@sublang/playbook 10.0.0 → 12.0.0

package/README.md

@@ -63,7 +63,7 @@ playbook
 Type a task, enter `/code <task>` for implementation, or enter
 `/decide <question>` for an independently proposed and reviewed decision.
 
-On first launch, Playbook writes its config to `${XDG_CONFIG_HOME:-$HOME/.config}/playbook/playbook.config.yaml`.
+On first launch, Playbook writes its config to `${SPEX_HOME:-$HOME/.spex}/playbook/playbook.config.yaml`. A config left at the former `${XDG_CONFIG_HOME:-$HOME/.config}/playbook/playbook.config.yaml` is moved there on the next launch, unless a relative primary locator would change targets; that case is rejected unchanged with absolute replacements.
 
 The same config, compiled Captain, enabled playbooks, stable players, and
 nested calls power headless turns. Both front ends create the same durable

package/docs/cli.md

@@ -105,8 +105,8 @@ its exit status or signal and exit `127` when it cannot be spawned
 
 The Boss pane starts at the Playbook Captain shell, where the session
 Captain runs for the whole session and sees every turn. Use `/code`,
-`/review`, or `/decide` followed by a task to select one of the bundled
-playbooks explicitly. A registered command resolves deterministically,
+`/review`, `/decide`, or `/dev` followed by a task to select one of the
+bundled playbooks explicitly. A registered command resolves deterministically,
 with no model call parsing it: at idle it starts that playbook, at its
 own leaf it delivers the rest of the line, an enabled command absent
 from the active path switches to it, and a bare command answers with
@@ -121,9 +121,11 @@ untouched
 ([[playbook-captain-1](https://github.com/sublang-ai/playbook/blob/main/specs/packages/playbook-captain.md#playbook-captain-1)],
 [[playbook-captain-2](https://github.com/sublang-ai/playbook/blob/main/specs/packages/playbook-captain.md#playbook-captain-2)]).
 
-The current CODE, REVIEW, and DECIDE workflows take their deterministic
+The current CODE, REVIEW, DECIDE, and DEV workflows take their deterministic
 initial event from the selecting Boss turn. CODE and DECIDE then call REVIEW
-as a nested playbook. Local role names do not imply continuity: each frame
+as a nested playbook, while DEV — the repository-aware planner behind
+`/dev` — analyzes a development request and itself calls CODE, or DECIDE and
+then CODE, as nested playbooks. Local role names do not imply continuity: each frame
 uses the exact stable player IDs configured under its `roles` map. Equal IDs
 share one pane and provider conversation across nested and later root
 engagements; distinct IDs remain isolated even when their agent settings are
@@ -188,7 +190,7 @@ The former positional `<from>`, `resume`, `--player`, `--captain`,
 `--option`, `--cwd`, `--last`, run-only `--config`, and top-level `run:`
 config are removed from `playbook run`. Enable a registry under `playbooks`,
 declare provider agents once under top-level `players`, bind every local role
-under `playbooks.<id>.roles`, tune compatible model and effort in a `--with`
+under `playbooks.<id>.roles`, tune compatible model, effort, and fast mode in a `--with`
 overlay, invoke the effective `/command`, and run from the working directory
 you want agents to use. Legacy `playbooks.<id>.players` blocks are rejected and
 are not auto-migrated because choosing equal or distinct new player IDs chooses
@@ -231,12 +233,13 @@ module's directory is a git repository, add `node_modules/` to its
 
