agent-bober 0.17.1 → 0.19.0

package/dist/calendar/google-connector.js

@@ -0,0 +1,129 @@
+/**
+ * Google Calendar connector — implements CalendarConnector via external MCP subprocess.
+ *
+ * SECURITY NOTICES:
+ * - Requires calendar.egress.cloudCalendar: true (fail-closed; default false).
+ * - Requires a provisioned 0600 token sidecar (.bober/calendar/google-token.json).
+ * - ONLY finding.calendarSafeTitle (or the generic "Focus block") leaves the device.
+ *   NEVER use PlanItem.title — it falls back to the full Finding.title (see slotter.ts:209).
+ * - Errors are sanitized: KEY=VALUE env assignments are redacted before throw.
+ *
+ * UNATTENDED / CRON WARNING:
+ * Hosted OAuth is UNFIT for unattended or cron-scheduled runs because tokens expire
+ * and interactive re-authorization is required. For scheduled use, choose the local
+ * .ics fallback: `bober calendar plan --export-ics` (Sprint 2, zero-egress).
+ *
+ * The GoogleCalendarToolAdapter interface is the injection surface — ExternalMcpServer
+ * satisfies it structurally in production; tests inject a stub (no live OAuth/network in CI).
+ */
+import { z } from "zod";
+// ── Error sanitization (replicates external-client.ts:69) ─────────────
+/**
+ * Strip KEY=VALUE env assignments so tokens never surface in error messages.
+ * Replicated inline — do NOT import from src/hub (calendar avoids cross-spec coupling;
+ * see types.ts:7-11). Matches src/mcp/external-client.ts:69 exactly.
+ */
+export function sanitizeCalendarError(msg) {
+    return msg.replace(/\b[A-Z_][A-Z0-9_]*=\S+/g, "[redacted]");
+}
+// ── BusyInterval Zod schema (for runtime parse of adapter response) ────
+const BusyIntervalSchema = z.object({
+    startIso: z.string(),
+    endIso: z.string(),
+});
+// ── Internal helpers ──────────────────────────────────────────────────
+/** Generic placeholder title used when a finding has no calendarSafeTitle. */
+const PLACEHOLDER_TITLE = "Focus block";
+/** Default tool names; overridable via opts for server-specific naming. */
+const DEFAULT_FREE_BUSY_TOOL = "google_calendar_get_free_busy";
+const DEFAULT_WRITE_EVENT_TOOL = "google_calendar_create_event";
+/**
+ * Parse the callTool result — tolerates both the SDK envelope shape
+ * { content: [{ text: "..." }] } and a raw JSON string / array.
+ * Mirrors src/vault/mcp-adapter.ts:94-101.
+ */
+function extractText(raw) {
+    if (typeof raw === "string")
+        return raw;
+    const envelope = raw;
+    if (Array.isArray(envelope.content) && envelope.content[0]?.text != null) {
+        return envelope.content[0].text;
+    }
+    // Fallback: JSON-serialise and let the caller parse
+    return JSON.stringify(raw);
+}
+/**
+ * Create a Google Calendar connector implementing CalendarConnector.
+ *
+ * The returned object is structurally interchangeable with createIcsConnector
+ * (both satisfy CalendarConnector) so callers can swap connectors behind the
+ * same interface (DoD sc-3-2).
+ */
+export function createGoogleConnector(opts) {
+    // Build safe-title lookup ONCE: findingId -> calendarSafeTitle (may be undefined).
+    // This is the ONLY safe source for event summaries — do NOT use PlanItem.title.
+    const safeTitleById = new Map(opts.findings.map((f) => [f.id, f.calendarSafeTitle]));
+    const freeBusyToolName = opts.freeBusyTool ?? DEFAULT_FREE_BUSY_TOOL;
+    const writeEventToolName = opts.writeEventTool ?? DEFAULT_WRITE_EVENT_TOOL;
+    /**
+     * Shared guard: egress check + token-present check.
+     * MUST be called at the TOP of each public method, BEFORE any adapter call.
+     * sc-3-3: when the axis is off, assertCloudCalendarAllowed() throws and the
+     * adapter's listTools/callTool methods are never reached.
+     */
+    function guard() {
+        opts.egress.assertCloudCalendarAllowed(); // throws naming calendar.egress.cloudCalendar
+        if (opts.token === undefined) {
+            throw new Error("Google Calendar token absent — provision the 0600 sidecar at " +
+                ".bober/calendar/google-token.json, or use the local .ics fallback " +
+                "(`bober calendar plan --export-ics`) for unattended/cron runs.");
+        }
+    }
+    return {
+        name: "google",
+        async readFreeBusy(window) {
+            guard(); // BEFORE any adapter call (sc-3-3)
+            try {
+                const raw = await opts.adapter.callTool(freeBusyToolName, {
+                    timeMin: window.windowStartIso,
+                    timeMax: window.windowEndIso,
+                });
+                const text = extractText(raw);
+                // Parse and validate against BusyInterval shape
+                const parsed = JSON.parse(text);
+                const intervals = z.array(BusyIntervalSchema).parse(parsed);
+                return intervals;
+            }
+            catch (err) {
+                const m = err instanceof Error ? err.message : String(err);
+                throw new Error(`google free/busy failed: ${sanitizeCalendarError(m)}`, { cause: err }); // sc-3-6
+            }
+        },
+        async writeEvents(items) {
+            guard(); // BEFORE any adapter call (sc-3-3)
+            let written = 0;
+            try {
+                for (const item of items) {
+                    // sc-3-4: ONLY calendarSafeTitle from the findings map may leave the device.
+                    // Never item.title — slotter sets it to calendarSafeTitle ?? finding.title,
+                    // so it may contain the full sensitive title.
+                    const summary = safeTitleById.get(item.findingId) ??
+                        item.calendarSafeTitle ??
+                        PLACEHOLDER_TITLE;
+                    await opts.adapter.callTool(writeEventToolName, {
+                        summary, // the ONLY field that originates from Finding; no evidence/tags/full-title
+                        start: item.startIso,
+                        end: item.endIso,
+                    });
+                    written++;
+                }
+            }
+            catch (err) {
+                const m = err instanceof Error ? err.message : String(err);
+                throw new Error(`google write failed: ${sanitizeCalendarError(m)}`, { cause: err }); // sc-3-6
+            }
+            return { writtenCount: written, target: "google" };
+        },
+    };
+}
+//# sourceMappingURL=google-connector.js.map

