/**
+ * rules_propose — read-only (step 2, Task 10, optional step; spec 2026-10-08 §7 D7).
+ *
+ * "Rule from words": the person says a rule in words, the model turns it into
+ * the decision-rule shape and calls this. Code checks it with register-core's
+ * strict reader against the team project's rules and says it back in plain
+ * words. Nothing is written: the proposal is kept in this process, and the
+ * person saves it from `/rules` (Add the proposed rule → card → Save), lead
+ * only. The model never writes the rules.
+ */
+import { readDecisionRules } from '@cspeach/register-core';
+import { registerTool } from '../index.js';
+import { activeProject, readProjectFile, RegisterError } from '../../register/store.js';
+import { addProposed, ruleWords } from '../../register/rules-edit.js';
+import { setRuleProposal } from '../../register/rule-proposal.js';
+export async function rulesProposeHandler(args, _ctx) {
+    const joined = activeProject();
+    if (!joined)
+        return { content: 'This laptop has not joined a team project. The developer runs: cspeach team join <folder>', is_error: true };
+    try {
+        const project = readProjectFile(joined.projectDir);
+        const current = readDecisionRules(project);
+        if (current.warning)
+            return { content: `${current.warning} Nothing can be added until the file is fixed or the rules are restored (/rules → Restore defaults).`, is_error: true };
+        const edit = addProposed(current.rules, args.rule, { by: 'proposed', at: new Date(0).toISOString() });
+        const rule = edit.after;
+        const { id: _id, on: _on, changedBy: _by, changedAt: _at, ...proposal } = rule;
+        setRuleProposal({ projectId: joined.projectId, proposal, words: ruleWords(rule) });
+        return {
+            content: JSON.stringify({
+                ok: true, id: rule.id, words: ruleWords(rule), note: rule.note, saved: false,
+                next: 'Nothing is saved. Tell the person: open /rules and pick "Add the proposed rule"; it is saved only when they press Save (the lead only). New rules go last: the first rule that is on and holds decides.',
+            }),
+        };
+    }
+    catch (e) {
+        if (e instanceof RegisterError)
+            return { content: e.message, is_error: true };
+        throw e;
+    }
+}
+registerTool({
+    name: 'rules_propose',
+    description: 'Read-only. Check a decision rule the person described in words, for the team project this laptop joined. '
+        + 'Give it as { when: { types?, levelNow?, targetAtMost?, minFindings?, maxFindings?, findingClasses?, onlyClasses?, findingRules? (rule-id prefixes, e.g. SEARCH_PROBLEMATIC_STATEMENTS_FOR_ALV_CALLS), callers?, noOpenForTarget? }, '
+        + 'then: { disposition: keep|fix|rebuild|retire-candidate, target? }, note }. Returns the rule in plain words or why it cannot be read. '
+        + 'Never saves: the person saves it from /rules. No SAP call.',
+    isMutating: false,
+    category: 'project',
+    requiresSap: false,
+    input_schema: {
+        type: 'object',
+        properties: {
+            rule: { type: 'object', description: 'The proposed rule: { when, then, note }. Any id, on or changedBy given is ignored.' },
+        },
+        required: ['rule'],
+    },
+    handler: (args, ctx) => rulesProposeHandler(args, ctx),
+});

package/dist/tools/project/team_findings.js

@@ -12,11 +12,17 @@
  * While a journey triage is queued in the session, only the page the journey
  * handed out (journey/flow.ts, at most 40 keys) is shown: the skill needs no
  * change to work in pages.
+ *
+ * Decision rules (step 2, D6): every row carries `ruleProposal` — the first
+ * rule of the team project (or the defaults) that decides it, or null when no
+ * rule does and the row is CSPeach's judgement. Rules the file names but this
+ * build cannot read give `rulesWarning` (one line) and the defaults.