 ### Continuing a Captain session
 
-Interactive and headless commands write the same logical-session records under
-`${XDG_STATE_HOME:-$HOME/.local/state}/playbook/sessions/`. A fresh interactive
-child persists turn zero before printing `playbook: session <id>` and opening
-Boss input; a fresh headless turn returns the same kind of ID in `--json`.
-After the current writer exits or explicitly hands off, either presentation
-can reopen either origin:
+Interactive and headless commands write the same logical-session records in
+the configured [`sessions` directory](configuration.md#session-storage), whose
+default is `${XDG_STATE_HOME:-$HOME/.local/state}/playbook/sessions/`. A fresh
+interactive child persists turn zero before printing `playbook: session <id>`
+and opening Boss input; a fresh headless turn returns the same kind of ID in
+`--json`. After the current writer exits or explicitly hands off, either
+presentation can reopen either origin:
 
 ```sh
 # Reopen the newest session stored for this working directory headlessly:
@@ -265,20 +268,64 @@ competing front end fails closed instead of forking the history.
 An ordinary reopen reads current config and any opening `--with` fragments,
 projects them to the stored catalog and player roster, and requires the stored
 role bindings plus every structural setting to remain exact. Compatible
-current `model` and `effort` selections apply to the next call, including an
-explicit boolean `false` provider-default reset. The retained provider token
-is never silently replaced by a fresh conversation if that selection is not
-supported
+current `model`, `effort`, and optional `fastMode` settings apply to the next
+call. Boolean `false` explicitly resets model or effort to the provider
+default, but `fastMode: false` is a literal disabled request; omission selects
+the fast-mode provider default or inherits the player value at a role binding.
+The retained provider token is never silently replaced by a fresh conversation
+if a requested setting is not supported
 ([[playbook-cli-22](https://github.com/sublang-ai/playbook/blob/main/specs/packages/playbook-cli.md#playbook-cli-22)],
 [DR-032](https://github.com/sublang-ai/playbook/blob/main/specs/decisions/032-explicit-roles-session-players.md)).
 
+### Following replay history
+
+Beside each `<session-id>.json` manifest, both front ends tee every observed
+host record in order to `<session-id>.records.jsonl`. Each complete line is a
+version-1 envelope with a writer-assigned sequence contiguous from `1`, the
+opaque record, and an optional local playbook role where the trace establishes
+one unambiguously. The stream is a mode-`0600` regular non-symlink file inside
+the private sessions directory. Readers consume only the complete
+newline-terminated prefix; a final partial line is not presented as a record.
+
+The replay projection recursively removes provider `resumeToken` fields and
+string-valued `resume` selections while preserving `resume: false`. It is
+therefore useful for following and presentation, but it cannot resume an agent
+conversation and does not replace the private canonical manifest. External
+hosts can follow this stream without taking the writer lease through the
+published [`@sublang/playbook/session-store`
+facade](embedding.md#sharing-the-cli-session-store).
+
+Streams are unbounded in this version: neither front end prunes them, and
+retention remains tied to the deferred session-deletion policy. Removing
+provider credentials does not make the remaining replay content non-sensitive;
+protect the prompts, replies, tool calls, events, and timestamps it contains as
+sensitive session data.
+
+Replay recording is fail-soft after the canonical session lease is valid. If
+initialization, sanitization, append, repair, publication synchronization, or a
+checkpoint fails, recording stops for that lease without changing the agent
+turn, durable session settlement, reply, or exit outcome. The headless command
+attempts this warning once on stderr:
+
+```text
+playbook run: warning: replay history for session "<session-id>" may be incomplete; recording has stopped
+```
+
+The interactive child instead presents one Captain status with the same
+`warning: replay history ...` text and writes no raw stderr diagnostic. A later
+lease gets its own warning only if its replay writer independently becomes
+incomplete. The public facade emits no warning; an embedding host decides how
+to present the `incomplete` status it receives
+([[playbook-cli-84](https://github.com/sublang-ai/playbook/blob/main/specs/packages/playbook-cli.md#playbook-cli-84)]).
+
 ### Reconciling possible repository effects
 
 For each governed player call, Playbook records a Git baseline before the call
 and a durable receipt afterward. CODE and DECIDE commit arms, and REVIEW's
 Coder commit arm, accept a commit only when the receipt proves exactly one
-descendant commit with no residual repository change; REVIEW's Reviewer calls
-and DECIDE's proposal calls require the repository to remain exact. The
+descendant commit with no residual repository change; REVIEW's Reviewer calls,
+DECIDE's proposal calls, and every DEV Analyst planning call require the
+repository to remain exact. The
 player's prose, including any `Commit:` line, is presentation rather than
 proof.
 
@@ -307,8 +354,9 @@ playbook run --session 4f2c0000-0000-4000-8000-000000009ab1 --discard-uncertain
 ```
 
