agent-bober 0.11.6 → 0.15.0

package/dist/state/sprint-state.js

@@ -1,6 +1,6 @@
 import { readFile, writeFile, readdir } from "node:fs/promises";
 import { join } from "node:path";
-import { SprintContractSchema, } from "../contracts/sprint-contract.js";
+import { SprintContractSchema, findPrecisionIssues, } from "../contracts/sprint-contract.js";
 import { ensureDir } from "./helpers.js";
 const CONTRACTS_DIR = ".bober/contracts";
 function contractsDir(projectRoot) {
@@ -11,20 +11,33 @@ function contractPath(projectRoot, id) {
     const safeId = id.replace(/[^a-zA-Z0-9_-]/g, "_");
     return join(contractsDir(projectRoot), `${safeId}.json`);
 }
+function formatZodIssues(error) {
+    return error.issues
+        .map((i) => `  - ${i.path.join(".")}: ${i.message}`)
+        .join("\n");
+}
 /**
  * Save a sprint contract to disk.
- * Overwrites any existing contract with the same id.
+ * Overwrites any existing contract with the same contractId.
+ *
+ * Validates the contract against the schema and the precision quality gate.
+ * Throws on either failure — partial or vague contracts are not silently saved.
  */
 export async function saveContract(projectRoot, contract) {
     await ensureDir(contractsDir(projectRoot));
     const validation = SprintContractSchema.safeParse(contract);
     if (!validation.success) {
-        const issues = validation.error.issues
-            .map((i) => `  - ${i.path.join(".")}: ${i.message}`)
+        throw new Error(`Invalid contract:\n${formatZodIssues(validation.error)}`);
+    }
+    // Quality gate: vague phrases the schema can't express via min-length alone.
+    const precisionIssues = findPrecisionIssues(validation.data);
+    if (precisionIssues.length > 0) {
+        const formatted = precisionIssues
+            .map((i) => `  - ${i.field}: ${i.message}`)
             .join("\n");
-        throw new Error(`Invalid contract:\n${issues}`);
+        throw new Error(`Contract "${contract.contractId}" failed precision gate:\n${formatted}`);
     }
-    const filePath = contractPath(projectRoot, contract.id);
+    const filePath = contractPath(projectRoot, contract.contractId);
     await writeFile(filePath, JSON.stringify(contract, null, 2), "utf-8");
 }
 /**
@@ -49,15 +62,16 @@ export async function loadContract(projectRoot, id) {
     }
     const result = SprintContractSchema.safeParse(parsed);
     if (!result.success) {
-        const issues = result.error.issues
-            .map((i) => `  - ${i.path.join(".")}: ${i.message}`)
-            .join("\n");
-        throw new Error(`Contract "${id}" failed validation:\n${issues}`);
+        throw new Error(`Contract "${id}" failed validation:\n${formatZodIssues(result.error)}`);
     }
     return result.data;
 }
 /**
  * List all saved contracts, sorted by filename.
+ *
+ * Files that fail validation are skipped silently — to surface validation
+ * errors, use `loadContract` directly. (Skipping is intentional here so that
+ * a single bad file doesn't break listing for the rest.)
  */
 export async function listContracts(projectRoot) {
     const dir = contractsDir(projectRoot);
@@ -90,7 +104,7 @@ export async function listContracts(projectRoot) {
     return contracts;
 }
 /**
- * Update an existing contract (save with the same id).
+ * Update an existing contract (save with the same contractId).
  */
 export async function updateContract(projectRoot, contract) {
     await saveContract(projectRoot, contract);