  */
-import { dispositionOf, DISPOSITION_WORD, inLane } from '@cspeach/register-core';
+import { dispositionOf, DISPOSITION_WORD, inLane, readDecisionRules, } from '@cspeach/register-core';
 import { registerTool } from '../index.js';
 import { findingsByObject, shownUpTo } from '../../register/findings.js';
 import { registerFor } from '../../register/picture.js';
+import { ruleProposalOf } from '../../register/decision-rules.js';
 import { activeProject, readProjectFile } from '../../register/store.js';
 import { shown } from '../../register/atc-file.js';
 import { journeyPage } from '../../journey/flow.js';
@@ -93,6 +99,7 @@ export async function teamFindingsHandler(args, ctx) {
         const slice = objects.slice(start, start + limit);
         const more = objects.length - start - slice.length;
         const findings = findingsByObject(joined.projectDir, joined.outboxDir);
+        const rules = readDecisionRules(project);
         const list = slice.map((o) => {
             const f = findings.get(o.key);
             const d = dispositionOf(o.decision);
@@ -108,12 +115,15 @@ export async function teamFindingsHandler(args, ctx) {
                 lastChanged: o.evidence.changed?.at ? shownUpTo(o.evidence.changed.at, 30) : null,
                 retireCandidate: o.retireCandidate,
                 priority: { band: o.priority.effective.band, source: o.priority.effective.source },
+                // The rule that decides this row, from the latest counted run's findings; null = no rule decides.
+                ruleProposal: ruleProposalOf(o, f, rules.rules),
             };
         });
         return {
             content: JSON.stringify({
                 teamProject: project.name, scope, objects: list,
                 ...(page ? { journey: JOURNEY_NOTE } : {}),
+                ...(rules.warning ? { rulesWarning: rules.warning } : {}),
                 ...(more > 0 ? { more } : {}),
                 ...(paged && more > 0 && slice.length ? { next: slice[slice.length - 1].key } : {}),
             }),
@@ -127,7 +137,8 @@ registerTool({
     name: 'team_findings',
     description: 'Read-only. The objects of a lane (or package patterns) in the team project this laptop joined, with the findings '
         + 'measurement zero recorded for each, any decision already recorded, and per object: usage (state and source), callers from the '
-        + 'index (or why they were not read), last change (a change, not use), whether it is a retire candidate, and its priority. '
+        + 'index (or why they were not read), last change (a change, not use), whether it is a retire candidate, its priority, and '
+        + 'ruleProposal: the decision rule that decides the row (null = no rule decides; your judgement). '
         + 'Use it for a /abap-clean-core triage. No SAP call.',
     isMutating: false,
     category: 'project',

package/dist/upgrade-check.js

@@ -3,7 +3,9 @@ import { loadConfig } from './config/loader.js';
 import { CLI_VERSION } from './lib/version.js';
 import { getStore } from './auth/api-key.js';
 import { brandSettled } from './renderer/brand-settled.js';
-function compareVersions(a, b) {
+import { ManifestClient, DEFAULT_MANIFEST_URL } from './skills/manifest-client.js';
+import { asRunEntries, runsFloor } from './runs/manifest-runs.js';
+export function compareVersions(a, b) {
     const pa = a.split('.').map(Number);
     const pb = b.split('.').map(Number);
     for (let i = 0; i < 3; i++) {
@@ -24,19 +26,20 @@ function compareVersions(a, b) {
  * GET with the bearer and read the body field (the header is still honoured
  * should the proxy add it); not signed in → skip (a 401 tells us nothing).
  * The warning goes to stderr so one-shot stdout stays the answer only.
+ * Returns true when it printed.
  */
-export async function checkForUpgrade() {
+async function checkSkillFloor() {
     try {
         const cfg = await loadConfig();
         const key = await (await getStore()).get();
         if (!key)
-            return;
+            return false;
         const r = await fetch(`${cfg.proxy_url}/v1/skills/abap-radar`, {
             headers: { Authorization: `Bearer ${key}` },
             signal: AbortSignal.timeout(3000),
         });
         if (!r.ok)
-            return;
+            return false;
         let minCli = r.headers.get('x-skill-min-cli-version');
         if (!minCli) {
             const body = (await r.json().catch(() => null));
@@ -52,7 +55,49 @@ export async function checkForUpgrade() {
                 text: `This CSPeach (${current}) is older than the minimum (${minCli})`,
                 next: 'cspeach --upgrade',
             }).trimEnd());
+            return true;
         }
+        return false;
+    }
+    catch {
+        // Offline, keychain unavailable or proxy down — never block startup.