 Retry reads no input and reuses the byte-exact recorded turn and its exact
-attempted Captain, player, and per-role model/effort selections; current config
-cannot retune that attempt, and retry may duplicate external effects. Discard
+attempted Captain, player, and per-role model, effort, and fast-mode settings;
+current config cannot retune that attempt, and retry may duplicate external
+effects. Discard
 reads no input and runs no model: it restores the exact prior settled boundary,
 or deletes a never-settled fresh session, while abandoning the attempted work.
 An interrupted interactive turn uses the same uncertain record and is

package/docs/configuration.md

@@ -4,22 +4,35 @@
 # Configuring agents
 
 Fresh launches and ordinary reopens read one config at
-`${XDG_CONFIG_HOME:-$HOME/.config}/playbook/playbook.config.yaml`. The
+`${SPEX_HOME:-$HOME/.spex}/playbook/playbook.config.yaml`. The
 first launch seeds it from the bundled starter and prints the path;
 later launches reuse it untouched.
 
+On the first launching command after upgrading Playbook, it moves a config from the
+former `${XDG_CONFIG_HOME:-$HOME/.config}/playbook/playbook.config.yaml` path
+when the canonical path is absent. The one-time move preserves bytes and
+permissions and leaves no compatibility alias, so running an older Spex host
+afterward could seed a second file at the former path.
+
+The current guard rejects relocation when a legacy relative `sessions` value
+or relative filesystem `playbooks.<id>.from` would resolve differently below
+the new directory. It leaves the former file unchanged and names every
+target-preserving absolute replacement. Apply those replacements and retry;
+Playbook does not rewrite the user-authored file.
+
 ```sh
-$EDITOR "${XDG_CONFIG_HOME:-$HOME/.config}/playbook/playbook.config.yaml"
+$EDITOR "${SPEX_HOME:-$HOME/.spex}/playbook/playbook.config.yaml"
 ```
 
 ## Anatomy
 
 The config is top-level (no `config:` wrapper): a `captain` agent, one flat
 `players` map of stable Captain-session agents, a `playbooks` map of enabled
-workflows and their explicit role bindings, and optional `layout` /
-`notifications` / `theme`. The Captain runs hidden control and judge calls and
-writes the replies you see in the Captain pane or on headless stdout. The three
-presentation fields apply only to interactive tmux; headless runs ignore them.
+workflows and their explicit role bindings, an optional `sessions` storage
+locator, and optional `layout` / `notifications` / `theme`. The Captain runs
+hidden control and judge calls and writes the replies you see in the Captain
+pane or on headless stdout. The three presentation fields apply only to
+interactive tmux; headless runs ignore them.
 
 A **role** is local to a playbook artifact: CODE's `coder` and REVIEW's `coder`
 have the same semantic name but remain separate declarations. A **player** is
@@ -29,11 +42,12 @@ names, nesting, and ancestry never infer a binding.
 
 Each `captain` or `players.<player-id>` value is either an adapter shorthand
 (`claude`, `codex`) or a block carrying that agent's own `adapter`, `model`,
-`effort`, `instruction`, and `permissions`. Settings are inline per stable
-agent ([DR-021](https://github.com/sublang-ai/playbook/blob/main/specs/decisions/021-inline-agent-settings.md)). Dots in a
-player ID are literal characters, not YAML hierarchy. Other adapter IDs pass
-through to `tmux-play` with a warning because `playbook` cannot preflight their
-auth.
+`effort`, `fastMode`, `instruction`, and `permissions`. Settings are inline per
+stable agent
+([DR-021](https://github.com/sublang-ai/playbook/blob/main/specs/decisions/021-inline-agent-settings.md)).
+Dots in a player ID are literal characters, not YAML hierarchy. Other adapter
+IDs pass through to `tmux-play` with a warning because `playbook` cannot
+preflight their auth.
 
 Within a `playbooks.<id>` block, `from` (the registry module), `command` (an
 optional slash-command override), and `roles` are launcher-owned; every other
@@ -41,33 +55,41 @@ key is that playbook's option slice. Every manifest role must be present
 exactly once. The launcher injects the rest — you do not write host wiring by
 hand.
 