package/dist/calendar/google-connector.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"google-connector.js","sourceRoot":"","sources":["../../src/calendar/google-connector.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAiBxB,yEAAyE;AAEzE;;;;GAIG;AACH,MAAM,UAAU,qBAAqB,CAAC,GAAW;IAC/C,OAAO,GAAG,CAAC,OAAO,CAAC,yBAAyB,EAAE,YAAY,CAAC,CAAC;AAC9D,CAAC;AAED,0EAA0E;AAE1E,MAAM,kBAAkB,GAAG,CAAC,CAAC,MAAM,CAAC;IAClC,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE;IACpB,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE;CACnB,CAAC,CAAC;AAEH,yEAAyE;AAEzE,8EAA8E;AAC9E,MAAM,iBAAiB,GAAG,aAAa,CAAC;AAExC,2EAA2E;AAC3E,MAAM,sBAAsB,GAAG,+BAA+B,CAAC;AAC/D,MAAM,wBAAwB,GAAG,8BAA8B,CAAC;AAEhE;;;;GAIG;AACH,SAAS,WAAW,CAAC,GAAY;IAC/B,IAAI,OAAO,GAAG,KAAK,QAAQ;QAAE,OAAO,GAAG,CAAC;IACxC,MAAM,QAAQ,GAAG,GAA6C,CAAC;IAC/D,IAAI,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,IAAI,IAAI,IAAI,EAAE,CAAC;QACzE,OAAO,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,IAAc,CAAC;IAC5C,CAAC;IACD,oDAAoD;IACpD,OAAO,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;AAC7B,CAAC;AAyBD;;;;;;GAMG;AACH,MAAM,UAAU,qBAAqB,CAAC,IAA4B;IAChE,mFAAmF;IACnF,gFAAgF;IAChF,MAAM,aAAa,GAAG,IAAI,GAAG,CAC3B,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,iBAAiB,CAAC,CAAC,CACtD,CAAC;IAEF,MAAM,gBAAgB,GAAG,IAAI,CAAC,YAAY,IAAI,sBAAsB,CAAC;IACrE,MAAM,kBAAkB,GAAG,IAAI,CAAC,cAAc,IAAI,wBAAwB,CAAC;IAE3E;;;;;OAKG;IACH,SAAS,KAAK;QACZ,IAAI,CAAC,MAAM,CAAC,0BAA0B,EAAE,CAAC,CAAC,8CAA8C;QACxF,IAAI,IAAI,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;YAC7B,MAAM,IAAI,KAAK,CACb,+DAA+D;gBAC7D,oEAAoE;gBACpE,gEAAgE,CACnE,CAAC;QACJ,CAAC;IACH,CAAC;IAED,OAAO;QACL,IAAI,EAAE,QAAQ;QAEd,KAAK,CAAC,YAAY,CAAC,MAAsB;YACvC,KAAK,EAAE,CAAC,CAAC,mCAAmC;YAC5C,IAAI,CAAC;gBACH,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,gBAAgB,EAAE;oBACxD,OAAO,EAAE,MAAM,CAAC,cAAc;oBAC9B,OAAO,EAAE,MAAM,CAAC,YAAY;iBAC7B,CAAC,CAAC;gBACH,MAAM,IAAI,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC;gBAC9B,gDAAgD;gBAChD,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAY,CAAC;gBAC3C,MAAM,SAAS,GAAG,CAAC,CAAC,KAAK,CAAC,kBAAkB,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;gBAC5D,OAAO,SAAS,CAAC;YACnB,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,MAAM,CAAC,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;gBAC3D,MAAM,IAAI,KAAK,CAAC,4BAA4B,qBAAqB,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,SAAS;YACpG,CAAC;QACH,CAAC;QAED,KAAK,CAAC,WAAW,CAAC,KAAiB;YACjC,KAAK,EAAE,CAAC,CAAC,mCAAmC;YAC5C,IAAI,OAAO,GAAG,CAAC,CAAC;YAChB,IAAI,CAAC;gBACH,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;oBACzB,6EAA6E;oBAC7E,4EAA4E;oBAC5E,8CAA8C;oBAC9C,MAAM,OAAO,GACX,aAAa,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC;wBACjC,IAAI,CAAC,iBAAiB;wBACtB,iBAAiB,CAAC;oBAEpB,MAAM,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,kBAAkB,EAAE;wBAC9C,OAAO,EAAE,2EAA2E;wBACpF,KAAK,EAAE,IAAI,CAAC,QAAQ;wBACpB,GAAG,EAAE,IAAI,CAAC,MAAM;qBACjB,CAAC,CAAC;oBACH,OAAO,EAAE,CAAC;gBACZ,CAAC;YACH,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,MAAM,CAAC,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;gBAC3D,MAAM,IAAI,KAAK,CAAC,wBAAwB,qBAAqB,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,SAAS;YAChG,CAAC;YACD,OAAO,EAAE,YAAY,EAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC;QACrD,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/calendar/ics-connector.d.ts