+        return false;
+    }
+}
+/**
+ * Guided runs (2026-10-09, spec §3.2): a run's min_cli_version comes from the
+ * signed manifest's runs[]; an older CLI gets the same "!" line a skill gives.
+ * Returns true when it printed. Any failure (offline, unsigned, malformed) is silent.
+ */
+async function checkRunsFloor(deps) {
+    try {
+        const read = deps.fetchManifest ?? (() => new ManifestClient(DEFAULT_MANIFEST_URL).fetchAndVerifyManifest());
+        // The race caps the WAIT at 3 s; the underlying fetch keeps its own 10 s
+        // timeout (manifest-client.ts:32) and may outlive this call — harmless:
+        // nothing awaits it, and the process exit path does not wait for it (M-9).
+        const m = await Promise.race([read(), new Promise((_, rej) => { const t = setTimeout(() => rej(new Error('manifest timeout')), 3000); t.unref?.(); })]);
+        const floor = runsFloor(asRunEntries(m.runs), CLI_VERSION);
+        if (!floor)
+            return false;
+        await brandSettled();
+        console.error('\n' + formatAttention({
+            text: `This CSPeach (${CLI_VERSION}) is older than the guided run '${floor.name.replace(/^run-/, '')}' needs (${floor.min})`,
+            next: 'cspeach --upgrade',
+        }).trimEnd());
+        return true;
+    }
+    catch {
+        return false;
+    }
+}
+export async function checkForUpgrade(deps = {}) {
+    try {
+        const key = await (await getStore()).get();
+        if (!key)
+            return;
+        const printed = await checkSkillFloor();
+        if (!printed)
+            await checkRunsFloor(deps);
     }
     catch {
         // Offline, keychain unavailable or proxy down — never block startup.

package/package.json

@@ -1,120 +1,120 @@
-{
-  "name": "@cspeach/cli",
-  "version": "1.1.31",
-  "description": "CSPeach — AI-assisted ABAP development CLI. Direct SAP access, 34 skills, safety gates.",
-  "keywords": [
-    "abap",
-    "sap",
-    "ai",
-    "cli",
-    "ai-assisted-development",
-    "s4hana",
-    "abap-development",
-    "claude",
-    "anthropic"
-  ],
-  "homepage": "https://cspeach.dev",
-  "bugs": {
-    "email": "laeeq.siddique@cremencing.com"
-  },
-  "author": "Laeeq Siddique (Cremencing Solutions)",
-  "license": "SEE LICENSE IN LICENSE",
-  "private": false,
-  "publishConfig": {
-    "access": "public"
-  },
-  "type": "module",
-  "bin": {
-    "cspeach": "dist/index.js"
-  },
-  "scripts": {
-    "dev": "tsx src/index.ts",
-    "prebuild": "tsx scripts/prebuild.ts",
-    "build": "tsc && node scripts/make-bin-executable.js",
-    "install:global": "tsx scripts/install-global.ts",
-    "pretest": "tsx scripts/sync-signing-key.ts || node -e \"console.warn('WARN: sync-signing-key skipped — using stub')\"",
-    "start": "node dist/index.js",
-    "typecheck": "tsc --noEmit",
-    "test": "vitest run",
-    "test:watch": "vitest",
-    "test:smoke-e2e": "vitest run --config vitest.smoke-e2e.config.ts",
-    "adt:smoke": "tsx scripts/adt-smoke.ts",
-    "smoke:all": "pnpm adt:smoke",
-    "bench:models": "tsx scripts/bench-models.ts",
-    "bench:audit": "tsx scripts/bench-audit-task.ts",
-    "bench:replay": "tsx bench/replay/run.ts",