-The seeded config runs the stable Coder player on Claude Opus 4.8 1m and the
-stable Reviewer player on GPT-5.5:
+The seeded config runs the stable Coder player on GPT-5.6 Sol with fast mode
+enabled and the stable Reviewer player on Claude Opus 5:
 
 ```yaml
 captain:
   adapter: claude
-  model: claude-opus-4-8
+  model: claude-opus-5
   effort: high
   permissions:
     mode: auto # protected auto mode for the Claude Captain
 
 players:
   dev.coder:
+    adapter: codex
+    model: gpt-5.6-sol
+    effort: ultra
+    fastMode: true
+    permissions:
+      mode: auto
+      writablePaths:
+        - .git # allow git metadata writes under Codex auto mode
+
+  dev.reviewer:
     adapter: claude
-    model: claude-opus-4-8[1m]
+    model: claude-opus-5
     effort: xhigh
     permissions:
-      mode: auto # protected auto mode for the Claude Coder
+      mode: auto # protected auto mode for the Claude Reviewer
 
-  dev.reviewer:
-    adapter: codex
-    model: gpt-5.5
+  dev.analyst:
+    adapter: claude
+    model: claude-opus-5
     effort: xhigh
     permissions:
-      mode: auto
-      writablePaths:
-        - .git # allow git metadata writes under Codex auto mode
+      mode: auto # protected auto mode for the Claude Analyst
 
 playbooks:
   code:
@@ -86,6 +108,11 @@ playbooks:
     roles:
       coder: dev.coder
       reviewer: dev.reviewer
+
+  dev:
+    from: '@sublang/playbook/dev/registry'
+    roles:
+      analyst: dev.analyst
 ```
 
 The current bundled workflows accept no workflow-specific options.
@@ -104,21 +131,26 @@ roles:
   coder: dev.coder
 ```
 
-Use a block to override only that role invocation's model or effort:
+Use a block to override only that role invocation's model, effort, or fast
+mode:
 
 ```yaml
 roles:
   coder:
     player: dev.coder
-    model: claude-opus-4-8[1m]
+    model: gpt-5.6-sol
     effort: false # explicitly reset to this provider's default
+    fastMode: false # literal disabled request, not a default sentinel
 ```
 
-Omitting `model` or `effort` inherits that player's top-level default. The
-boolean `false` is different: it selects the provider default explicitly, so a
-resumed conversation cannot accidentally retain an earlier selection. A role
-binding cannot override adapter, instruction, permissions, workspace, or tool
-posture; those define the stable player envelope.
+Omitting any override inherits that player's top-level default. For `model`
+and `effort`, boolean `false` selects the provider default explicitly, so a
+resumed conversation cannot accidentally retain an earlier selection. For
+`fastMode`, `false` is a literal request to disable fast mode; omitting the
+top-level setting selects the provider default. A present fast-mode boolean is
+accepted only for adapters Cligent reports as supporting it. A role binding
+cannot override adapter, instruction, permissions, workspace, or tool posture;
+those define the stable player envelope.
 
 ## Sharing, isolation, and concurrency
 
@@ -126,7 +158,9 @@ Two bindings that name the same player ID deliberately share one sequential
 provider conversation throughout the logical Captain session — across nested
 calls, returns, and later root engagements. CODE's and REVIEW's `coder` roles
 therefore share `dev.coder` in the starter, and DECIDE and its nested REVIEW
-share both starter players. Disposal of one playbook frame does not clear that
+share both starter players. DEV's `analyst` instead binds the distinct
+`dev.analyst` player, so planning context does not bleed into the shared
+review conversation. Disposal of one playbook frame does not clear that
 session ledger.
 
 Two distinct player IDs stay isolated even when their agent blocks are
@@ -136,9 +170,9 @@ second top-level player and change only its binding:
 ```yaml
 players:
   review.coder:
-    adapter: claude
-    model: claude-opus-4-8[1m]
-    effort: xhigh
+    adapter: codex
+    model: gpt-5.6-sol
+    effort: ultra
 