package/dist/state/sprint-state.js.map

@@ -1 +1 @@
-{"version":3,"file":"sprint-state.js","sourceRoot":"","sources":["../../src/state/sprint-state.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,OAAO,EAAE,MAAM,kBAAkB,CAAC;AAChE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAEjC,OAAO,EACL,oBAAoB,GAErB,MAAM,iCAAiC,CAAC;AACzC,OAAO,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AAEzC,MAAM,aAAa,GAAG,kBAAkB,CAAC;AAEzC,SAAS,YAAY,CAAC,WAAmB;IACvC,OAAO,IAAI,CAAC,WAAW,EAAE,aAAa,CAAC,CAAC;AAC1C,CAAC;AAED,SAAS,YAAY,CAAC,WAAmB,EAAE,EAAU;IACnD,wCAAwC;IACxC,MAAM,MAAM,GAAG,EAAE,CAAC,OAAO,CAAC,iBAAiB,EAAE,GAAG,CAAC,CAAC;IAClD,OAAO,IAAI,CAAC,YAAY,CAAC,WAAW,CAAC,EAAE,GAAG,MAAM,OAAO,CAAC,CAAC;AAC3D,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,YAAY,CAChC,WAAmB,EACnB,QAAwB;IAExB,MAAM,SAAS,CAAC,YAAY,CAAC,WAAW,CAAC,CAAC,CAAC;IAE3C,MAAM,UAAU,GAAG,oBAAoB,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;IAC5D,IAAI,CAAC,UAAU,CAAC,OAAO,EAAE,CAAC;QACxB,MAAM,MAAM,GAAG,UAAU,CAAC,KAAK,CAAC,MAAM;aACnC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,OAAO,EAAE,CAAC;aACnD,IAAI,CAAC,IAAI,CAAC,CAAC;QACd,MAAM,IAAI,KAAK,CAAC,sBAAsB,MAAM,EAAE,CAAC,CAAC;IAClD,CAAC;IAED,MAAM,QAAQ,GAAG,YAAY,CAAC,WAAW,EAAE,QAAQ,CAAC,EAAE,CAAC,CAAC;IACxD,MAAM,SAAS,CAAC,QAAQ,EAAE,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC;AACxE,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,YAAY,CAChC,WAAmB,EACnB,EAAU;IAEV,MAAM,QAAQ,GAAG,YAAY,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC;IAE/C,IAAI,OAAe,CAAC;IACpB,IAAI,CAAC;QACH,OAAO,GAAG,MAAM,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;IAC9C,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,IAAI,KAAK,CACb,aAAa,EAAE,gBAAgB,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,EACjF,EAAE,KAAK,EAAE,GAAG,EAAE,CACf,CAAC;IACJ,CAAC;IAED,IAAI,MAAe,CAAC;IACpB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IAC/B,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,IAAI,KAAK,CACb,sCAAsC,EAAE,MAAM,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,EAChG,EAAE,KAAK,EAAE,GAAG,EAAE,CACf,CAAC;IACJ,CAAC;IAED,MAAM,MAAM,GAAG,oBAAoB,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;IACtD,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACpB,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,MAAM;aAC/B,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,OAAO,EAAE,CAAC;aACnD,IAAI,CAAC,IAAI,CAAC,CAAC;QACd,MAAM,IAAI,KAAK,CAAC,aAAa,EAAE,yBAAyB,MAAM,EAAE,CAAC,CAAC;IACpE,CAAC;IAED,OAAO,MAAM,CAAC,IAAI,CAAC;AACrB,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,WAAmB;IAEnB,MAAM,GAAG,GAAG,YAAY,CAAC,WAAW,CAAC,CAAC;IAEtC,IAAI,OAAiB,CAAC;IACtB,IAAI,CAAC;QACH,OAAO,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,CAAC;IAC/B,CAAC;IAAC,MAAM,CAAC;QACP,6CAA6C;QAC7C,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,MAAM,SAAS,GAAG,OAAO;SACtB,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;SAClC,IAAI,EAAE,CAAC;IAEV,MAAM,SAAS,GAAqB,EAAE,CAAC;IAEvC,KAAK,MAAM,IAAI,IAAI,SAAS,EAAE,CAAC;QAC7B,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;QACjC,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;YAClD,MAAM,MAAM,GAAY,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;YAC5C,MAAM,MAAM,GAAG,oBAAoB,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;YACtD,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;gBACnB,SAAS,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;YAC9B,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,uBAAuB;QACzB,CAAC;IACH,CAAC;IAED,OAAO,SAAS,CAAC;AACnB,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,WAAmB,EACnB,QAAwB;IAExB,MAAM,YAAY,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAC;AAC5C,CAAC"}
+{"version":3,"file":"sprint-state.js","sourceRoot":"","sources":["../../src/state/sprint-state.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,OAAO,EAAE,MAAM,kBAAkB,CAAC;AAChE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAIjC,OAAO,EACL,oBAAoB,EACpB,mBAAmB,GAEpB,MAAM,iCAAiC,CAAC;AACzC,OAAO,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AAEzC,MAAM,aAAa,GAAG,kBAAkB,CAAC;AAEzC,SAAS,YAAY,CAAC,WAAmB;IACvC,OAAO,IAAI,CAAC,WAAW,EAAE,aAAa,CAAC,CAAC;AAC1C,CAAC;AAED,SAAS,YAAY,CAAC,WAAmB,EAAE,EAAU;IACnD,wCAAwC;IACxC,MAAM,MAAM,GAAG,EAAE,CAAC,OAAO,CAAC,iBAAiB,EAAE,GAAG,CAAC,CAAC;IAClD,OAAO,IAAI,CAAC,YAAY,CAAC,WAAW,CAAC,EAAE,GAAG,MAAM,OAAO,CAAC,CAAC;AAC3D,CAAC;AAED,SAAS,eAAe,CAAC,KAAe;IACtC,OAAO,KAAK,CAAC,MAAM;SAChB,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,OAAO,EAAE,CAAC;SACnD,IAAI,CAAC,IAAI,CAAC,CAAC;AAChB,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,YAAY,CAChC,WAAmB,EACnB,QAAwB;IAExB,MAAM,SAAS,CAAC,YAAY,CAAC,WAAW,CAAC,CAAC,CAAC;IAE3C,MAAM,UAAU,GAAG,oBAAoB,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;IAC5D,IAAI,CAAC,UAAU,CAAC,OAAO,EAAE,CAAC;QACxB,MAAM,IAAI,KAAK,CACb,sBAAsB,eAAe,CAAC,UAAU,CAAC,KAAK,CAAC,EAAE,CAC1D,CAAC;IACJ,CAAC;IAED,6EAA6E;IAC7E,MAAM,eAAe,GAAG,mBAAmB,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;IAC7D,IAAI,eAAe,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC/B,MAAM,SAAS,GAAG,eAAe;aAC9B,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,CAAC,KAAK,KAAK,CAAC,CAAC,OAAO,EAAE,CAAC;aAC1C,IAAI,CAAC,IAAI,CAAC,CAAC;QACd,MAAM,IAAI,KAAK,CACb,aAAa,QAAQ,CAAC,UAAU,6BAA6B,SAAS,EAAE,CACzE,CAAC;IACJ,CAAC;IAED,MAAM,QAAQ,GAAG,YAAY,CAAC,WAAW,EAAE,QAAQ,CAAC,UAAU,CAAC,CAAC;IAChE,MAAM,SAAS,CAAC,QAAQ,EAAE,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC;AACxE,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,YAAY,CAChC,WAAmB,EACnB,EAAU;IAEV,MAAM,QAAQ,GAAG,YAAY,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC;IAE/C,IAAI,OAAe,CAAC;IACpB,IAAI,CAAC;QACH,OAAO,GAAG,MAAM,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;IAC9C,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,IAAI,KAAK,CACb,aAAa,EAAE,gBAAgB,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,EACjF,EAAE,KAAK,EAAE,GAAG,EAAE,CACf,CAAC;IACJ,CAAC;IAED,IAAI,MAAe,CAAC;IACpB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IAC/B,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,IAAI,KAAK,CACb,sCAAsC,EAAE,MAAM,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,EAChG,EAAE,KAAK,EAAE,GAAG,EAAE,CACf,CAAC;IACJ,CAAC;IAED,MAAM,MAAM,GAAG,oBAAoB,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;IACtD,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACpB,MAAM,IAAI,KAAK,CACb,aAAa,EAAE,yBAAyB,eAAe,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CACxE,CAAC;IACJ,CAAC;IAED,OAAO,MAAM,CAAC,IAAI,CAAC;AACrB,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,WAAmB;IAEnB,MAAM,GAAG,GAAG,YAAY,CAAC,WAAW,CAAC,CAAC;IAEtC,IAAI,OAAiB,CAAC;IACtB,IAAI,CAAC;QACH,OAAO,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,CAAC;IAC/B,CAAC;IAAC,MAAM,CAAC;QACP,6CAA6C;QAC7C,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,MAAM,SAAS,GAAG,OAAO;SACtB,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;SAClC,IAAI,EAAE,CAAC;IAEV,MAAM,SAAS,GAAqB,EAAE,CAAC;IAEvC,KAAK,MAAM,IAAI,IAAI,SAAS,EAAE,CAAC;QAC7B,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;QACjC,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;YAClD,MAAM,MAAM,GAAY,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;YAC5C,MAAM,MAAM,GAAG,oBAAoB,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;YACtD,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;gBACnB,SAAS,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;YAC9B,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,uBAAuB;QACzB,CAAC;IACH,CAAC;IAED,OAAO,SAAS,CAAC;AACnB,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,WAAmB,EACnB,QAAwB;IAExB,MAAM,YAAY,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAC;AAC5C,CAAC"}