-    "fiori": "tsx src/tools/fiori/bin.ts",
-    "prepare": "husky",
-    "prepublishOnly": "node -e \"const deps=require('./package.json').dependencies||{}; for (const n of ['@cspeach/sap-client','@cspeach/register-core']) { const d=deps[n]||''; if(d.startsWith('file:')||d.startsWith('link:')){console.error('publish blocked: '+n+' is a local link ('+d+') — point it at the published version before npm publish'); process.exit(1)} }\""
-  },
-  "engines": {
-    "node": ">=20.0.0"
-  },
-  "dependencies": {
-    "@anthropic-ai/sdk": "^0.90.0",
-    "@cspeach/register-core": "0.3.0",
-    "@cspeach/sap-client": "0.1.17",
-    "@iarna/toml": "^2.2.5",
-    "@inkjs/ui": "^2.0.0",
-    "@inquirer/prompts": "^7.0.0",
-    "@napi-rs/keyring": "2.1.0",
-    "@noble/ed25519": "2.1.0",
-    "@noble/hashes": "1.4.0",
-    "@sap-ux/annotation-converter": "0.10.21",
-    "@sap-ux/edmx-parser": "0.10.0",
-    "@sap-ux/fe-fpm-writer": "0.43.7",
-    "@sap-ux/fiori-elements-writer": "^3.0.39",
-    "@sap-ux/fiori-freestyle-writer": "3.0.12",
-    "@sap-ux/vocabularies-types": "0.15.0",
-    "adm-zip": "0.5.17",
-    "chalk": "^5.3.0",
-    "cli-highlight": "^2.1.11",
-    "cli-table3": "^0.6.5",
-    "clipboardy": "^5.3.1",
-    "cross-spawn": "^7.0.6",
-    "diff": "^9.0.0",
-    "ejs": "3.1.10",
-    "fuse.js": "^7.0.0",
-    "ink": "^5.0.0",
-    "ink-text-input": "^6.0.0",
-    "jose": "^5.9.0",
-    "mammoth": "^1.8.0",
-    "marked": "^11.2.0",
-    "marked-terminal": "^6.2.0",
-    "mem-fs": "2.1.0",
-    "mem-fs-editor": "9.4.0",
-    "node-machine-id": "^1.1.12",
-    "openai": "^6.49.0",
-    "puppeteer-core": "24.10.2",
-    "react": "^18.3.0",
-    "string-width": "^7.2.0",
-    "turndown": "^7.2.0",
-    "unpdf": "1.7.0",
-    "zod": "^3.23.0"
-  },
-  "devDependencies": {
-    "@sap-ux/ui5-middleware-fe-mockserver": "2.4.17",
-    "@types/adm-zip": "0.5.8",
-    "@types/cross-spawn": "^6.0.6",
-    "@types/diff": "^7.0.2",
-    "@types/ejs": "^3.1.5",
-    "@types/node": "^20.17.0",
-    "@types/react": "^18.3.0",
-    "@types/turndown": "^5.0.5",
-    "@ui5/builder": "4.3.2",
-    "@ui5/fs": "4.0.6",
-    "docx": "^9.0.2",
-    "husky": "^9.1.7",
-    "ink-testing-library": "^4.0.0",
-    "pdf-lib": "^1.17.1",
-    "strip-ansi": "6.0.1",
-    "tsx": "^4.19.0",
-    "typescript": "^5.7.0",
-    "vitest": "^2.1.0"
-  },
-  "pnpm": {
-    "onlyBuiltDependencies": [
-      "esbuild"
-    ]
-  }
-}
+{
+  "name": "@cspeach/cli",
+  "version": "1.1.33",
+  "description": "CSPeach — AI-assisted ABAP development CLI. Direct SAP access, 34 skills, safety gates.",
+  "keywords": [
+    "abap",
+    "sap",
+    "ai",
+    "cli",
+    "ai-assisted-development",
+    "s4hana",
+    "abap-development",
+    "claude",
+    "anthropic"
+  ],
+  "homepage": "https://cspeach.dev",
+  "bugs": {
+    "email": "laeeq.siddique@cremencing.com"
+  },
+  "author": "Laeeq Siddique (Cremencing Solutions)",
+  "license": "SEE LICENSE IN LICENSE",
+  "private": false,
+  "publishConfig": {
+    "access": "public"
+  },
+  "type": "module",
+  "bin": {
+    "cspeach": "dist/index.js"
+  },
+  "scripts": {
+    "dev": "tsx src/index.ts",
+    "prebuild": "tsx scripts/prebuild.ts",