@@ -0,0 +1,12 @@
+/** Local-first RFC 5545 (.ics) connector — materializes a plan to disk with ZERO network egress. */
+import type { CalendarConnector } from "./connector.js";
+export interface IcsConnectorOptions {
+    /** Absolute path the .ics file is written to. */
+    outPath: string;
+    /** Optional local free/busy JSON file (BusyInterval[]). */
+    freeBusyPath?: string;
+    /** Injectable clock for DTSTAMP determinism (default: new Date().toISOString()). */
+    nowIso?: string;
+}
+export declare function createIcsConnector(opts: IcsConnectorOptions): CalendarConnector;
+//# sourceMappingURL=ics-connector.d.ts.map

package/dist/calendar/ics-connector.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ics-connector.d.ts","sourceRoot":"","sources":["../../src/calendar/ics-connector.ts"],"names":[],"mappings":"AAAA,oGAAoG;AAKpG,OAAO,KAAK,EAAE,iBAAiB,EAA+B,MAAM,gBAAgB,CAAC;AAgDrF,MAAM,WAAW,mBAAmB;IAClC,iDAAiD;IACjD,OAAO,EAAE,MAAM,CAAC;IAChB,2DAA2D;IAC3D,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,oFAAoF;IACpF,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,mBAAmB,GAAG,iBAAiB,CAa/E"}

package/dist/calendar/ics-connector.js

@@ -0,0 +1,48 @@
+/** Local-first RFC 5545 (.ics) connector — materializes a plan to disk with ZERO network egress. */
+import { writeFile } from "node:fs/promises";
+import { readBusyIntervalsFromFile } from "./finding-source.js";
+// ── ISO → RFC 5545 UTC basic-format ───────────────────────────────────
+/** "2026-06-29T08:30:00.000Z" → "20260629T083000Z" (deterministic, no locale). */
+function toIcsUtc(iso) {
+    return new Date(iso).toISOString().replace(/[-:]/g, "").replace(/\.\d{3}Z$/, "Z");
+}
+// ── RFC 5545 TEXT escaping (3.3.11) ───────────────────────────────────
+/** Escape backslash FIRST, then newline, comma, semicolon. */
+function escapeText(s) {
+    return s
+        .replace(/\\/g, "\\\\")
+        .replace(/\n/g, "\\n")
+        .replace(/,/g, "\\,")
+        .replace(/;/g, "\\;");
+}
+// ── VEVENT / VCALENDAR serialization ──────────────────────────────────
+const CRLF = "\r\n";
+function serializePlan(items, dtstampIso) {
+    const lines = [
+        "BEGIN:VCALENDAR",
+        "VERSION:2.0",
+        "PRODID:-//agent-bober//calendar-planner//EN",
+    ];
+    const dtstamp = toIcsUtc(dtstampIso);
+    for (const item of items) {
+        lines.push("BEGIN:VEVENT", `UID:${item.findingId}@agent-bober`, `DTSTAMP:${dtstamp}`, `DTSTART:${toIcsUtc(item.startIso)}`, `DTEND:${toIcsUtc(item.endIso)}`, `SUMMARY:${escapeText(item.title)}`, "END:VEVENT");
+    }
+    lines.push("END:VCALENDAR");
+    return lines.join(CRLF) + CRLF; // trailing CRLF per spec
+}
+export function createIcsConnector(opts) {
+    return {
+        name: "ics",
+        async readFreeBusy(_window) {
+            if (opts.freeBusyPath === undefined)
+                return [];
+            return readBusyIntervalsFromFile(opts.freeBusyPath); // node:fs/promises only
+        },
+        async writeEvents(items) {
+            const ics = serializePlan(items, opts.nowIso ?? new Date().toISOString());
+            await writeFile(opts.outPath, ics, "utf-8");
+            return { writtenCount: items.length, target: opts.outPath };
+        },
+    };
+}
+//# sourceMappingURL=ics-connector.js.map