package/dist/telemetry/emit.d.ts

@@ -0,0 +1,41 @@
+/**
+ * Opt-in local-only telemetry event emitter (Sprint 28).
+ *
+ * When config.telemetry.enabled === true, appends one newline-terminated JSON
+ * line to .bober/telemetry/<YYYY-MM-DD>.jsonl. When disabled (default), emit()
+ * is a no-op and performs ZERO file IO.
+ *
+ * File is created with mode 0600 on first append via fs.open(O_WRONLY|O_APPEND|
+ * O_CREAT). Mirrors the Sprint 13 audit pattern verbatim (see audit.ts:86 for
+ * the rationale on why fs.appendFile is NOT used).
+ *
+ * NETWORK EGRESS: forbidden by design. No import of node:http, node:https,
+ * node:net, node:tls, undici, or fetch — enforced by ESLint no-restricted-imports
+ * rule scoped to src/telemetry/** in eslint.config.js.
+ *
+ * PRIVACY: event payloads MUST be IDs / counts / enum outcomes only. NEVER pass
+ * user-content strings (feedbackText, prompts, file contents, MCP response
+ * bodies). Reviewers grep `emit(` across src/ to enforce this discipline.
+ *
+ * Sprint 28 — src/telemetry/emit.ts
+ */
+import type { BoberConfig } from "../config/schema.js";
+export type TelemetryEventType = "checkpoint-approved" | "checkpoint-rejected" | "checkpoint-edited" | "sprint-pass" | "sprint-fail-retry" | "incident-resolved" | "incident-aborted" | "agent-spawn" | "agent-error";
+/** Allowed payload fields. NO string values from user input. */
+export interface TelemetryEventData {
+    runId?: string;
+    incidentId?: string;
+    specId?: string;
+    sprintId?: string;
+    contractId?: string;
+    agentName?: string;
+    checkpointId?: string;
+    iteration?: number;
+    durationMs?: number;
+    outcome?: string;
+    retryCount?: number;
+    errorKind?: string;
+}
+/** Emit a telemetry event. No-op when telemetry.enabled !== true. */
+export declare function emit(projectRoot: string, config: BoberConfig, eventType: TelemetryEventType, data?: TelemetryEventData): Promise<void>;
+//# sourceMappingURL=emit.d.ts.map

package/dist/telemetry/emit.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"emit.d.ts","sourceRoot":"","sources":["../../src/telemetry/emit.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AAMH,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AAGvD,MAAM,MAAM,kBAAkB,GAC1B,qBAAqB,GACrB,qBAAqB,GACrB,mBAAmB,GACnB,aAAa,GACb,mBAAmB,GACnB,mBAAmB,GACnB,kBAAkB,GAClB,aAAa,GACb,aAAa,CAAC;AAElB,gEAAgE;AAChE,MAAM,WAAW,kBAAkB;IACjC,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAaD,qEAAqE;AACrE,wBAAsB,IAAI,CACxB,WAAW,EAAE,MAAM,EACnB,MAAM,EAAE,WAAW,EACnB,SAAS,EAAE,kBAAkB,EAC7B,IAAI,GAAE,kBAAuB,GAC5B,OAAO,CAAC,IAAI,CAAC,CAgCf"}

package/dist/telemetry/emit.js

@@ -0,0 +1,65 @@
+/**
+ * Opt-in local-only telemetry event emitter (Sprint 28).
+ *
+ * When config.telemetry.enabled === true, appends one newline-terminated JSON
+ * line to .bober/telemetry/<YYYY-MM-DD>.jsonl. When disabled (default), emit()
+ * is a no-op and performs ZERO file IO.
+ *
+ * File is created with mode 0600 on first append via fs.open(O_WRONLY|O_APPEND|
+ * O_CREAT). Mirrors the Sprint 13 audit pattern verbatim (see audit.ts:86 for
+ * the rationale on why fs.appendFile is NOT used).
+ *
+ * NETWORK EGRESS: forbidden by design. No import of node:http, node:https,
+ * node:net, node:tls, undici, or fetch — enforced by ESLint no-restricted-imports
+ * rule scoped to src/telemetry/** in eslint.config.js.
+ *
+ * PRIVACY: event payloads MUST be IDs / counts / enum outcomes only. NEVER pass
+ * user-content strings (feedbackText, prompts, file contents, MCP response
+ * bodies). Reviewers grep `emit(` across src/ to enforce this discipline.
+ *
+ * Sprint 28 — src/telemetry/emit.ts
+ */
+import { open, mkdir } from "node:fs/promises";
+import { constants } from "node:fs";
+import { join } from "node:path";
+import { logger } from "../utils/logger.js";
+const writeChain = new Map();
+function telemetryDir(projectRoot) {
+    return join(projectRoot, ".bober", "telemetry");
+}
+function telemetryPath(projectRoot) {
+    const date = new Date().toISOString().slice(0, 10); // YYYY-MM-DD
+    return join(telemetryDir(projectRoot), `${date}.jsonl`);
+}
+/** Emit a telemetry event. No-op when telemetry.enabled !== true. */
+export async function emit(projectRoot, config, eventType, data = {}) {
+    if (config.telemetry?.enabled !== true)
+        return;
+    const event = {
+        timestamp: new Date().toISOString(),
+        eventType,
+        ...data,
+    };
+    const filePath = telemetryPath(projectRoot);
+    const prev = writeChain.get(filePath) ?? Promise.resolve();
+    const next = prev
+        .then(async () => {
+        await mkdir(telemetryDir(projectRoot), { recursive: true });
+        const flags = constants.O_WRONLY | constants.O_APPEND | constants.O_CREAT;
+        const fh = await open(filePath, flags, 0o600);
+        try {
+            // Guarantee mode 0600 even if umask would have reduced it.
+            await fh.chmod(0o600);
+            await fh.write(JSON.stringify(event) + "\n");
+        }
+        finally {
+            await fh.close();
+        }
+    })
+        .catch((err) => {
+        logger.warn(`[telemetry] Failed to emit ${eventType}: ${err instanceof Error ? err.message : String(err)}`);
+    });
+    writeChain.set(filePath, next);
+    return next;
+}
+//# sourceMappingURL=emit.js.map