+    "build": "tsc && node scripts/make-bin-executable.js",
+    "install:global": "tsx scripts/install-global.ts",
+    "pretest": "tsx scripts/sync-signing-key.ts || node -e \"console.warn('WARN: sync-signing-key skipped — using stub')\"",
+    "start": "node dist/index.js",
+    "typecheck": "tsc --noEmit",
+    "test": "vitest run",
+    "test:watch": "vitest",
+    "test:smoke-e2e": "vitest run --config vitest.smoke-e2e.config.ts",
+    "adt:smoke": "tsx scripts/adt-smoke.ts",
+    "smoke:all": "pnpm adt:smoke",
+    "bench:models": "tsx scripts/bench-models.ts",
+    "bench:audit": "tsx scripts/bench-audit-task.ts",
+    "bench:replay": "tsx bench/replay/run.ts",
+    "fiori": "tsx src/tools/fiori/bin.ts",
+    "prepare": "husky",
+    "prepublishOnly": "node -e \"const deps=require('./package.json').dependencies||{}; for (const n of ['@cspeach/sap-client','@cspeach/register-core']) { const d=deps[n]||''; if(d.startsWith('file:')||d.startsWith('link:')){console.error('publish blocked: '+n+' is a local link ('+d+') — point it at the published version before npm publish'); process.exit(1)} }\""
+  },
+  "engines": {
+    "node": ">=20.0.0"
+  },
+  "dependencies": {
+    "@anthropic-ai/sdk": "^0.90.0",
+    "@cspeach/register-core": "0.4.0",
+    "@cspeach/sap-client": "0.1.18",
+    "@iarna/toml": "^2.2.5",
+    "@inkjs/ui": "^2.0.0",
+    "@inquirer/prompts": "^7.0.0",
+    "@napi-rs/keyring": "2.1.0",
+    "@noble/ed25519": "2.1.0",
+    "@noble/hashes": "1.4.0",
+    "@sap-ux/annotation-converter": "0.10.21",
+    "@sap-ux/edmx-parser": "0.10.0",
+    "@sap-ux/fe-fpm-writer": "0.43.7",
+    "@sap-ux/fiori-elements-writer": "^3.0.39",
+    "@sap-ux/fiori-freestyle-writer": "3.0.12",
+    "@sap-ux/vocabularies-types": "0.15.0",
+    "adm-zip": "0.5.17",
+    "chalk": "^5.3.0",
+    "cli-highlight": "^2.1.11",
+    "cli-table3": "^0.6.5",
+    "clipboardy": "^5.3.1",
+    "cross-spawn": "^7.0.6",
+    "diff": "^9.0.0",
+    "ejs": "3.1.10",
+    "fuse.js": "^7.0.0",
+    "ink": "^5.0.0",
+    "ink-text-input": "^6.0.0",
+    "jose": "^5.9.0",
+    "mammoth": "^1.8.0",
+    "marked": "^11.2.0",
+    "marked-terminal": "^6.2.0",
+    "mem-fs": "2.1.0",
+    "mem-fs-editor": "9.4.0",
+    "node-machine-id": "^1.1.12",
+    "openai": "^6.49.0",
+    "puppeteer-core": "24.10.2",
+    "react": "^18.3.0",
+    "string-width": "^7.2.0",
+    "turndown": "^7.2.0",
+    "unpdf": "1.7.0",
+    "zod": "^3.23.0"
+  },
+  "devDependencies": {
+    "@sap-ux/ui5-middleware-fe-mockserver": "2.4.17",
+    "@types/adm-zip": "0.5.8",
+    "@types/cross-spawn": "^6.0.6",
+    "@types/diff": "^7.0.2",
+    "@types/ejs": "^3.1.5",
+    "@types/node": "^20.17.0",
+    "@types/react": "^18.3.0",
+    "@types/turndown": "^5.0.5",
+    "@ui5/builder": "4.3.2",
+    "@ui5/fs": "4.0.6",
+    "docx": "^9.0.2",
+    "husky": "^9.1.7",
+    "ink-testing-library": "^4.0.0",
+    "pdf-lib": "^1.17.1",
+    "strip-ansi": "6.0.1",
+    "tsx": "^4.19.0",
+    "typescript": "^5.7.0",
+    "vitest": "^2.1.0"
+  },
+  "pnpm": {
+    "onlyBuiltDependencies": [
+      "esbuild"
+    ]
+  }
+}

package/.cspeach/project.json

@@ -1,4 +0,0 @@
-{
-  "id": "032010b3",
-  "createdAt": "2026-10-08T22:43:38.438Z"
-}