package/dist/calendar/ics-connector.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ics-connector.js","sourceRoot":"","sources":["../../src/calendar/ics-connector.ts"],"names":[],"mappings":"AAAA,oGAAoG;AAEpG,OAAO,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAC7C,OAAO,EAAE,yBAAyB,EAAE,MAAM,qBAAqB,CAAC;AAIhE,yEAAyE;AAEzE,kFAAkF;AAClF,SAAS,QAAQ,CAAC,GAAW;IAC3B,OAAO,IAAI,IAAI,CAAC,GAAG,CAAC,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,WAAW,EAAE,GAAG,CAAC,CAAC;AACpF,CAAC;AAED,yEAAyE;AAEzE,8DAA8D;AAC9D,SAAS,UAAU,CAAC,CAAS;IAC3B,OAAO,CAAC;SACL,OAAO,CAAC,KAAK,EAAE,MAAM,CAAC;SACtB,OAAO,CAAC,KAAK,EAAE,KAAK,CAAC;SACrB,OAAO,CAAC,IAAI,EAAE,KAAK,CAAC;SACpB,OAAO,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;AAC1B,CAAC;AAED,yEAAyE;AAEzE,MAAM,IAAI,GAAG,MAAM,CAAC;AAEpB,SAAS,aAAa,CAAC,KAAiB,EAAE,UAAkB;IAC1D,MAAM,KAAK,GAAa;QACtB,iBAAiB;QACjB,aAAa;QACb,6CAA6C;KAC9C,CAAC;IACF,MAAM,OAAO,GAAG,QAAQ,CAAC,UAAU,CAAC,CAAC;IACrC,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,KAAK,CAAC,IAAI,CACR,cAAc,EACd,OAAO,IAAI,CAAC,SAAS,cAAc,EACnC,WAAW,OAAO,EAAE,EACpB,WAAW,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,EACpC,SAAS,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,EAChC,WAAW,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,EACnC,YAAY,CACb,CAAC;IACJ,CAAC;IACD,KAAK,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;IAC5B,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,CAAC,yBAAyB;AAC3D,CAAC;AAaD,MAAM,UAAU,kBAAkB,CAAC,IAAyB;IAC1D,OAAO;QACL,IAAI,EAAE,KAAK;QACX,KAAK,CAAC,YAAY,CAAC,OAAuB;YACxC,IAAI,IAAI,CAAC,YAAY,KAAK,SAAS;gBAAE,OAAO,EAAE,CAAC;YAC/C,OAAO,yBAAyB,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,wBAAwB;QAC/E,CAAC;QACD,KAAK,CAAC,WAAW,CAAC,KAAiB;YACjC,MAAM,GAAG,GAAG,aAAa,CAAC,KAAK,EAAE,IAAI,CAAC,MAAM,IAAI,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,CAAC;YAC1E,MAAM,SAAS,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,EAAE,OAAO,CAAC,CAAC;YAC5C,OAAO,EAAE,YAAY,EAAE,KAAK,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,CAAC,OAAO,EAAE,CAAC;QAC9D,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/calendar/proposal-gate.d.ts

