@fenglimg/fabric-cli 2.0.0-rc.28 → 2.0.0-rc.30

package/dist/{doctor-ZIQXN2T2.js → doctor-TTDTKOFJ.js}

@@ -145,6 +145,15 @@ var doctorCommand = defineCommand({
     const citeCoverage = args["cite-coverage"] === true;
     const enrichDesc = args["enrich-descriptions"] === true;
     const archiveHistory = args["archive-history"] === true;
+    if (args.since !== void 0) {
+      try {
+        parseSinceDuration(args.since);
+      } catch {
+        writeStderr(dt("cli.doctor.errors.invalid-since", { input: args.since }));
+        process.exitCode = 1;
+        return;
+      }
+    }
     if (archiveHistory) {
       if (fix || fixKnowledge || citeCoverage || enrichDesc) {
         writeStderr(dt("cli.doctor.errors.archive-history-mutex"));
@@ -300,6 +309,22 @@ function renderHumanReport(report, dt) {
   writeIssueSection(dt("doctor.section.fixable"), report.fixable_errors);
   writeIssueSection(dt("doctor.section.manual"), report.manual_errors);
   writeIssueSection(dt("doctor.section.warnings"), report.warnings);
+  renderPayloadLimits(report, dt);
+}
+function renderPayloadLimits(report, dt) {
+  const limits = report.summary.payload_limits;
+  if (limits === void 0) {
+    return;
+  }
+  writeStdout("");
+  writeStdout(dt("doctor.section.payload-limits"));
+  writeStdout(
+    `- ${dt("doctor.payload-limits.line", {
+      warnKb: String(Math.round(limits.warn_bytes / 1024)),
+      hardKb: String(Math.round(limits.hard_bytes / 1024)),
+      source: limits.source
+    })}`
+  );
 }
 function renderFixKnowledgeMutations(fixKnowledgeReport, dt) {
   if (fixKnowledgeReport.mutations.length === 0) {

package/dist/index.js

@@ -11,22 +11,22 @@ import { defineCommand, runMain } from "citty";
 
 // src/commands/index.ts
 var allCommands = {
-  install: () => import("./install-MPSTI654.js").then((module) => module.default),
-  doctor: () => import("./doctor-ZIQXN2T2.js").then((module) => module.default),
-  serve: () => import("./serve-U3TPWDOB.js").then((module) => module.default),
+  install: () => import("./install-OEBNSCS5.js").then((module) => module.default),
+  doctor: () => import("./doctor-TTDTKOFJ.js").then((module) => module.default),
+  serve: () => import("./serve-43JTEM3U.js").then((module) => module.default),
   uninstall: () => import("./uninstall-VLLJG7JT.js").then((module) => module.default),
   config: () => import("./config-5CH4EJQ2.js").then((module) => module.default),
   "plan-context-hint": () => import("./plan-context-hint-CXTLNVSV.js").then((module) => module.default),
   // v2.0.0-rc.23 TASK-014 (F8c): S5 onboard-slot coverage. Used by the
   // fabric-archive Skill's first-run phase to detect unclaimed slots.
-  "onboard-coverage": () => import("./onboard-coverage-JJ5NGU7I.js").then((module) => module.default)
+  "onboard-coverage": () => import("./onboard-coverage-6MN3CYHT.js").then((module) => module.default)
 };
 
 // src/index.ts
 var main = defineCommand({
   meta: {
     name: "fabric",
-    version: "2.0.0-rc.28",
+    version: "2.0.0-rc.30",
     description: t("cli.main.description")
   },
   subCommands: allCommands

package/dist/{install-MPSTI654.js → install-OEBNSCS5.js}

@@ -1348,7 +1348,7 @@ function readProjectName(target) {
   return basename(target);
 }
 function getCliVersion() {
-  return true ? "2.0.0-rc.28" : "unknown";
+  return true ? "2.0.0-rc.30" : "unknown";
 }
 function sortRecord(record) {
   return Object.fromEntries(Object.entries(record).sort(([left], [right]) => left.localeCompare(right)));

package/dist/{onboard-coverage-JJ5NGU7I.js → onboard-coverage-6MN3CYHT.js}

@@ -1,4 +1,7 @@
 #!/usr/bin/env node
+import {
+  t
+} from "./chunk-PWLW3B57.js";
 