package/dist/telemetry/emit.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"emit.js","sourceRoot":"","sources":["../../src/telemetry/emit.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AAEH,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,kBAAkB,CAAC;AAC/C,OAAO,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AACpC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAGjC,OAAO,EAAE,MAAM,EAAE,MAAM,oBAAoB,CAAC;AA6B5C,MAAM,UAAU,GAAG,IAAI,GAAG,EAAyB,CAAC;AAEpD,SAAS,YAAY,CAAC,WAAmB;IACvC,OAAO,IAAI,CAAC,WAAW,EAAE,QAAQ,EAAE,WAAW,CAAC,CAAC;AAClD,CAAC;AAED,SAAS,aAAa,CAAC,WAAmB;IACxC,MAAM,IAAI,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,aAAa;IACjE,OAAO,IAAI,CAAC,YAAY,CAAC,WAAW,CAAC,EAAE,GAAG,IAAI,QAAQ,CAAC,CAAC;AAC1D,CAAC;AAED,qEAAqE;AACrE,MAAM,CAAC,KAAK,UAAU,IAAI,CACxB,WAAmB,EACnB,MAAmB,EACnB,SAA6B,EAC7B,OAA2B,EAAE;IAE7B,IAAI,MAAM,CAAC,SAAS,EAAE,OAAO,KAAK,IAAI;QAAE,OAAO;IAE/C,MAAM,KAAK,GAAG;QACZ,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QACnC,SAAS;QACT,GAAG,IAAI;KACR,CAAC;IAEF,MAAM,QAAQ,GAAG,aAAa,CAAC,WAAW,CAAC,CAAC;IAE5C,MAAM,IAAI,GAAG,UAAU,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;IAC3D,MAAM,IAAI,GAAG,IAAI;SACd,IAAI,CAAC,KAAK,IAAI,EAAE;QACf,MAAM,KAAK,CAAC,YAAY,CAAC,WAAW,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC5D,MAAM,KAAK,GAAG,SAAS,CAAC,QAAQ,GAAG,SAAS,CAAC,QAAQ,GAAG,SAAS,CAAC,OAAO,CAAC;QAC1E,MAAM,EAAE,GAAG,MAAM,IAAI,CAAC,QAAQ,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC;QAC9C,IAAI,CAAC;YACH,2DAA2D;YAC3D,MAAM,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;YACtB,MAAM,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC,CAAC;QAC/C,CAAC;gBAAS,CAAC;YACT,MAAM,EAAE,CAAC,KAAK,EAAE,CAAC;QACnB,CAAC;IACH,CAAC,CAAC;SACD,KAAK,CAAC,CAAC,GAAY,EAAE,EAAE;QACtB,MAAM,CAAC,IAAI,CACT,8BAA8B,SAAS,KAAK,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAC/F,CAAC;IACJ,CAAC,CAAC,CAAC;IACL,UAAU,CAAC,GAAG,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;IAC/B,OAAO,IAAI,CAAC;AACd,CAAC"}

package/dist/utils/git.d.ts

@@ -26,6 +26,33 @@ export declare function getDiff(cwd: string, since?: string): Promise<string>;
  * Check whether the working tree has uncommitted changes (staged or unstaged).
  */
 export declare function hasUncommittedChanges(cwd: string): Promise<boolean>;
+/**
+ * Add a new git worktree at the given path on a new branch.
+ *
+ * Shells out to: git worktree add <path> -b <branch> [<baseBranch>]
+ * Throws on non-zero exit (a failed worktree-add must surface as an error).
+ */
+export declare function addWorktree(projectRoot: string, worktreePath: string, branch: string, baseBranch?: string): Promise<void>;
+/**
+ * Remove a git worktree by path.
+ *
+ * Shells out to: git worktree remove [-f] <path>
+ * Uses reject: false so that removing a worktree that no longer exists
+ * does not crash cleanup paths.
+ */
+export declare function removeWorktree(projectRoot: string, worktreePath: string, force?: boolean): Promise<void>;
+/**
+ * Check whether the working tree is clean (no staged or unstaged changes).
+ *
+ * Returns { clean: true, dirtyFiles: [] } when the tree is clean.
+ * Returns { clean: false, dirtyFiles: [...] } listing each dirty path
+ * (parsed from `git status --porcelain` — columns 0-1 are the XY status
+ * codes, column 2 is a space, then the path starts at column 3).
+ */
+export declare function isClean(cwd: string): Promise<{
+    clean: boolean;
+    dirtyFiles: string[];
+}>;
 /**
  * Stash any current changes, run the provided function, then restore.
  *

package/dist/utils/git.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"git.d.ts","sourceRoot":"","sources":["../../src/utils/git.ts"],"names":[],"mappings":"AAIA;;GAEG;AACH,wBAAsB,gBAAgB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAKnE;AAED;;GAEG;AACH,wBAAsB,YAAY,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAE3E;AAED;;;;GAIG;AACH,wBAAsB,SAAS,CAC7B,GAAG,EAAE,MAAM,EACX,OAAO,EAAE,MAAM,GACd,OAAO,CAAC,MAAM,CAAC,CAQjB;AAED;;;;GAIG;AACH,wBAAsB,eAAe,CACnC,GAAG,EAAE,MAAM,EACX,KAAK,CAAC,EAAE,MAAM,GACb,OAAO,CAAC,MAAM,EAAE,CAAC,CAWnB;AAED;;GAEG;AACH,wBAAsB,OAAO,CAC3B,GAAG,EAAE,MAAM,EACX,KAAK,CAAC,EAAE,MAAM,GACb,OAAO,CAAC,MAAM,CAAC,CAOjB;AAED;;GAEG;AACH,wBAAsB,qBAAqB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAMzE;AAED;;;;GAIG;AACH,wBAAsB,eAAe,CAAC,CAAC,EACrC,GAAG,EAAE,MAAM,EACX,EAAE,EAAE,MAAM,OAAO,CAAC,CAAC,CAAC,GACnB,OAAO,CAAC,CAAC,CAAC,CAcZ"}
+{"version":3,"file":"git.d.ts","sourceRoot":"","sources":["../../src/utils/git.ts"],"names":[],"mappings":"AAIA;;GAEG;AACH,wBAAsB,gBAAgB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAKnE;AAED;;GAEG;AACH,wBAAsB,YAAY,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAE3E;AAED;;;;GAIG;AACH,wBAAsB,SAAS,CAC7B,GAAG,EAAE,MAAM,EACX,OAAO,EAAE,MAAM,GACd,OAAO,CAAC,MAAM,CAAC,CAQjB;AAED;;;;GAIG;AACH,wBAAsB,eAAe,CACnC,GAAG,EAAE,MAAM,EACX,KAAK,CAAC,EAAE,MAAM,GACb,OAAO,CAAC,MAAM,EAAE,CAAC,CAWnB;AAED;;GAEG;AACH,wBAAsB,OAAO,CAC3B,GAAG,EAAE,MAAM,EACX,KAAK,CAAC,EAAE,MAAM,GACb,OAAO,CAAC,MAAM,CAAC,CAOjB;AAED;;GAEG;AACH,wBAAsB,qBAAqB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAMzE;AAED;;;;;GAKG;AACH,wBAAsB,WAAW,CAC/B,WAAW,EAAE,MAAM,EACnB,YAAY,EAAE,MAAM,EACpB,MAAM,EAAE,MAAM,EACd,UAAU,CAAC,EAAE,MAAM,GAClB,OAAO,CAAC,IAAI,CAAC,CAIf;AAED;;;;;;GAMG;AACH,wBAAsB,cAAc,CAClC,WAAW,EAAE,MAAM,EACnB,YAAY,EAAE,MAAM,EACpB,KAAK,CAAC,EAAE,OAAO,GACd,OAAO,CAAC,IAAI,CAAC,CAKf;AAED;;;;;;;GAOG;AACH,wBAAsB,OAAO,CAC3B,GAAG,EAAE,MAAM,GACV,OAAO,CAAC;IAAE,KAAK,EAAE,OAAO,CAAC;IAAC,UAAU,EAAE,MAAM,EAAE,CAAA;CAAE,CAAC,CAenD;AAED;;;;GAIG;AACH,wBAAsB,eAAe,CAAC,CAAC,EACrC,GAAG,EAAE,MAAM,EACX,EAAE,EAAE,MAAM,OAAO,CAAC,CAAC,CAAC,GACnB,OAAO,CAAC,CAAC,CAAC,CAcZ"}

