agent-bober 0.17.1 → 0.18.0

package/.claude-plugin/plugin.json

@@ -1,7 +1,7 @@
 {
   "name": "bober",
   "description": "Generator-Evaluator multi-agent harness for building applications autonomously with Claude",
-  "version": "0.17.1",
+  "version": "0.18.0",
   "author": { "name": "BOBER3r" },
   "homepage": "https://agentbober.com",
   "repository": "https://github.com/BOBER3r/agent-bober",

package/CHANGELOG.md

@@ -7,6 +7,21 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ## [Unreleased]
 
+## [0.18.0] — 2026-06-23
+
+### Fixed
+
+- **Standalone `plan` → `sprint` flow**: `plan` now materializes sprint contracts to `.bober/contracts/` after planning. Previously only the `run` pipeline did this, so a standalone `plan` followed by `sprint` failed with "No sprint contracts found." `plan answer` likewise materializes contracts when it resolves a spec to `ready`, and the next-step hints now correctly point to `npx agent-bober sprint`.
+
+### Added
+
+- **Shared `materializeContracts` helper** (`src/orchestrator/contract-materialization.ts`) used by both `plan` and the `run` pipeline as the single source of truth for spec → contract materialization. It prefers valid embedded `spec.sprints[]` (e.g. planner-authored contracts), falling back to feature-derived generation when they are absent or invalid. Contract ids are now deterministic and zero-padded (`sprint-<specId>-NN`) so `listContracts` ordering matches execution order at ten or more sprints.
+- **`run` honors embedded `spec.sprints[]`**: when the planner emits valid embedded contracts, `run` uses them and skips the per-feature precision LLM calls.
+
+### Changed
+
+- **`sprint` scopes to the active spec**: contract selection is now filtered to the latest spec's `specId`, so stale contracts from other specs are not executed. `sprint` also refuses a `needs-clarification` spec (printing the open questions and the correct `plan answer` command) and gives a clearer empty-contracts message pointing at `plan` or `run`.
+
 ## [0.17.1] — 2026-06-13
 
 ### Added

package/README.md

@@ -211,15 +211,27 @@ agent-bober is **provider-agnostic**. Use any LLM provider for any agent role. M
 
 ### Supported Providers
 
-| Provider | Shorthands | API Key |
+| Provider | Shorthands | API Key (env var) |
 |----------|-----------|---------|
 | **Anthropic** (default) | `opus`, `sonnet`, `haiku` | `ANTHROPIC_API_KEY` |
+| **DeepSeek** | `deepseek`, `deepseek-v4-pro`, `deepseek-v4-flash` | `DEEPSEEK_API_KEY` |
 | **OpenAI** | Any OpenAI model ID | `OPENAI_API_KEY` |
 | **Google Gemini** | `gemini-pro`, `gemini-flash` | `GOOGLE_API_KEY` or `GEMINI_API_KEY` |
-| **OpenAI-Compatible** | Any model (Ollama, LM Studio, Groq, DeepSeek, etc.) | Optional |
+| **OpenAI-Compatible** | Any model (Ollama, LM Studio, Groq, custom endpoints) | Optional (none for local servers) |
 
 Shorthands resolve to the latest model version automatically. You can also pass any full model ID directly -- it will be sent to the provider as-is.
 
+> **Which API key do I need? (read this first)**
+>
+> **The default is Anthropic, so `ANTHROPIC_API_KEY` on its own means every role calls Claude — nothing else.** Setting `ANTHROPIC_API_KEY` does **not** turn on DeepSeek. Provider selection is **config-driven, not key-driven**: a key is only used if a role is actually pointed at that provider.
+>
+> To use **DeepSeek** you need **three** things together:
+> 1. `npm install openai` — the OpenAI SDK is the OpenAI-compatible client DeepSeek runs through (an optional peer dependency).
+> 2. `export DEEPSEEK_API_KEY=sk-...` — get a key at <https://platform.deepseek.com>. (`ANTHROPIC_API_KEY` is **not** needed if no role uses Anthropic.)
+> 3. Point one or more roles at DeepSeek in `bober.config.json` — see [DeepSeek setup (full example)](#deepseek-setup-full-example) below.
+>
+> DeepSeek is **not** reachable with the `--provider` CLI flag alone (that flag only swaps the provider name; DeepSeek also needs its model + endpoint) — configure it in `bober.config.json`.
+
 ### Capability Matrix
 