 // src/commands/onboard-coverage.ts
 import { existsSync, readdirSync, readFileSync } from "fs";
@@ -169,7 +172,11 @@ function renderHumanReadable(report) {
 var onboardCoverageCommand = defineCommand({
   meta: {
     name: "onboard-coverage",
-    description: "Report S5 onboard-slot coverage for the workspace. Used by the fabric-archive Skill's first-run phase to detect unclaimed project-tone slots.",
+    // v2.0.0-rc.29 TASK-008 (BUG-L2): route description strings through t()
+    // (mirrors serve.ts pattern). Previously this command was English-only
+    // even when the rest of `fab --help` rendered zh-CN, so Chinese-locale
+    // users saw an isolated English block under --help.
+    description: t("cli.onboard-coverage.description"),
     // Mirrors `plan-context-hint`: hidden from `fab --help` so the top-level
     // banner stays focused on install/doctor/serve/config. The command stays
     // callable directly from Skills via `fab onboard-coverage --json`.
@@ -178,12 +185,12 @@ var onboardCoverageCommand = defineCommand({
   args: {
     json: {
       type: "boolean",
-      description: "Emit machine-readable JSON to stdout instead of the human table.",
+      description: t("cli.onboard-coverage.args.json.description"),
       default: false
     },
     target: {
       type: "string",
-      description: "Override the project root (defaults to cwd)."
+      description: t("cli.onboard-coverage.args.target.description")
     }
   },
   async run({ args }) {

package/dist/{serve-U3TPWDOB.js → serve-43JTEM3U.js}

@@ -41,6 +41,12 @@ var serveCommand = defineCommand({
       type: "boolean",
       description: t("cli.serve.args.debug.description"),
       default: false
+    },
+    // v2.0.0-rc.29 TASK-002 (BUG-K1): default-deny strict-auth.
+    "allow-loopback-no-auth": {
+      type: "boolean",
+      description: t("cli.serve.args.allow-loopback-no-auth.description"),
+      default: false
     }
   },
   async run({ args }) {
@@ -50,7 +56,8 @@ var serveCommand = defineCommand({
     const port = parsePort(args.port);
     const requestedHost = parseHost(args.host);
     const authToken = readAuthTokenFromEnv();
-    const host = validateHost(requestedHost, authToken);
+    const allowLoopbackNoAuth = args["allow-loopback-no-auth"] === true;
+    const host = validateHost(requestedHost, authToken, allowLoopbackNoAuth);
     const projectRoot = resolution.target;
     try {
       acquireLock(projectRoot);
@@ -73,7 +80,8 @@ var serveCommand = defineCommand({
         port,
         projectRoot,
         host,
-        authToken
+        authToken,
+        allowLoopbackNoAuth
       });
     } catch (error) {
       if (isNodeError(error) && error.code === "EADDRINUSE") {
@@ -105,7 +113,7 @@ function readAuthTokenFromEnv() {
   const token = process.env.FABRIC_AUTH_TOKEN;
   return token === void 0 || token.length === 0 ? void 0 : token;
 }
-function validateHost(host, authToken) {
+function validateHost(host, authToken, allowLoopbackNoAuth) {
   if (authToken !== void 0) {
     return host;
   }
@@ -115,6 +123,11 @@ function validateHost(host, authToken) {
     );
     return "127.0.0.1";
   }
+  if (!allowLoopbackNoAuth) {
+    console.error(
+      `${symbol.warn} ${paint.warn(t("cli.serve.warning.loopback-deny-default"))}`
+    );
+  }
   return host;
 }
 function isLoopbackHost(host) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@fenglimg/fabric-cli",
-  "version": "2.0.0-rc.28",
+  "version": "2.0.0-rc.30",
   "type": "module",
   "bin": {
     "fab": "dist/index.js",
@@ -20,8 +20,8 @@
     "tree-sitter-javascript": "^0.25.0",
     "tree-sitter-typescript": "^0.23.2",
     "web-tree-sitter": "^0.26.8",
-    "@fenglimg/fabric-server": "2.0.0-rc.28",
-    "@fenglimg/fabric-shared": "2.0.0-rc.28"
+    "@fenglimg/fabric-server": "2.0.0-rc.30",
+    "@fenglimg/fabric-shared": "2.0.0-rc.30"
   },
   "devDependencies": {
     "@types/node": "^22.15.0",