package/dist/utils/git.js

@@ -62,6 +62,56 @@ export async function hasUncommittedChanges(cwd) {
     });
     return stdout.trim().length > 0;
 }
+/**
+ * Add a new git worktree at the given path on a new branch.
+ *
+ * Shells out to: git worktree add <path> -b <branch> [<baseBranch>]
+ * Throws on non-zero exit (a failed worktree-add must surface as an error).
+ */
+export async function addWorktree(projectRoot, worktreePath, branch, baseBranch) {
+    const args = ["worktree", "add", worktreePath, "-b", branch];
+    if (baseBranch)
+        args.push(baseBranch);
+    await execa("git", args, { cwd: projectRoot });
+}
+/**
+ * Remove a git worktree by path.
+ *
+ * Shells out to: git worktree remove [-f] <path>
+ * Uses reject: false so that removing a worktree that no longer exists
+ * does not crash cleanup paths.
+ */
+export async function removeWorktree(projectRoot, worktreePath, force) {
+    const args = ["worktree", "remove"];
+    if (force)
+        args.push("-f");
+    args.push(worktreePath);
+    await execa("git", args, { cwd: projectRoot, reject: false });
+}
+/**
+ * Check whether the working tree is clean (no staged or unstaged changes).
+ *
+ * Returns { clean: true, dirtyFiles: [] } when the tree is clean.
+ * Returns { clean: false, dirtyFiles: [...] } listing each dirty path
+ * (parsed from `git status --porcelain` — columns 0-1 are the XY status
+ * codes, column 2 is a space, then the path starts at column 3).
+ */
+export async function isClean(cwd) {
+    const { stdout } = await execa("git", ["status", "--porcelain"], {
+        cwd,
+        reject: false,
+    });
+    const lines = stdout
+        .split("\n")
+        .map((l) => l.trim())
+        .filter(Boolean);
+    if (lines.length === 0) {
+        return { clean: true, dirtyFiles: [] };
+    }
+    // Porcelain format: "XY path" — strip the leading "XY " (3 chars)
+    const dirtyFiles = lines.map((l) => l.slice(3).trim());
+    return { clean: false, dirtyFiles };
+}
 /**
  * Stash any current changes, run the provided function, then restore.
  *