 > **This matrix applies to the standalone CLI / programmatic provider layer only** (`npx agent-bober run …`), where bober calls each provider's API directly. It does **not** apply to the **Claude Code plugin**: when you run a skill like `/bober-run` inside Claude Code, the roles are spawned as Claude Code subagents on your Claude subscription, so provider selection (including `claude-code`) does not apply. See [Claude Code Plugin](#claude-code-plugin) below.
@@ -246,6 +258,65 @@ Each `claude -p` call injects approximately **40,000 tokens of system-prompt ove
 
 See [`docs/providers.md`](docs/providers.md) for copy-paste config snippets for each provider.
 
+### DeepSeek setup (full example)
+
+DeepSeek runs through the built-in OpenAI-compatible adapter pointed at `https://api.deepseek.com`. End-to-end:
+
+**1. Install the OpenAI-compatible client** (one-time):
+
+```bash
+npm install openai
+```
+
+**2. Export your DeepSeek key** (get one at <https://platform.deepseek.com>):
+
+```bash
+export DEEPSEEK_API_KEY=sk-...
+```
+
+**3a. Configure roles — shorthand (simplest).** Set only the `model`; the provider (`openai-compat`) and the `https://api.deepseek.com` endpoint are inferred automatically:
+
+```jsonc
+// bober.config.json — DeepSeek for every role
+{
+  "planner":    { "model": "deepseek-v4-pro" },
+  "researcher": { "model": "deepseek-v4-flash" },
+  "curator":    { "model": "deepseek-v4-pro" },
+  "generator":  { "model": "deepseek-v4-pro" },
+  "evaluator":  { "model": "deepseek-v4-flash" }
+}
+```
+
+**3b. Configure roles — explicit (equivalent).** Spell out the provider and endpoint if you prefer — also the form to use for a self-hosted DeepSeek-compatible gateway:
+
+```jsonc
+{
+  "generator": {
+    "provider": "openai-compat",
+    "model": "deepseek-v4-pro",
+    "endpoint": "https://api.deepseek.com"
+  }
+}
+```
+
+**4. Run:**
+
+```bash
+agent-bober run "Build a REST API with auth and CRUD"
+```
+
+> Use `"provider": "openai-compat"` (as in 3b), **not** `"provider": "deepseek"` — `deepseek` is a *model* shorthand, not a provider name, so `"provider": "deepseek"` is rejected as an unsupported provider.
+
+**Mix providers** — e.g. plan on Claude (highest quality) and generate/evaluate on DeepSeek (cheaper). You then need **both** `ANTHROPIC_API_KEY` and `DEEPSEEK_API_KEY` in your environment:
+
+```jsonc
+{
+  "planner":   { "model": "opus" },
+  "generator": { "model": "deepseek-v4-pro" },
+  "evaluator": { "model": "deepseek-v4-flash" }
+}
+```
+
 ### Configuration
 
 Set providers per agent role in `bober.config.json`:
@@ -437,15 +508,39 @@ The `/bober-principles` command also triggers auto-discovery when called with no
 ```bash
 npx agent-bober init [preset]                            # Initialize project (with provider selection)
 npx agent-bober update                                   # Refresh .claude/ commands + agents after upgrading the package
-npx agent-bober plan "feature"                           # Run the planner
+npx agent-bober plan "feature"                           # Run the planner (also materializes sprint contracts)
 npx agent-bober plan answer <specId>                     # Resolve clarification questions interactively
 npx agent-bober plan answer <specId> <questionId> "..."  # Resolve a single clarification question
-npx agent-bober sprint                                   # Execute next sprint
+npx agent-bober sprint                                   # Execute next sprint (consumes plan's contracts)
 npx agent-bober eval                                     # Evaluate current sprint
 npx agent-bober run "feature"                            # Full autonomous loop
+npx agent-bober run "feature" --team example             # Full autonomous loop using the 'example' team
+npx agent-bober chat                                     # Interactive chat REPL (roster + memory aware)
+npx agent-bober chat example                             # Interactive chat REPL using the 'example' team
 npx agent-bober mcp                                      # Start MCP server (Cursor/Windsurf)
 ```
 