package/templates/hooks/fabric-hint.cjs

@@ -1079,7 +1079,20 @@ function tryReadStdinJson() {
     const parsed = JSON.parse(buf);
     if (parsed === null || typeof parsed !== "object") return null;
     return parsed;
-  } catch {
+  } catch (e) {
+    // v2.0.0-rc.29 TASK-008 (BUG-L1): hook used to silent-swallow JSON.parse
+    // errors which masked real client-side payload bugs (e.g. CLI hosts that
+    // stopped emitting Stop-hook JSON envelopes). Log a single best-effort
+    // diagnostic line so operators see WHY the hook went quiet; keep returning
+    // null so downstream behaviour (graceful exit 0, no rule render) is
+    // unchanged.
+    try {
+      const message = (e && typeof e === "object" && "message" in e) ? String(e.message) : String(e);
+      process.stderr.write(`[fabric-hint] malformed input: ${message}\n`);
+    } catch {
+      // stderr write failed (very unusual — sandbox / closed fd). The
+      // hook contract still requires we never throw upward.
+    }
     return null;
   }
 }

package/templates/hooks/knowledge-hint-broad.cjs

@@ -227,12 +227,16 @@ function shouldRecommendImport(projectRoot) {
 // CONSTANTS
 // -----------------------------------------------------------------------------
 
-// Per-type truncation triggers when total narrow entries > 30. The threshold
-// was originally aligned with the rc.5 plan-context degenerate-mode cutoff,
-// which is now retired (rc.7 T9 — see docs/decisions/rc5-a3-superseded.md).
-// We keep 30 here as a stable rendering boundary independent of that protocol
-// change: it's a UI-density choice, not a wire-shape one.
-const TRUNCATION_THRESHOLD = 30;
+// Per-type truncation triggers when total broad-scope entries > N.
+// v2.0.0-rc.29 TASK-007 (BUG-F1): lowered from 30 → 12. SessionStart hint
+// should bias toward "is there anything relevant?" rather than "exhaustive
+// index" — at 30, the banner consumed several terminal screens on
+// well-seeded repos and operators reported scroll fatigue. 12 keeps a
+// dense-enough scan (still fits "top hits per type" in 1-2 screenfuls)
+// without prompting the user to mentally truncate themselves. The constant
+// stays a stable rendering boundary; downstream consumers (banner-i18n.cjs,
+// truncation summary lines) consume it as a single source of truth.
+const TRUNCATION_THRESHOLD = 12;
 
 // `fabric plan-context-hint` is a thin wrapper over planContext(); on a
 // well-seeded repo it returns in ~100ms. Two-second cap is defensive — any

package/templates/hooks/knowledge-hint-narrow.cjs

@@ -142,7 +142,19 @@ function readPayload(rawStdin) {
       return null;
     }
     return parsed;
-  } catch {
+  } catch (e) {
+    // v2.0.0-rc.29 REVIEW (codex LOW-1): apply BUG-L1's malformed-input
+    // diagnostic uniformly across hook scripts. fabric-hint.cjs got the stderr
+    // trace in TASK-008; without this matching write here, a broken Codex /
+    // Cursor host payload silently kills the narrow hint with no operator
+    // signal at all. Best-effort: a failed stderr write must not throw upward
+    // (hook contract — never crash the host's edit pipeline).
+    try {
+      const message = (e && typeof e === "object" && "message" in e) ? String(e.message) : String(e);
+      process.stderr.write(`[fabric-knowledge-hint-narrow] malformed input: ${message}\n`);
+    } catch {
+      // stderr write itself failed (sandbox / closed fd) — accept silence.
+    }
     return null;
   }
 }