@@ -0,0 +1,84 @@
+/**
+ * Calendar approval gate — propose (write pending marker, ZERO events) →
+ * approve out-of-band → apply (writeEvents exactly once) → adjust (pure re-slot).
+ *
+ * Reuses src/state/approval-state.ts for marker storage — no new approval mechanism.
+ * checkpointId convention: `calendar-${planId}` mirrors do-bridge's `promote-${findingId}`
+ * so the existing `bober approve calendar-<id>` / `/approve calendar-<id>` flows work
+ * with zero new wiring.
+ *
+ * ALL filesystem writes (pending marker, plan sidecar) live in this module.
+ * src/cli/commands/calendar.ts MUST NOT import writeFile — the Sprint-1 source-scan
+ * test (calendar.test.ts:129-141) enforces this.
+ */
+import type { CalendarConnector } from "./connector.js";
+import type { Finding, BusyInterval, SlotConstraints, ProposedPlan } from "./types.js";
+/** Arguments for proposePlan — all I/O dependencies are injected for testability. */
+export interface ProposeArgs {
+    /** Absolute project root (used for .bober/approvals and .bober/calendar paths). */
+    projectRoot: string;
+    /** Plan id — checkpointId = `calendar-${planId}`. */
+    planId: string;
+    /** The proposed plan from planSlots. */
+    plan: ProposedPlan;
+    /** Name of the chosen connector (informational; stored in sidecar). */
+    connectorName: string;
+    /** Clock injection — returns an ISO string. */
+    now: () => string;
+    /** Timeout in ms before the pending marker expires. Default 24 hours. */
+    timeoutMs?: number;
+}
+export type ApplyOutcome = {
+    status: "applied";
+    writtenCount: number;
+} | {
+    status: "rejected";
+    feedback?: string;
+} | {
+    status: "pending";
+};
+/**
+ * A constraint delta for adjustPlan — models a /tell-style user correction.
+ * Note: SlotConstraints has no `excludeInterval` field; model exclusions by appending
+ * a BusyInterval to the busy[] array (do NOT add new fields to SlotConstraints).
+ */
+export interface ConstraintDelta {
+    /** Appended to busy[] to model an excluded interval. */
+    excludeInterval?: BusyInterval;
+    /** Shift the planning window start. */
+    windowStartIso?: string;
+    /** Shift the planning window end. */
+    windowEndIso?: string;
+}
+/**
+ * Write a pending approval marker + plan sidecar for the proposed schedule.
+ * Calls ZERO connector.writeEvents — approval is strictly out-of-band.
+ *
+ * All filesystem writes live here:
+ *   1. Plan sidecar (.bober/calendar/<id>.plan.json) — holds ProposedPlan + connectorName.
+ *   2. Pending marker (.bober/approvals/<id>.pending.json) — artifact.path → sidecar.
+ */
+export declare function proposePlan(args: ProposeArgs): Promise<{
+    checkpointId: string;
+}>;
+/**
+ * Gate on the approval marker; on approval reload the plan sidecar and call
+ * connector.writeEvents exactly once; on rejection skip the write entirely.
+ *
+ * There is no readApproved/readRejected export from approval-state.ts.
+ * We detect the marker by building the path inline — mirrors the approach in
+ * src/cli/commands/approve.ts:41 and src/do-bridge/promote.ts:140-146.
+ *
+ * Note: deletePending is best-effort (never throws); gate control is based on
+ * the presence of the approved/rejected marker, not on the pending marker.
+ */
+export declare function applyPlan(projectRoot: string, checkpointId: string, connector: CalendarConnector): Promise<ApplyOutcome>;
+/**
+ * PURE re-slot under a constraint delta — models a /tell-style user correction.
+ * Re-runs the Sprint-1 planSlots with a modified busy[] or window; writes NOTHING.
+ *
+ * Model an "exclude interval" by appending a BusyInterval (SlotConstraints has
+ * no excludeInterval field — do NOT add one).
+ */
+export declare function adjustPlan(findings: Finding[], busy: BusyInterval[], constraints: SlotConstraints, delta: ConstraintDelta): ProposedPlan;
+//# sourceMappingURL=proposal-gate.d.ts.map

package/dist/calendar/proposal-gate.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"proposal-gate.d.ts","sourceRoot":"","sources":["../../src/calendar/proposal-gate.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAQH,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,gBAAgB,CAAC;AACxD,OAAO,KAAK,EAAE,OAAO,EAAE,YAAY,EAAE,eAAe,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAiBvF,qFAAqF;AACrF,MAAM,WAAW,WAAW;IAC1B,mFAAmF;IACnF,WAAW,EAAE,MAAM,CAAC;IACpB,qDAAqD;IACrD,MAAM,EAAE,MAAM,CAAC;IACf,wCAAwC;IACxC,IAAI,EAAE,YAAY,CAAC;IACnB,uEAAuE;IACvE,aAAa,EAAE,MAAM,CAAC;IACtB,+CAA+C;IAC/C,GAAG,EAAE,MAAM,MAAM,CAAC;IAClB,yEAAyE;IACzE,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAID,MAAM,MAAM,YAAY,GACpB;IAAE,MAAM,EAAE,SAAS,CAAC;IAAC,YAAY,EAAE,MAAM,CAAA;CAAE,GAC3C;IAAE,MAAM,EAAE,UAAU,CAAC;IAAC,QAAQ,CAAC,EAAE,MAAM,CAAA;CAAE,GACzC;IAAE,MAAM,EAAE,SAAS,CAAA;CAAE,CAAC;AAI1B;;;;GAIG;AACH,MAAM,WAAW,eAAe;IAC9B,wDAAwD;IACxD,eAAe,CAAC,EAAE,YAAY,CAAC;IAC/B,uCAAuC;IACvC,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,qCAAqC;IACrC,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAcD;;;;;;;GAOG;AACH,wBAAsB,WAAW,CAAC,IAAI,EAAE,WAAW,GAAG,OAAO,CAAC;IAAE,YAAY,EAAE,MAAM,CAAA;CAAE,CAAC,CAsCtF;AAID;;;;;;;;;;GAUG;AACH,wBAAsB,SAAS,CAC7B,WAAW,EAAE,MAAM,EACnB,YAAY,EAAE,MAAM,EACpB,SAAS,EAAE,iBAAiB,GAC3B,OAAO,CAAC,YAAY,CAAC,CA8CvB;AAID;;;;;;GAMG;AACH,wBAAgB,UAAU,CACxB,QAAQ,EAAE,OAAO,EAAE,EACnB,IAAI,EAAE,YAAY,EAAE,EACpB,WAAW,EAAE,eAAe,EAC5B,KAAK,EAAE,eAAe,GACrB,YAAY,CAWd"}