 playbooks:
   review:
@@ -183,8 +217,9 @@ playbook run --with fast-lineup.yaml "/code implement the approved change"
 # fast-lineup.yaml — retune the shared Coder; nothing is written back.
 players:
   dev.coder:
-    model: claude-opus-4-8
+    model: gpt-5.6-sol
     effort: medium
+    fastMode: false
 ```
 
 Fragments merge into the agent block rather than replacing it, so
@@ -207,9 +242,37 @@ The global file is never modified, and `--with` is not forwarded to
 Overlays apply when creating a fresh session and as current-config input for a
 compatible ordinary reopen. A selected session keeps its stored catalog,
 player roster, role bindings, adapter, instruction, permissions, and working
-directory; only model and effort may change. The next call reapplies both
-complete selections. An uncertain retry accepts no tuning overlay and uses the
-exact attempted selections already stored with that turn.
+directory; only model, effort, and fast mode may change. The next call reapplies
+both complete model and effort selections and the optional effective fast-mode
+boolean. An uncertain retry accepts no tuning overlay and uses the exact
+attempted settings already stored with that turn.
+
+## Session storage
+
+Both front ends select canonical session manifests and write replay streams in
+one directory, where external hosts may keep their own sidecars too. Set the
+optional top-level `sessions` key to move that shared store:
+
+```yaml
+sessions: ./state/playbook-sessions
+```
+
+The value must be a nonempty filesystem path. When the key is absent, the
+directory is
+`${XDG_STATE_HOME:-$HOME/.local/state}/playbook/sessions`. An absolute path is
+used as given; `~` and `~/...` expand from the home directory, while `~user`
+is rejected. Every other value, including a bare relative path such as the one
+above, resolves against the primary config file's directory rather than the
+invocation directory. A `sessions` value in a `--with` overlay replaces the
+primary value, with later overlays winning.
+
+Launch validates that the resolved path can serve as the mode-`0700`, real,
+non-symlink session store before selecting a record or starting agent work and
+fails closed when it cannot. The non-launching `playbook --list` command still
+validates the locator's syntax but does not inspect that directory's filesystem
+usability. The resolved locator is launch configuration only: it never enters
+a persisted structural or execution projection
+([[playbook-cli-78](https://github.com/sublang-ai/playbook/blob/main/specs/packages/playbook-cli.md#playbook-cli-78)]).
 
 ## Durable shared configuration
 
@@ -223,9 +286,9 @@ public UUID. Presentation-only fields are inert headlessly.
 An ordinary reopen reads current config and opening overlays, but first
 projects them to the stored playbooks and referenced players. An unrelated new
 entry cannot enter or invalidate the session. Structural drift fails closed;
-compatible model or effort changes apply on the next provider call. Legacy
-record, shell, runtime-snapshot, and trace schemas are rejected rather than
-having role or player identity guessed.
+compatible model, effort, or fast-mode changes apply on the next provider
+call. Legacy record, shell, runtime-snapshot, and trace schemas are rejected
+rather than having role or player identity guessed.
 
 ## External playbooks
 

package/docs/embedding.md

@@ -220,6 +220,94 @@ capability functions never enter Boss-visible status text or configured
 options. Because trace observers do receive opaque resume tokens, persisted
 traces should be protected as sensitive data.
 
+## Sharing the CLI session store
+
+An external host that needs the CLI's canonical session validation and
+token-free replay format can use the narrow, semver-stable
+`@sublang/playbook/session-store` facade. It shares the CLI's private store and
+validators by construction but exposes no canonical manifest, snapshot,