package/templates/hooks/archive-hint.cjs

@@ -1,463 +0,0 @@
-#!/usr/bin/env node
-/**
- * v2.0.0-rc.25 TASK-03: archive-hint hook — Signal A (archive reminder).
- *
- * Standalone Signal A archive hook re-established from the rc.2 design.
- * fabric-hint.cjs continues to ship the merged archive/review/import flow for
- * existing installs; archive-hint.cjs is the rc.25-redesigned variant whose
- * reason copy explicitly communicates that the plan_context backlog is
- * project-level cross-session debt rather than current-session activity.
- *
- * Behaviour (compared to the rc.2 baseline):
- *   1. Bilingual reason copy. zh-CN: "跨 N 个会话累计 M 次 plan_context · 距上次归档 …
- *      — 这是项目级长期欠债, 不一定来自本会话。若本会话有产出, 可调用 fabric-archive;
- *      否则可忽略, 12h 后再提醒。" English mirror references "project-level long-term
- *      debt" so callers can grep either side. Language driven by
- *      `.fabric/fabric-config.json#fabric_language` via readFabricLanguage().
- *   2. Distinct-session count via `countDistinctSessions(events, lastProposedTs)`.
- *      When ≥50% of plan_context events since the watermark carry a `session_id`
- *      field, the wording reads "跨 N 个会话累计"; otherwise it degrades to
- *      "跨多个会话累计" (transitional period before TASK-02 fully lands).
- *   3. Watermark fallback. When the workspace has never recorded a
- *      knowledge_proposed event (or rotation cut off the historical watermark),
- *      decide() uses events[0]?.ts as a virtual watermark and appends a
- *      "(watermark 已被 rotation 清理)" suffix so operators understand why the
- *      hours-elapsed display is approximate.
- *
- * Invariants preserved:
- *   - stdout JSON shape: { decision: "block", reason, signal: "archive" }
- *   - Cooldown throttle via `.fabric/.cache/archive-hint-shown.json`
- *   - Fail-silent: any error → silent exit, NEVER blocks the Stop hook.
- */
-"use strict";
-
-const { existsSync, mkdirSync, readFileSync, writeFileSync } = require("node:fs");
-const { dirname, join } = require("node:path");
-
-// CONSTANTS — duplicated from packages/server/src/services/_shared.ts.
-// DRY violation accepted: this hook script runs in user repos WITHOUT
-// node_modules access, so it cannot import from @fenglimg/fabric-server.
-const FABRIC_DIR = ".fabric";
-const EVENT_LEDGER_FILE = "events.jsonl";
-const EVENT_TYPE_PROPOSED = "knowledge_proposed";
-const EVENT_TYPE_PLAN_CONTEXT = "knowledge_context_planned";
-const EVENT_TYPE_ROTATED = "events_rotated";
-const THRESHOLD_PLAN_CONTEXTS = 5;
-const THRESHOLD_HOURS = 24;
-const MS_PER_HOUR = 60 * 60 * 1000;
-
-// rc.25 review remediation: differentiate "rotation cut watermark" from
-// "ledger truly fresh (never archived)" when `lastProposedTs === null`.
-// The previous wording appended `(watermark 已被 rotation 清理)` in both
-// cases, which is misleading for a brand-new project. Heuristic:
-//   - events.length > ROTATION_HINT_EVENTS_THRESHOLD (>50 events
-//     accumulated but no knowledge_proposed) → likely rotation cut the
-//     watermark, OR
-//   - an explicit `events_rotated` event appears in the ledger → definite
-//     rotation evidence.
-// In either case, keep the legacy `(watermark 已被 rotation 清理)` suffix.
-// Otherwise the ledger is genuinely young (e.g. a brand-new project that
-// has accumulated a handful of plan_context events but never archived) —
-// emit no suffix, since claiming rotation cleared the watermark would
-// confuse the operator.
-const ROTATION_HINT_EVENTS_THRESHOLD = 50;
-
-// Cooldown throttle. After the hook surfaces a reminder, it stays silent for
-// this many hours — purely a reminder-noise throttle, not a state machine.
-// Override via .fabric/fabric-config.json#archive_hint_cooldown_hours.