package/dist/utils/git.js.map

@@ -1 +1 @@
-{"version":3,"file":"git.js","sourceRoot":"","sources":["../../src/utils/git.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,OAAO,CAAC;AAE9B,sEAAsE;AAEtE;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,GAAW;IAChD,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,KAAK,CAAC,KAAK,EAAE,CAAC,WAAW,EAAE,cAAc,EAAE,MAAM,CAAC,EAAE;QAC3E,GAAG;KACJ,CAAC,CAAC;IACH,OAAO,MAAM,CAAC,IAAI,EAAE,CAAC;AACvB,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,GAAW,EAAE,IAAY;IAC1D,MAAM,KAAK,CAAC,KAAK,EAAE,CAAC,UAAU,EAAE,IAAI,EAAE,IAAI,CAAC,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC;AACxD,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,SAAS,CAC7B,GAAW,EACX,OAAe;IAEf,MAAM,KAAK,CAAC,KAAK,EAAE,CAAC,KAAK,EAAE,IAAI,CAAC,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC;IAC3C,MAAM,KAAK,CAAC,KAAK,EAAE,CAAC,QAAQ,EAAE,IAAI,EAAE,OAAO,CAAC,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC;IAEvD,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,KAAK,CAAC,KAAK,EAAE,CAAC,WAAW,EAAE,SAAS,EAAE,MAAM,CAAC,EAAE;QACtE,GAAG;KACJ,CAAC,CAAC;IACH,OAAO,MAAM,CAAC,IAAI,EAAE,CAAC;AACvB,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,GAAW,EACX,KAAc;IAEd,MAAM,GAAG,GAAG,KAAK,IAAI,MAAM,CAAC;IAC5B,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,KAAK,CAC5B,KAAK,EACL,CAAC,MAAM,EAAE,aAAa,EAAE,GAAG,CAAC,EAC5B,EAAE,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,CACvB,CAAC;IACF,OAAO,MAAM;SACV,KAAK,CAAC,IAAI,CAAC;SACX,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;SACpB,MAAM,CAAC,OAAO,CAAC,CAAC;AACrB,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,OAAO,CAC3B,GAAW,EACX,KAAc;IAEd,MAAM,GAAG,GAAG,KAAK,IAAI,MAAM,CAAC;IAC5B,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,KAAK,CAAC,KAAK,EAAE,CAAC,MAAM,EAAE,GAAG,CAAC,EAAE;QACnD,GAAG;QACH,MAAM,EAAE,KAAK;KACd,CAAC,CAAC;IACH,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,qBAAqB,CAAC,GAAW;IACrD,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,KAAK,CAAC,KAAK,EAAE,CAAC,QAAQ,EAAE,aAAa,CAAC,EAAE;QAC/D,GAAG;QACH,MAAM,EAAE,KAAK;KACd,CAAC,CAAC;IACH,OAAO,MAAM,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,CAAC;AAClC,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,GAAW,EACX,EAAoB;IAEpB,MAAM,KAAK,GAAG,MAAM,qBAAqB,CAAC,GAAG,CAAC,CAAC;IAE/C,IAAI,KAAK,EAAE,CAAC;QACV,MAAM,KAAK,CAAC,KAAK,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,kBAAkB,CAAC,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC;IAC3E,CAAC;IAED,IAAI,CAAC;QACH,OAAO,MAAM,EAAE,EAAE,CAAC;IACpB,CAAC;YAAS,CAAC;QACT,IAAI,KAAK,EAAE,CAAC;YACV,MAAM,KAAK,CAAC,KAAK,EAAE,CAAC,OAAO,EAAE,KAAK,CAAC,EAAE,EAAE,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;QAC/D,CAAC;IACH,CAAC;AACH,CAAC"}
+{"version":3,"file":"git.js","sourceRoot":"","sources":["../../src/utils/git.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,OAAO,CAAC;AAE9B,sEAAsE;AAEtE;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,GAAW;IAChD,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,KAAK,CAAC,KAAK,EAAE,CAAC,WAAW,EAAE,cAAc,EAAE,MAAM,CAAC,EAAE;QAC3E,GAAG;KACJ,CAAC,CAAC;IACH,OAAO,MAAM,CAAC,IAAI,EAAE,CAAC;AACvB,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,GAAW,EAAE,IAAY;IAC1D,MAAM,KAAK,CAAC,KAAK,EAAE,CAAC,UAAU,EAAE,IAAI,EAAE,IAAI,CAAC,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC;AACxD,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,SAAS,CAC7B,GAAW,EACX,OAAe;IAEf,MAAM,KAAK,CAAC,KAAK,EAAE,CAAC,KAAK,EAAE,IAAI,CAAC,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC;IAC3C,MAAM,KAAK,CAAC,KAAK,EAAE,CAAC,QAAQ,EAAE,IAAI,EAAE,OAAO,CAAC,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC;IAEvD,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,KAAK,CAAC,KAAK,EAAE,CAAC,WAAW,EAAE,SAAS,EAAE,MAAM,CAAC,EAAE;QACtE,GAAG;KACJ,CAAC,CAAC;IACH,OAAO,MAAM,CAAC,IAAI,EAAE,CAAC;AACvB,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,GAAW,EACX,KAAc;IAEd,MAAM,GAAG,GAAG,KAAK,IAAI,MAAM,CAAC;IAC5B,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,KAAK,CAC5B,KAAK,EACL,CAAC,MAAM,EAAE,aAAa,EAAE,GAAG,CAAC,EAC5B,EAAE,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,CACvB,CAAC;IACF,OAAO,MAAM;SACV,KAAK,CAAC,IAAI,CAAC;SACX,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;SACpB,MAAM,CAAC,OAAO,CAAC,CAAC;AACrB,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,OAAO,CAC3B,GAAW,EACX,KAAc;IAEd,MAAM,GAAG,GAAG,KAAK,IAAI,MAAM,CAAC;IAC5B,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,KAAK,CAAC,KAAK,EAAE,CAAC,MAAM,EAAE,GAAG,CAAC,EAAE;QACnD,GAAG;QACH,MAAM,EAAE,KAAK;KACd,CAAC,CAAC;IACH,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,qBAAqB,CAAC,GAAW;IACrD,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,KAAK,CAAC,KAAK,EAAE,CAAC,QAAQ,EAAE,aAAa,CAAC,EAAE;QAC/D,GAAG;QACH,MAAM,EAAE,KAAK;KACd,CAAC,CAAC;IACH,OAAO,MAAM,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,CAAC;AAClC,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,WAAW,CAC/B,WAAmB,EACnB,YAAoB,EACpB,MAAc,EACd,UAAmB;IAEnB,MAAM,IAAI,GAAG,CAAC,UAAU,EAAE,KAAK,EAAE,YAAY,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC;IAC7D,IAAI,UAAU;QAAE,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IACtC,MAAM,KAAK,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE,GAAG,EAAE,WAAW,EAAE,CAAC,CAAC;AACjD,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,WAAmB,EACnB,YAAoB,EACpB,KAAe;IAEf,MAAM,IAAI,GAAG,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC;IACpC,IAAI,KAAK;QAAE,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC3B,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;IACxB,MAAM,KAAK,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE,GAAG,EAAE,WAAW,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;AAChE,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,OAAO,CAC3B,GAAW;IAEX,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,KAAK,CAAC,KAAK,EAAE,CAAC,QAAQ,EAAE,aAAa,CAAC,EAAE;QAC/D,GAAG;QACH,MAAM,EAAE,KAAK;KACd,CAAC,CAAC;IACH,MAAM,KAAK,GAAG,MAAM;SACjB,KAAK,CAAC,IAAI,CAAC;SACX,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;SACpB,MAAM,CAAC,OAAO,CAAC,CAAC;IACnB,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACvB,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,UAAU,EAAE,EAAE,EAAE,CAAC;IACzC,CAAC;IACD,kEAAkE;IAClE,MAAM,UAAU,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;IACvD,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,UAAU,EAAE,CAAC;AACtC,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,GAAW,EACX,EAAoB;IAEpB,MAAM,KAAK,GAAG,MAAM,qBAAqB,CAAC,GAAG,CAAC,CAAC;IAE/C,IAAI,KAAK,EAAE,CAAC;QACV,MAAM,KAAK,CAAC,KAAK,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,kBAAkB,CAAC,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC;IAC3E,CAAC;IAED,IAAI,CAAC;QACH,OAAO,MAAM,EAAE,EAAE,CAAC;IACpB,CAAC;YAAS,CAAC;QACT,IAAI,KAAK,EAAE,CAAC;YACV,MAAM,KAAK,CAAC,KAAK,EAAE,CAAC,OAAO,EAAE,KAAK,CAAC,EAAE,EAAE,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;QAC/D,CAAC;IACH,CAAC;AACH,CAAC"}