+#### Chat Steer Commands (Phase 2 — mid-flight HITL)
+
+Inside the `bober chat` REPL you can steer in-flight runs with these commands:
+
+| Command | Description |
+|---|---|
+| `/careful [on\|off]` | Toggle approval gates for new runs. When ON, new runs spawn with `--approve-gates post-research,post-plan,post-sprint` and pause at each curated gate waiting for human input. |
+| `/approve <checkpointId>` | Approve a pending checkpoint (e.g. `post-plan`, `post-sprint`) and resume the run. |
+| `/reject <checkpointId> [feedback]` | Reject a pending checkpoint with optional feedback for the run to use on retry. |
+| `/tell <runId> <text>` | Queue free-text guidance for a run — applied at the next pipeline boundary. |
+| `/pause <runId>` | Soft-pause a run at the next cooperative boundary. The process stays alive. |
+| `/resume <runId>` | Resume a soft-paused run. |
+| `/stop <runId>` | Hard-stop a run by killing its process (contrast with `/pause` which is cooperative). |
+| `/runs` | List all active and recent runs. |
+| `/help` | Show the full command list. |
+| `/exit` | Exit the chat session. |
+
+**Curated gates** (triggered by `--approve-gates`): `post-research`, `post-plan`, `post-sprint`. Each gate pauses the run and surfaces a notice in the next chat turn. Use `/approve` or `/reject` to resolve.
+
+**Limitation:** Only one careful run at a time is fully supported. Pending markers are checkpointId-keyed in a shared `.bober/approvals/` directory, so two concurrent careful runs that hit the same gate id would collide. The non-chat equivalents (`list-approvals`, `approve`, `reject`) remain available as fallback. See `docs/chat-steer.md` for the full model and the documented limitations.
+
 #### New Commands (Sprints 9–25)
 
 The following commands were added after the initial release. Full reference in [COMMANDS.md](./COMMANDS.md).
@@ -481,7 +576,7 @@ npx agent-bober playbook search '<symptom>'        # Search by symptom
 
 #### Clarification gating
 
-When the planner can't fully decompose a feature without more information, it stops with `status: "needs-clarification"` instead of fabricating sprints. The CLI surfaces the open questions and you resolve them via `plan answer`. After the last question is answered the spec auto-promotes to `status: "ready"` and the next `sprint`/`run` proceeds. See the **Architecture** section for the full lifecycle.
+When the planner can't fully decompose a feature without more information, it stops with `status: "needs-clarification"` instead of fabricating sprints — and writes **no** contracts. The CLI surfaces the open questions and you resolve them via `plan answer`. After the last question is answered the spec auto-promotes to `status: "ready"`, its sprint contracts are materialized into `.bober/contracts/`, and the next `sprint`/`run` proceeds. See the **Architecture** section for the full lifecycle.
 