-const CONFIG_FILE = "fabric-config.json";
-const DEFAULT_COOLDOWN_HOURS = 12;
-const SHOWN_CACHE_FILE = ".fabric/.cache/archive-hint-shown.json";
-
-// rc.25 TASK-03: session-id coverage threshold. When ≥50% of plan_context
-// events since the watermark carry a session_id, surface the distinct-session
-// count ("跨 N 个会话"); below that, degrade to "跨多个会话" to avoid lying
-// about a partial count during the transitional period before TASK-02 fully
-// lands AI session_id propagation.
-const SESSION_COVERAGE_THRESHOLD = 0.5;
-// rc.25 TASK-03: i18n field name + language enum. Mirrors banner-i18n.cjs's
-// readFabricLanguage contract; kept local so this hook stays self-contained.
-const FABRIC_LANGUAGE_FIELD = "fabric_language";
-const DEFAULT_LANGUAGE = "en";
-const VALID_LANGUAGES = ["zh-CN", "en", "zh-CN-hybrid", "match-existing"];
-
-/**
- * Read the events.jsonl ledger from <projectRoot>/.fabric/events.jsonl.
- * Mirrors the semantics of readEventLedger in packages/server/src/services/event-ledger.ts:
- *   - ENOENT → return [] (fabric not initialized)
- *   - split on /\r?\n/
- *   - drop final fragment if file lacks trailing newline (partial-tail tolerance)
- *   - JSON.parse per line, swallow per-line errors (corrupt-line tolerance)
- */
-function readLedger(projectRoot) {
-  const eventPath = join(projectRoot, FABRIC_DIR, EVENT_LEDGER_FILE);
-  if (!existsSync(eventPath)) {
-    return [];
-  }
-
-  let raw;
-  try {
-    raw = readFileSync(eventPath, "utf8");
-  } catch {
-    return [];
-  }
-
-  const lines = raw.split(/\r?\n/);
-  const hasTrailingNewline = raw.endsWith("\n");
-  if (!hasTrailingNewline && lines.length > 0) {
-    lines.pop();
-  }
-
-  const events = [];
-  for (const line of lines) {
-    const trimmed = line.trim();
-    if (trimmed.length === 0) continue;
-    try {
-      const parsed = JSON.parse(trimmed);
-      if (parsed && typeof parsed === "object") {
-        events.push(parsed);
-      }
-    } catch {
-      // corrupt JSON line — drop silently
-    }
-  }
-  return events;
-}
-
-/**
- * Count distinct session_id values among knowledge_context_planned events that
- * happened AFTER the lastProposedTs watermark (or all such events when the
- * watermark is null).
- *
- * Returns { count, coverage_ratio, total } where:
- *   - count = number of distinct non-empty session_id strings observed
- *   - total = number of plan_context events considered
- *   - coverage_ratio = (events with session_id field) / total, in [0, 1].
- *     Used by decide() to choose between "跨 N 个会话" (high coverage) and
- *     "跨多个会话" (degraded — most events lack session_id).
- *
- * When `total === 0` returns { count: 0, coverage_ratio: 0, total: 0 } — the
- * caller is responsible for not invoking the wording in that case.
- */
-function countDistinctSessions(events, lastProposedTs) {
-  const sessions = new Set();
-  let totalConsidered = 0;
-  let withSessionId = 0;
-  for (const ev of events) {
-    if (!ev || ev.event_type !== EVENT_TYPE_PLAN_CONTEXT) continue;
-    if (typeof ev.ts !== "number") continue;
-    if (lastProposedTs !== null && ev.ts <= lastProposedTs) continue;
-    totalConsidered += 1;
-    if (typeof ev.session_id === "string" && ev.session_id.length > 0) {
-      withSessionId += 1;
-      sessions.add(ev.session_id);
-    }
-  }
-  return {
-    count: sessions.size,
-    coverage_ratio: totalConsidered === 0 ? 0 : withSessionId / totalConsidered,
-    total: totalConsidered,
-  };
-}
-
-/**
- * Read `fabric_language` from <projectRoot>/.fabric/fabric-config.json.
- * Mirrors lib/banner-i18n.cjs#readFabricLanguage's never-throw contract.
- * Missing file / malformed JSON / missing field / unknown variant →