+provider credential, effect ledger, recovery operation, or turn-lifecycle
+operation:
+
+```ts
+import {
+  defaultSessionsDir,
+  openSessionStore,
+} from '@sublang/playbook/session-store';
+
+const store = openSessionStore(defaultSessionsDir());
+const { sessions, skipped } = await store.list();
+
+const sessionId = sessions[0]?.sessionId;
+if (sessionId !== undefined) {
+  const summary = await store.read(sessionId);
+  console.log(summary.sessionId, summary.state, summary.cwd);
+
+  const first = await store.readStream(sessionId);
+  const next = await store.readStream(sessionId, {
+    afterSeq: first.lastReadableSeq,
+  });
+  console.log(next.entries, skipped);
+}
+```
+
+`list()` reports valid summaries and separately reports skipped canonical
+manifests with their validation or cutover reason. A summary has exactly
+`schemaVersion`, `sessionId`, `state`, `cwd`, and `updatedAt`. A lease-free
+`readStream()` returns complete envelopes and `lastReadableSeq` only: it makes
+no claim that another process has durably checkpointed the observed bytes or
+that its live writer remains complete. An absent stream reads as empty, and
+acquiring its lease does not require a manifest; only `read()` requires a
+canonical session summary. Pass an absolute path to `openSessionStore()` when
+using a directory other than the environment-derived default.
+
+Writing requires the one exclusive session lease. The writer assigns envelope
+version and sequence, serializes overlapping appends in invocation order, and
+strips provider resume credentials from every accepted record:
+
+```ts
+const lease = await store.acquire(
+  '4f2c0000-0000-4000-8000-000000009ab1',
+);
+try {
+  await lease.append({ type: 'host_notice', message: 'attached' });
+  const status = lease.streamStatus();
+  console.log(status);
+  if (status.lastReadableSeq !== null) {
+    const replay = await lease.readStream();
+    console.log(replay.lastReadableSeq, replay.lastDurableSeq);
+  }
+} finally {
+  const finalStatus = await lease.release();
+  console.log(finalStatus);
+}
+```
+
+`streamStatus()` synchronously returns the current live status. If initialization
+could not establish a trustworthy whole-stream boundary, it returns
+`{ lastReadableSeq: null, lastDurableSeq: null, incomplete: true }`, and
+`lease.readStream()` rejects rather than return partial history.
+An `append()` suppressed before release by either unavailable initialization or
+a numeric incomplete latch resolves `undefined` without recording the supplied
+record, so fulfillment alone does not prove persistence.
+
+Always release a successfully acquired lease. `release()` closes append
+admission, drains earlier appends, attempts the final checkpoint, retires the
+lease, and returns the final `lastReadableSeq`, `lastDurableSeq`, and
+`incomplete` status. A replay initialization failure reports unavailable null
+boundaries; a later sanitization, repair, or persistence failure latches
+numeric `incomplete` status. Either state suppresses later replay work on that
+lease and remains isolated from canonical session lifecycle work. The facade
+writes no warning to stdout or stderr; the embedding host owns any presentation
+of that status.
+
+For control flow, a missing canonical manifest from `read()` uses
+`Error.code === 'PLAYBOOK_SESSION_NOT_FOUND'`, and a competing live or foreign
+lease uses `Error.code === 'PLAYBOOK_SESSION_LEASE_ACTIVE'`. Do not match error
+messages or assume those codes for malformed input, unsafe storage, an
+indeterminate owner probe, or another storage failure
+([[playbook-cli-73](https://github.com/sublang-ai/playbook/blob/main/specs/packages/playbook-cli.md#playbook-cli-73)]).
+
 See
 [`code.playbook.test.ts`](https://github.com/sublang-ai/playbook/blob/main/reference/sdlc/code.playbook/code.playbook.test.ts)
 for the full range of port shapes (classifier, judge, abort, interrupt,

package/package.json