 ### Fully Autonomous Mode (no human in the loop)
 
@@ -519,6 +614,17 @@ agent-bober init nextjs
 agent-bober run "Build a complete dashboard with auth, CRUD, and charts" --provider openai
 ```
 
+For **DeepSeek**, set `DEEPSEEK_API_KEY` and point your roles at the `deepseek` model in `bober.config.json` — the `--provider` flag alone is not enough, since DeepSeek also needs its model + endpoint (see [DeepSeek setup (full example)](#deepseek-setup-full-example)):
+
+```bash
+npm install openai
+export DEEPSEEK_API_KEY=sk-...
+cd your-project
+agent-bober init nextjs
+# in bober.config.json set "model": "deepseek-v4-pro" on the roles you want
+agent-bober run "Build a complete dashboard with auth, CRUD, and charts"
+```
+
 ---
 
 ## Lens Panels (multi-perspective evaluation & architecture)
@@ -547,6 +653,38 @@ Leave `lenses` empty to use the full built-in set; `maxConcurrent` bounds how ma
 
 ---
 
+## Teams
+
+agent-bober supports domain-agnostic **teams** — named configurations that route each run or chat session to a distinct set of providers, a separate memory namespace, and a chosen pipeline shape. **Adding a team is data, not code**: declare it in `bober.config.json`, no source changes required.
+
+```jsonc
+{
+  "defaultTeam": "programming",   // Active team when --team / chat <team> is omitted
+  "teams": {
+    "example": {
+      "displayName": "Example research team",
+      "memoryNamespace": "example",   // Lessons land in .bober/memory/example/
+      "pipelineShape": "ts",
+      "providers": { "chat": "openai" }
+    }
+  }
+}
+```
+
+```bash
+npx agent-bober run "summarise research" --team example
+npx agent-bober chat example
+```
+
+The built-in **programming** team is always available (no config entry needed) and uses
+the default `.bober/memory/` path and the project's configured providers.
+
+For full documentation on the three differentiation axes (provider routing / memory
+namespace / pipeline shape), the built-in programming team, and the deferred
+`.bober/teams/*.json` file registry, see [docs/teams.md](./docs/teams.md).
+
+---
+
 ## Configuration
 
 All configuration lives in `bober.config.json` at your project root. The `init` command creates this file from a template, and you can customize it afterward.
@@ -662,6 +800,17 @@ All configuration lives in `bober.config.json` at your project root. The `init`
     "lint":      "npm run lint",
     "dev":       "npm run dev",
     "typecheck": "npx tsc --noEmit"
+  },
+
+  // -- Teams (NEW: adding a team is data, not code) ----
+  "defaultTeam": "programming",           // Optional. Active team when --team / chat <team> is omitted.
+  "teams": {                              // Optional. Each entry is a team defined purely as DATA.
+    "example": {
+      "displayName": "Example research team",
+      "memoryNamespace": "example",       // Lessons land in .bober/memory/example/
+      "pipelineShape": "ts",              // "ts" | "skill" | "workflow"
+      "providers": { "chat": "openai" }   // Partial role->provider override; unset roles keep defaults
+    }
   }
 }
 ```
@@ -957,6 +1106,10 @@ All bober state lives in the `.bober/` directory:
   briefings/       Sprint Briefings (curated codebase context per sprint)
   eval-results/    Evaluation result logs
   handoffs/        Context handoff documents
+  memory/          Self-improvement memory (per-team namespaced)
+    INDEX.md         Distilled lessons index (planner-read)
+    QUARANTINE.md    Pruned/contradictory lessons (moved, never deleted)
+    facts.db         Bi-temporal SQLite semantic-facts store (auto-produced, planner-read)
   progress.md      Human-readable progress tracker
   history.jsonl    Machine-readable event log
 ```

package/dist/chat/answerer.d.ts

@@ -0,0 +1,17 @@
+import type { LLMClient } from "../providers/types.js";
+import type { TurnRecord } from "./conversation-store.js";
+export declare class Answerer {
+    private readonly llm;
+    private readonly model;
+    constructor(llm: LLMClient, model: string);
+    /**
+     * Produce an answer to the user's input, given context.
+     *
+     * @param input - The current user message.