- * DEFAULT_LANGUAGE ('en' per rc.25 TASK-03 spec — en is the safe default for
- * non-Chinese users; explicit zh-CN config opts in to Chinese copy).
- */
-function readFabricLanguage(projectRoot) {
-  if (typeof projectRoot !== "string" || projectRoot.length === 0) {
-    return DEFAULT_LANGUAGE;
-  }
-  const configPath = join(projectRoot, FABRIC_DIR, CONFIG_FILE);
-  if (!existsSync(configPath)) return DEFAULT_LANGUAGE;
-  try {
-    const parsed = JSON.parse(readFileSync(configPath, "utf8"));
-    const v = parsed && parsed[FABRIC_LANGUAGE_FIELD];
-    if (typeof v === "string" && VALID_LANGUAGES.indexOf(v) !== -1) {
-      // Fold zh-CN-hybrid → zh-CN for this hook's two-variant copy (the rc.25
-      // spec defines zh-CN and en; hybrid uses zh-CN narrative with protected
-      // tokens, which matches our copy already). match-existing → en per
-      // UX i18n Policy class 1.
-      if (v === "zh-CN" || v === "zh-CN-hybrid") return "zh-CN";
-      if (v === "en") return "en";
-      return DEFAULT_LANGUAGE; // match-existing
-    }
-  } catch {
-    // fall through to default
-  }
-  return DEFAULT_LANGUAGE;
-}
-
-/**
- * Render the bilingual two-line reason for an archive-signal trigger.
- *
- * Inputs:
- *   - language: 'zh-CN' | 'en' (caller resolves via readFabricLanguage).
- *   - sessionCount: integer ≥ 1 when distinct-session count is reliable; the
- *     `useDistinctCount` flag controls whether to render the number or the
- *     "跨多个会话累计" / "across multiple sessions" degraded phrase.
- *   - planContextCount: total plan_context events since the watermark.
- *   - hoursDisplay: pre-formatted hours-elapsed string (e.g. "24.2h" or
- *     "尚未归档" — caller chooses).
- *   - useDistinctCount: when true, embed `sessionCount`; when false, use the
- *     degraded "多个" / "multiple" phrase.
- *   - watermarkSuffix: optional suffix string ("(watermark 已被 rotation 清理)"
- *     in zh-CN, "(watermark cleaned by rotation)" in en) appended when the
- *     historical watermark was rotated away.
- */
-function buildReason({
-  language,
-  sessionCount,
-  planContextCount,
-  hoursDisplay,
-  useDistinctCount,
-  watermarkSuffix,
-}) {
-  const suffix = watermarkSuffix ? ` ${watermarkSuffix}` : "";
-  if (language === "zh-CN") {
-    const sessionPhrase = useDistinctCount
-      ? `跨 ${sessionCount} 个会话累计`
-      : "跨多个会话累计";
-    return (
-      `${sessionPhrase} ${planContextCount} 次 plan_context · 距上次归档 ${hoursDisplay}${suffix} — 这是项目级长期欠债, 不一定来自本会话。\n` +
-      `若本会话有产出, 可调用 fabric-archive; 否则可忽略, 12h 后再提醒。`
-    );
-  }
-  // English variant. Preserves the "project-level long-term debt" substring
-  // so convergence checks can grep either side of the bilingual split.
-  const sessionPhrase = useDistinctCount
-    ? `Across ${sessionCount} sessions`
-    : "Across multiple sessions";
-  return (
-    `${sessionPhrase}, ${planContextCount} plan_context calls accumulated · ${hoursDisplay} since last archive${suffix} — this is project-level long-term debt, not necessarily from the current session.\n` +
-    `If the current session produced something, run fabric-archive; otherwise feel free to ignore — next reminder in 12h.`
-  );
-}
-
-/**
- * Decide whether to emit a hook reminder.
- *
- * Trigger logic (UNCHANGED from rc.2):
- *   - Trigger when (plan_context count since last knowledge_proposed >= 5)
- *     OR (hours since last knowledge_proposed >= 24).
- *   - If no knowledge_proposed event has ever been recorded, count ALL
- *     plan_context events and use events[0]?.ts as the virtual watermark
- *     (rc.25 TASK-03 — fixes the Q3.8 gap where rotation-cut workspaces
- *     reported `null` hours-elapsed forever).
- *
- * Returns one of:
- *   - { decision: 'block', reason, signal: 'archive' } on archive trigger
- *   - null on no trigger
- */
-function decide(events, now, language) {
-  const nowMs = now instanceof Date ? now.getTime() : Number(now) || Date.now();
-  const lang = language === "zh-CN" || language === "en" ? language : DEFAULT_LANGUAGE;
-
-  // Locate the most-recent knowledge_proposed watermark.
-  let lastProposedTs = null;
-  for (let i = events.length - 1; i >= 0; i -= 1) {
-    const ev = events[i];
-    if (ev && ev.event_type === EVENT_TYPE_PROPOSED && typeof ev.ts === "number") {
-      lastProposedTs = ev.ts;
-      break;
-    }
-  }
-
-  // Count plan_context events since the watermark (or all when null).
-  let planContextCount = 0;
-  for (const ev of events) {
-    if (!ev || ev.event_type !== EVENT_TYPE_PLAN_CONTEXT) continue;
-    if (typeof ev.ts !== "number") continue;
-    if (lastProposedTs === null || ev.ts > lastProposedTs) {
-      planContextCount += 1;
-    }
-  }
-
-  // rc.25 TASK-03: watermark fallback. When the workspace has never
-  // recorded knowledge_proposed (or rotation cut it off), use events[0]?.ts
-  // as the virtual watermark so hoursElapsed is meaningful instead of null.
-  // We track whether the fallback fired so the reason copy can append a
-  // breadcrumb explaining the approximation.
-  //
-  // rc.25 review remediation: only claim "rotation cut the watermark" when
-  // there is evidence of rotation (events.length > 50 OR an `events_rotated`
-  // event appears). For a truly fresh ledger (small, no rotation marker),
-  // the fallback still fires (so hoursElapsed renders) but the suffix is
-  // suppressed — claiming rotation in a brand-new project is misleading.
-  let watermarkFallbackFired = false;
-  let rotationLikely = false;
-  let effectiveWatermarkTs = lastProposedTs;
-  if (lastProposedTs === null) {
-    const firstEventTs =
-      events.length > 0 && typeof events[0]?.ts === "number" ? events[0].ts : null;
-    if (firstEventTs !== null) {
-      effectiveWatermarkTs = firstEventTs;
-      watermarkFallbackFired = true;
-      const hasRotatedEvent = events.some(
-        (ev) => ev && ev.event_type === EVENT_TYPE_ROTATED,
-      );
-      rotationLikely =
-        events.length > ROTATION_HINT_EVENTS_THRESHOLD || hasRotatedEvent;
-    }
-  }
-
-  const hoursElapsed =
-    effectiveWatermarkTs === null
-      ? null
-      : (nowMs - effectiveWatermarkTs) / MS_PER_HOUR;
-
-  const triggerByCount = planContextCount >= THRESHOLD_PLAN_CONTEXTS;
-  // Hours threshold only applies when a watermark exists AND at least one
-  // plan_context has happened since (otherwise the user has been idle — no
-  // knowledge to archive).
-  const triggerByHours =
-    hoursElapsed !== null && hoursElapsed >= THRESHOLD_HOURS && planContextCount > 0;
-
-  if (!triggerByCount && !triggerByHours) return null;
-
-  // rc.25 TASK-03: distinct-session count + coverage degrade.
-  const sessionStats = countDistinctSessions(events, lastProposedTs);
-  const useDistinctCount =
-    sessionStats.total > 0 &&
-    sessionStats.coverage_ratio >= SESSION_COVERAGE_THRESHOLD &&
-    sessionStats.count > 0;
-
-  const hoursDisplay =
-    hoursElapsed === null
-      ? lang === "zh-CN"
-        ? "尚未归档"
-        : "never archived"
-      : `${hoursElapsed.toFixed(1)}h`;
-
-  // Suffix decision (rc.25 review remediation):
-  //   - Fallback fired + rotation evidence → emit rotation-clarification suffix.
-  //   - Fallback fired + truly fresh ledger → no suffix (claiming rotation
-  //     would mislead first-time users).
-  //   - Fallback did not fire (proposed event exists) → no suffix.
-  const watermarkSuffix =
-    watermarkFallbackFired && rotationLikely