@@ -1,8 +1,8 @@
 {
   "name": "@sublang/playbook",
-  "version": "10.0.0",
+  "version": "12.0.0",
   "type": "module",
-  "description": "Composable XState v5 playbook runtime with compiled Captain, CODE, REVIEW, and DECIDE workflows driven by GEARS specs.",
+  "description": "Composable XState v5 playbook runtime with compiled Captain, CODE, REVIEW, DECIDE, and DEV workflows driven by GEARS specs.",
   "license": "Apache-2.0",
   "homepage": "https://github.com/sublang-ai/playbook#readme",
   "repository": {
@@ -45,6 +45,7 @@
     "reference/sdlc/code.md",
     "reference/sdlc/review.md",
     "reference/sdlc/decide.md",
+    "reference/sdlc/dev.md",
     "reference/sdlc/captain.playbook/captain.gears.md",
     "reference/sdlc/captain.playbook/captain.fsm.ts",
     "reference/sdlc/captain.playbook/captain.fsm.js",
@@ -67,12 +68,15 @@
     "reference/sdlc/code.playbook/playbook-captain.ts",
     "reference/sdlc/code.playbook/playbook-captain.js",
     "reference/sdlc/code.playbook/playbook-captain.d.ts",
+    "reference/sdlc/code.playbook/session-store.js",
+    "reference/sdlc/code.playbook/session-store.d.ts",
     "reference/sdlc/code.playbook/code.gears.md",
     "reference/sdlc/code.playbook/playbook.config.template.yaml",
     "reference/sdlc/code.playbook/bin/playbook.js",
     "reference/sdlc/code.playbook/bin/launch-config.js",
     "reference/sdlc/code.playbook/bin/run.js",
     "reference/sdlc/code.playbook/bin/interactive-session.js",
+    "reference/sdlc/code.playbook/bin/replay-observer.js",
     "reference/sdlc/code.playbook/bin/session-store.js",
     "reference/sdlc/code.playbook/bin/provision.js",
     "reference/sdlc/code.playbook/bin/adapter-sdk.js",
@@ -97,6 +101,16 @@
     "reference/sdlc/decide.playbook/decide.registry.ts",
     "reference/sdlc/decide.playbook/decide.registry.js",
     "reference/sdlc/decide.playbook/decide.registry.d.ts",
+    "reference/sdlc/dev.playbook/dev.gears.md",
+    "reference/sdlc/dev.playbook/dev.fsm.ts",
+    "reference/sdlc/dev.playbook/dev.fsm.js",
+    "reference/sdlc/dev.playbook/dev.fsm.d.ts",
+    "reference/sdlc/dev.playbook/dev.playbook.ts",
+    "reference/sdlc/dev.playbook/dev.playbook.js",
+    "reference/sdlc/dev.playbook/dev.playbook.d.ts",
+    "reference/sdlc/dev.playbook/dev.registry.ts",
+    "reference/sdlc/dev.playbook/dev.registry.js",
+    "reference/sdlc/dev.playbook/dev.registry.d.ts",
     "docs"
   ],
   "bin": {
@@ -127,6 +141,10 @@
       "types": "./reference/sdlc/code.playbook/playbook-captain.d.ts",
       "default": "./reference/sdlc/code.playbook/playbook-captain.js"
     },
+    "./session-store": {
+      "types": "./reference/sdlc/code.playbook/session-store.d.ts",
+      "default": "./reference/sdlc/code.playbook/session-store.js"
+    },
     "./slc/*": "./slc/*",
     "./review/playbook": {
       "types": "./reference/sdlc/review.playbook/review.playbook.d.ts",
@@ -143,6 +161,14 @@
     "./decide/registry": {
       "types": "./reference/sdlc/decide.playbook/decide.registry.d.ts",
       "default": "./reference/sdlc/decide.playbook/decide.registry.js"
+    },
+    "./dev/playbook": {
+      "types": "./reference/sdlc/dev.playbook/dev.playbook.d.ts",
+      "default": "./reference/sdlc/dev.playbook/dev.playbook.js"
+    },
+    "./dev/registry": {
+      "types": "./reference/sdlc/dev.playbook/dev.registry.d.ts",
+      "default": "./reference/sdlc/dev.playbook/dev.registry.js"
     }
   },
   "scripts": {
@@ -158,14 +184,14 @@
     "provenance": true
   },
   "dependencies": {
-    "@sublang/cligent": "^0.23.0",
+    "@sublang/cligent": "^0.24.0",
     "@sublang/spex": "^3.0.0",
     "p-queue": "^9.3.1",
     "xstate": "^5.19.4",
     "yaml": "^2.9.0"
   },
   "devDependencies": {
-    "@anthropic-ai/claude-agent-sdk": "^0.3.221",
+    "@anthropic-ai/claude-agent-sdk": "^0.3.223",
     "@openai/codex-sdk": "^0.146.0",
     "@types/node": "^22.0.0",
     "typescript": "^5.8.0",