+     * @param rosterSummary - Compact string summary of active runs.
+     * @param memoryDistill - Compact string of lessons from .bober/memory/.
+     * @param recentHistory - Recent prior turns for conversation context.
+     */
+    answer(input: string, rosterSummary: string, memoryDistill: string, recentHistory: TurnRecord[]): Promise<string>;
+}
+//# sourceMappingURL=answerer.d.ts.map

package/dist/chat/answerer.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"answerer.d.ts","sourceRoot":"","sources":["../../src/chat/answerer.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EAAE,SAAS,EAAe,MAAM,uBAAuB,CAAC;AACpE,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,yBAAyB,CAAC;AAI1D,qBAAa,QAAQ;IACnB,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAY;IAChC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAS;gBAEnB,GAAG,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM;IAKzC;;;;;;;OAOG;IACG,MAAM,CACV,KAAK,EAAE,MAAM,EACb,aAAa,EAAE,MAAM,EACrB,aAAa,EAAE,MAAM,EACrB,aAAa,EAAE,UAAU,EAAE,GAC1B,OAAO,CAAC,MAAM,CAAC;CAiCnB"}

package/dist/chat/answerer.js

@@ -0,0 +1,52 @@
+// ── answerer.ts ──────────────────────────────────────────────────────
+//
+// Composes roster summary + memory distill + recent history into one
+// LLMClient.chat call (no jsonObjectMode) and returns the text response.
+// ── Answerer ──────────────────────────────────────────────────────────
+export class Answerer {
+    llm;
+    model;
+    constructor(llm, model) {
+        this.llm = llm;
+        this.model = model;
+    }
+    /**
+     * Produce an answer to the user's input, given context.
+     *
+     * @param input - The current user message.
+     * @param rosterSummary - Compact string summary of active runs.
+     * @param memoryDistill - Compact string of lessons from .bober/memory/.
+     * @param recentHistory - Recent prior turns for conversation context.
+     */
+    async answer(input, rosterSummary, memoryDistill, recentHistory) {
+        const systemParts = [
+            "You are bober, an AI assistant integrated with the agent-bober engineering workflow.",
+            "",
+            "You have access to the following context:",
+            "",
+            "## Active Runs",
+            rosterSummary || "No runs found.",
+            "",
+            "## Project Memory (Lessons Learned)",
+            memoryDistill || "No lessons recorded yet.",
+            "",
+            "Answer the user's question concisely and helpfully.",
+            "If the user asks about runs or agents, use the Active Runs context above.",
+            "If the user asks about past mistakes or learnings, use the Project Memory context.",
+        ];
+        const system = systemParts.join("\n");
+        // Build message history from stored turns + current input
+        const messages = [];
+        for (const turn of recentHistory) {
+            messages.push({ role: turn.role, content: turn.content });
+        }
+        messages.push({ role: "user", content: input });
+        const response = await this.llm.chat({
+            model: this.model,
+            system,
+            messages,
+        });
+        return response.text;
+    }
+}
+//# sourceMappingURL=answerer.js.map

package/dist/chat/answerer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"answerer.js","sourceRoot":"","sources":["../../src/chat/answerer.ts"],"names":[],"mappings":"AAAA,wEAAwE;AACxE,EAAE;AACF,qEAAqE;AACrE,yEAAyE;AAKzE,yEAAyE;AAEzE,MAAM,OAAO,QAAQ;IACF,GAAG,CAAY;IACf,KAAK,CAAS;IAE/B,YAAY,GAAc,EAAE,KAAa;QACvC,IAAI,CAAC,GAAG,GAAG,GAAG,CAAC;QACf,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC;IACrB,CAAC;IAED;;;;;;;OAOG;IACH,KAAK,CAAC,MAAM,CACV,KAAa,EACb,aAAqB,EACrB,aAAqB,EACrB,aAA2B;QAE3B,MAAM,WAAW,GAAa;YAC5B,sFAAsF;YACtF,EAAE;YACF,2CAA2C;YAC3C,EAAE;YACF,gBAAgB;YAChB,aAAa,IAAI,gBAAgB;YACjC,EAAE;YACF,qCAAqC;YACrC,aAAa,IAAI,0BAA0B;YAC3C,EAAE;YACF,qDAAqD;YACrD,2EAA2E;YAC3E,oFAAoF;SACrF,CAAC;QACF,MAAM,MAAM,GAAG,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAEtC,0DAA0D;QAC1D,MAAM,QAAQ,GAAkB,EAAE,CAAC;QACnC,KAAK,MAAM,IAAI,IAAI,aAAa,EAAE,CAAC;YACjC,QAAQ,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC;QAC5D,CAAC;QACD,QAAQ,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC;QAEhD,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC;YACnC,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,MAAM;YACN,QAAQ;SACT,CAAC,CAAC;QAEH,OAAO,QAAQ,CAAC,IAAI,CAAC;IACvB,CAAC;CACF"}