-      ? lang === "zh-CN"
-        ? "(watermark 已被 rotation 清理)"
-        : "(watermark cleaned by rotation)"
-      : "";
-
-  const reason = buildReason({
-    language: lang,
-    sessionCount: sessionStats.count,
-    planContextCount,
-    hoursDisplay,
-    useDistinctCount,
-    watermarkSuffix,
-  });
-
-  return { decision: "block", reason, signal: "archive" };
-}
-
-/**
- * Resolve the cooldown setting from .fabric/fabric-config.json
- * (archive_hint_cooldown_hours), falling back to DEFAULT_COOLDOWN_HOURS.
- * Any read/parse failure → default (never block on config errors).
- */
-function readCooldownHours(projectRoot) {
-  const configPath = join(projectRoot, FABRIC_DIR, CONFIG_FILE);
-  if (!existsSync(configPath)) return DEFAULT_COOLDOWN_HOURS;
-  try {
-    const parsed = JSON.parse(readFileSync(configPath, "utf8"));
-    const v = parsed && parsed.archive_hint_cooldown_hours;
-    if (typeof v === "number" && Number.isFinite(v) && v > 0) return v;
-  } catch {
-    // fall through to default
-  }
-  return DEFAULT_COOLDOWN_HOURS;
-}
-
-function readShownCache(projectRoot) {
-  const cachePath = join(projectRoot, SHOWN_CACHE_FILE);
-  if (!existsSync(cachePath)) return {};
-  try {
-    const parsed = JSON.parse(readFileSync(cachePath, "utf8"));
-    return parsed && typeof parsed === "object" ? parsed : {};
-  } catch {
-    return {};
-  }
-}
-
-function writeShownCache(projectRoot, cache) {
-  const cachePath = join(projectRoot, SHOWN_CACHE_FILE);
-  try {
-    mkdirSync(dirname(cachePath), { recursive: true });
-    writeFileSync(cachePath, JSON.stringify(cache));
-  } catch {
-    // Silent — cache failure must never block the hook.
-  }
-}
-
-/**
- * Main entry — invoked both as a CLI (require.main === module) and in-process by tests.
- *
- * Wraps the entire flow in try/catch: ANY error → silent exit 0. The hook MUST NEVER
- * block tool execution on its own failure (per existing fabric-*-reminder.cjs precedent).
- */
-function main(env, stdio) {
-  try {
-    const cwd = (env && env.cwd) || process.cwd();
-    const now = (env && env.now) || new Date();
-    const nowMs = now instanceof Date ? now.getTime() : Number(now) || Date.now();
-    const out = (stdio && stdio.stdout) || process.stdout;
-
-    const events = readLedger(cwd);
-    const language = readFabricLanguage(cwd);
-    const result = decide(events, now, language);
-    if (result === null) return;
-
-    // Cooldown throttle: once a signal fires, stay silent for
-    // archive_hint_cooldown_hours (default 12h) regardless of state drift.
-    const cooldownMs = readCooldownHours(cwd) * MS_PER_HOUR;
-    const cache = readShownCache(cwd);
-    const lastShown = cache[result.signal];
-    if (typeof lastShown === "number" && nowMs - lastShown < cooldownMs) {
-      return; // Still in cooldown — silent.
-    }
-
-    out.write(JSON.stringify(result));
-    cache[result.signal] = nowMs;
-    writeShownCache(cwd, cache);
-  } catch {
-    // Silent — never block on hook failure.
-  }
-}
-
-module.exports = {
-  main,
-  readLedger,
-  countDistinctSessions,
-  readFabricLanguage,
-  buildReason,
-  decide,
-  readCooldownHours,
-  readShownCache,
-  writeShownCache,
-  CONSTANTS: {
-    FABRIC_DIR,
-    EVENT_LEDGER_FILE,
-    EVENT_TYPE_PROPOSED,
-    EVENT_TYPE_PLAN_CONTEXT,
-    EVENT_TYPE_ROTATED,
-    THRESHOLD_PLAN_CONTEXTS,
-    THRESHOLD_HOURS,
-    CONFIG_FILE,
-    DEFAULT_COOLDOWN_HOURS,
-    SHOWN_CACHE_FILE,
-    SESSION_COVERAGE_THRESHOLD,
-    ROTATION_HINT_EVENTS_THRESHOLD,
-    DEFAULT_LANGUAGE,
-  },
-};
-
-if (require.main === module) {
-  main({ cwd: process.cwd(), now: new Date() }, { stdout: process.stdout });
-  process.exit(0);
-}