package/hooks/hooks.json

@@ -1,9 +1,25 @@
 {
   "hooks": {
+    "SessionStart": [
+      {
+        "matcher": "startup|clear|compact",
+        "hooks": [
+          {
+            "type": "command",
+            "command": "${CLAUDE_PLUGIN_ROOT:-.}/hooks/session-start",
+            "async": false
+          }
+        ]
+      }
+    ],
     "PostToolUse": [
       {
         "matcher": "Edit|Write",
-        "command": "echo 'Files modified \u2014 run /bober:eval to verify'"
+        "command": "echo 'Files modified — run /bober:eval to verify'"
+      },
+      {
+        "matcher": "Edit|Write",
+        "command": "node scripts/graph-hook.mjs"
       }
     ]
   }

package/hooks/session-start

@@ -0,0 +1,42 @@
+#!/usr/bin/env bash
+# session-start — SessionStart hook for agent-bober
+# Injects the bober.using-bober bootstrap skill into the model's first-turn context.
+#
+# Structural pattern from obra/superpowers (MIT). https://github.com/obra/superpowers
+
+set -euo pipefail
+
+# Determine project root directory
+PROJECT_ROOT="$(cd "$(dirname "$0")/.." && pwd)"
+
+# Read bober.using-bober skill content
+using_bober_content=$(cat "${PROJECT_ROOT}/skills/bober.using-bober/SKILL.md" 2>&1 || echo "Error reading bober.using-bober skill")
+
+# Escape string for JSON embedding using bash parameter substitution.
+# Each ${s//old/new} is a single C-level pass - orders of magnitude
+# faster than the character-by-character loop this replaces.
+escape_for_json() {
+    local s="$1"
+    s="${s//\\/\\\\}"
+    s="${s//\"/\\\"}"
+    s="${s//$'\n'/\\n}"
+    s="${s//$'\r'/\\r}"
+    s="${s//$'\t'/\\t}"
+    printf '%s' "$s"
+}
+
+using_bober_escaped=$(escape_for_json "$using_bober_content")
+session_context="<EXTREMELY_IMPORTANT>\nYou are agent-bober.\n\n**Below is the full content of your 'bober-using-bober' skill - your introduction to using bober skills. For all other skills, use the 'Skill' tool:**\n\n${using_bober_escaped}\n\n</EXTREMELY_IMPORTANT>"
+
+# Output context injection as JSON.
+# Uses printf instead of heredoc to work around bash 5.3+ heredoc hang.
+# See: https://github.com/obra/superpowers/issues/571
+if [ -n "${CURSOR_PLUGIN_ROOT:-}" ]; then
+  printf '{\n  "additional_context": "%s"\n}\n' "$session_context"
+elif [ -n "${CLAUDE_PLUGIN_ROOT:-}" ] && [ -z "${COPILOT_CLI:-}" ]; then
+  printf '{\n  "hookSpecificOutput": {\n    "hookEventName": "SessionStart",\n    "additionalContext": "%s"\n  }\n}\n' "$session_context"
+else
+  printf '{\n  "additionalContext": "%s"\n}\n' "$session_context"
+fi
+
+exit 0

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "agent-bober",
-  "version": "0.11.6",
+  "version": "0.15.0",
   "description": "Multi-agent harness for building applications autonomously with any LLM. Researcher, Planner, Curator, Generator, Evaluator pipeline. Supports Claude, GPT, Gemini, Ollama. MCP server for Cursor/Windsurf.",
   "type": "module",
   "main": "dist/index.js",
@@ -53,10 +53,11 @@
     "templates/",
     ".claude-plugin/",
     "README.md",
+    "CHANGELOG.md",
     "LICENSE"
   ],
   "dependencies": {
-    "@anthropic-ai/sdk": "^0.39.0",
+    "@anthropic-ai/sdk": "^0.100.1",
     "@modelcontextprotocol/sdk": "^1.28.0",
     "chalk": "^5.4.1",
     "commander": "^13.1.0",
@@ -64,6 +65,7 @@
     "glob": "^11.0.1",
     "ora": "^8.1.1",
     "prompts": "^2.4.2",
+    "semver": "^7.8.1",
     "zod": "^3.24.2"
   },
   "peerDependencies": {
@@ -82,9 +84,11 @@
     "@eslint/js": "^10.0.1",
     "@types/node": "^22.13.0",
     "@types/prompts": "^2.4.9",
+    "@types/semver": "^7.7.1",
     "@typescript-eslint/eslint-plugin": "^8.22.0",
     "@typescript-eslint/parser": "^8.22.0",
     "eslint": "^9.19.0",
+    "markdownlint-cli": "^0.48.0",
     "typescript": "^5.7.3",
     "vitest": "^3.0.5"
   }

package/scripts/check-prereqs.sh

@@ -54,6 +54,18 @@ else
   add_check "{\"name\":\"bober_dir\",\"status\":\"missing\",\"path\":\".bober/\",\"message\":\"No .bober/ directory. Run /bober-plan first.\"}"
 fi
 
+# ── Optional check: tokensave (only if installed) ─────────────────
+if command -v agent-bober &>/dev/null; then
+  ts_json=$(agent-bober graph check-prereq 2>/dev/null || echo '{"ok":false,"reason":"MISSING","hint":"agent-bober graph check-prereq failed"}')
+  # Normalize to the {name,status} shape used by other checks
+  if echo "$ts_json" | grep -q '"ok":true'; then
+    add_check "{\"name\":\"tokensave\",\"status\":\"ok\",\"detail\":$ts_json}"
+  else
+    # Tokensave missing is NOT a hard blocker for any current command — emit info-only
+    CHECKS+=("{\"name\":\"tokensave\",\"status\":\"optional\",\"detail\":$ts_json}")
+  fi
+fi
+
 # ── Command-specific checks ───────────────────────────────────────
 