package/dist/chat/approval-cursor.d.ts

@@ -0,0 +1,25 @@
+import type { PendingMarker } from "../state/approval-state.js";
+/**
+ * Stable identity key for a pending marker.
+ * Changes when a gate is re-requested in a later round (different requestedAt),
+ * but is stable while the gate remains at the same requestedAt.
+ */
+export declare function markerKey(m: PendingMarker): string;
+export declare class ApprovalCursor {
+    private readonly projectRoot;
+    private readonly sessionId;
+    constructor(projectRoot: string, sessionId: string);
+    private path;
+    /**
+     * Read the set of already-announced marker keys.
+     * Returns empty set on missing file or malformed JSON — never throws.
+     */
+    private readFile;
+    /**
+     * Return the subset of markers not yet announced, and atomically record
+     * them as announced for this session. Idempotent: calling again with
+     * the same markers returns [].
+     */
+    filterNew(markers: PendingMarker[]): Promise<PendingMarker[]>;
+}
+//# sourceMappingURL=approval-cursor.d.ts.map

package/dist/chat/approval-cursor.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"approval-cursor.d.ts","sourceRoot":"","sources":["../../src/chat/approval-cursor.ts"],"names":[],"mappings":"AAUA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,4BAA4B,CAAC;AAYhE;;;;GAIG;AACH,wBAAgB,SAAS,CAAC,CAAC,EAAE,aAAa,GAAG,MAAM,CAElD;AAID,qBAAa,cAAc;IAEvB,OAAO,CAAC,QAAQ,CAAC,WAAW;IAC5B,OAAO,CAAC,QAAQ,CAAC,SAAS;gBADT,WAAW,EAAE,MAAM,EACnB,SAAS,EAAE,MAAM;IAGpC,OAAO,CAAC,IAAI;IASZ;;;OAGG;YACW,QAAQ;IAQtB;;;;OAIG;IACG,SAAS,CAAC,OAAO,EAAE,aAAa,EAAE,GAAG,OAAO,CAAC,aAAa,EAAE,CAAC;CAmBpE"}

package/dist/chat/approval-cursor.js

@@ -0,0 +1,61 @@
+// ── approval-cursor.ts ────────────────────────────────────────────────
+//
+// Tracks which pending markers have already been announced in chat, by
+// key `${checkpointId}@${requestedAt}`. Persists at
+// .bober/chat/<sessionId>.approvals-cursor.json. Mirrors cursor-store.ts.
+import { readFile, writeFile } from "node:fs/promises";
+import { join } from "node:path";
+import { ensureDir } from "../utils/fs.js";
+const EMPTY = { announced: [] };
+// ── Helpers ───────────────────────────────────────────────────────────
+/**
+ * Stable identity key for a pending marker.
+ * Changes when a gate is re-requested in a later round (different requestedAt),
+ * but is stable while the gate remains at the same requestedAt.
+ */
+export function markerKey(m) {
+    return `${m.checkpointId}@${m.requestedAt}`;
+}
+// ── ApprovalCursor ────────────────────────────────────────────────────
+export class ApprovalCursor {
+    projectRoot;
+    sessionId;
+    constructor(projectRoot, sessionId) {
+        this.projectRoot = projectRoot;
+        this.sessionId = sessionId;
+    }
+    path() {
+        return join(this.projectRoot, ".bober", "chat", `${this.sessionId}.approvals-cursor.json`);
+    }
+    /**
+     * Read the set of already-announced marker keys.
+     * Returns empty set on missing file or malformed JSON — never throws.
+     */
+    async readFile() {
+        try {
+            return JSON.parse(await readFile(this.path(), "utf-8"));
+        }
+        catch {
+            return { ...EMPTY };
+        }
+    }
+    /**
+     * Return the subset of markers not yet announced, and atomically record
+     * them as announced for this session. Idempotent: calling again with
+     * the same markers returns [].
+     */
+    async filterNew(markers) {
+        const file = await this.readFile();
+        const seen = new Set(file.announced);
+        const fresh = markers.filter((m) => !seen.has(markerKey(m)));
+        if (fresh.length > 0) {
+            for (const m of fresh) {
+                seen.add(markerKey(m));
+            }