package/dist/calendar/proposal-gate.js

@@ -0,0 +1,126 @@
+/**
+ * Calendar approval gate — propose (write pending marker, ZERO events) →
+ * approve out-of-band → apply (writeEvents exactly once) → adjust (pure re-slot).
+ *
+ * Reuses src/state/approval-state.ts for marker storage — no new approval mechanism.
+ * checkpointId convention: `calendar-${planId}` mirrors do-bridge's `promote-${findingId}`
+ * so the existing `bober approve calendar-<id>` / `/approve calendar-<id>` flows work
+ * with zero new wiring.
+ *
+ * ALL filesystem writes (pending marker, plan sidecar) live in this module.
+ * src/cli/commands/calendar.ts MUST NOT import writeFile — the Sprint-1 source-scan
+ * test (calendar.test.ts:129-141) enforces this.
+ */
+import { readFile, writeFile, readdir } from "node:fs/promises";
+import { join } from "node:path";
+import { savePending, deletePending } from "../state/approval-state.js";
+import { ensureDir } from "../state/helpers.js";
+import { planSlots } from "./slotter.js";
+// ── Internal path helpers ─────────────────────────────────────────────
+function planSidecarPath(projectRoot, checkpointId) {
+    return join(projectRoot, ".bober", "calendar", `${checkpointId}.plan.json`);
+}
+function approvalsDirPath(projectRoot) {
+    return join(projectRoot, ".bober", "approvals");
+}
+// ── proposePlan ───────────────────────────────────────────────────────
+/**
+ * Write a pending approval marker + plan sidecar for the proposed schedule.
+ * Calls ZERO connector.writeEvents — approval is strictly out-of-band.
+ *
+ * All filesystem writes live here:
+ *   1. Plan sidecar (.bober/calendar/<id>.plan.json) — holds ProposedPlan + connectorName.
+ *   2. Pending marker (.bober/approvals/<id>.pending.json) — artifact.path → sidecar.
+ */
+export async function proposePlan(args) {
+    const { projectRoot, planId, plan, connectorName, now, timeoutMs = 24 * 60 * 60 * 1_000, } = args;
+    const checkpointId = `calendar-${planId}`;
+    const requestedAt = now();
+    const timeoutAt = new Date(Date.parse(requestedAt) + timeoutMs).toISOString();
+    // ── 1. Write plan sidecar (proposal-gate owns ALL fs writes) ─────────
+    const calendarDir = join(projectRoot, ".bober", "calendar");
+    await ensureDir(calendarDir);
+    const sidecarPath = planSidecarPath(projectRoot, checkpointId);
+    const sidecar = { plan, connectorName };
+    await writeFile(sidecarPath, JSON.stringify(sidecar, null, 2) + "\n", "utf-8");
+    // ── 2. Write the pending marker ───────────────────────────────────────
+    const scheduledCount = plan.scheduled.length;
+    const unscheduledCount = plan.unscheduled.length;
+    await savePending(projectRoot, {
+        checkpointId,
+        artifact: {
+            type: "calendar-plan",
+            path: sidecarPath,
+            summary: `${scheduledCount} event(s) scheduled via ${connectorName}; ${unscheduledCount} unscheduled`,
+            lines: scheduledCount,
+        },
+        prompt: `Calendar plan ready: ${scheduledCount} finding(s) scheduled. Run: bober calendar apply ${checkpointId}`,
+        requestedAt,
+        timeoutAt,
+    });
+    return { checkpointId };
+}
+// ── applyPlan ─────────────────────────────────────────────────────────
+/**
+ * Gate on the approval marker; on approval reload the plan sidecar and call
+ * connector.writeEvents exactly once; on rejection skip the write entirely.
+ *
+ * There is no readApproved/readRejected export from approval-state.ts.
+ * We detect the marker by building the path inline — mirrors the approach in
+ * src/cli/commands/approve.ts:41 and src/do-bridge/promote.ts:140-146.
+ *
+ * Note: deletePending is best-effort (never throws); gate control is based on
+ * the presence of the approved/rejected marker, not on the pending marker.
+ */
+export async function applyPlan(projectRoot, checkpointId, connector) {
+    const approvalsDir = approvalsDirPath(projectRoot);
+    const entries = new Set(await readdir(approvalsDir).catch(() => []));
+    // ── Approved branch: writeEvents exactly once ─────────────────────
+    if (entries.has(`${checkpointId}.approved.json`)) {
+        // Reload the plan sidecar to recover the scheduled PlanItems
+        let sidecar;
+        try {
+            const raw = await readFile(planSidecarPath(projectRoot, checkpointId), "utf-8");
+            sidecar = JSON.parse(raw);
+        }
+        catch (err) {
+            throw new Error(`Failed to reload plan sidecar for ${checkpointId}: ${err instanceof Error ? err.message : String(err)}`, { cause: err });
+        }
+        // Write events EXACTLY once
+        const result = await connector.writeEvents(sidecar.plan.scheduled);
+        // Clean up the pending marker (mirrors promote.ts:141)
+        await deletePending(projectRoot, checkpointId);
+        return { status: "applied", writtenCount: result.writtenCount };
+    }
+    // ── Rejected branch: no write ─────────────────────────────────────
+    if (entries.has(`${checkpointId}.rejected.json`)) {
+        try {
+            const raw = await readFile(join(approvalsDir, `${checkpointId}.rejected.json`), "utf-8");
+            const marker = JSON.parse(raw);
+            return { status: "rejected", feedback: marker.feedback };
+        }
+        catch {
+            return { status: "rejected" };
+        }
+    }
+    // ── Neither: still pending ────────────────────────────────────────
+    return { status: "pending" };
+}
+// ── adjustPlan ────────────────────────────────────────────────────────
+/**
+ * PURE re-slot under a constraint delta — models a /tell-style user correction.
+ * Re-runs the Sprint-1 planSlots with a modified busy[] or window; writes NOTHING.
+ *
+ * Model an "exclude interval" by appending a BusyInterval (SlotConstraints has
+ * no excludeInterval field — do NOT add one).
+ */
+export function adjustPlan(findings, busy, constraints, delta) {
+    const newBusy = delta.excludeInterval !== undefined ? [...busy, delta.excludeInterval] : busy;
+    const newConstraints = {
+        ...constraints,
+        ...(delta.windowStartIso !== undefined ? { windowStartIso: delta.windowStartIso } : {}),
+        ...(delta.windowEndIso !== undefined ? { windowEndIso: delta.windowEndIso } : {}),
+    };
+    return planSlots(findings, newBusy, newConstraints);
+}
+//# sourceMappingURL=proposal-gate.js.map