 case "$COMMAND" in

package/scripts/e2e-graph-smoke.sh

@@ -0,0 +1,167 @@
+#!/usr/bin/env bash
+# e2e-graph-smoke.sh — end-to-end smoke test for the tokensave graph integration.
+#
+# Prerequisites:
+#   - tokensave >= 6.0.0-beta.1 installed and on PATH
+#   - npm + node >= 18
+#
+# This script is gated in CI by checking for the tokensave binary.
+# If tokensave is not available, the script exits 0 (skip, not fail).
+#
+# Usage:
+#   bash scripts/e2e-graph-smoke.sh
+#
+# The script:
+#   1. Verifies tokensave is available
+#   2. Builds the project
+#   3. Creates a temp directory with a minimal project
+#   4. Runs agent-bober init (brownfield) to get bober.config.json with graph.enabled=true
+#   5. Runs agent-bober graph init
+#   6. Runs agent-bober graph status — asserts ready=true in JSON output
+#   7. Runs agent-bober onboard — asserts 5 files written
+#   8. Runs agent-bober impact sandboxPath — asserts .bober/graph/impact/sandboxpath.md exists
+#   9. Cleans up
+
+set -euo pipefail
+
+# ── Colors ────────────────────────────────────────────────────────────────────
+RED='\033[0;31m'
+GREEN='\033[0;32m'
+CYAN='\033[0;36m'
+YELLOW='\033[1;33m'
+NC='\033[0m' # No Color
+
+info()  { echo -e "${CYAN}[smoke]${NC} $*"; }
+ok()    { echo -e "${GREEN}[OK]${NC} $*"; }
+warn()  { echo -e "${YELLOW}[SKIP]${NC} $*"; }
+fail()  { echo -e "${RED}[FAIL]${NC} $*" >&2; exit 1; }
+
+# ── Gate: tokensave must be available ─────────────────────────────────────────
+if ! command -v tokensave &>/dev/null; then
+  warn "tokensave binary not found — skipping e2e smoke test (install with: brew install aovestdipaperino/tap/tokensave)"
+  exit 0
+fi
+
+TOKENSAVE_VERSION=$(tokensave --version 2>&1 | head -1 || echo "unknown")
+info "tokensave found: ${TOKENSAVE_VERSION}"
+
+# ── Step 1: Build the project ─────────────────────────────────────────────────
+REPO_ROOT="$(cd "$(dirname "${BASH_SOURCE[0]}")/.." && pwd)"
+info "Building agent-bober from ${REPO_ROOT}..."
+cd "${REPO_ROOT}"
+npm run build 2>&1 | tail -5
+ok "Build complete"
+
+# ── Step 2: Create a temp test project ────────────────────────────────────────
+TMP_DIR="$(mktemp -d)"
+trap 'rm -rf "${TMP_DIR}"' EXIT
+info "Temp project: ${TMP_DIR}"
+
+# Initialise a minimal git repo so agent-bober can detect project root
+cd "${TMP_DIR}"
+git init -q
+git commit --allow-empty -m "init" -q
+
+# Write a minimal bober.config.json with graph.enabled=true
+cat > bober.config.json <<'EOF'
+{
+  "project": { "name": "smoke-test", "mode": "brownfield" },
+  "planner": { "model": "sonnet" },
+  "generator": { "model": "sonnet" },
+  "evaluator": { "strategies": [] },
+  "graph": { "enabled": true, "languageTier": "core" }
+}
+EOF
+
+# Add a minimal TypeScript source file
+mkdir -p src
+cat > src/index.ts <<'EOF'
+export function sandboxPath(root: string, p: string): string {
+  return `${root}/${p}`;
+}
+EOF
+
+# Write a package.json so tokensave knows it is a Node project
+cat > package.json <<'EOF'
+{ "name": "smoke-test", "version": "1.0.0" }
+EOF
+
+ok "Temp project created"
+
+# ── Step 3: Link or use agent-bober ───────────────────────────────────────────
+BOBER_BIN="${REPO_ROOT}/node_modules/.bin/agent-bober"
+if [[ ! -f "${BOBER_BIN}" ]]; then
+  # If running from a global install
+  BOBER_BIN="agent-bober"
+fi
+
+# Use the built binary directly for hermetic execution
+NODE_BIN="node ${REPO_ROOT}/dist/cli/index.js"
+
+run_bober() {
+  ${NODE_BIN} "$@"
+}
+
+# ── Step 4: graph init ────────────────────────────────────────────────────────
+info "Running: agent-bober graph init"
+run_bober graph init
+ok "graph init succeeded"
+
+# ── Step 5: graph status ──────────────────────────────────────────────────────
+info "Running: agent-bober graph status --json"
+STATUS_JSON="$(run_bober graph status --json)"
+info "Status output: ${STATUS_JSON}"
+
+# The graph may not be 'ready' if tokensave hasn't fully indexed in CI,
+# but the command should succeed (exit 0) and produce valid JSON.
+echo "${STATUS_JSON}" | node -e "
+  const d = JSON.parse(require('fs').readFileSync('/dev/stdin','utf8'));
+  if (typeof d.indexedFileCount !== 'number') { console.error('Missing indexedFileCount'); process.exit(1); }
+  if (typeof d.stale !== 'boolean') { console.error('Missing stale'); process.exit(1); }
+  console.log('JSON shape OK');
+" || fail "graph status --json produced invalid JSON"
+
+ok "graph status succeeded"
+
+# ── Step 6: onboard ───────────────────────────────────────────────────────────
+info "Running: agent-bober onboard"
+# onboard requires a live graph engine; run it and check artifacts
+run_bober onboard || warn "onboard exited non-zero (graph may not be fully ready)"
+
+ONBOARD_DIR="${TMP_DIR}/.bober/onboarding"
+if [[ -d "${ONBOARD_DIR}" ]]; then
+  ARTIFACT_COUNT="$(ls "${ONBOARD_DIR}"/*.md 2>/dev/null | wc -l | tr -d ' ')"
+  if [[ "${ARTIFACT_COUNT}" -eq 5 ]]; then
+    ok "onboard wrote 5 artifacts"
+  else
+    warn "onboard wrote ${ARTIFACT_COUNT}/5 artifacts (graph may be warming up)"
+  fi
+else
+  warn "onboard directory not created (graph engine may not be ready)"
+fi
+
+# ── Step 7: impact ────────────────────────────────────────────────────────────
+info "Running: agent-bober impact sandboxPath"
+run_bober impact sandboxPath || warn "impact exited non-zero (graph may not be fully ready)"
+
+IMPACT_FILE="${TMP_DIR}/.bober/graph/impact/sandboxpath.md"
+if [[ -f "${IMPACT_FILE}" ]]; then
+  ok "impact report written: .bober/graph/impact/sandboxpath.md"
+  # Verify required sections
+  if grep -q "^# Impact: sandboxPath" "${IMPACT_FILE}" && \
+     grep -q "^## Affected symbols" "${IMPACT_FILE}" && \
+     grep -q "^## Tests covering this symbol" "${IMPACT_FILE}"; then
+    ok "impact report has all required sections"
+  else
+    fail "impact report is missing required sections"
+  fi
+else
+  warn "impact file not created (graph engine may not be ready)"
+fi
+
+# ── Done ──────────────────────────────────────────────────────────────────────
+echo ""
+ok "e2e-graph-smoke.sh completed"
+echo ""
+echo "  Temp project:    ${TMP_DIR} (cleaned up)"
+echo "  Tokensave:       ${TOKENSAVE_VERSION}"