+            await ensureDir(join(this.projectRoot, ".bober", "chat"));
+            await writeFile(this.path(), JSON.stringify({ announced: [...seen] }, null, 2) + "\n", { encoding: "utf-8", mode: 0o600 });
+        }
+        return fresh;
+    }
+}
+//# sourceMappingURL=approval-cursor.js.map

package/dist/chat/approval-cursor.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"approval-cursor.js","sourceRoot":"","sources":["../../src/chat/approval-cursor.ts"],"names":[],"mappings":"AAAA,yEAAyE;AACzE,EAAE;AACF,uEAAuE;AACvE,oDAAoD;AACpD,0EAA0E;AAE1E,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AACvD,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAEjC,OAAO,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAC;AAS3C,MAAM,KAAK,GAAkB,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC;AAE/C,yEAAyE;AAEzE;;;;GAIG;AACH,MAAM,UAAU,SAAS,CAAC,CAAgB;IACxC,OAAO,GAAG,CAAC,CAAC,YAAY,IAAI,CAAC,CAAC,WAAW,EAAE,CAAC;AAC9C,CAAC;AAED,yEAAyE;AAEzE,MAAM,OAAO,cAAc;IAEN;IACA;IAFnB,YACmB,WAAmB,EACnB,SAAiB;QADjB,gBAAW,GAAX,WAAW,CAAQ;QACnB,cAAS,GAAT,SAAS,CAAQ;IACjC,CAAC;IAEI,IAAI;QACV,OAAO,IAAI,CACT,IAAI,CAAC,WAAW,EAChB,QAAQ,EACR,MAAM,EACN,GAAG,IAAI,CAAC,SAAS,wBAAwB,CAC1C,CAAC;IACJ,CAAC;IAED;;;OAGG;IACK,KAAK,CAAC,QAAQ;QACpB,IAAI,CAAC;YACH,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,QAAQ,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,OAAO,CAAC,CAAkB,CAAC;QAC3E,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,EAAE,GAAG,KAAK,EAAE,CAAC;QACtB,CAAC;IACH,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,SAAS,CAAC,OAAwB;QACtC,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,QAAQ,EAAE,CAAC;QACnC,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QACrC,MAAM,KAAK,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAE7D,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACrB,KAAK,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;gBACtB,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC;YACzB,CAAC;YACD,MAAM,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAC;YAC1D,MAAM,SAAS,CACb,IAAI,CAAC,IAAI,EAAE,EACX,IAAI,CAAC,SAAS,CAAC,EAAE,SAAS,EAAE,CAAC,GAAG,IAAI,CAAC,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,EACxD,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,CACnC,CAAC;QACJ,CAAC;QAED,OAAO,KAAK,CAAC;IACf,CAAC;CACF"}

package/dist/chat/approval-reader.d.ts

@@ -0,0 +1,11 @@
+import type { PendingMarker } from "../state/approval-state.js";
+export declare class ApprovalReader {
+    private readonly projectRoot;
+    constructor(projectRoot: string);
+    /**
+     * Read all pending markers from .bober/approvals/*.pending.json.
+     * Missing dir => []; corrupt files skipped silently (delegated to listPending).
+     */
+    read(): Promise<PendingMarker[]>;
+}
+//# sourceMappingURL=approval-reader.d.ts.map

package/dist/chat/approval-reader.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"approval-reader.d.ts","sourceRoot":"","sources":["../../src/chat/approval-reader.ts"],"names":[],"mappings":"AAMA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,4BAA4B,CAAC;AAIhE,qBAAa,cAAc;IACb,OAAO,CAAC,QAAQ,CAAC,WAAW;gBAAX,WAAW,EAAE,MAAM;IAEhD;;;OAGG;IACG,IAAI,IAAI,OAAO,CAAC,aAAa,EAAE,CAAC;CAGvC"}

package/dist/chat/approval-reader.js

@@ -0,0 +1,20 @@
+// ── approval-reader.ts ────────────────────────────────────────────────
+//
+// Read-only wrapper over listPending for chat context.
+// NEVER writes approval markers (Sprint 3 owns the write path).
+import { listPending } from "../state/approval-state.js";
+// ── ApprovalReader ────────────────────────────────────────────────────
+export class ApprovalReader {
+    projectRoot;
+    constructor(projectRoot) {
+        this.projectRoot = projectRoot;
+    }
+    /**
+     * Read all pending markers from .bober/approvals/*.pending.json.
+     * Missing dir => []; corrupt files skipped silently (delegated to listPending).
+     */
+    async read() {
+        return listPending(this.projectRoot);
+    }
+}
+//# sourceMappingURL=approval-reader.js.map