package/dist/calendar/proposal-gate.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"proposal-gate.js","sourceRoot":"","sources":["../../src/calendar/proposal-gate.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,OAAO,EAAE,MAAM,kBAAkB,CAAC;AAChE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAEjC,OAAO,EAAE,WAAW,EAAE,aAAa,EAAE,MAAM,4BAA4B,CAAC;AACxE,OAAO,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAC;AAChD,OAAO,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AA0DzC,yEAAyE;AAEzE,SAAS,eAAe,CAAC,WAAmB,EAAE,YAAoB;IAChE,OAAO,IAAI,CAAC,WAAW,EAAE,QAAQ,EAAE,UAAU,EAAE,GAAG,YAAY,YAAY,CAAC,CAAC;AAC9E,CAAC;AAED,SAAS,gBAAgB,CAAC,WAAmB;IAC3C,OAAO,IAAI,CAAC,WAAW,EAAE,QAAQ,EAAE,WAAW,CAAC,CAAC;AAClD,CAAC;AAED,yEAAyE;AAEzE;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,IAAiB;IACjD,MAAM,EACJ,WAAW,EACX,MAAM,EACN,IAAI,EACJ,aAAa,EACb,GAAG,EACH,SAAS,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,KAAK,GACjC,GAAG,IAAI,CAAC;IAET,MAAM,YAAY,GAAG,YAAY,MAAM,EAAE,CAAC;IAC1C,MAAM,WAAW,GAAG,GAAG,EAAE,CAAC;IAC1B,MAAM,SAAS,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,GAAG,SAAS,CAAC,CAAC,WAAW,EAAE,CAAC;IAE9E,wEAAwE;IACxE,MAAM,WAAW,GAAG,IAAI,CAAC,WAAW,EAAE,QAAQ,EAAE,UAAU,CAAC,CAAC;IAC5D,MAAM,SAAS,CAAC,WAAW,CAAC,CAAC;IAC7B,MAAM,WAAW,GAAG,eAAe,CAAC,WAAW,EAAE,YAAY,CAAC,CAAC;IAC/D,MAAM,OAAO,GAAgB,EAAE,IAAI,EAAE,aAAa,EAAE,CAAC;IACrD,MAAM,SAAS,CAAC,WAAW,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,EAAE,OAAO,CAAC,CAAC;IAE/E,yEAAyE;IACzE,MAAM,cAAc,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC;IAC7C,MAAM,gBAAgB,GAAG,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC;IACjD,MAAM,WAAW,CAAC,WAAW,EAAE;QAC7B,YAAY;QACZ,QAAQ,EAAE;YACR,IAAI,EAAE,eAAe;YACrB,IAAI,EAAE,WAAW;YACjB,OAAO,EAAE,GAAG,cAAc,2BAA2B,aAAa,KAAK,gBAAgB,cAAc;YACrG,KAAK,EAAE,cAAc;SACtB;QACD,MAAM,EAAE,wBAAwB,cAAc,oDAAoD,YAAY,EAAE;QAChH,WAAW;QACX,SAAS;KACV,CAAC,CAAC;IAEH,OAAO,EAAE,YAAY,EAAE,CAAC;AAC1B,CAAC;AAED,yEAAyE;AAEzE;;;;;;;;;;GAUG;AACH,MAAM,CAAC,KAAK,UAAU,SAAS,CAC7B,WAAmB,EACnB,YAAoB,EACpB,SAA4B;IAE5B,MAAM,YAAY,GAAG,gBAAgB,CAAC,WAAW,CAAC,CAAC;IAEnD,MAAM,OAAO,GAAG,IAAI,GAAG,CACrB,MAAM,OAAO,CAAC,YAAY,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAc,CAAC,CACxD,CAAC;IAEF,qEAAqE;IACrE,IAAI,OAAO,CAAC,GAAG,CAAC,GAAG,YAAY,gBAAgB,CAAC,EAAE,CAAC;QACjD,6DAA6D;QAC7D,IAAI,OAAoB,CAAC;QACzB,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,eAAe,CAAC,WAAW,EAAE,YAAY,CAAC,EAAE,OAAO,CAAC,CAAC;YAChF,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAgB,CAAC;QAC3C,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,IAAI,KAAK,CACb,qCAAqC,YAAY,KAAK,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,EACxG,EAAE,KAAK,EAAE,GAAG,EAAE,CACf,CAAC;QACJ,CAAC;QAED,4BAA4B;QAC5B,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,WAAW,CAAC,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QAEnE,uDAAuD;QACvD,MAAM,aAAa,CAAC,WAAW,EAAE,YAAY,CAAC,CAAC;QAE/C,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,YAAY,EAAE,MAAM,CAAC,YAAY,EAAE,CAAC;IAClE,CAAC;IAED,qEAAqE;IACrE,IAAI,OAAO,CAAC,GAAG,CAAC,GAAG,YAAY,gBAAgB,CAAC,EAAE,CAAC;QACjD,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,QAAQ,CACxB,IAAI,CAAC,YAAY,EAAE,GAAG,YAAY,gBAAgB,CAAC,EACnD,OAAO,CACR,CAAC;YACF,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAmB,CAAC;YACjD,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,CAAC;QAC3D,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC;QAChC,CAAC;IACH,CAAC;IAED,qEAAqE;IACrE,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;AAC/B,CAAC;AAED,yEAAyE;AAEzE;;;;;;GAMG;AACH,MAAM,UAAU,UAAU,CACxB,QAAmB,EACnB,IAAoB,EACpB,WAA4B,EAC5B,KAAsB;IAEtB,MAAM,OAAO,GACX,KAAK,CAAC,eAAe,KAAK,SAAS,CAAC,CAAC,CAAC,CAAC,GAAG,IAAI,EAAE,KAAK,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAEhF,MAAM,cAAc,GAAoB;QACtC,GAAG,WAAW;QACd,GAAG,CAAC,KAAK,CAAC,cAAc,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,KAAK,CAAC,cAAc,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACvF,GAAG,CAAC,KAAK,CAAC,YAAY,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,KAAK,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAClF,CAAC;IAEF,OAAO,SAAS,CAAC,QAAQ,EAAE,OAAO,EAAE,cAAc,CAAC,CAAC;AACtD,CAAC"}

package/dist/calendar/slotter.d.ts

@@ -0,0 +1,34 @@
+/**
+ * CalendarSlotter — deterministic LLM-free slot-fill (spec-20260628-calendar-planner Sprint 1).
+ *
+ * PURITY CONTRACT: pure synchronous only — no fs, no network, no LLM import, no subprocess, no dynamic eval.
+ * Identical input => identical output.
+ *
+ * Algorithm:
+ *   1. Derive free intervals from (window minus busy intervals), clamped to workingHours if set.
+ *   2. Iterate findings in INPUT ORDER (pre-ranked by the hub — the LLM NEVER packs slots).
+ *   3. Place each finding into the earliest free interval that fits estDurationMin before dueBy.
+ *   4. On placement, split the consumed free interval in-place.
+ *   5. If no interval fits, push to unscheduled with an exhaustive-switch reason.
+ *
+ * Time math uses Date.parse(iso) → epoch-ms arithmetic (pure — same ISO always yields same ms).
+ * new Date(ms).toISOString() converts back to ISO-8601 (also pure — deterministic).
+ */
+import type { Finding, BusyInterval, SlotConstraints, ProposedPlan } from "./types.js";
+/**
+ * Place ranked findings into free calendar slots deterministically.
+ *
+ * - findings are processed in INPUT ORDER (= priority order from the hub).
+ * - Each finding is placed into the earliest free interval that can accommodate
+ *   its estDurationMin (default: 30 min) entirely before its dueBy.
+ * - On placement the consumed portion is removed from the free-interval list.
+ * - Findings that cannot be placed are returned in unscheduled[] with a reason.
+ * - No LLM, no network, no fs, no clock — deterministic across identical inputs.
+ *
+ * @param findings  - Pre-ranked Finding array (index 0 = highest priority).
+ * @param busy      - Known busy intervals for the planning window.
+ * @param constraints - Window bounds (and optional working-hours clamp).
+ * @returns ProposedPlan with scheduled PlanItems and unscheduled entries.
+ */
+export declare function planSlots(findings: Finding[], busy: BusyInterval[], constraints: SlotConstraints): ProposedPlan;
+//# sourceMappingURL=slotter.d.ts.map

package/dist/calendar/slotter.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"slotter.d.ts","sourceRoot":"","sources":["../../src/calendar/slotter.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAEH,OAAO,KAAK,EACV,OAAO,EACP,YAAY,EAEZ,eAAe,EACf,YAAY,EAGb,MAAM,YAAY,CAAC;AAgIpB;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,SAAS,CACvB,QAAQ,EAAE,OAAO,EAAE,EACnB,IAAI,EAAE,YAAY,EAAE,EACpB,WAAW,EAAE,eAAe,GAC3B,YAAY,CA8Ed"}