package/dist/chat/approval-reader.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"approval-reader.js","sourceRoot":"","sources":["../../src/chat/approval-reader.ts"],"names":[],"mappings":"AAAA,yEAAyE;AACzE,EAAE;AACF,uDAAuD;AACvD,gEAAgE;AAEhE,OAAO,EAAE,WAAW,EAAE,MAAM,4BAA4B,CAAC;AAGzD,yEAAyE;AAEzE,MAAM,OAAO,cAAc;IACI;IAA7B,YAA6B,WAAmB;QAAnB,gBAAW,GAAX,WAAW,CAAQ;IAAG,CAAC;IAEpD;;;OAGG;IACH,KAAK,CAAC,IAAI;QACR,OAAO,WAAW,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;IACvC,CAAC;CACF"}

package/dist/chat/careful-sidecar.d.ts

@@ -0,0 +1,15 @@
+export declare class CarefulSidecar {
+    private readonly projectRoot;
+    private readonly sessionId;
+    constructor(projectRoot: string, sessionId: string);
+    private path;
+    /**
+     * Read the careful flag. Missing/malformed file => false (autopilot). Never throws.
+     */
+    isCareful(): Promise<boolean>;
+    /**
+     * Persist the careful flag atomically.
+     */
+    setCareful(on: boolean): Promise<void>;
+}
+//# sourceMappingURL=careful-sidecar.d.ts.map

package/dist/chat/careful-sidecar.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"careful-sidecar.d.ts","sourceRoot":"","sources":["../../src/chat/careful-sidecar.ts"],"names":[],"mappings":"AAYA,qBAAa,cAAc;IAEvB,OAAO,CAAC,QAAQ,CAAC,WAAW;IAC5B,OAAO,CAAC,QAAQ,CAAC,SAAS;gBADT,WAAW,EAAE,MAAM,EACnB,SAAS,EAAE,MAAM;IAGpC,OAAO,CAAC,IAAI;IAIZ;;OAEG;IACG,SAAS,IAAI,OAAO,CAAC,OAAO,CAAC;IASnC;;OAEG;IACG,UAAU,CAAC,EAAE,EAAE,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC;CAQ7C"}

package/dist/chat/careful-sidecar.js

@@ -0,0 +1,39 @@
+// ── careful-sidecar.ts ─────────────────────────────────────────────────
+//
+// Persists the per-session "careful mode" toggle at
+// .bober/chat/<sessionId>.careful.json. Default off → autopilot (Phase 1).
+import { readFile, writeFile } from "node:fs/promises";
+import { join } from "node:path";
+import { ensureDir } from "../utils/fs.js";
+// ── CarefulSidecar ────────────────────────────────────────────────────
+export class CarefulSidecar {
+    projectRoot;
+    sessionId;
+    constructor(projectRoot, sessionId) {
+        this.projectRoot = projectRoot;
+        this.sessionId = sessionId;
+    }
+    path() {
+        return join(this.projectRoot, ".bober", "chat", `${this.sessionId}.careful.json`);
+    }
+    /**
+     * Read the careful flag. Missing/malformed file => false (autopilot). Never throws.
+     */
+    async isCareful() {
+        try {
+            const data = JSON.parse(await readFile(this.path(), "utf-8"));
+            return data.careful === true;
+        }
+        catch {
+            return false;
+        }
+    }
+    /**
+     * Persist the careful flag atomically.
+     */
+    async setCareful(on) {
+        await ensureDir(join(this.projectRoot, ".bober", "chat"));
+        await writeFile(this.path(), JSON.stringify({ careful: on }, null, 2) + "\n", { encoding: "utf-8", mode: 0o600 });
+    }
+}
+//# sourceMappingURL=careful-sidecar.js.map

package/dist/chat/careful-sidecar.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"careful-sidecar.js","sourceRoot":"","sources":["../../src/chat/careful-sidecar.ts"],"names":[],"mappings":"AAAA,0EAA0E;AAC1E,EAAE;AACF,oDAAoD;AACpD,2EAA2E;AAE3E,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AACvD,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAEjC,OAAO,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAC;AAE3C,yEAAyE;AAEzE,MAAM,OAAO,cAAc;IAEN;IACA;IAFnB,YACmB,WAAmB,EACnB,SAAiB;QADjB,gBAAW,GAAX,WAAW,CAAQ;QACnB,cAAS,GAAT,SAAS,CAAQ;IACjC,CAAC;IAEI,IAAI;QACV,OAAO,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,QAAQ,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC,SAAS,eAAe,CAAC,CAAC;IACpF,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,SAAS;QACb,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,QAAQ,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,OAAO,CAAC,CAA0B,CAAC;YACvF,OAAO,IAAI,CAAC,OAAO,KAAK,IAAI,CAAC;QAC/B,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,UAAU,CAAC,EAAW;QAC1B,MAAM,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAC;QAC1D,MAAM,SAAS,CACb,IAAI,CAAC,IAAI,EAAE,EACX,IAAI,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,EAC/C,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,CACnC,CAAC;IACJ,CAAC;CACF"}